$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json) Hash identifier: NGeU+v9HeaMBFKvz3PEyeTtsqWzp361uNxPRa8QcbAg= Subject key identifier: 28:C7:56:96:CC:0F:6B:0E:80:0A:05:2A:25:49:3E:F0:A7:28:F7:89 Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4 Certificate serial: 69A4236ABFD38B8012192F3049981C4ED91591E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft Manifest number: 0157 Signing time: Sat 18 May 2024 17:30:40 +0000 Manifest this update: Sat 18 May 2024 17:25:40 +0000 Manifest next update: Wed 22 May 2024 00:23:40 +0000 Files and hashes: 1: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: ZLKMzF4hF/QgHktfyy1RGBHDQiddcmycRYFX/Ur1Q1E=) 2: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: aEtSyxULfX21L/TGGk60hXyW1kXTBke3keVywXdf7g8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a4:23:6a:bf:d3:8b:80:12:19:2f:30:49:98:1c:4e:d9:15:91:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4 Validity Not Before: May 18 17:25:40 2024 GMT Not After : May 22 00:23:40 2024 GMT Subject: CN=28C75696CC0F6B0E800A052A25493EF0A728F789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:e2:e2:d5:44:c5:52:fe:31:e7:d9:24:5b: 26:b5:57:71:c5:55:0f:66:08:b1:e9:86:68:70:3f: cf:f8:72:a1:fe:82:c9:1c:a6:2f:75:de:46:df:70: fb:f7:6b:48:e7:9b:2d:94:b2:ba:fa:06:85:09:44: e6:4e:7f:c9:b7:a5:33:8e:b1:e9:94:0e:09:57:f4: 88:9d:8c:e1:f1:a6:b5:10:c0:2c:23:fd:88:ac:09: 7f:94:5e:ae:3f:1d:d5:c9:35:33:d6:f0:22:3e:8d: 29:03:6e:f1:e4:34:4e:9b:c0:06:fc:ab:c1:3c:6e: c0:ec:4d:fc:dc:72:a1:cc:75:9d:c6:b8:fb:d8:1d: b7:db:da:d3:98:07:cb:c2:bd:86:07:1f:3a:19:c9: e2:e4:97:bd:d7:8d:5e:45:36:57:fe:db:64:65:06: f6:cb:ad:07:7c:5b:e7:42:fe:b1:a7:88:f3:0f:e8: e8:13:89:4a:d6:95:ff:df:af:69:91:0e:8e:9c:13: a0:e0:99:c4:bd:5d:e1:69:f7:8e:e0:d8:c6:5b:a8: c7:2f:8f:9b:89:da:d7:47:23:3d:76:c3:44:ae:da: 0d:46:5d:00:f8:4c:3d:3d:85:98:a7:0d:cc:d2:19: 3b:c5:40:69:81:05:11:f8:3a:30:8c:da:5d:f1:e1: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C7:56:96:CC:0F:6B:0E:80:0A:05:2A:25:49:3E:F0:A7:28:F7:89 X509v3 Authority Key Identifier: keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d0:a6:11:82:e7:3c:89:17:0d:89:7f:15:0b:b1:5c:2f:05: b5:21:e4:cd:72:44:c3:51:f1:7d:c9:df:dc:f3:92:44:22:67: f3:57:0a:c3:76:dc:85:ff:71:c7:d5:88:8d:f4:9d:84:d9:94: c4:42:69:7d:d6:1d:76:d7:04:fa:da:d3:21:e5:0b:8b:f4:d9: 92:c1:00:8f:2e:c5:3c:71:ac:50:1c:7a:4a:9f:a6:5b:2c:1b: 00:e8:d2:1d:7f:a9:65:71:4c:8b:32:78:9f:7f:c8:00:02:bb: ab:5c:5d:f0:c4:1a:3b:f4:06:4d:a1:95:e3:de:d8:20:34:5f: 5a:17:e0:7f:2d:67:cb:5f:d0:0f:28:03:f3:5d:e2:f6:84:12: 1b:d7:ab:b4:42:db:e9:da:86:ea:10:66:da:13:e1:86:20:11: 23:56:f7:9e:b8:60:7b:8a:89:29:40:d6:c3:6c:f2:fc:a3:47: 87:99:95:83:b7:42:3e:02:93:ae:fa:68:8b:51:57:69:5e:dc: d0:4b:bb:42:c7:2e:af:6c:a4:10:d4:95:96:4b:cd:b6:5d:87: 04:a5:a9:1c:36:51:5d:23:76:4d:8f:e1:39:42:6a:ad:c0:a3: 62:e5:02:e0:dd:91:72:e0:8f:24:ec:23:38:93:20:81:74:6a: 11:f4:b8:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaQjar/Ti4ASGS8wSZgcTtkVkeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDEx NDYyQjRENDAeFw0yNDA1MTgxNzI1NDBaFw0yNDA1MjIwMDIzNDBaMDMxMTAvBgNV BAMTKDI4Qzc1Njk2Q0MwRjZCMEU4MDBBMDUyQTI1NDkzRUYwQTcyOEY3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfeLi1UTFUv4x59kkWya1V3HF VQ9mCLHphmhwP8/4cqH+gskcpi913kbfcPv3a0jnmy2Usrr6BoUJROZOf8m3pTOO semUDglX9IidjOHxprUQwCwj/YisCX+UXq4/HdXJNTPW8CI+jSkDbvHkNE6bwAb8 q8E8bsDsTfzccqHMdZ3GuPvYHbfb2tOYB8vCvYYHHzoZyeLkl73XjV5FNlf+22Rl BvbLrQd8W+dC/rGniPMP6OgTiUrWlf/fr2mRDo6cE6DgmcS9XeFp947g2MZbqMcv j5uJ2tdHIz12w0Su2g1GXQD4TD09hZinDczSGTvFQGmBBRH4OjCM2l3x4WchAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMdWlswPaw6ACgUqJUk+8Kco94kwHwYDVR0j BBgwFoAUYl09NY3v3WU1k4emo2d1QRRitNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZjNkNGRhOS0xODJmLTRhNzMtYTExMC00YzhiZmY4OTRmYmMvMC82MjVEM0QzNThE RUZERDY1MzU5Mzg3QTZBMzY3NzU0MTE0NjJCNEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDExNDYy QjRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWYzZDRkYTktMTgyZi00YTczLWEx MTAtNGM4YmZmODk0ZmJjLzAvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1 NDExNDYyQjRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTQphGC5zyJFw2JfxULsVwvBbUh5M1yRMNR 8X3J39zzkkQiZ/NXCsN23IX/ccfViI30nYTZlMRCaX3WHXbXBPra0yHlC4v02ZLB AI8uxTxxrFAcekqfplssGwDo0h1/qWVxTIsyeJ9/yAACu6tcXfDEGjv0Bk2hlePe 2CA0X1oX4H8tZ8tf0A8oA/Nd4vaEEhvXq7RC2+nahuoQZtoT4YYgESNW9564YHuK iSlA1sNs8vyjR4eZlYO3Qj4Ck676aItRV2le3NBLu0LHLq9spBDUlZZLzbZdhwSl qRw2UV0jdk2P4TlCaq3Ao2LlAuDdkXLgjyTsIziTIIF0ahH0uK4= -----END CERTIFICATE-----Generated at Sat May 18 18:12:08 2024 by rpki-client on console-fra.rpki-client.org