$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: 0fjsdm36Tu/OVbDB0fNRjSXXqVbWU1/fDBKd7b5nRfs= Subject key identifier: 8D:0E:45:B8:0B:85:9C:15:88:B6:76:5D:29:03:2E:11:2D:49:02:CC Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 3C6749B100144F62DDB8EF01AAA4F31777567B53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: D3 Signing time: Sat 18 May 2024 05:21:01 +0000 Manifest this update: Sat 18 May 2024 05:16:01 +0000 Manifest next update: Tue 21 May 2024 10:47:01 +0000 Files and hashes: 1: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: 6qdkyaoLoSV3x8r7sS0vwkbKqWGiEK+mWHnVjPJJ2fI=) 2: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: XHnVA3kgiSHWTzaq4H1bmmSuVOWED8VyEnBWN5Fzb88=) 3: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: qkecMPXCu+C/DAYitr7zl/XjAV4sa+q5G/Kv88W/EaA=) 4: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: 7qeGJfERkYUebxiMpjoxxRBqpDRFZLr/LDYd5xhpDEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 10:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:67:49:b1:00:14:4f:62:dd:b8:ef:01:aa:a4:f3:17:77:56:7b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: May 18 05:16:01 2024 GMT Not After : May 21 10:47:01 2024 GMT Subject: CN=8D0E45B80B859C1588B6765D29032E112D4902CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:e5:73:0a:4d:e5:c9:df:d1:b9:73:85:ff: 06:e8:44:7e:cc:48:f1:8a:00:c8:aa:ea:c2:cc:86: 1d:ab:a7:d2:94:60:a5:6e:10:3c:51:2b:28:5b:f0: 7d:3f:bc:f8:61:35:a4:11:b9:d6:15:23:80:4e:3a: 51:d2:33:4f:e4:ef:6a:67:6f:99:19:32:d2:c2:0d: 02:51:0f:d6:03:d0:3c:1f:51:84:a1:00:f7:d3:7e: f4:ac:19:14:0b:ef:b7:6a:74:e8:50:46:0a:94:96: 21:9a:76:94:6f:43:3d:50:78:4b:8a:1d:8c:47:11: d6:a7:9d:b8:22:57:72:71:66:8e:29:61:b7:31:15: 5d:cb:fb:d0:36:8f:ae:01:bb:4c:11:42:6b:76:53: 2d:a8:76:fc:aa:9f:13:d5:4f:b5:e0:92:13:82:51: 88:ef:c6:f4:fc:41:31:f5:eb:4c:12:7c:dd:e6:f8: 20:2a:b1:06:c5:c6:d0:d0:9a:7d:53:6e:c1:83:57: be:06:55:57:e9:3d:f2:81:8d:38:3d:77:57:95:15: 03:75:f1:90:ba:b7:56:7c:19:d7:21:0e:9d:09:0a: 7f:f1:cf:5a:56:dd:40:2b:4d:3d:be:b4:30:46:22: 65:99:87:f7:c8:82:36:2f:81:3f:99:07:6d:df:b5: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0E:45:B8:0B:85:9C:15:88:B6:76:5D:29:03:2E:11:2D:49:02:CC X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ac:6f:c4:50:79:a1:5f:3b:8c:41:8c:c2:d4:94:7a:7c:69: b8:91:bc:d6:36:96:8e:46:08:71:7b:e8:75:af:98:4b:0b:60: 3d:bf:03:b7:4e:a6:74:0b:fc:b5:4b:85:68:d9:a8:99:83:84: 76:09:61:04:b6:0d:38:98:85:24:6e:92:92:bf:0f:81:8f:0c: 90:54:dd:e2:11:3f:ac:52:03:5e:29:11:43:83:b8:a1:f7:71: d2:f6:7d:c2:e0:3d:26:a6:a9:05:af:af:7f:8a:6a:ed:6d:ce: ee:ee:53:9c:af:bb:23:87:04:14:bc:d4:49:53:df:37:9e:1d: f3:14:10:8a:93:98:b7:36:ec:82:71:73:fe:62:6b:aa:46:7d: fd:9c:06:43:7a:fc:b3:f4:a7:f5:02:43:24:5b:37:53:6a:bb: ae:fb:5d:20:2d:b4:fd:3c:b0:05:e3:da:0f:62:3e:0d:02:80: c3:1e:0a:c6:5e:30:7f:80:27:bc:09:04:77:54:80:2f:15:e4: c4:be:ea:75:e9:e4:30:a8:19:ba:a2:c8:a0:c8:d8:d4:54:61: e3:11:01:2f:c6:90:36:28:d5:65:e0:72:b2:31:d8:29:be:fe: 08:d7:70:35:92:b8:11:8c:3b:1e:b1:21:e9:9b:79:49:3d:bd: f1:4b:ef:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGdJsQAUT2LduO8BqqTzF3dWe1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNDA1MTgwNTE2MDFaFw0yNDA1MjExMDQ3MDFaMDMxMTAvBgNV BAMTKDhEMEU0NUI4MEI4NTlDMTU4OEI2NzY1RDI5MDMyRTExMkQ0OTAyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19eVzCk3lyd/RuXOF/wboRH7M SPGKAMiq6sLMhh2rp9KUYKVuEDxRKyhb8H0/vPhhNaQRudYVI4BOOlHSM0/k72pn b5kZMtLCDQJRD9YD0DwfUYShAPfTfvSsGRQL77dqdOhQRgqUliGadpRvQz1QeEuK HYxHEdannbgiV3JxZo4pYbcxFV3L+9A2j64Bu0wRQmt2Uy2odvyqnxPVT7XgkhOC UYjvxvT8QTH160wSfN3m+CAqsQbFxtDQmn1TbsGDV74GVVfpPfKBjTg9d1eVFQN1 8ZC6t1Z8GdchDp0JCn/xz1pW3UArTT2+tDBGImWZh/fIgjYvgT+ZB23ftQV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjQ5FuAuFnBWItnZdKQMuES1JAswwHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAysb8RQeaFfO4xBjMLUlHp8abiRvNY2lo5G CHF76HWvmEsLYD2/A7dOpnQL/LVLhWjZqJmDhHYJYQS2DTiYhSRukpK/D4GPDJBU 3eIRP6xSA14pEUODuKH3cdL2fcLgPSamqQWvr3+Kau1tzu7uU5yvuyOHBBS81ElT 3zeeHfMUEIqTmLc27IJxc/5ia6pGff2cBkN6/LP0p/UCQyRbN1Nqu677XSAttP08 sAXj2g9iPg0CgMMeCsZeMH+AJ7wJBHdUgC8V5MS+6nXp5DCoGbqiyKDI2NRUYeMR AS/GkDYo1WXgcrIx2Cm+/gjXcDWSuBGMOx6xIembeUk9vfFL75g= -----END CERTIFICATE-----Generated at Sat May 18 07:18:46 2024 by rpki-client on console-fra.rpki-client.org