$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: WGk6ccXsOD+Ymx3I+lo+BBCYzLsT68fwRgKa9E0Iq7Y= Subject key identifier: F4:42:66:0C:C1:D1:CD:FE:A3:7D:B0:5A:2F:09:17:24:80:15:91:72 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 13535E27FAC75C85E71EE7595B0A3711268D4B8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 0134 Signing time: Sun 19 May 2024 04:00:34 +0000 Manifest this update: Sun 19 May 2024 03:55:34 +0000 Manifest next update: Wed 22 May 2024 08:53:34 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: i/3DNNCiCW1sDKCGcU19aNG3EnHVffvab04WTwIvo9c=) 2: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: 0grac8Jtj9LtjMLV+H5m+0WOJi/ZLQ4u+0IVS8zc4uQ=) 3: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: 4SvK/pVaVHdz5XGENIA9Z+hRVDTfnc4j8CAaG6xXzU8=) 4: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: CaxbC4vECTqhHSZ5CxGu4v0pvssf8RRKvG2jYLIbWEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:53:5e:27:fa:c7:5c:85:e7:1e:e7:59:5b:0a:37:11:26:8d:4b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: May 19 03:55:34 2024 GMT Not After : May 22 08:53:34 2024 GMT Subject: CN=F442660CC1D1CDFEA37DB05A2F09172480159172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:47:74:76:f9:9c:92:55:03:2d:e9:be:e1: 96:62:1e:75:da:22:de:16:8e:11:81:75:3e:11:bf: 7b:c8:5e:a6:42:d5:d3:5a:d5:d0:bf:a1:1a:3d:3a: 5e:51:e1:c7:a1:61:c2:2c:9b:bc:0b:e0:62:98:ae: 37:86:df:b6:61:cf:f9:9e:da:4b:8a:6a:79:70:d1: 9a:f9:c3:dd:cf:cb:3b:c9:54:8e:db:c1:6d:66:37: 60:c9:08:aa:d1:94:14:cf:41:e9:df:82:90:70:84: b6:7e:0c:34:39:f7:02:31:e4:c1:d2:ae:1f:66:f9: f7:7c:9e:e8:e7:56:de:7a:e7:0d:dc:b2:22:0b:64: af:b5:e7:f3:d9:16:87:dc:10:d5:c3:17:dd:a1:77: 6b:a4:0b:08:99:4e:82:ac:93:d7:d6:a1:92:d1:6b: a5:94:1a:ba:7b:47:c7:f1:20:9e:ef:db:63:cf:ff: 9d:64:45:0f:56:8d:fc:0a:b0:ad:69:ec:a9:7e:05: e2:08:df:da:17:ba:bc:37:ec:91:7a:ac:71:be:5a: 0f:a0:cc:ac:49:6f:a9:ea:e8:64:13:0c:bd:d4:6b: 15:7f:ae:46:68:e4:f4:a3:d3:4d:8c:c8:32:9f:9f: 2c:24:3a:03:96:5a:36:20:e8:e9:3d:4e:a2:5f:7e: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:42:66:0C:C1:D1:CD:FE:A3:7D:B0:5A:2F:09:17:24:80:15:91:72 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:35:ce:ce:b2:55:40:1d:43:ec:5a:1a:a6:6d:68:88:43:46: 43:e2:31:0e:b4:c6:7b:7e:72:80:65:42:14:54:6a:f0:7c:7a: 4f:0d:c8:f1:e5:b2:97:c0:39:61:ad:43:9b:11:ba:aa:e1:a6: ab:f8:eb:b8:c7:71:3f:ec:de:38:15:80:c5:cf:7b:c3:11:d3: 07:f8:c3:da:6f:49:7b:68:de:2e:b1:d0:da:b8:13:56:ab:22: 00:65:87:25:20:91:6a:ff:10:21:92:4d:ad:99:aa:40:09:12: 51:46:e4:f3:d3:a4:03:b6:20:2e:23:15:22:d1:4a:26:f7:29: 8e:da:90:e8:58:08:1b:c1:3b:c6:82:3c:06:98:b7:5e:8f:87: e7:e2:72:49:f7:2a:b5:c4:ad:93:45:53:52:03:7f:8c:3a:ea: cd:32:85:8a:ab:9c:4d:38:d3:24:7e:3c:39:52:e2:20:eb:6f: d4:d5:0c:d4:02:90:12:62:84:45:df:d6:a8:19:48:02:cf:74: c2:d2:e3:b4:58:a7:52:0c:cd:e8:e7:14:2e:c6:46:2c:54:18: 8a:66:d8:d8:a3:af:1b:8e:bb:9c:d1:11:76:d1:9c:72:9b:37: 88:2f:3d:9d:31:4b:02:33:77:92:b5:ef:d5:00:7a:e3:0b:e0: 6d:a2:53:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1NeJ/rHXIXnHudZWwo3ESaNS48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNDA1MTkwMzU1MzRaFw0yNDA1MjIwODUzMzRaMDMxMTAvBgNV BAMTKEY0NDI2NjBDQzFEMUNERkVBMzdEQjA1QTJGMDkxNzI0ODAxNTkxNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9kd0dvmcklUDLem+4ZZiHnXa It4WjhGBdT4Rv3vIXqZC1dNa1dC/oRo9Ol5R4cehYcIsm7wL4GKYrjeG37Zhz/me 2kuKanlw0Zr5w93PyzvJVI7bwW1mN2DJCKrRlBTPQenfgpBwhLZ+DDQ59wIx5MHS rh9m+fd8nujnVt565w3csiILZK+15/PZFofcENXDF92hd2ukCwiZToKsk9fWoZLR a6WUGrp7R8fxIJ7v22PP/51kRQ9WjfwKsK1p7Kl+BeII39oXurw37JF6rHG+Wg+g zKxJb6nq6GQTDL3UaxV/rkZo5PSj002MyDKfnywkOgOWWjYg6Ok9TqJffkGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9EJmDMHRzf6jfbBaLwkXJIAVkXIwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIg1zs6yVUAdQ+xaGqZtaIhDRkPiMQ60xnt+ coBlQhRUavB8ek8NyPHlspfAOWGtQ5sRuqrhpqv467jHcT/s3jgVgMXPe8MR0wf4 w9pvSXto3i6x0Nq4E1arIgBlhyUgkWr/ECGSTa2ZqkAJElFG5PPTpAO2IC4jFSLR Sib3KY7akOhYCBvBO8aCPAaYt16Ph+fickn3KrXErZNFU1IDf4w66s0yhYqrnE04 0yR+PDlS4iDrb9TVDNQCkBJihEXf1qgZSALPdMLS47RYp1IMzejnFC7GRixUGIpm 2NijrxuOu5zREXbRnHKbN4gvPZ0xSwIzd5K179UAeuML4G2iU+4= -----END CERTIFICATE-----Generated at Sun May 19 04:21:44 2024 by rpki-client on console-fra.rpki-client.org