$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft File: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft (raw, json) Hash identifier: DKUu2yMl6XF8GPV8iyfQXg9WGpjEvOl6b4TlCfOsDgc= Subject key identifier: 9E:2E:8F:96:4B:84:DB:78:AC:E0:2B:12:6F:40:64:DC:16:F5:14:E6 Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Certificate serial: 25F30D60479263EF04B43A94405A537DE318CB0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft Manifest number: B0 Signing time: Fri 17 May 2024 23:20:58 +0000 Manifest this update: Fri 17 May 2024 23:15:58 +0000 Manifest next update: Tue 21 May 2024 11:13:58 +0000 Files and hashes: 1: 3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (hash: inZsp1B5xBSherdMpLEB2Q8sQBAUH/ETczAzROsAEt4=) 2: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl (hash: 4c+1IXczYJETe+xOFtYVS6hWM1KxT1ovsM9u3qpdkrY=) 3: 3130332e3133322e34302e302f32332d3234203d3e20313530393730.roa (hash: 7LlAdTViR+6wbsIPoy9XFjZU3RqqVqstu1qtg3UwKgc=) 4: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (hash: PS1BhTpFCm3WSEPx0BSWdx2apjX4KaO+e/LyGvpSmtQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:f3:0d:60:47:92:63:ef:04:b4:3a:94:40:5a:53:7d:e3:18:cb:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Validity Not Before: May 17 23:15:58 2024 GMT Not After : May 21 11:13:58 2024 GMT Subject: CN=9E2E8F964B84DB78ACE02B126F4064DC16F514E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:ce:61:3b:b1:12:55:e0:da:c8:fd:70:eb: 6c:2f:d6:a3:b4:72:76:f4:c4:81:22:dd:69:1f:be: 6f:95:91:15:eb:3b:3e:09:89:fb:ff:9f:d4:61:d8: 71:82:7f:de:ce:ef:35:a0:f0:9e:e6:0d:64:4e:41: 1a:03:f0:77:50:94:6c:af:7f:93:31:09:71:d0:a8: ad:cb:27:d2:ad:72:2f:b7:8f:cd:60:9e:dc:eb:39: 2f:e9:aa:2e:bf:f5:14:46:03:5e:a4:0a:8a:04:05: ca:e5:c0:c8:8a:0b:63:e6:e0:9b:35:42:7a:6a:78: 74:64:37:29:25:1a:51:88:3d:cf:76:85:0f:a2:3a: 56:23:c6:b0:d5:ae:27:a7:69:43:67:e4:0b:57:c3: c7:95:53:c9:00:5a:48:63:2f:b0:dc:38:6a:60:f8: ef:e8:18:80:f3:f0:83:5a:f5:e6:d7:ea:ac:e1:99: 9e:93:5d:03:a7:6a:46:d5:66:90:e8:d5:b7:e9:5b: e3:03:9c:ee:ed:23:8c:fa:c5:1c:4a:a8:bb:b8:42: 0c:7f:09:b4:dc:82:58:d2:a1:03:6d:e6:47:fd:41: 76:ed:38:8d:89:c8:12:01:f0:fb:ec:50:46:f0:84: 25:ef:d0:ef:8c:ea:9f:32:78:05:14:a0:0f:18:89: 68:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:2E:8F:96:4B:84:DB:78:AC:E0:2B:12:6F:40:64:DC:16:F5:14:E6 X509v3 Authority Key Identifier: keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:3b:91:25:dd:41:42:0c:a8:2f:c6:3a:56:7e:d0:17:71:b5: 06:d9:34:a0:da:b6:88:b6:56:f6:97:1b:14:fd:8d:21:05:5b: 3f:fd:31:5b:cf:c6:12:70:8a:9a:54:fa:c5:3b:f9:59:a5:4b: 97:7e:c1:ac:24:87:24:8e:e8:8f:00:90:c5:6e:05:e5:02:02: 01:39:23:db:17:a0:2f:6b:b0:c4:21:fc:ce:b9:67:1c:c4:82: fd:32:fa:2c:cd:94:5e:dc:cd:35:d4:2e:3b:de:e8:36:b4:4a: 07:36:ad:b5:d5:72:30:a4:39:3e:4b:9c:4f:db:80:a3:04:82: 9a:44:2c:41:0c:8f:3c:d2:73:01:f8:fc:96:78:ac:d2:de:87: d4:8c:fc:21:ec:3a:61:d4:04:ed:cb:c4:aa:31:be:a4:2e:96: fa:76:88:f1:1f:4a:06:e2:fa:6f:7f:66:7a:aa:66:b2:b3:5a: 03:41:1b:4b:3e:99:10:f3:68:51:18:6d:69:10:ca:e0:ee:0d: 8e:54:f7:20:a4:cf:35:dd:e4:cb:d7:66:87:7c:9f:67:6b:d9: ef:0a:a7:e8:39:05:16:9c:9f:b0:11:f2:0d:67:9b:66:28:04: df:d2:8c:74:89:95:a1:91:9e:52:a4:c4:d9:86:d0:2c:21:cc: de:f8:79:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfMNYEeSY+8EtDqUQFpTfeMYywswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJE MkYwRUI4NTAeFw0yNDA1MTcyMzE1NThaFw0yNDA1MjExMTEzNThaMDMxMTAvBgNV BAMTKDlFMkU4Rjk2NEI4NERCNzhBQ0UwMkIxMjZGNDA2NERDMTZGNTE0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50M5hO7ESVeDayP1w62wv1qO0 cnb0xIEi3Wkfvm+VkRXrOz4Jifv/n9Rh2HGCf97O7zWg8J7mDWROQRoD8HdQlGyv f5MxCXHQqK3LJ9Ktci+3j81gntzrOS/pqi6/9RRGA16kCooEBcrlwMiKC2Pm4Js1 QnpqeHRkNyklGlGIPc92hQ+iOlYjxrDVrienaUNn5AtXw8eVU8kAWkhjL7DcOGpg +O/oGIDz8INa9ebX6qzhmZ6TXQOnakbVZpDo1bfpW+MDnO7tI4z6xRxKqLu4Qgx/ CbTcgljSoQNt5kf9QXbtOI2JyBIB8PvsUEbwhCXv0O+M6p8yeAUUoA8YiWj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUni6PlkuE23is4CsSb0Bk3Bb1FOYwHwYDVR0j BBgwFoAUy5ZiczFTwC5MQRt9LyueItLw64UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGYyZmZkYS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMC9DQjk2NjI3MzMx NTNDMDJFNEM0MTFCN0QyRjJCOUUyMkQyRjBFQjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJEMkYw RUI4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRmMmZmZGEtMDVkMS00MDg1LWEx MzUtMDM5ODdhMDdmMzllLzAvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlF MjJEMkYwRUI4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADM7kSXdQUIMqC/GOlZ+0BdxtQbZNKDatoi2 VvaXGxT9jSEFWz/9MVvPxhJwippU+sU7+VmlS5d+wawkhySO6I8AkMVuBeUCAgE5 I9sXoC9rsMQh/M65ZxzEgv0y+izNlF7czTXULjve6Da0Sgc2rbXVcjCkOT5LnE/b gKMEgppELEEMjzzScwH4/JZ4rNLeh9SM/CHsOmHUBO3LxKoxvqQulvp2iPEfSgbi +m9/ZnqqZrKzWgNBG0s+mRDzaFEYbWkQyuDuDY5U9yCkzzXd5MvXZod8n2dr2e8K p+g5BRacn7AR8g1nm2YoBN/SjHSJlaGRnlKkxNmG0CwhzN74eUY= -----END CERTIFICATE-----Generated at Sat May 18 01:29:15 2024 by rpki-client on console-fra.rpki-client.org