$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json) Hash identifier: ynF2nuiSjw8S2hE86yaxll05E+O8nwWQBFYj4XjFVoM= Subject key identifier: 74:2D:4E:CC:D4:66:3C:12:A9:44:34:23:55:5A:D5:64:C7:CB:DC:CD Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Certificate serial: 274D647717F426221D854B06EE9A3857F57E359F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft Manifest number: F9 Signing time: Sat 18 May 2024 03:21:31 +0000 Manifest this update: Sat 18 May 2024 03:16:31 +0000 Manifest next update: Tue 21 May 2024 08:22:31 +0000 Files and hashes: 1: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: VM/2pXcIVGstF+T9oX1O0hCd68eIW7g2fB1Eu7yCgs8=) 2: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: DWJ/685oLZ3bydpkQ2QFW1p7ZJPGy/K5XyS7EPszIgM=) 3: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: QIwsOy9m687t7/7ki3cz450MrlMH1c1f5j0+pbTQrrI=) 4: 3130332e33302e3139322e302f32332d3234203d3e20313530323537.roa (hash: 5SS3qud/jRmnstyyi8CuHshVTULj4Med5UTNDJxFPPk=) 5: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: lUZF/QzFHugeiEEl0D5koXzJlhQqH/0dDMKXvae9nbE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4d:64:77:17:f4:26:22:1d:85:4b:06:ee:9a:38:57:f5:7e:35:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Validity Not Before: May 18 03:16:31 2024 GMT Not After : May 21 08:22:31 2024 GMT Subject: CN=742D4ECCD4663C12A9443423555AD564C7CBDCCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:0b:7d:8c:e2:af:6c:17:5e:78:92:b1:bb: b5:b3:86:c4:5e:3d:34:d2:1f:c9:bd:c6:84:dc:d1: 31:a1:b1:0a:f3:de:33:8b:bf:95:91:06:1c:a3:ea: 34:76:72:de:ba:ab:d8:3c:45:51:1c:2f:68:86:a8: 25:38:28:b0:e7:bc:c8:68:8b:0d:01:b9:f5:ca:12: 47:72:bc:d6:40:2a:55:ab:a4:51:61:4d:fb:3c:32: 46:82:78:cd:3f:45:d8:a2:3e:bf:cc:30:86:52:ab: a6:61:fa:57:40:8b:41:96:6d:22:e2:12:cd:ba:fe: d5:dd:ab:73:86:64:eb:01:08:40:61:b6:1c:5d:f0: a3:cd:e5:c3:4c:ad:7e:fb:e5:03:e9:b4:0b:53:77: a2:13:3e:5f:3b:d5:8a:a2:a3:8a:fd:8a:ee:ae:9a: 52:71:13:9e:aa:e0:df:68:81:b8:6f:fd:a7:61:0d: dc:4c:f4:af:5e:a0:5c:34:33:e1:25:62:2d:f4:08: 06:98:5e:52:b0:b8:51:5d:26:71:60:ee:5d:70:87: f9:ea:25:76:72:21:43:35:a1:eb:d2:02:c7:a6:a9: a0:d6:08:e3:86:0d:ab:93:6f:a5:3b:a3:20:52:79: ee:a9:5b:0c:d8:a3:ba:48:56:39:fc:9f:86:11:12: f6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2D:4E:CC:D4:66:3C:12:A9:44:34:23:55:5A:D5:64:C7:CB:DC:CD X509v3 Authority Key Identifier: keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1a:7a:19:ab:02:3b:75:a0:b9:f5:a1:8a:a4:ea:65:ab:e7: 9c:52:4b:f5:ad:fd:f7:8f:51:47:1e:7b:c3:59:3d:5b:f0:ed: 44:d2:f0:3c:70:fc:06:52:cb:fa:3f:1f:c7:c8:5d:92:51:61: 3f:8f:5c:39:1c:9c:cb:b3:a0:ad:18:6a:12:3c:ae:7e:33:6a: 41:f1:9d:00:03:00:95:01:1d:a9:43:ab:2d:fa:cc:a3:7a:a8: c2:e8:86:fd:36:29:cf:f5:99:5a:53:a6:e7:60:48:e5:b0:32: d5:0f:01:4e:9f:44:c7:f7:de:82:f6:bd:6f:ae:94:71:05:6a: 82:f2:f5:e8:e2:3f:8d:dd:83:f1:44:df:6b:f2:f7:f8:60:ca: bd:70:02:9e:a2:cd:1a:d4:e2:04:2e:14:89:bf:b6:d4:27:02: 21:c4:0f:0a:ab:2a:3a:9f:26:4a:ad:9e:b4:57:e9:c3:57:21: 6b:70:e8:0b:dc:d1:cd:02:79:27:0f:c6:6e:a3:95:ca:9a:1c: 75:17:f3:fb:b6:e0:c3:1b:34:7a:ab:31:08:61:aa:d5:81:53: f3:38:51:a0:bb:c4:7f:df:4d:02:f3:ad:85:ba:12:83:5a:46: 5b:06:89:8d:df:f8:13:7d:cc:4d:1d:70:fe:55:8a:2b:09:36: 08:8a:16:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ01kdxf0JiIdhUsG7po4V/V+NZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVC NkMyMUM3NzAeFw0yNDA1MTgwMzE2MzFaFw0yNDA1MjEwODIyMzFaMDMxMTAvBgNV BAMTKDc0MkQ0RUNDRDQ2NjNDMTJBOTQ0MzQyMzU1NUFENTY0QzdDQkRDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64gt9jOKvbBdeeJKxu7WzhsRe PTTSH8m9xoTc0TGhsQrz3jOLv5WRBhyj6jR2ct66q9g8RVEcL2iGqCU4KLDnvMho iw0BufXKEkdyvNZAKlWrpFFhTfs8MkaCeM0/RdiiPr/MMIZSq6Zh+ldAi0GWbSLi Es26/tXdq3OGZOsBCEBhthxd8KPN5cNMrX775QPptAtTd6ITPl871Yqio4r9iu6u mlJxE56q4N9ogbhv/adhDdxM9K9eoFw0M+ElYi30CAaYXlKwuFFdJnFg7l1wh/nq JXZyIUM1oevSAsemqaDWCOOGDauTb6U7oyBSee6pWwzYo7pIVjn8n4YREvYlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdC1OzNRmPBKpRDQjVVrVZMfL3M0wHwYDVR0j BBgwFoAUPSBSK1GuqkH1lJDi1Vw23rbCHHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTYxZTVhZS1lNDVmLTRlZTMtOGY2Yi03Y2I1OWQ2MTc4M2IvMC8zRDIwNTIyQjUx QUVBQTQxRjU5NDkwRTJENTVDMzZERUI2QzIxQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVCNkMy MUM3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2 REVCNkMyMUM3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMaehmrAjt1oLn1oYqk6mWr55xSS/Wt/feP UUcee8NZPVvw7UTS8Dxw/AZSy/o/H8fIXZJRYT+PXDkcnMuzoK0YahI8rn4zakHx nQADAJUBHalDqy36zKN6qMLohv02Kc/1mVpTpudgSOWwMtUPAU6fRMf33oL2vW+u lHEFaoLy9ejiP43dg/FE32vy9/hgyr1wAp6izRrU4gQuFIm/ttQnAiHEDwqrKjqf JkqtnrRX6cNXIWtw6Avc0c0CeScPxm6jlcqaHHUX8/u24MMbNHqrMQhhqtWBU/M4 UaC7xH/fTQLzrYW6EoNaRlsGiY3f+BN9zE0dcP5ViisJNgiKFsE= -----END CERTIFICATE-----Generated at Sat May 18 04:39:32 2024 by rpki-client on console-fra.rpki-client.org