$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft File: B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft (raw, json) Hash identifier: inye21hC/KW9zoWYq2FgWmrA+dK0oGvuXabo5vmJu68= Subject key identifier: F5:14:B0:4F:38:0F:9F:71:34:4D:C6:7B:D6:58:36:07:5E:74:3B:C9 Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 Certificate issuer: /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Certificate serial: 18CDE35B1F3AAB5498B935085A5629DF08991DF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft Manifest number: 0426 Signing time: Wed 24 Apr 2024 00:10:54 +0000 Manifest this update: Wed 24 Apr 2024 00:05:54 +0000 Manifest next update: Sat 27 Apr 2024 01:53:54 +0000 Files and hashes: 1: 3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (hash: +JrUKkE/T5/16OXJhgr0oldYZ1ozOl5vQzbn7e8DhIU=) 2: 3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (hash: lTTMNp23OoQSOjYn9CEyh/tDJ/V59anhjOuqBy8g+QY=) 3: B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl (hash: tlwvJ8oJFS6dEw0l96dCOqFFGXto0gDaSYkQimED/og=) 4: 323430353a336663303a3a2f33322d3332203d3e20313339343031.roa (hash: lnkPe8X3hVyC5Q5DA4Fz2Q98x2fIHCIY+61Ij0V40HU=) 5: 3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (hash: puVv8+jAPMBLLRuD3jy5lIkGPnU5FM4BijwPyoeJPeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Apr 2024 01:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cd:e3:5b:1f:3a:ab:54:98:b9:35:08:5a:56:29:df:08:99:1d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0 Validity Not Before: Apr 24 00:05:54 2024 GMT Not After : Apr 27 01:53:54 2024 GMT Subject: CN=F514B04F380F9F71344DC67BD65836075E743BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:00:c0:9d:7c:a1:86:2d:ad:00:16:80:af:d6: 1c:88:3b:72:53:1c:7c:bc:f3:31:ad:ce:ee:ce:a7: cc:4f:8c:34:f3:45:ca:ea:4b:54:98:6c:c4:b6:b9: df:3e:64:b4:7a:62:80:b6:82:af:8a:78:11:e1:3d: 82:62:20:ab:1f:18:7f:92:8f:33:54:71:38:da:f1: be:66:cd:51:16:d0:63:83:8c:e1:81:b6:e2:ff:af: f8:38:73:97:a1:28:66:41:7b:1d:29:86:90:2e:67: f4:43:26:21:f5:cc:ca:ba:9b:be:69:76:7a:b3:04: a8:6f:75:3b:d3:96:4a:6a:b9:98:8e:90:03:36:45: 9a:b5:d7:66:35:98:b7:aa:50:5d:bb:3b:d2:a9:7b: 8d:73:da:77:85:bb:1d:dd:b7:00:93:9c:99:f0:4f: 11:ee:5b:da:69:ff:9f:76:de:33:55:ad:c8:41:d4: df:ad:28:2b:08:e6:4a:e8:32:79:6f:de:9c:27:40: 8f:9b:4c:a0:3d:c2:88:a9:b2:88:02:26:08:8d:a7: 2f:e4:d0:18:66:5d:52:37:49:22:7e:c4:29:55:17: 94:e8:b7:07:9f:05:5d:79:af:14:9a:74:dd:63:93: 9a:56:eb:80:d3:3e:4c:ec:df:d0:9e:38:5d:13:09: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:14:B0:4F:38:0F:9F:71:34:4D:C6:7B:D6:58:36:07:5E:74:3B:C9 X509v3 Authority Key Identifier: keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1f:d9:91:62:53:da:50:4d:c8:a6:12:d1:11:ca:17:bf:ea: ee:f8:0d:a6:d6:cb:a8:63:33:60:24:ac:64:bf:cf:d4:12:ca: 44:c6:1c:e1:c9:58:d9:2a:36:37:49:85:5e:6f:c2:3f:3b:86: cd:cd:3b:41:f5:ea:f4:fb:23:4e:c1:e8:d0:1b:28:75:9f:8e: 44:17:fa:76:24:4a:08:12:0b:4e:77:4b:0c:95:fb:d1:3b:68: e1:98:94:e5:cc:22:7d:2e:22:ff:2a:9d:18:45:40:32:08:41: 26:e9:14:f1:6b:3d:28:84:6f:8a:15:e5:88:5d:16:38:3b:b6: 8e:2f:26:1e:30:85:91:73:40:7c:61:8c:eb:33:29:dd:e2:2e: 9f:2a:8f:5a:f5:be:df:06:e3:c2:6a:e0:bb:6f:fd:ce:ef:4a: 73:26:b9:6d:65:dd:c1:47:4b:43:13:77:72:8e:c5:43:40:91: 47:a6:79:9b:7d:59:d2:ed:a6:f7:fe:f5:a5:cb:fc:de:8c:8a: 5c:15:7a:1f:4a:77:2e:2c:69:ec:97:b3:12:42:52:c3:b1:42: fc:7e:b0:7c:d0:9e:31:ac:ac:cc:24:41:b9:d1:1a:3c:c9:5e: ff:01:0a:ed:30:e9:1a:07:d9:de:14:01:37:3b:7d:50:79:41: 93:71:c2:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGM3jWx86q1SYuTUIWlYp3wiZHfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUy ODJEMTRCMDAeFw0yNDA0MjQwMDA1NTRaFw0yNDA0MjcwMTUzNTRaMDMxMTAvBgNV BAMTKEY1MTRCMDRGMzgwRjlGNzEzNDREQzY3QkQ2NTgzNjA3NUU3NDNCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6AMCdfKGGLa0AFoCv1hyIO3JT HHy88zGtzu7Op8xPjDTzRcrqS1SYbMS2ud8+ZLR6YoC2gq+KeBHhPYJiIKsfGH+S jzNUcTja8b5mzVEW0GODjOGBtuL/r/g4c5ehKGZBex0phpAuZ/RDJiH1zMq6m75p dnqzBKhvdTvTlkpquZiOkAM2RZq112Y1mLeqUF27O9Kpe41z2neFux3dtwCTnJnw TxHuW9pp/5923jNVrchB1N+tKCsI5kroMnlv3pwnQI+bTKA9woipsogCJgiNpy/k 0BhmXVI3SSJ+xClVF5TotwefBV15rxSadN1jk5pW64DTPkzs39CeOF0TCQtRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9RSwTzgPn3E0TcZ71lg2B150O8kwHwYDVR0j BBgwFoAUtl0UYKz8jZEYM4HcZOUtLigtFLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjZjZjI4ZC1mZmM3LTQzNTEtYThjYi0yNWQxOWZjNDMxNzcvMC9CNjVEMTQ2MEFD RkM4RDkxMTgzMzgxREM2NEU1MkQyRTI4MkQxNEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJEMkUyODJE MTRCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2Y2YyOGQtZmZjNy00MzUxLWE4 Y2ItMjVkMTlmYzQzMTc3LzAvQjY1RDE0NjBBQ0ZDOEQ5MTE4MzM4MURDNjRFNTJE MkUyODJEMTRCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIf2ZFiU9pQTcimEtERyhe/6u74DabWy6hj M2AkrGS/z9QSykTGHOHJWNkqNjdJhV5vwj87hs3NO0H16vT7I07B6NAbKHWfjkQX +nYkSggSC053SwyV+9E7aOGYlOXMIn0uIv8qnRhFQDIIQSbpFPFrPSiEb4oV5Yhd Fjg7to4vJh4whZFzQHxhjOszKd3iLp8qj1r1vt8G48Jq4Ltv/c7vSnMmuW1l3cFH S0MTd3KOxUNAkUemeZt9WdLtpvf+9aXL/N6MilwVeh9Kdy4saeyXsxJCUsOxQvx+ sHzQnjGsrMwkQbnRGjzJXv8BCu0w6RoH2d4UATc7fVB5QZNxwgM= -----END CERTIFICATE-----Generated at Wed Apr 24 01:53:49 2024 by rpki-client on console-ams.rpki-client.org