$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: 5BRh4jgHQagwVySDxwwoF5rBj+unu15ryTRki8g0j+Q= Subject key identifier: F0:D9:A0:09:2C:66:F9:D8:98:40:F6:86:7D:4C:BA:2A:F9:6A:24:80 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 62822370105CAEB1F7C245CF9C1AE24A80A00ABF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 03B2 Signing time: Fri 24 May 2024 22:30:45 +0000 Manifest this update: Fri 24 May 2024 22:25:45 +0000 Manifest next update: Tue 28 May 2024 07:18:45 +0000 Files and hashes: 1: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: GHqM+1o86HpKYplNJSwMEg9d0D3CR+A7pFqoZ47h4os=) 2: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: uQ/iiWtxQYDUG0IcnJMiNj9n9sU3K4xrTV6KscNrnZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 20:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:82:23:70:10:5c:ae:b1:f7:c2:45:cf:9c:1a:e2:4a:80:a0:0a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: May 24 22:25:45 2024 GMT Not After : May 28 07:18:45 2024 GMT Subject: CN=F0D9A0092C66F9D89840F6867D4CBA2AF96A2480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:60:f3:bc:df:9b:43:3f:d4:6c:5d:12:25: c4:22:fb:38:09:c2:18:8b:a6:08:e5:24:c9:a8:1c: 64:d0:6a:74:7c:14:1d:3c:40:27:70:5b:59:a2:44: d9:5e:01:85:d9:0e:84:32:22:ed:ab:d7:64:8f:cb: 4c:2e:e5:54:21:48:4c:28:cf:6d:dd:b9:95:bb:bf: 88:db:7d:1a:3c:78:7b:ca:ca:2d:8f:06:9b:a4:8d: 8c:a8:d0:3b:24:6c:9b:9b:ec:ae:6b:7b:08:c5:8f: 21:d6:6b:1e:8f:9f:50:78:44:f4:cc:92:78:9c:ae: a3:4e:96:14:52:29:27:ca:65:c2:3f:7a:6f:a9:55: d0:3c:29:f7:e9:b4:0b:f0:f0:48:4d:bc:68:ed:c6: bc:6c:1d:2f:db:12:35:34:d1:91:83:de:f1:fa:bd: 18:e3:2a:3c:31:e1:a4:87:5a:9f:69:24:5e:9e:d3: c1:9f:4e:25:bf:16:19:a0:2b:9e:5a:45:d2:aa:86: 67:da:f3:c7:d3:46:d1:3f:c5:2f:db:54:b0:c0:72: 87:64:bb:84:2f:0d:43:60:24:7c:4a:41:27:54:03: 39:c5:b7:bd:7e:6c:ab:f7:a8:fb:0f:d0:7b:9f:1d: 7b:e7:72:d2:d1:7d:76:e6:d6:24:95:27:54:a4:38: ed:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D9:A0:09:2C:66:F9:D8:98:40:F6:86:7D:4C:BA:2A:F9:6A:24:80 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:9e:d9:9a:5c:db:c3:8d:13:8a:00:2f:e4:92:d2:f3:30:dc: 50:cb:6a:64:f1:da:0b:06:a4:a8:23:01:7a:31:34:9d:ed:56: 0b:5f:9b:bf:b8:a6:9e:2f:32:d8:6f:48:cf:22:f6:3e:eb:61: dd:96:97:f3:b7:92:7f:26:48:49:7c:7c:8e:b1:a9:67:54:bd: 8a:19:fc:60:cf:bc:0a:50:e4:f9:a6:2a:09:a4:79:6d:b0:2e: 7d:98:38:4b:76:f7:44:9a:4a:66:fc:58:d0:d7:8c:6c:ab:3c: 37:07:b3:fc:4c:55:f8:f5:8e:34:23:b4:7f:ae:fb:8c:2e:5a: 57:04:5d:1c:d1:03:2b:e3:99:69:68:f1:c9:fb:a2:e2:be:a0: ad:2d:03:58:20:1b:a0:be:08:84:62:6d:4d:47:fc:29:4a:40: 1b:08:9e:35:60:cb:03:43:0c:f7:40:7a:9a:32:4a:7f:3f:c7: 27:f8:78:04:53:0e:52:4b:03:c5:e8:d3:4e:6f:cc:eb:4d:c3: fc:e2:84:fc:4f:e7:bc:4b:cc:2a:d5:8a:38:02:38:a7:fb:62: fe:25:44:31:47:14:5c:f0:7b:12:f8:d5:23:8b:bc:64:5d:44: cf:43:d3:ae:13:c6:72:0f:b1:de:8d:22:74:8c:d2:5c:52:bc: c1:ef:84:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYoIjcBBcrrH3wkXPnBriSoCgCr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNDA1MjQyMjI1NDVaFw0yNDA1MjgwNzE4NDVaMDMxMTAvBgNV BAMTKEYwRDlBMDA5MkM2NkY5RDg5ODQwRjY4NjdENENCQTJBRjk2QTI0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RWDzvN+bQz/UbF0SJcQi+zgJ whiLpgjlJMmoHGTQanR8FB08QCdwW1miRNleAYXZDoQyIu2r12SPy0wu5VQhSEwo z23duZW7v4jbfRo8eHvKyi2PBpukjYyo0DskbJub7K5rewjFjyHWax6Pn1B4RPTM knicrqNOlhRSKSfKZcI/em+pVdA8KffptAvw8EhNvGjtxrxsHS/bEjU00ZGD3vH6 vRjjKjwx4aSHWp9pJF6e08GfTiW/FhmgK55aRdKqhmfa88fTRtE/xS/bVLDAcodk u4QvDUNgJHxKQSdUAznFt71+bKv3qPsP0HufHXvnctLRfXbm1iSVJ1SkOO2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8NmgCSxm+diYQPaGfUy6KvlqJIAwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIae2Zpc28ONE4oAL+SS0vMw3FDLamTx2gsG pKgjAXoxNJ3tVgtfm7+4pp4vMthvSM8i9j7rYd2Wl/O3kn8mSEl8fI6xqWdUvYoZ /GDPvApQ5PmmKgmkeW2wLn2YOEt290SaSmb8WNDXjGyrPDcHs/xMVfj1jjQjtH+u +4wuWlcEXRzRAyvjmWlo8cn7ouK+oK0tA1ggG6C+CIRibU1H/ClKQBsInjVgywND DPdAepoySn8/xyf4eARTDlJLA8Xo005vzOtNw/zihPxP57xLzCrVijgCOKf7Yv4l RDFHFFzwexL41SOLvGRdRM9D064TxnIPsd6NInSM0lxSvMHvhNk= -----END CERTIFICATE-----Generated at Fri May 24 23:25:13 2024 by rpki-client on console-fra.rpki-client.org