$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft File: D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json) Hash identifier: RTD+/aKhb2jd7/v3Ps7hwviPdyCgPr88nDK4zyH3L3Q= Subject key identifier: 4F:54:0C:18:93:58:99:B7:4F:06:E1:8B:52:16:75:46:14:21:AF:88 Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Certificate serial: 2A598D9ABCB55556D95C829AAB1AC124AC805551 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft Manifest number: F7 Signing time: Sun 19 May 2024 19:50:59 +0000 Manifest this update: Sun 19 May 2024 19:45:59 +0000 Manifest next update: Thu 23 May 2024 00:47:59 +0000 Files and hashes: 1: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: LgLDtCuEdSQlPSZzcgwEqZ1vX43kzJx0LbWqbn9CCMI=) 2: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: 43wDWk61wmpGDxmmgUNXt64RxY1XYW8PFNBrlAPai4g=) 3: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: gH6RAHhJb+0j/HwkVcimO7WlWPwIx/Leaw9/5jNXXWo=) 4: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: 81FJxCmBduOBEnmJxRPD1wR4IQ56fP9z/J9O9cWGXWA=) 5: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: sc02rTiCyLCGa4grJy1f8/1zdMmagiAnm8myUvMibtI=) 6: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: uieH+PnAIZMfpid/GQjSfMhyVOdlSMY9j37gZc3VNTY=) 7: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: 1bg2Dw9ggcMD/H/DozqYA4Wox2sZnuSHZIFrvJxbS/U=) 8: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: 3nz/FmjCdOIPryhJq/SuZPBnQdmgDbmtKoREvwgz9Ak=) 9: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: C63MwCW5Hnh5gDrF+QG6jKk4DCAwBLx47lnD9PywM04=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:59:8d:9a:bc:b5:55:56:d9:5c:82:9a:ab:1a:c1:24:ac:80:55:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Validity Not Before: May 19 19:45:59 2024 GMT Not After : May 23 00:47:59 2024 GMT Subject: CN=4F540C18935899B74F06E18B521675461421AF88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:c8:bd:07:26:7c:c2:fb:25:5c:94:cf:ba: f9:8f:bc:2b:76:dc:b7:57:f8:23:22:3b:c8:fd:90: 53:72:b6:5d:08:3e:5a:4a:72:31:ee:88:ef:96:69: ae:e0:02:b8:31:74:ed:72:74:56:71:9a:e6:dd:bc: a6:08:c5:19:8e:73:ec:b6:ec:d3:d5:70:0e:78:cd: 49:1e:d5:50:ce:7a:0f:dc:2b:81:c5:7a:90:f6:1d: e1:78:e0:15:9d:14:94:70:52:41:c4:2c:00:c3:94: ab:05:6a:49:7f:76:39:82:f3:fc:b1:fd:93:8f:56: cc:44:66:2c:de:60:b1:06:10:dc:85:46:9b:2a:c2: 81:0c:ff:90:ff:71:0e:5b:50:63:d4:71:d8:fb:5c: df:23:16:f3:bb:7c:62:0b:7b:42:96:46:b2:6c:5d: 2b:dd:ee:ea:3a:44:10:60:df:e9:0b:09:71:a0:30: f3:cb:55:1d:95:9a:0c:41:ef:62:98:7b:c6:a9:47: 27:fd:ed:5f:c8:81:c6:ef:55:88:32:12:8e:08:59: 57:d1:aa:25:6e:19:1e:41:31:4b:4b:bc:77:8b:be: b9:0d:35:92:89:01:83:57:56:13:25:a1:9d:5b:37: 66:13:39:b9:f6:7c:99:ce:b1:43:68:08:34:33:cb: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:54:0C:18:93:58:99:B7:4F:06:E1:8B:52:16:75:46:14:21:AF:88 X509v3 Authority Key Identifier: keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:74:ad:e9:c7:c1:e8:0e:82:ce:9d:a4:21:fc:d3:e3:87:1b: 27:47:be:42:b6:72:84:87:9a:66:91:4c:a9:fa:98:bf:75:58: 62:b6:c8:60:1d:9e:17:80:4a:a3:57:54:e9:36:72:49:e9:b8: 56:a0:99:1b:8e:c4:20:da:d8:6d:1b:d0:b4:be:d3:66:ce:66: f1:cd:2a:95:34:d9:ca:c2:cc:4b:6a:bf:81:cb:e5:6d:4e:9c: 40:47:ef:6e:67:4e:34:31:c5:54:41:45:36:56:76:3d:04:dc: f0:f3:74:c0:01:24:93:a7:63:d7:eb:ec:52:4e:ed:9a:2c:f2: da:a1:b1:7f:d3:56:a8:02:4b:ae:a9:ea:29:63:d0:d6:1a:cb: fa:99:b7:86:b4:50:6a:9e:25:a9:63:ae:29:c7:63:3d:99:cf: ec:f9:4f:c2:bd:b9:d8:d6:2b:45:df:9b:36:78:22:38:41:93: 8e:6f:6a:6f:76:48:5e:e7:a8:9d:9e:c7:43:b0:d7:74:83:a0: 03:b0:d9:d0:a7:f5:d7:bd:27:63:ce:ab:5d:d1:71:86:6f:97: f8:f9:1b:3f:db:a4:5a:09:06:46:bc:7f:c4:79:c8:78:df:14: db:2d:36:e2:93:e9:db:0f:72:c6:d0:f4:b9:0a:ff:fc:1d:0c: e1:35:49:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlmNmry1VVbZXIKaqxrBJKyAVVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5 NTkyNTMxMjAeFw0yNDA1MTkxOTQ1NTlaFw0yNDA1MjMwMDQ3NTlaMDMxMTAvBgNV BAMTKDRGNTQwQzE4OTM1ODk5Qjc0RjA2RTE4QjUyMTY3NTQ2MTQyMUFGODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfsi9ByZ8wvslXJTPuvmPvCt2 3LdX+CMiO8j9kFNytl0IPlpKcjHuiO+Waa7gArgxdO1ydFZxmubdvKYIxRmOc+y2 7NPVcA54zUke1VDOeg/cK4HFepD2HeF44BWdFJRwUkHELADDlKsFakl/djmC8/yx /ZOPVsxEZizeYLEGENyFRpsqwoEM/5D/cQ5bUGPUcdj7XN8jFvO7fGILe0KWRrJs XSvd7uo6RBBg3+kLCXGgMPPLVR2VmgxB72KYe8apRyf97V/IgcbvVYgyEo4IWVfR qiVuGR5BMUtLvHeLvrkNNZKJAYNXVhMloZ1bN2YTObn2fJnOsUNoCDQzy2JlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT1QMGJNYmbdPBuGLUhZ1RhQhr4gwHwYDVR0j BBgwFoAU0qaryh74lyUQnL6l1C5oPJWSUxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWQxZTE2YS0wYTRkLTQ0YjEtOTg0NS05YzBjZDdhNmYzOGYvMC9EMkE2QUJDQTFF Rjg5NzI1MTA5Q0JFQTVENDJFNjgzQzk1OTI1MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5NTky NTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4 M0M5NTkyNTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJl0renHwegOgs6dpCH80+OHGydHvkK2coSH mmaRTKn6mL91WGK2yGAdnheASqNXVOk2cknpuFagmRuOxCDa2G0b0LS+02bOZvHN KpU02crCzEtqv4HL5W1OnEBH725nTjQxxVRBRTZWdj0E3PDzdMABJJOnY9fr7FJO 7Zos8tqhsX/TVqgCS66p6ilj0NYay/qZt4a0UGqeJaljrinHYz2Zz+z5T8K9udjW K0XfmzZ4IjhBk45vam92SF7nqJ2ex0Ow13SDoAOw2dCn9de9J2POq13RcYZvl/j5 Gz/bpFoJBka8f8R5yHjfFNstNuKT6dsPcsbQ9LkK//wdDOE1Sfk= -----END CERTIFICATE-----Generated at Sun May 19 20:54:09 2024 by rpki-client on console-ams.rpki-client.org