$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: ysGoQ6Yjh1OZXb11ypxZlEwBMx3k91m3QDXJj1grv0M= Subject key identifier: 5B:D9:8C:9F:9F:22:2D:4D:F2:5F:10:5D:88:A3:F7:D6:77:24:77:CF Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 54FCF430AEF39D9B0E14D9437AE5C4F7A5BB02B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 0428 Signing time: Thu 02 May 2024 04:01:24 +0000 Manifest this update: Thu 02 May 2024 03:56:24 +0000 Manifest next update: Sun 05 May 2024 08:10:24 +0000 Files and hashes: 1: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: BcemolyLy1YCqSD2iOG9UetMb8M2PgjvGSFOpbWPsQU=) 2: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: PPgatbzw+ItpjlCllyl7m5G+ltQY1uWHf4RpZ2YB6us=) 3: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: y/6TgHyR65B7kj2F6xnEeuXuZI3rC/j++OCGRd8Jy+I=) 4: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: d8XIMv2D7e4PA9ooQLphJ1NdcvJsFAwep1Ut37i7qZo=) 5: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: JzujwhEAHfg2owMMdyAtOQTZwcJXQY2aYJ0xEVnVUnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 08:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fc:f4:30:ae:f3:9d:9b:0e:14:d9:43:7a:e5:c4:f7:a5:bb:02:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: May 2 03:56:24 2024 GMT Not After : May 5 08:10:24 2024 GMT Subject: CN=5BD98C9F9F222D4DF25F105D88A3F7D6772477CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:42:6f:97:32:0a:c1:07:a9:d7:37:d8:94:c4: 29:c3:a2:f8:a9:4c:24:54:ad:2e:eb:d0:ec:d8:f0: ff:d0:2d:6c:cd:4b:ba:ca:3e:e4:ea:ff:94:ba:15: 95:a0:81:a8:63:04:28:61:ec:2e:17:dc:4b:88:ea: 2e:e1:06:2c:ea:02:90:4e:c9:a6:49:42:8e:59:e2: a7:56:f2:2a:43:a6:36:32:9a:e7:0a:e5:5d:7b:bf: 62:7d:25:3b:42:83:f7:b1:45:8b:e3:7a:7b:84:7f: eb:f3:d9:1a:17:26:b4:98:60:4b:1d:98:21:2e:ff: 75:6b:f8:0a:9d:25:18:3f:4f:b1:24:66:12:cb:37: 26:fe:4b:8e:e7:18:e4:c6:c1:96:cd:aa:86:69:d3: e1:5f:06:24:1b:6a:8b:dd:a5:79:05:42:c1:83:b1: 32:81:9a:ad:0f:f1:0a:1b:6d:30:5b:2c:41:77:48: df:b0:f7:c7:4f:1e:d4:ca:3b:38:85:b8:56:e1:c2: 05:69:ee:a2:d5:17:07:19:de:3b:97:49:81:97:c6: 4a:ee:68:e5:60:fa:6d:0a:2c:15:85:63:0c:1e:54: ad:95:a8:d6:31:94:86:1a:b6:14:54:6d:c7:d7:e9: f4:bf:80:fc:7f:f6:6f:b2:88:73:03:2b:2f:bd:f7: 23:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D9:8C:9F:9F:22:2D:4D:F2:5F:10:5D:88:A3:F7:D6:77:24:77:CF X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:23:23:87:d7:80:d7:fe:b2:20:eb:80:3e:86:90:4d:0f:c0: 1e:1e:8e:28:3b:72:ae:01:59:94:d7:70:1e:45:91:de:d0:a6: 1c:01:de:78:df:5e:d9:d4:92:42:e0:1f:ed:cc:e8:5f:26:a3: fc:eb:0f:7c:8c:44:68:3d:e8:fb:2c:07:f2:8a:d5:66:9f:78: 7a:57:da:2b:19:5e:cc:af:56:5f:2a:2e:f3:62:c8:c3:dc:d5: 5e:7b:16:dc:de:5e:08:fe:24:5f:8f:30:83:3a:4a:88:36:7a: f9:e1:15:2e:dd:df:d5:81:e6:12:67:d1:e3:94:19:03:36:e2: 08:a7:d9:f8:4d:fc:0e:6a:9d:c6:5c:25:2c:9b:c4:11:5a:5c: 11:d9:68:7f:70:5b:5c:bf:bd:01:59:0f:8e:a5:48:f1:05:df: 26:93:4b:fc:73:f8:e8:30:69:40:fc:6c:81:e0:f8:70:dd:90: 2c:2b:b8:3a:b8:98:ec:69:90:e4:ee:37:fc:e7:7f:1e:3a:37: e3:fa:a3:30:ec:7f:b7:f4:db:72:7f:59:eb:e9:72:0c:dd:54: 69:4f:92:33:e0:94:97:4c:b8:70:4f:b9:52:94:85:62:89:ee: 27:df:24:be:71:78:79:a9:77:ea:bb:f8:73:4b:dd:16:cc:e4: 42:33:e7:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPz0MK7znZsOFNlDeuXE96W7ArkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNDA1MDIwMzU2MjRaFw0yNDA1MDUwODEwMjRaMDMxMTAvBgNV BAMTKDVCRDk4QzlGOUYyMjJENERGMjVGMTA1RDg4QTNGN0Q2NzcyNDc3Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtQm+XMgrBB6nXN9iUxCnDovip TCRUrS7r0OzY8P/QLWzNS7rKPuTq/5S6FZWggahjBChh7C4X3EuI6i7hBizqApBO yaZJQo5Z4qdW8ipDpjYymucK5V17v2J9JTtCg/exRYvjenuEf+vz2RoXJrSYYEsd mCEu/3Vr+AqdJRg/T7EkZhLLNyb+S47nGOTGwZbNqoZp0+FfBiQbaovdpXkFQsGD sTKBmq0P8QobbTBbLEF3SN+w98dPHtTKOziFuFbhwgVp7qLVFwcZ3juXSYGXxkru aOVg+m0KLBWFYwweVK2VqNYxlIYathRUbcfX6fS/gPx/9m+yiHMDKy+99yNrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9mMn58iLU3yXxBdiKP31nckd88wHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwjI4fXgNf+siDrgD6GkE0PwB4ejig7cq4B WZTXcB5Fkd7QphwB3njfXtnUkkLgH+3M6F8mo/zrD3yMRGg96PssB/KK1WafeHpX 2isZXsyvVl8qLvNiyMPc1V57FtzeXgj+JF+PMIM6Sog2evnhFS7d39WB5hJn0eOU GQM24gin2fhN/A5qncZcJSybxBFaXBHZaH9wW1y/vQFZD46lSPEF3yaTS/xz+Ogw aUD8bIHg+HDdkCwruDq4mOxpkOTuN/znfx46N+P6ozDsf7f023J/WevpcgzdVGlP kjPglJdMuHBPuVKUhWKJ7iffJL5xeHmpd+q7+HNL3RbM5EIz52o= -----END CERTIFICATE-----Generated at Thu May 2 05:09:50 2024 by rpki-client on console-ams.rpki-client.org