$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json) Hash identifier: /EHvkr0+680lBilh2OChglFBZwIREKmXiXp29aFBJYE= Subject key identifier: 3D:85:0E:2B:15:9B:21:DA:4A:13:B5:8B:8C:E6:98:9F:7A:0D:45:2E Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 27759B0EC901991DE6AD99BE2F3080B6B6E94AFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft Manifest number: 0125 Signing time: Sun 19 May 2024 23:51:00 +0000 Manifest this update: Sun 19 May 2024 23:46:00 +0000 Manifest next update: Thu 23 May 2024 08:35:00 +0000 Files and hashes: 1: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: jJMnAyeGRN0i+vjNH0WT1rSDe067PXeLwSlJYDkZqgk=) 2: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: BtvD5XKm/qFCopFQltiAiPy3p1fDsq/w49629mqNNbU=) 3: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: zUhnV6RZcEN7MS6ucDPYLB6+uiTYrq41foGwVAakKJk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:75:9b:0e:c9:01:99:1d:e6:ad:99:be:2f:30:80:b6:b6:e9:4a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: May 19 23:46:00 2024 GMT Not After : May 23 08:35:00 2024 GMT Subject: CN=3D850E2B159B21DA4A13B58B8CE6989F7A0D452E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:a6:3e:b6:96:d4:ea:30:c3:4b:54:da:b2: 4a:3f:1f:d4:e0:69:74:48:3d:97:96:19:81:1d:2b: 68:51:78:2a:15:49:04:08:d3:f2:e1:05:1d:dd:7a: 5a:0f:a3:68:4f:a5:c1:f0:d0:e5:75:9b:89:03:47: bb:1f:0e:c2:cb:45:23:f2:66:86:fa:58:6f:e4:20: e4:e3:de:d4:82:4f:3e:5f:3d:28:9c:92:5c:a5:ee: ce:28:e9:cf:d2:af:d5:fc:1b:ea:fe:f1:09:67:ca: 9b:93:45:6f:0e:c5:a1:e1:36:21:15:b3:26:fe:98: 5f:d6:65:96:23:bf:bb:6d:64:cc:95:62:23:74:95: a1:a3:95:28:09:c3:ff:09:cb:28:b4:be:e8:2a:f2: 4b:1d:59:42:d5:b4:e0:ad:a4:8c:4e:00:e5:1b:4a: be:06:e0:a4:f2:21:1c:ea:0e:ec:c8:15:95:cd:3a: ad:0c:16:0f:cb:41:a3:38:0e:33:02:cd:7a:6f:59: d7:c2:31:45:9f:c5:ef:e4:a8:87:f9:fc:98:1a:44: 2c:31:c0:d9:62:1d:b1:01:ab:ca:2d:56:5c:af:96: 83:f7:c9:5b:05:e4:b6:83:6b:d2:3d:86:b4:80:93: 4d:66:e9:85:9f:34:1a:5a:db:d2:ce:a4:77:24:b3: 1e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:85:0E:2B:15:9B:21:DA:4A:13:B5:8B:8C:E6:98:9F:7A:0D:45:2E X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4a:46:50:60:95:dc:2e:e0:8f:ca:34:98:c9:74:74:25:f8: f8:a7:c6:42:dd:fb:aa:69:00:16:f8:68:82:5d:b1:9d:35:df: 87:e0:ac:59:cf:6c:2c:1a:4d:37:14:53:7b:de:a8:f1:45:ba: 06:1c:8b:b0:1c:6e:d8:e7:7e:cd:6b:e9:0c:6a:fc:b7:a8:59: 1c:51:e9:51:12:f9:bd:a8:8b:bf:da:e0:7e:e6:74:6d:32:92: 27:8c:85:28:10:be:a1:e6:38:98:ba:4a:2a:f3:eb:17:69:10: 86:36:fe:81:ff:e4:1a:be:d5:5d:8c:80:64:55:b4:75:5d:ab: bb:64:0e:81:63:b1:09:0d:a3:5c:1e:62:c7:ec:09:11:8a:7c: 23:48:be:11:db:d0:da:a4:c5:31:56:0d:5a:c6:a4:20:0e:ea: 80:1f:37:10:f6:d4:5f:5b:74:cc:55:bc:d0:21:26:b5:ae:28: d1:b5:e7:1f:cb:2d:42:0d:b3:14:a7:57:b4:15:73:59:43:8a: 4a:ec:48:30:5a:91:3d:77:51:cc:79:ca:6e:3a:68:ea:3a:d6: 59:dd:44:b4:fb:9a:7c:16:80:a9:66:15:c7:b5:b0:d5:99:00: 6e:4b:2a:b5:43:8f:ca:1a:8d:08:0f:df:8e:c9:df:bd:0a:1f: 9f:ca:26:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ3WbDskBmR3mrZm+LzCAtrbpSvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNDA1MTkyMzQ2MDBaFw0yNDA1MjMwODM1MDBaMDMxMTAvBgNV BAMTKDNEODUwRTJCMTU5QjIxREE0QTEzQjU4QjhDRTY5ODlGN0EwRDQ1MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDatKY+tpbU6jDDS1Tasko/H9Tg aXRIPZeWGYEdK2hReCoVSQQI0/LhBR3deloPo2hPpcHw0OV1m4kDR7sfDsLLRSPy Zob6WG/kIOTj3tSCTz5fPSicklyl7s4o6c/Sr9X8G+r+8QlnypuTRW8OxaHhNiEV syb+mF/WZZYjv7ttZMyVYiN0laGjlSgJw/8Jyyi0vugq8ksdWULVtOCtpIxOAOUb Sr4G4KTyIRzqDuzIFZXNOq0MFg/LQaM4DjMCzXpvWdfCMUWfxe/kqIf5/JgaRCwx wNliHbEBq8otVlyvloP3yVsF5LaDa9I9hrSAk01m6YWfNBpa29LOpHcksx6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYUOKxWbIdpKE7WLjOaYn3oNRS4wHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1 MDVERjhGNDQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVKRlBgldwu4I/KNJjJdHQl+PinxkLd+6pp ABb4aIJdsZ0134fgrFnPbCwaTTcUU3veqPFFugYci7Acbtjnfs1r6Qxq/LeoWRxR 6VES+b2oi7/a4H7mdG0ykieMhSgQvqHmOJi6Sirz6xdpEIY2/oH/5Bq+1V2MgGRV tHVdq7tkDoFjsQkNo1weYsfsCRGKfCNIvhHb0NqkxTFWDVrGpCAO6oAfNxD21F9b dMxVvNAhJrWuKNG15x/LLUINsxSnV7QVc1lDikrsSDBakT13Ucx5ym46aOo61lnd RLT7mnwWgKlmFce1sNWZAG5LKrVDj8oajQgP347J370KH5/KJrQ= -----END CERTIFICATE-----Generated at Mon May 20 00:16:37 2024 by rpki-client on console-fra.rpki-client.org