$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json) Hash identifier: Qmmsby6fXSD6Ej9R70WoFlG8AZOo2UwH7Y0oayDSITo= Subject key identifier: 5A:2C:97:1E:58:7E:FD:1E:E3:8E:05:36:EF:DF:31:54:60:B0:87:24 Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 3F44A928D83A3C32CDA31A3B8E344B3655BD1E90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft Manifest number: 0423 Signing time: Mon 29 Apr 2024 02:01:03 +0000 Manifest this update: Mon 29 Apr 2024 01:56:03 +0000 Manifest next update: Thu 02 May 2024 07:58:03 +0000 Files and hashes: 1: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: fIKhjOc7nIxRFzvElWVzFhYmeCVRm99iJWGS3kfQnkE=) 2: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: 3J2qLK+LYy3SzdHJ7Spp0gzbCHY+ctygtc+I9oEzhYs=) 3: 3130332e3139382e3132322e302f32342d3234203d3e203436303535.roa (hash: G1S1JsvxyJY1UPJJCn8837WGZKTjh/TSzbDECwItr9I=) 4: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: F7dPR+DTiYf/vFIYLFjsIyXUYzfzEJmvx/fKwNnoydI=) 5: 3130332e3139382e3132302e302f32342d3234203d3e203436303535.roa (hash: mymeq3EomE6XIJ+uJzNpuLlFTK3ROB2F1p/8K6InmCo=) 6: 3230322e35322e34382e302f32342d3234203d3e203436303535.roa (hash: aHoEwvcI7fJ8v6s7qpw9CYrcpxOeVqGK3uNeXVir63o=) 7: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: UBD4YSX2GrKOcis2ffdiBkbZonrDnfLgQDUAL7583H4=) 8: 3130332e3139382e3132332e302f32342d3234203d3e203436303535.roa (hash: +GUpqStmXvft/9tc5yEANBi0o2R0VfdV+S7r/yPGbpA=) 9: 3130332e3139382e3132312e302f32342d3234203d3e203436303535.roa (hash: VAABL+bWNuIvfIzWSTYq36H1x4+F6FBJMYx2zdWrslk=) 10: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: L6RC9ldytX+ERqfEdKcW6bNYxt3CytK6uSaNPmMefjQ=) 11: 3230322e35322e34392e302f32342d3234203d3e203436303535.roa (hash: BRAsMxjvKV46QsUgC4ckF8DvpBGLC/oIhLDJczmM96U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 May 2024 07:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:44:a9:28:d8:3a:3c:32:cd:a3:1a:3b:8e:34:4b:36:55:bd:1e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Apr 29 01:56:03 2024 GMT Not After : May 2 07:58:03 2024 GMT Subject: CN=5A2C971E587EFD1EE38E0536EFDF315460B08724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:9f:37:43:79:63:62:ce:8f:14:61:3f:a2: 2b:31:c5:a5:a0:ac:88:d4:a7:a9:19:a8:cd:b4:fb: 19:3f:1a:a4:46:e7:7c:cc:fa:44:61:a9:34:35:49: 70:07:bc:09:c5:06:62:ea:03:ef:47:30:11:dd:af: 63:8e:02:73:a4:1d:15:88:28:3c:8f:cb:e9:1d:e1: 47:d2:58:1b:7f:1b:cf:bc:6a:8e:d2:9f:4d:99:63: 00:5d:e7:c5:f1:d7:3c:2b:f2:d8:21:28:b9:88:63: 0d:95:49:ba:d8:20:df:de:1d:97:09:6a:a9:59:9c: c7:71:62:d7:89:bd:59:52:f6:4e:b7:9a:c5:99:b1: 8b:99:71:6d:42:28:79:a7:96:2b:ad:c2:b3:fa:7d: 23:de:94:81:60:10:8c:71:f6:a2:31:bf:e2:10:87: 94:d2:55:5c:bc:86:89:a4:b9:5b:06:a8:2d:84:21: 1e:97:23:bc:23:e2:e3:80:f5:ae:e3:78:f2:52:64: 39:8f:e9:0d:f1:14:33:f7:1b:cd:e4:e1:a3:27:47: 4c:d3:5b:76:a2:3a:48:8e:c4:50:f2:f9:2b:f1:bc: d2:5d:e0:98:1b:42:c2:33:55:60:e5:59:e2:5e:43: a2:68:f4:ae:ef:9a:41:bd:c1:49:c1:24:40:6f:45: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2C:97:1E:58:7E:FD:1E:E3:8E:05:36:EF:DF:31:54:60:B0:87:24 X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b3:1a:03:72:0b:e3:93:86:6f:f4:38:7b:de:20:0a:79:79: 66:90:7c:8f:b6:ee:cc:ee:5e:fd:49:61:1a:70:bd:8f:ab:f4: 87:08:57:48:f5:32:1d:61:ab:a8:7a:dd:89:07:b6:b0:ff:c2: 2b:2c:95:86:81:d5:b9:16:ca:ae:4b:04:75:22:05:b4:4b:ce: 02:f7:be:b8:5c:38:87:51:41:fc:de:2c:fd:15:54:77:42:f6: 62:9f:1c:e8:e1:cb:d1:fe:80:72:4f:22:fd:82:bc:e3:b6:5b: 13:b8:a7:8c:97:85:7c:a5:9d:d1:1e:8a:36:89:de:33:53:84: af:7e:bf:a6:d4:90:fd:2d:db:87:94:0f:35:f5:62:f6:32:fa: 4b:85:14:96:a1:92:17:aa:e4:a6:fe:36:fe:0f:83:72:fc:f7: 98:33:d0:4d:55:72:dc:15:a0:89:cc:98:41:28:57:67:e2:c8: c4:59:f3:e1:97:f6:39:de:f0:a3:ac:87:46:69:af:c7:1b:5a: 92:1b:1f:cd:c8:61:9a:03:b2:41:56:9e:8f:5a:52:c3:90:cb: c8:a7:31:e2:1d:4f:75:e6:36:89:18:39:89:4e:58:ed:6a:84: 7e:fb:45:9a:e9:84:f0:dd:0e:5b:6b:9e:ce:3c:66:b3:fa:4b: 64:b1:0c:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0SpKNg6PDLNoxo7jjRLNlW9HpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNDA0MjkwMTU2MDNaFw0yNDA1MDIwNzU4MDNaMDMxMTAvBgNV BAMTKDVBMkM5NzFFNTg3RUZEMUVFMzhFMDUzNkVGREYzMTU0NjBCMDg3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Rp83Q3ljYs6PFGE/oisxxaWg rIjUp6kZqM20+xk/GqRG53zM+kRhqTQ1SXAHvAnFBmLqA+9HMBHdr2OOAnOkHRWI KDyPy+kd4UfSWBt/G8+8ao7Sn02ZYwBd58Xx1zwr8tghKLmIYw2VSbrYIN/eHZcJ aqlZnMdxYteJvVlS9k63msWZsYuZcW1CKHmnliutwrP6fSPelIFgEIxx9qIxv+IQ h5TSVVy8homkuVsGqC2EIR6XI7wj4uOA9a7jePJSZDmP6Q3xFDP3G83k4aMnR0zT W3aiOkiOxFDy+SvxvNJd4JgbQsIzVWDlWeJeQ6Jo9K7vmkG9wUnBJEBvRS0HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWiyXHlh+/R7jjgU2798xVGCwhyQwHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBD QkMxM0ZGREE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqzGgNyC+OThm/0OHveIAp5eWaQfI+27szu Xv1JYRpwvY+r9IcIV0j1Mh1hq6h63YkHtrD/wisslYaB1bkWyq5LBHUiBbRLzgL3 vrhcOIdRQfzeLP0VVHdC9mKfHOjhy9H+gHJPIv2CvOO2WxO4p4yXhXylndEeijaJ 3jNThK9+v6bUkP0t24eUDzX1YvYy+kuFFJahkheq5Kb+Nv4Pg3L895gz0E1VctwV oInMmEEoV2fiyMRZ8+GX9jne8KOsh0Zpr8cbWpIbH83IYZoDskFWno9aUsOQy8in MeIdT3XmNokYOYlOWO1qhH77RZrphPDdDltrns48ZrP6S2SxDPc= -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:28 2024 by rpki-client on console-ams.rpki-client.org