$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft File: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft (raw, json) Hash identifier: kwqMtRDsGF4xuq+En+/199SQnOgO8yVSira7RYHEy9c= Subject key identifier: 27:70:F9:70:04:15:57:C9:FF:5F:42:49:AA:10:AB:69:57:EC:3C:B8 Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 Certificate issuer: /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Certificate serial: 703315A212FA4648A22EC1F757EC0F2C31079651 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft Manifest number: 1F Signing time: Sat 18 May 2024 21:30:01 +0000 Manifest this update: Sat 18 May 2024 21:25:01 +0000 Manifest next update: Wed 22 May 2024 00:46:01 +0000 Files and hashes: 1: 3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (hash: 0aRyZhQGWsMKYXDlEnbQv2PzDN2c5f2fxr/kT9NKBik=) 2: 1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl (hash: ANaFcceGGuOVwqkLfmPJZv+znpOHGqIajGgc1jlJNQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:33:15:a2:12:fa:46:48:a2:2e:c1:f7:57:ec:0f:2c:31:07:96:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808 Validity Not Before: May 18 21:25:01 2024 GMT Not After : May 22 00:46:01 2024 GMT Subject: CN=2770F970041557C9FF5F4249AA10AB6957EC3CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a6:26:e1:3f:b0:97:b9:09:69:61:44:cd:38: b9:c4:26:46:42:de:74:ed:2b:9f:2e:ef:80:c4:07: 6f:96:9e:51:11:4b:f4:e7:6c:b5:21:83:76:12:71: c1:6d:1f:74:93:a8:5c:d5:ed:6f:80:88:0f:f3:e2: 2f:52:42:21:45:6d:0a:68:fc:3a:a9:26:b6:ef:49: a6:a2:b5:71:69:73:da:81:b2:82:f0:95:2a:ca:4d: b5:66:2e:5c:20:94:3c:0c:20:50:19:b9:dd:bd:88: 33:9e:85:75:8b:ed:75:77:fd:0a:85:7c:cf:62:0e: 7b:32:d6:67:08:35:8c:1f:7d:00:ff:53:76:80:e3: 31:dc:ba:4c:71:79:cf:68:f1:76:d6:58:9d:72:e2: 98:f8:e9:e3:c6:98:cc:b2:07:1b:6b:2b:b9:1b:9d: f3:79:60:30:90:e2:2b:19:ca:76:80:fe:3e:30:4c: 2b:4d:a4:00:9a:32:c6:3b:de:7e:05:70:0f:f9:7f: 43:76:29:d2:3f:d7:9d:3f:80:eb:73:3f:34:fa:3a: bc:b2:d5:71:2b:de:a7:70:f5:ac:df:9f:09:8f:ec: e4:e1:e9:48:92:3b:39:80:a6:6f:5c:7d:06:ad:fa: 33:68:fa:90:d8:f7:07:aa:e7:f8:f9:39:b8:ab:5e: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:F9:70:04:15:57:C9:FF:5F:42:49:AA:10:AB:69:57:EC:3C:B8 X509v3 Authority Key Identifier: keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:f7:17:ae:26:d7:d0:b4:ba:5c:bc:83:53:4d:ab:96:47:e7: 4d:18:78:d5:44:ce:db:31:82:76:3d:7b:37:cc:1a:0a:89:20: 65:7b:47:5d:f5:4d:49:b6:96:0e:60:eb:0a:47:67:ca:99:94: 59:74:f7:39:68:e0:50:01:7e:56:cc:4a:ed:28:b6:ad:11:65: fd:7d:1f:ea:cd:b3:c0:a4:93:0c:3c:ab:0c:be:53:3a:0e:28: ec:af:02:c1:2a:93:59:0e:f8:f2:34:4c:62:16:0e:34:f1:ad: 8f:4a:75:97:ed:38:c5:9d:a8:3f:56:38:e5:f5:77:21:c7:43: e1:55:d8:b5:dc:83:25:05:b0:0a:8e:d1:e3:fb:0a:69:ac:70: 12:fd:17:22:29:a6:61:e7:d5:c1:b6:61:a9:29:f3:25:bf:10: 6c:25:2a:af:ad:2e:1e:a1:59:2c:5f:e6:62:28:3d:38:79:d0: ba:2a:e0:5d:40:66:15:8d:64:6d:c7:62:48:97:28:37:19:64: e9:51:52:20:52:f6:ba:85:de:5d:c5:48:3b:85:48:95:b1:c6: af:3c:fc:59:e9:15:8f:c8:cb:70:42:83:f3:dc:3e:ef:32:52: 84:51:f0:7e:e6:d0:e8:a6:25:5a:e7:60:a1:a4:44:c0:4f:17: bc:bf:0f:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDMVohL6RkiiLsH3V+wPLDEHllEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2 RTMwRTgwODAeFw0yNDA1MTgyMTI1MDFaFw0yNDA1MjIwMDQ2MDFaMDMxMTAvBgNV BAMTKDI3NzBGOTcwMDQxNTU3QzlGRjVGNDI0OUFBMTBBQjY5NTdFQzNDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXpibhP7CXuQlpYUTNOLnEJkZC 3nTtK58u74DEB2+WnlERS/TnbLUhg3YSccFtH3STqFzV7W+AiA/z4i9SQiFFbQpo /DqpJrbvSaaitXFpc9qBsoLwlSrKTbVmLlwglDwMIFAZud29iDOehXWL7XV3/QqF fM9iDnsy1mcINYwffQD/U3aA4zHcukxxec9o8XbWWJ1y4pj46ePGmMyyBxtrK7kb nfN5YDCQ4isZynaA/j4wTCtNpACaMsY73n4FcA/5f0N2KdI/150/gOtzPzT6Oryy 1XEr3qdw9azfnwmP7OTh6UiSOzmApm9cfQat+jNo+pDY9weq5/j5ObirXofLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ3D5cAQVV8n/X0JJqhCraVfsPLgwHwYDVR0j BBgwFoAUGRGuQYRd7i64hJDFdn48Gm4w6AgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTU3ZmE1ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC8xOTExQUU0MTg0 NURFRTJFQjg4NDkwQzU3NjdFM0MxQTZFMzBFODA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2RTMw RTgwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk1N2ZhNWQtZmE2Ny00ZTZiLTg5 MjAtYzQ3NDdhZGIzMGJiLzAvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTND MUE2RTMwRTgwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMD3F64m19C0uly8g1NNq5ZH500YeNVEztsx gnY9ezfMGgqJIGV7R131TUm2lg5g6wpHZ8qZlFl09zlo4FABflbMSu0otq0RZf19 H+rNs8Ckkww8qwy+UzoOKOyvAsEqk1kO+PI0TGIWDjTxrY9KdZftOMWdqD9WOOX1 dyHHQ+FV2LXcgyUFsAqO0eP7CmmscBL9FyIppmHn1cG2Yakp8yW/EGwlKq+tLh6h WSxf5mIoPTh50Loq4F1AZhWNZG3HYkiXKDcZZOlRUiBS9rqF3l3FSDuFSJWxxq88 /FnpFY/Iy3BCg/PcPu8yUoRR8H7m0OimJVrnYKGkRMBPF7y/D6Y= -----END CERTIFICATE-----Generated at Sat May 18 22:13:41 2024 by rpki-client on console-fra.rpki-client.org