$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json) Hash identifier: ueW4WkDeiVghdtlWC971giXIERc1bnqvjuvQnI1YRoE= Subject key identifier: 47:BE:B2:8C:64:4D:3A:E6:5D:6E:F7:AD:7B:22:BD:61:F9:A5:DD:FA Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Certificate serial: 7FE1A22278C0326D91F411C36B84E01D25E75491 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft Manifest number: 0428 Signing time: Tue 30 Apr 2024 08:40:38 +0000 Manifest this update: Tue 30 Apr 2024 08:35:38 +0000 Manifest next update: Fri 03 May 2024 16:31:38 +0000 Files and hashes: 1: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: D4gd73HTsnEJmUXZt3DC5cVnIyTdNV/OhBSiMa2eZX4=) 2: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: Kvls3LZDq6ew59sjRAkuhKZ0rt/sP0DdTvBdoCI6jj4=) 3: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: +VIuPXPbboQgEVKrSmy1AQ+vukpOsBYrD/zgFtwgumc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e1:a2:22:78:c0:32:6d:91:f4:11:c3:6b:84:e0:1d:25:e7:54:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Validity Not Before: Apr 30 08:35:38 2024 GMT Not After : May 3 16:31:38 2024 GMT Subject: CN=47BEB28C644D3AE65D6EF7AD7B22BD61F9A5DDFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:31:da:69:1d:67:b4:79:1e:5c:da:44:de: 81:fa:6c:5c:0d:22:74:c8:4d:7e:c2:ba:e5:35:7b: 2b:45:a6:72:30:e6:05:a1:7a:c7:9f:24:6b:47:15: a4:8c:fc:80:5b:0f:66:01:07:5f:23:3e:6e:8b:c4: 8d:39:39:85:ea:2b:bd:d8:1e:e4:28:7d:a1:3b:71: 08:96:dd:87:6e:cc:9e:a6:c0:1b:e5:0d:17:4b:38: 17:73:8e:9a:04:a2:ca:05:bc:9f:5b:1c:45:8d:43: c1:25:d7:87:b9:c4:72:f2:f8:4b:9a:63:f0:fc:a8: 36:09:05:c3:1b:e1:19:93:7f:55:98:cb:7d:46:e0: bb:cc:90:c1:d9:be:ff:b0:bd:ff:06:fa:44:39:8e: 1f:54:37:89:c8:39:02:4b:8d:89:98:fd:b5:cd:7c: c3:6b:5d:55:d8:25:ff:f7:be:3e:15:d4:26:86:00: 89:0c:38:01:8e:cc:af:5f:7f:cf:32:73:91:4b:96: 51:2f:ca:04:a4:9f:fb:20:76:6c:1b:f4:34:88:6a: 1b:e3:07:62:2e:c9:d3:14:37:76:67:83:0a:dd:ce: 63:81:22:c0:d4:3a:db:a3:38:94:a9:63:2c:99:c8: d6:9f:d2:a4:8f:cf:19:70:c3:6b:e5:d8:af:70:39: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BE:B2:8C:64:4D:3A:E6:5D:6E:F7:AD:7B:22:BD:61:F9:A5:DD:FA X509v3 Authority Key Identifier: keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:52:69:ae:8b:7b:24:8f:8d:df:26:99:04:a8:b7:b2:5c:42: 7e:10:f0:05:c5:22:6c:3c:dd:65:1d:f0:86:22:c1:65:7b:5c: 5e:40:60:06:d0:1c:48:79:3b:8c:ac:13:2c:36:04:f8:4b:7a: f0:8f:6c:6c:9e:4e:3d:b6:0a:ae:74:0b:a0:92:97:fe:ca:4b: c6:5e:8d:03:9e:3a:db:49:28:4f:7e:57:a9:89:3b:44:06:4b: 1d:97:28:8e:26:b1:ea:c4:57:c3:b2:43:61:dd:06:3e:0a:fd: db:5e:a8:e7:ef:39:f5:4b:f6:9d:24:bd:9e:7e:a7:80:50:86: c9:ac:65:86:db:20:67:d5:d9:3e:93:1b:2a:a8:4e:03:cf:2b: 16:ae:d3:f8:5e:67:e8:27:b6:3e:97:f5:b8:2b:c2:4b:15:2f: 2b:2a:e6:ef:ee:b2:0f:a4:20:ff:f9:25:f4:93:4b:25:d9:61: 59:56:82:da:b8:c2:47:51:6b:cc:1f:10:7a:e5:a3:9d:c0:14: e6:03:07:2f:b0:a3:c5:b8:21:28:92:f6:cd:6e:e4:3b:fa:b4: 60:dc:5a:f4:cc:20:8d:a2:59:8c:8f:cb:ea:5b:c3:e3:97:33: ff:89:90:6e:f4:8f:be:f9:b0:99:36:c7:6b:63:57:8b:da:c8: b6:f7:1b:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+GiInjAMm2R9BHDa4TgHSXnVJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2 QUI1Njk1RTAeFw0yNDA0MzAwODM1MzhaFw0yNDA1MDMxNjMxMzhaMDMxMTAvBgNV BAMTKDQ3QkVCMjhDNjQ0RDNBRTY1RDZFRjdBRDdCMjJCRDYxRjlBNURERkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2DHaaR1ntHkeXNpE3oH6bFwN InTITX7CuuU1eytFpnIw5gWhesefJGtHFaSM/IBbD2YBB18jPm6LxI05OYXqK73Y HuQofaE7cQiW3YduzJ6mwBvlDRdLOBdzjpoEosoFvJ9bHEWNQ8El14e5xHLy+Eua Y/D8qDYJBcMb4RmTf1WYy31G4LvMkMHZvv+wvf8G+kQ5jh9UN4nIOQJLjYmY/bXN fMNrXVXYJf/3vj4V1CaGAIkMOAGOzK9ff88yc5FLllEvygSkn/sgdmwb9DSIahvj B2IuydMUN3ZngwrdzmOBIsDUOtujOJSpYyyZyNaf0qSPzxlww2vl2K9wOYK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR76yjGRNOuZdbveteyK9Yfml3fowHwYDVR0j BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1 Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtSaa6LeySPjd8mmQSot7JcQn4Q8AXFImw8 3WUd8IYiwWV7XF5AYAbQHEh5O4ysEyw2BPhLevCPbGyeTj22Cq50C6CSl/7KS8Ze jQOeOttJKE9+V6mJO0QGSx2XKI4mserEV8OyQ2HdBj4K/dteqOfvOfVL9p0kvZ5+ p4BQhsmsZYbbIGfV2T6TGyqoTgPPKxau0/heZ+gntj6X9bgrwksVLysq5u/usg+k IP/5JfSTSyXZYVlWgtq4wkdRa8wfEHrlo53AFOYDBy+wo8W4ISiS9s1u5Dv6tGDc WvTMII2iWYyPy+pbw+OXM/+JkG70j775sJk2x2tjV4vayLb3G8s= -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:29 2024 by rpki-client on console-ams.rpki-client.org