$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: pvHUP99MwH7xhAvXYvQKFfSLyzHL6iKwlaa89cJF7kk= Subject key identifier: 6D:8D:86:BD:C4:08:60:8E:1D:D5:05:E5:8C:D5:B4:00:DD:FA:F6:FA Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 78BB161EE24586AEB6C1A7029291BCE6B3B9000D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 0127 Signing time: Tue 07 May 2024 12:01:17 +0000 Manifest this update: Tue 07 May 2024 11:56:17 +0000 Manifest next update: Fri 10 May 2024 21:08:17 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: 1CSMeWeL+zzXJpKbc4BVR+pUmHTDukFDo3UOn0YW608=) 2: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: 4jCkvbqsluG1aMg2+wp6wKbNzdihDUp4HvS+K19Jo9U=) 3: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: Ucu78C+TEeYtpR7+G9HWVnV74rEuzttrHT4hmUvFdJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 13:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:bb:16:1e:e2:45:86:ae:b6:c1:a7:02:92:91:bc:e6:b3:b9:00:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: May 7 11:56:17 2024 GMT Not After : May 10 21:08:17 2024 GMT Subject: CN=6D8D86BDC408608E1DD505E58CD5B400DDFAF6FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:63:a3:98:66:e7:64:46:c0:71:2b:e6:4b: c1:44:81:ae:e7:13:40:aa:d0:78:95:43:53:59:0a: 23:31:85:f4:ad:99:b6:0f:98:0a:2d:77:e6:9b:c6: ec:86:c3:54:3f:17:be:db:c2:80:6e:e5:3e:40:c3: 91:e7:31:39:1f:b3:68:76:26:c5:34:be:be:94:f5: 70:de:a5:22:41:8c:df:d5:ea:88:be:56:a1:5c:8f: fb:25:ae:71:4c:45:4a:c2:07:6e:55:1b:9a:9f:cf: 51:af:88:c2:c9:aa:c6:07:b5:5c:b1:a2:7f:25:72: f8:0f:0c:98:4e:64:3f:a1:23:5b:52:a4:6c:09:03: a3:7e:ff:31:d4:b5:a4:46:26:65:4e:03:79:0c:82: e8:95:fc:fa:b3:77:45:92:bb:d2:5a:35:34:a9:19: 0a:5e:72:99:1c:46:a5:39:6e:6a:1f:e4:0a:32:fb: 82:80:27:50:64:e9:a1:32:e3:b0:2d:00:37:4e:d8: 01:ae:00:58:70:bc:af:51:f1:81:34:24:48:ed:ce: ad:36:3f:9a:ef:36:3d:ec:aa:cf:35:08:8e:aa:4e: f0:9b:09:2a:04:e4:9e:77:5a:2b:7e:9c:1f:0d:91: 56:84:45:7f:c5:ca:6c:2a:3d:3f:1a:cc:f9:95:a0: b2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8D:86:BD:C4:08:60:8E:1D:D5:05:E5:8C:D5:B4:00:DD:FA:F6:FA X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:64:15:77:d7:b9:8f:c0:d3:8f:c1:8f:fd:8e:39:8d:a1:ed: f4:93:c2:45:e1:51:5c:75:78:d6:bc:55:31:cd:eb:24:a7:60: 86:7c:68:67:64:08:a2:98:7d:db:db:5b:88:b1:40:4d:41:6d: de:39:63:aa:07:32:fb:90:ce:7f:56:b4:a5:ca:a1:c9:79:01: be:74:51:58:99:98:79:25:3b:f1:9a:d6:16:83:b8:33:d5:e5: f9:18:34:e7:20:8a:f7:64:2f:48:c2:3a:36:19:6c:15:f9:58: 97:11:a4:85:65:b2:33:8b:58:26:93:4b:fe:f9:17:36:da:02: 79:86:46:44:fd:8c:9c:aa:b5:8b:9b:77:af:73:ad:27:75:7c: 1f:7b:37:8f:3a:5f:70:eb:59:aa:a2:24:b2:fb:bb:dd:0d:34: b9:1d:07:c1:3a:a7:2e:c9:ed:1d:a1:9e:95:7a:23:59:20:42: 80:57:b1:c5:cd:5d:da:8b:85:58:ba:c0:60:9a:72:bc:50:5f: 48:4e:31:42:87:46:90:1b:de:28:f8:36:8d:eb:52:51:52:4a: 1c:4c:58:3b:25:7f:ff:16:34:1a:04:e8:65:2f:c4:db:38:24: df:cd:d5:56:da:13:03:92:d4:d1:ac:71:78:a1:b9:f9:5f:8e: 76:3e:7f:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLsWHuJFhq62wacCkpG85rO5AA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNDA1MDcxMTU2MTdaFw0yNDA1MTAyMTA4MTdaMDMxMTAvBgNV BAMTKDZEOEQ4NkJEQzQwODYwOEUxREQ1MDVFNThDRDVCNDAwRERGQUY2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC072OjmGbnZEbAcSvmS8FEga7n E0Cq0HiVQ1NZCiMxhfStmbYPmAotd+abxuyGw1Q/F77bwoBu5T5Aw5HnMTkfs2h2 JsU0vr6U9XDepSJBjN/V6oi+VqFcj/slrnFMRUrCB25VG5qfz1GviMLJqsYHtVyx on8lcvgPDJhOZD+hI1tSpGwJA6N+/zHUtaRGJmVOA3kMguiV/Pqzd0WSu9JaNTSp GQpecpkcRqU5bmof5Aoy+4KAJ1Bk6aEy47AtADdO2AGuAFhwvK9R8YE0JEjtzq02 P5rvNj3sqs81CI6qTvCbCSoE5J53Wit+nB8NkVaERX/FymwqPT8azPmVoLKLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbY2GvcQIYI4d1QXljNW0AN369vowHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhkFXfXuY/A04/Bj/2OOY2h7fSTwkXhUVx1 eNa8VTHN6ySnYIZ8aGdkCKKYfdvbW4ixQE1Bbd45Y6oHMvuQzn9WtKXKocl5Ab50 UViZmHklO/Ga1haDuDPV5fkYNOcgivdkL0jCOjYZbBX5WJcRpIVlsjOLWCaTS/75 FzbaAnmGRkT9jJyqtYubd69zrSd1fB97N486X3DrWaqiJLL7u90NNLkdB8E6py7J 7R2hnpV6I1kgQoBXscXNXdqLhVi6wGCacrxQX0hOMUKHRpAb3ij4No3rUlFSShxM WDslf/8WNBoE6GUvxNs4JN/N1VbaEwOS1NGscXihuflfjnY+f3Y= -----END CERTIFICATE-----Generated at Tue May 7 15:12:12 2024 by rpki-client on console-fra.rpki-client.org