$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft File: C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft (raw, json) Hash identifier: iSI7WS3lXN9m0WSMcd2fCA/fcw4hmP5gZ4zsfBE9TK8= Subject key identifier: 7E:23:94:AC:6E:1F:F7:39:33:69:6D:92:6E:22:A3:FB:41:E8:EA:E3 Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB Certificate issuer: /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Certificate serial: 64F06C372B24F860AE7CF9FB9B78791A1925BF2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft Manifest number: 043B Signing time: Mon 06 May 2024 17:30:58 +0000 Manifest this update: Mon 06 May 2024 17:25:58 +0000 Manifest next update: Thu 09 May 2024 22:28:58 +0000 Files and hashes: 1: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (hash: vmivmL6Nin4jXQJ+otHLEjg1k9YMDVxxJbWYijf39Eo=) 2: 3130332e3132332e39362e302f32322d3234203d3e20313338303734.roa (hash: bvnPtv7X2JPgovVDI2tQ7dpT4EYCHPzRUin+MYYnmqw=) 3: C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl (hash: aIOZtf3F5qVisQDqHVzDsv0QjsYYK2zQ7Mr/dyCeo+0=) 4: 3230322e34332e3235342e302f32342d3234203d3e20313338303734.roa (hash: XHwz7oHKAD+bVzb82LnhadWxzqWahrz7asG1+V+ECY8=) 5: 3230322e34332e3235322e302f32342d3234203d3e20313338303734.roa (hash: XFalZjv8g4D1W4AUa2Y8g1Gx2jFTKCjlevUUQqBaZ2w=) 6: 3230322e34332e3235352e302f32342d3234203d3e20313338303734.roa (hash: 3Ljvih8s5k4JRjf2dV5PRj3RzrrS3qrasuv8sChH6SI=) 7: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (hash: PbVOVfoFeweVzjvEY9pOnArl1Ztl77cws3RLnI/lI98=) 8: 323430333a396634303a3a2f33322d3438203d3e20313338303734.roa (hash: kPEhY2M30Jmr+C/3Gy7DjG8V4ydY2OT9meWcG2OoUTg=) 9: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (hash: zLaCzFYcJmhf/sRs6wM2j5wW1nPbYiK+KMTtcnEwVeA=) 10: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (hash: cjfM+KtJCyfXNJnMETBSpXrNjmJMV3jp0GwIXEW85Rk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f0:6c:37:2b:24:f8:60:ae:7c:f9:fb:9b:78:79:1a:19:25:bf:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Validity Not Before: May 6 17:25:58 2024 GMT Not After : May 9 22:28:58 2024 GMT Subject: CN=7E2394AC6E1FF73933696D926E22A3FB41E8EAE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:fb:78:29:fc:36:eb:5b:0b:d3:ee:32:47: bf:a2:f7:fc:71:79:b7:c8:2a:27:60:50:0d:c0:1f: 64:10:52:d2:8c:0f:1b:1b:70:19:d5:88:97:dd:d1: 01:77:e5:9a:4f:5e:40:c4:26:51:b5:24:b3:d4:b4: dd:9d:e2:af:14:f1:16:dc:05:97:a0:ea:f0:8f:f8: 69:d4:6f:c5:ec:15:88:d1:e5:0a:c6:72:08:f8:ff: c1:d5:49:c5:38:54:17:ff:6e:c7:e1:e9:6e:c9:5a: 48:56:f3:7f:91:cd:a1:61:64:77:eb:31:60:55:4d: bd:9e:d2:cc:18:12:40:7f:0c:51:31:2d:c9:4e:7e: 38:59:38:7e:0b:82:25:22:32:5d:8e:02:da:83:b9: 47:13:e3:57:0c:f5:14:8f:fb:67:7c:ed:50:5d:fd: e3:e4:97:ca:a7:d2:04:54:ba:96:2e:0b:fa:80:68: 11:20:2d:5c:1a:c5:ce:00:e7:66:c9:89:43:55:68: 68:a1:6d:31:cb:4f:31:e3:2f:d9:9d:a1:3f:05:5e: 7a:63:50:bd:93:46:be:ce:43:c4:6e:81:f1:9b:8c: 49:e0:a3:35:b6:59:5f:24:fe:91:84:3e:a0:02:49: f4:3d:b9:d1:a4:5c:4c:a5:c0:2f:8f:ff:3c:9f:f4: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:23:94:AC:6E:1F:F7:39:33:69:6D:92:6E:22:A3:FB:41:E8:EA:E3 X509v3 Authority Key Identifier: keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:8d:09:f3:aa:a1:c8:27:27:3b:d9:96:84:82:64:6e:f4:48: 99:06:64:a4:d5:68:08:cb:10:fd:f9:d4:2f:4b:a2:e6:bc:18: 6c:43:0c:e0:62:c4:b8:1a:11:4d:c9:45:5b:45:94:2a:57:28: 7d:d4:aa:2c:89:f4:9f:09:be:19:ee:32:64:8d:e2:ca:47:27: db:97:ea:69:a7:e6:80:a9:1d:4b:6d:6b:13:ae:8b:6a:d8:d4: c7:5f:dc:65:3a:a9:7f:44:14:bd:b4:84:7a:bc:8f:27:48:84: 8b:49:36:79:05:a8:fc:63:fb:58:88:81:fc:0e:ae:6d:5f:65: b2:83:a7:c1:71:62:c5:80:d8:32:5f:3c:91:af:4a:4a:b7:27: e8:35:fd:02:3e:0e:12:57:45:d9:40:82:be:48:7d:62:72:5f: 04:ad:70:91:22:45:ba:94:63:1a:d4:0f:47:ba:cf:43:10:42: 4f:57:96:36:0c:8b:9f:66:52:45:8f:12:a6:ec:9e:13:22:de: 78:e3:75:b9:4d:f6:08:a5:e3:42:8c:b1:f4:80:87:91:4e:87: 90:cd:ef:18:b1:a8:b4:67:af:75:da:fc:64:89:a5:51:c9:0e: bf:31:1b:d4:29:97:52:93:97:27:04:b6:c0:76:54:89:a3:9e: be:1b:53:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPBsNysk+GCufPn7m3h5Ghklvy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZC RUZCM0FCQjAeFw0yNDA1MDYxNzI1NThaFw0yNDA1MDkyMjI4NThaMDMxMTAvBgNV BAMTKDdFMjM5NEFDNkUxRkY3MzkzMzY5NkQ5MjZFMjJBM0ZCNDFFOEVBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSRvt4Kfw261sL0+4yR7+i9/xx ebfIKidgUA3AH2QQUtKMDxsbcBnViJfd0QF35ZpPXkDEJlG1JLPUtN2d4q8U8Rbc BZeg6vCP+GnUb8XsFYjR5QrGcgj4/8HVScU4VBf/bsfh6W7JWkhW83+RzaFhZHfr MWBVTb2e0swYEkB/DFExLclOfjhZOH4LgiUiMl2OAtqDuUcT41cM9RSP+2d87VBd /ePkl8qn0gRUupYuC/qAaBEgLVwaxc4A52bJiUNVaGihbTHLTzHjL9mdoT8FXnpj UL2TRr7OQ8RugfGbjEngozW2WV8k/pGEPqACSfQ9udGkXEylwC+P/zyf9MKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfiOUrG4f9zkzaW2SbiKj+0Ho6uMwHwYDVR0j BBgwFoAUyOwY4CdjmwW8WKIijRJkhr77OrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzI4OTcwNi1hNGY0LTRlMWYtOWE2ZS0wMWM5YzUzY2Q4ZjkvMC9DOEVDMThFMDI3 NjM5QjA1QkM1OEEyMjI4RDEyNjQ4NkJFRkIzQUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZCRUZC M0FCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMyODk3MDYtYTRmNC00ZTFmLTlh NmUtMDFjOWM1M2NkOGY5LzAvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0 ODZCRUZCM0FCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiNCfOqocgnJzvZloSCZG70SJkGZKTVaAjL EP351C9Loua8GGxDDOBixLgaEU3JRVtFlCpXKH3UqiyJ9J8JvhnuMmSN4spHJ9uX 6mmn5oCpHUttaxOui2rY1Mdf3GU6qX9EFL20hHq8jydIhItJNnkFqPxj+1iIgfwO rm1fZbKDp8FxYsWA2DJfPJGvSkq3J+g1/QI+DhJXRdlAgr5IfWJyXwStcJEiRbqU YxrUD0e6z0MQQk9XljYMi59mUkWPEqbsnhMi3njjdblN9gil40KMsfSAh5FOh5DN 7xixqLRnr3Xa/GSJpVHJDr8xG9Qpl1KTlycEtsB2VImjnr4bU28= -----END CERTIFICATE-----Generated at Mon May 6 20:16:35 2024 by rpki-client on console-fra.rpki-client.org