$ rpki-client -vvf repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft File: B605E2C01C5BDC6CEE49545C80501360234DC910.mft (raw, json) Hash identifier: kmY9b08oWFnk+Wv+Lxwgy0UxaoAYtOMRBSkUryhgDFI= Subject key identifier: 35:86:A6:28:6F:0A:1E:23:E4:3B:F9:67:1A:86:8D:BA:C3:F3:D4:00 Authority key identifier: B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 Certificate issuer: /CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Certificate serial: 1842941297018F3D289B606C59778D9388003110 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft Manifest number: 0437 Signing time: Tue 21 May 2024 02:10:04 +0000 Manifest this update: Tue 21 May 2024 02:05:04 +0000 Manifest next update: Fri 24 May 2024 06:35:04 +0000 Files and hashes: 1: 3131352e3137382e35302e302f32342d3234203d3e203338373833.roa (hash: Cer6uA8Rbuv0gUyxManQDh6XTonstzKcbQRigHb33Pc=) 2: 3131352e3137382e35322e302f32342d3234203d3e20313331373137.roa (hash: cgag9plQwiQQy3TioGPrVnpZw4hHPKwl88VGTzJ+6sU=) 3: 3131352e3137382e34382e302f32342d3234203d3e203338373833.roa (hash: cqtrpFCMqd60CyH6zgiX1WHyJ3MUPAFfnaWOO4S3O9U=) 4: 3131352e3137382e35352e302f32342d3234203d3e203338373833.roa (hash: hZbAlDctFvnDHB0VHqaWf2YhmibdNJAZqHwmZRYuVYQ=) 5: 3131352e3137382e34392e302f32342d3234203d3e203338373833.roa (hash: +NlmIv+kbVy0YXXWj7nJbG70OmX8j/Qqy/T1NLk7Y6Y=) 6: B605E2C01C5BDC6CEE49545C80501360234DC910.crl (hash: IHYmzEGAV0ROpWlDInLSYT69m+30uzjaguU4kepNFwE=) 7: 3131352e3137382e35342e302f32342d3234203d3e20313331373137.roa (hash: 7pRwzZMRag4OikIUo8Qb9ZKoX6LGLBT0M3Z3fDI9l5s=) 8: 3131352e3137382e35312e302f32342d3234203d3e20313331373137.roa (hash: Cny1Tyf0m8UFTLE7YeqgyY19JjeNunoopgSgs6dZrbs=) 9: 3131352e3137382e35332e302f32342d3234203d3e20313331373137.roa (hash: Sb7A6YDbx6NszEKoysSL00d5OaJB/0EOF7E1c9ejJ3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 06:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:42:94:12:97:01:8f:3d:28:9b:60:6c:59:77:8d:93:88:00:31:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B605E2C01C5BDC6CEE49545C80501360234DC910 Validity Not Before: May 21 02:05:04 2024 GMT Not After : May 24 06:35:04 2024 GMT Subject: CN=3586A6286F0A1E23E43BF9671A868DBAC3F3D400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7c:1c:38:d1:45:f0:ec:b5:8a:cc:60:6b:e4: cc:c4:0e:55:27:58:de:5b:9e:8b:b8:fd:cf:c6:95: 9f:d0:de:60:29:1c:07:85:15:b2:fa:6f:e8:e2:70: 70:52:55:f5:37:d1:4f:47:f2:d4:2f:92:a0:57:19: 8d:d6:2c:3b:10:95:24:fc:6d:8d:23:64:3c:bc:6d: 54:5c:99:2f:d2:9d:f8:27:66:7c:6c:e9:4e:b7:c3: cb:88:8d:94:ab:e7:0c:cb:0b:85:57:80:0d:3a:ad: 86:d0:4a:a6:a9:2c:e6:7f:27:69:0b:74:79:1f:5b: 31:63:05:62:f6:dd:84:51:61:9f:59:4a:89:32:8b: 21:0e:2d:c3:0b:a5:ea:a4:89:a8:71:3a:cb:f1:25: 65:d2:e5:fd:57:6f:b6:b4:2f:03:2f:0c:e2:5c:19: 4c:db:45:c8:b9:72:b5:3c:40:64:4e:0e:34:be:de: f2:a3:67:4a:07:86:73:82:98:55:98:96:4c:83:ef: 58:37:54:48:6c:43:f2:52:e0:49:17:79:13:b2:a1: b4:52:e0:9b:2f:1c:69:13:1a:cd:16:6d:fb:20:82: cf:40:75:70:f4:9a:3f:4a:98:76:ad:b3:51:56:5b: cf:62:0b:a4:d9:1e:f6:15:08:33:89:fd:23:dc:b8: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:86:A6:28:6F:0A:1E:23:E4:3B:F9:67:1A:86:8D:BA:C3:F3:D4:00 X509v3 Authority Key Identifier: keyid:B6:05:E2:C0:1C:5B:DC:6C:EE:49:54:5C:80:50:13:60:23:4D:C9:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B605E2C01C5BDC6CEE49545C80501360234DC910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/defe8f9b-8c34-4342-a0fe-ca1075fba5ff/0/B605E2C01C5BDC6CEE49545C80501360234DC910.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:53:68:d1:86:fd:d7:3e:24:c5:17:41:2f:b2:0d:3f:9d:a2: 1f:ef:fe:31:c6:8c:22:c0:cf:e2:8d:73:63:e3:12:09:52:6c: 8f:28:17:95:84:75:d3:d0:8e:f3:79:b3:67:bc:a8:4c:c3:1f: ba:6f:b7:04:7a:5b:e3:89:c8:f8:c9:14:ac:7b:75:3b:86:b0: 05:90:95:95:d8:46:9b:07:57:8f:c7:48:fa:ce:58:cd:20:73: 9f:45:25:30:ea:62:b9:ac:95:53:ee:15:e9:2e:18:dc:8b:54: 80:b6:a4:17:31:68:1b:9e:f6:5b:85:2e:dc:cb:d3:5b:db:ae: 37:73:cf:ae:02:39:0d:0d:2f:8f:38:e5:1f:01:22:fc:3b:8d: 1e:b1:ad:55:eb:4f:1b:13:df:35:fa:b2:cf:0f:d7:2f:e2:74: 2a:02:98:1d:bf:5c:8e:f7:c4:75:8f:c6:cc:c3:69:ed:6e:18: dd:3f:ef:80:4a:7c:0e:7b:07:f6:0c:0f:f7:b0:1b:bb:f6:de: 6f:0c:3e:34:01:91:dd:07:ff:81:53:d9:8d:d2:ea:db:00:8b: bc:ae:c1:aa:bf:3b:7f:0a:3f:c1:47:5a:80:b3:99:0b:21:69: dd:ac:90:ca:f1:30:9f:cd:19:0b:e9:af:de:63:7b:e9:8b:97: 68:e3:ac:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEKUEpcBjz0om2BsWXeNk4gAMRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAy MzREQzkxMDAeFw0yNDA1MjEwMjA1MDRaFw0yNDA1MjQwNjM1MDRaMDMxMTAvBgNV BAMTKDM1ODZBNjI4NkYwQTFFMjNFNDNCRjk2NzFBODY4REJBQzNGM0Q0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvfBw40UXw7LWKzGBr5MzEDlUn WN5bnou4/c/GlZ/Q3mApHAeFFbL6b+jicHBSVfU30U9H8tQvkqBXGY3WLDsQlST8 bY0jZDy8bVRcmS/SnfgnZnxs6U63w8uIjZSr5wzLC4VXgA06rYbQSqapLOZ/J2kL dHkfWzFjBWL23YRRYZ9ZSokyiyEOLcMLpeqkiahxOsvxJWXS5f1Xb7a0LwMvDOJc GUzbRci5crU8QGRODjS+3vKjZ0oHhnOCmFWYlkyD71g3VEhsQ/JS4EkXeROyobRS 4JsvHGkTGs0Wbfsggs9AdXD0mj9KmHats1FWW89iC6TZHvYVCDOJ/SPcuMvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNYamKG8KHiPkO/lnGoaNusPz1AAwHwYDVR0j BBgwFoAUtgXiwBxb3GzuSVRcgFATYCNNyRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWZlOGY5Yi04YzM0LTQzNDItYTBmZS1jYTEwNzVmYmE1ZmYvMC9CNjA1RTJDMDFD NUJEQzZDRUU0OTU0NUM4MDUwMTM2MDIzNERDOTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEzNjAyMzRE QzkxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVmZThmOWItOGMzNC00MzQyLWEw ZmUtY2ExMDc1ZmJhNWZmLzAvQjYwNUUyQzAxQzVCREM2Q0VFNDk1NDVDODA1MDEz NjAyMzREQzkxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9TaNGG/dc+JMUXQS+yDT+doh/v/jHGjCLA z+KNc2PjEglSbI8oF5WEddPQjvN5s2e8qEzDH7pvtwR6W+OJyPjJFKx7dTuGsAWQ lZXYRpsHV4/HSPrOWM0gc59FJTDqYrmslVPuFekuGNyLVIC2pBcxaBue9luFLtzL 01vbrjdzz64COQ0NL4845R8BIvw7jR6xrVXrTxsT3zX6ss8P1y/idCoCmB2/XI73 xHWPxszDae1uGN0/74BKfA57B/YMD/ewG7v23m8MPjQBkd0H/4FT2Y3S6tsAi7yu waq/O38KP8FHWoCzmQshad2skMrxMJ/NGQvpr95je+mLl2jjrLg= -----END CERTIFICATE-----Generated at Tue May 21 02:52:17 2024 by rpki-client on console-fra.rpki-client.org