$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft File: DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json) Hash identifier: Cny7FZWW2HP/1qRNxOaiv0rgu3QpoE0ocFRj0QZ+it4= Subject key identifier: 6E:CF:6D:6A:A6:BE:12:88:1C:BA:DE:A9:F2:E3:55:8C:8D:43:87:29 Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE Certificate issuer: /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Certificate serial: 66DEDF5503828CBF43211298633E0E9631ED1377 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft Manifest number: 042D Signing time: Sat 18 May 2024 03:50:48 +0000 Manifest this update: Sat 18 May 2024 03:45:48 +0000 Manifest next update: Tue 21 May 2024 06:04:48 +0000 Files and hashes: 1: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: ubB5884IL5fXHq1ma7Zjiz3Eup01BnSbsnY3GGx1weg=) 2: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: 9SUSrCBP6T0eqbA6qijSMQDNWUisO/cme8zci1sv7lg=) 3: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: hd6txBqiNJisV8352+m5r4DW24yvMPIzjNXK7fv0Bsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:de:df:55:03:82:8c:bf:43:21:12:98:63:3e:0e:96:31:ed:13:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Validity Not Before: May 18 03:45:48 2024 GMT Not After : May 21 06:04:48 2024 GMT Subject: CN=6ECF6D6AA6BE12881CBADEA9F2E3558C8D438729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5f:31:ba:b3:bf:e8:c0:b5:62:be:d6:73:b5: 52:e6:50:4c:8c:8d:3a:5a:b1:7b:72:fe:f7:2c:c3: 13:08:1f:e7:32:bb:31:6f:68:d2:bb:15:8b:f4:7d: b4:ff:90:77:bb:4b:79:08:cb:cd:a1:08:1d:96:c1: 4c:fe:11:d4:a6:35:2b:68:44:5a:3f:e1:3a:80:b4: 69:58:7a:fb:ae:26:14:98:b9:1c:74:b3:90:e1:88: c5:2e:f9:3e:62:5b:6c:a0:fb:59:8c:15:c5:1e:72: 41:f2:74:ed:4c:28:05:4c:45:3d:45:b3:ef:fb:71: 60:99:74:96:66:43:21:5d:0d:87:9d:6f:7b:75:22: 6c:06:e5:67:96:d5:31:c9:59:b0:c4:8f:35:e1:d7: 7f:36:c6:d3:52:84:e9:69:cf:40:8b:8a:a1:58:c2: dc:c7:fd:58:37:6d:e9:7c:d7:66:30:fc:c1:a1:41: 60:98:8d:34:42:64:fc:1a:bb:60:35:c9:8b:8a:8c: 03:3a:c1:a5:8b:99:25:9d:21:ed:77:0e:a4:e2:ee: 61:3c:9a:19:d4:b8:9b:a0:39:dc:a8:78:65:4f:8d: da:7b:81:56:f0:47:ac:fb:59:c1:eb:ce:58:09:7a: 47:0c:60:3e:cc:bf:e6:0f:9d:4a:f1:1b:b5:53:04: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CF:6D:6A:A6:BE:12:88:1C:BA:DE:A9:F2:E3:55:8C:8D:43:87:29 X509v3 Authority Key Identifier: keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:78:cb:33:6a:4a:62:35:6d:9e:0b:9c:db:a9:cf:d9:78:46: 65:e9:ec:9d:c0:30:8a:88:20:d6:63:d0:61:f6:9a:fb:da:a0: cb:72:58:74:17:60:82:cf:58:7c:6a:b3:df:03:5c:97:7e:e0: 16:89:c0:b3:04:13:1d:e2:5d:55:e0:ba:7a:9e:cb:c0:aa:db: 8b:81:25:67:de:61:65:2c:1a:ca:96:c0:c5:02:dd:d8:b6:f5: de:ba:4f:2b:96:3c:65:9b:d8:48:95:24:27:f6:b7:05:53:e1: 59:29:55:fe:da:11:9f:b4:5e:3c:6b:a2:68:81:df:91:ad:d4: 87:42:16:8a:ad:04:e0:c5:d5:30:40:f6:d4:ee:70:24:38:1a: 49:7d:cf:58:08:58:f8:1b:fa:3e:ff:60:a8:0a:80:45:a2:ac: a9:f7:9a:91:6a:c8:d2:c2:1b:1f:94:63:13:d6:39:2e:b9:ca: 1b:40:c2:d7:73:04:e8:f2:6e:a4:b7:3c:b0:66:ab:6e:95:1f: 7a:e2:e3:0d:49:a1:ff:02:fc:c2:ad:89:7e:29:f7:f3:50:ac: 44:2d:bb:7b:ef:ed:63:0f:f2:89:68:b3:d9:fe:c7:fb:59:e6: 24:b4:8a:fc:e1:13:32:31:d0:64:a0:fc:27:7d:e2:ba:ae:8d: 30:7b:d4:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZt7fVQOCjL9DIRKYYz4OljHtE3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NE Q0VFRkFDRTAeFw0yNDA1MTgwMzQ1NDhaFw0yNDA1MjEwNjA0NDhaMDMxMTAvBgNV BAMTKDZFQ0Y2RDZBQTZCRTEyODgxQ0JBREVBOUYyRTM1NThDOEQ0Mzg3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdXzG6s7/owLVivtZztVLmUEyM jTpasXty/vcswxMIH+cyuzFvaNK7FYv0fbT/kHe7S3kIy82hCB2WwUz+EdSmNSto RFo/4TqAtGlYevuuJhSYuRx0s5DhiMUu+T5iW2yg+1mMFcUeckHydO1MKAVMRT1F s+/7cWCZdJZmQyFdDYedb3t1ImwG5WeW1THJWbDEjzXh1382xtNShOlpz0CLiqFY wtzH/Vg3bel812Yw/MGhQWCYjTRCZPwau2A1yYuKjAM6waWLmSWdIe13DqTi7mE8 mhnUuJugOdyoeGVPjdp7gVbwR6z7WcHrzlgJekcMYD7Mv+YPnUrxG7VTBD/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbs9taqa+Eogcut6p8uNVjI1DhykwHwYDVR0j BBgwFoAU3vRDMecklk8oaX3quvIxPNzu+s4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkwYzM3ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC9ERUY0NDMzMUU3 MjQ5NjRGMjg2OTdERUFCQUYyMzEzQ0RDRUVGQUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NEQ0VF RkFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMx M0NEQ0VFRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZ4yzNqSmI1bZ4LnNupz9l4RmXp7J3AMIqI INZj0GH2mvvaoMtyWHQXYILPWHxqs98DXJd+4BaJwLMEEx3iXVXgunqey8Cq24uB JWfeYWUsGsqWwMUC3di29d66TyuWPGWb2EiVJCf2twVT4VkpVf7aEZ+0XjxromiB 35Gt1IdCFoqtBODF1TBA9tTucCQ4Gkl9z1gIWPgb+j7/YKgKgEWirKn3mpFqyNLC Gx+UYxPWOS65yhtAwtdzBOjybqS3PLBmq26VH3ri4w1Jof8C/MKtiX4p9/NQrEQt u3vv7WMP8olos9n+x/tZ5iS0ivzhEzIx0GSg/Cd94rqujTB71Gc= -----END CERTIFICATE-----Generated at Sat May 18 04:39:32 2024 by rpki-client on console-fra.rpki-client.org