$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: N2HXuLA8bbJOwDP2pzgOIrm4zxNDEKmAoLeXRLBGkPE= Subject key identifier: 8F:35:13:B0:D8:7E:DC:F4:83:CC:04:49:53:07:3A:CF:85:48:AC:95 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 48876BB01695357B1250D772255CBB525AB7E83D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 0429 Signing time: Wed 01 May 2024 20:51:12 +0000 Manifest this update: Wed 01 May 2024 20:46:12 +0000 Manifest next update: Sun 05 May 2024 06:05:12 +0000 Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: iW9uYrNS6gR80FVfgn06PqKITi+LJGQRrUvhKT51sJQ=) 2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: 19WOcihX3sBNnM0JwVJESitKVCq7qP0/vD2sxBm+0IY=) 3: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: ZBiZQvQxGFhJZf5Iow2pdI7MnrpoWd8xvIw74Catv/c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:87:6b:b0:16:95:35:7b:12:50:d7:72:25:5c:bb:52:5a:b7:e8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: May 1 20:46:12 2024 GMT Not After : May 5 06:05:12 2024 GMT Subject: CN=8F3513B0D87EDCF483CC044953073ACF8548AC95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d5:73:c6:06:14:70:92:f6:b6:04:f6:d5:7b: 42:21:b4:a0:de:be:b1:15:bd:85:5c:7c:82:b4:8b: 15:c9:b9:36:e7:97:ac:0e:40:16:c5:ca:94:dc:83: 8a:f2:da:f9:8c:4c:e2:5f:79:c9:56:09:82:ee:3e: ae:51:43:e3:b6:35:fc:23:b9:75:d6:51:02:35:01: 68:fa:e0:f4:dd:6d:b4:51:27:c7:c9:d7:e7:f1:c2: 70:30:1f:5a:b1:51:2d:27:64:40:4f:00:ab:c0:46: d3:d0:9d:c4:1c:0a:b9:1f:aa:ea:23:05:62:3a:dc: 90:52:ef:3c:c3:a3:b6:06:93:a2:e2:fd:e6:1f:5a: fe:3b:06:5d:f1:69:6f:99:8e:e3:f5:a8:96:60:4a: 53:ca:51:6d:4c:9b:6d:25:bb:4d:e2:e8:38:18:69: 1f:7b:e1:50:30:0b:7e:0b:30:40:29:79:f6:04:3f: 45:bc:a7:5c:a6:f5:a3:7b:b6:99:25:79:ff:ac:15: ae:c6:42:58:b6:f5:75:53:4d:c0:2e:ae:47:5d:24: b2:93:61:0f:93:ad:44:a3:fb:c6:ab:d9:31:31:43: a5:ae:c0:19:e4:c9:2c:7a:01:fe:d2:41:90:c3:19: 1d:c4:22:c9:56:42:3f:a9:29:d8:d9:70:05:3c:75: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:35:13:B0:D8:7E:DC:F4:83:CC:04:49:53:07:3A:CF:85:48:AC:95 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b3:ab:b1:d3:31:43:dc:d4:cc:7d:2e:0d:a8:d5:95:dd:ea: 23:d2:8a:2b:d1:81:5b:72:c5:0a:a9:57:c7:48:da:88:0a:48: 83:b8:9f:53:be:b3:57:b2:e4:f5:8e:21:2b:d3:ba:f0:a4:fc: 2a:f6:df:21:a0:20:26:4c:56:85:84:4e:68:99:2b:42:61:c3: 0e:da:e3:0d:8d:85:c6:0f:56:90:ad:1e:4c:12:27:30:f4:0a: 9e:3f:4b:41:5a:bb:c3:4c:de:c8:ee:cd:45:47:3f:89:37:30: 47:c9:58:6d:3e:dd:10:34:93:5e:da:38:c0:b1:d9:d5:04:50: c2:c9:70:c3:a3:ee:34:c8:f1:7a:53:03:2d:58:6a:5e:25:9f: c1:26:d7:f3:03:32:03:81:eb:c2:0e:0a:82:d0:69:3b:a4:85: d3:f1:39:10:63:13:d3:08:91:e0:26:5d:13:45:a2:5e:04:47: bb:65:81:b0:ae:30:a8:30:c2:ac:fe:a3:31:72:a6:b7:01:66: e4:b7:5c:6e:19:f2:a4:8a:d2:7b:74:ef:05:90:12:9d:4b:5e: 3e:32:38:9a:1e:f9:33:9e:2b:d4:38:30:c5:9a:3c:f6:9b:7e: 16:70:1c:a2:ae:09:cb:64:e9:64:b1:00:53:f5:c7:df:f6:b4: b4:71:19:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIdrsBaVNXsSUNdyJVy7Ulq36D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNDA1MDEyMDQ2MTJaFw0yNDA1MDUwNjA1MTJaMDMxMTAvBgNV BAMTKDhGMzUxM0IwRDg3RURDRjQ4M0NDMDQ0OTUzMDczQUNGODU0OEFDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD41XPGBhRwkva2BPbVe0IhtKDe vrEVvYVcfIK0ixXJuTbnl6wOQBbFypTcg4ry2vmMTOJfeclWCYLuPq5RQ+O2Nfwj uXXWUQI1AWj64PTdbbRRJ8fJ1+fxwnAwH1qxUS0nZEBPAKvARtPQncQcCrkfquoj BWI63JBS7zzDo7YGk6Li/eYfWv47Bl3xaW+ZjuP1qJZgSlPKUW1Mm20lu03i6DgY aR974VAwC34LMEApefYEP0W8p1ym9aN7tpklef+sFa7GQli29XVTTcAurkddJLKT YQ+TrUSj+8ar2TExQ6WuwBnkySx6Af7SQZDDGR3EIslWQj+pKdjZcAU8dXSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjzUTsNh+3PSDzARJUwc6z4VIrJUwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2zq7HTMUPc1Mx9Lg2o1ZXd6iPSiivRgVty xQqpV8dI2ogKSIO4n1O+s1ey5PWOISvTuvCk/Cr23yGgICZMVoWETmiZK0Jhww7a 4w2NhcYPVpCtHkwSJzD0Cp4/S0Fau8NM3sjuzUVHP4k3MEfJWG0+3RA0k17aOMCx 2dUEUMLJcMOj7jTI8XpTAy1Yal4ln8Em1/MDMgOB68IOCoLQaTukhdPxORBjE9MI keAmXRNFol4ER7tlgbCuMKgwwqz+ozFyprcBZuS3XG4Z8qSK0nt07wWQEp1LXj4y OJoe+TOeK9Q4MMWaPPabfhZwHKKuCctk6WSxAFP1x9/2tLRxGY8= -----END CERTIFICATE-----Generated at Wed May 1 22:05:25 2024 by rpki-client on console-fra.rpki-client.org