$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft File: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft (raw, json) Hash identifier: s9IWR7InXB+Jp1p65gxkr7JZTs4xeo6qTeY6vsSJa/U= Subject key identifier: 85:27:EE:E9:F5:60:4B:17:A6:5C:38:89:27:C6:0B:99:58:11:C8:8B Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5 Certificate issuer: /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5 Certificate serial: 4A96CAA5A2FD92FA28BBC52A5F141DEAB995C631 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft Manifest number: 0424 Signing time: Thu 18 Apr 2024 13:51:33 +0000 Manifest this update: Thu 18 Apr 2024 13:46:33 +0000 Manifest next update: Sun 21 Apr 2024 14:02:33 +0000 Files and hashes: 1: 3137352e34352e3138372e302f32342d3234203d3e203436303139.roa (hash: M3fuQHtjdLgrcRYUvZ8ftseQoV1+kdI5pfyXgu6wTEU=) 2: 3137352e34352e3138392e302f32342d3234203d3e203436303139.roa (hash: SJh3drYM9RUic7dNUbCxLV8QM9/ZENJ9xvzsJT+Xh+k=) 3: 3137352e34352e3138342e302f32342d3234203d3e203436303139.roa (hash: ll1xVrAa6lhDcLUd8Yyr5OUC3kLSP7APj8eXxhlETQY=) 4: 3137352e34352e3139312e302f32342d3234203d3e203436303139.roa (hash: NFC0CMbotRdQOYDpWF7lOtBo8F6Tg/WC+ajElaCfY9w=) 5: 323430353a383734303a3a2f33322d3438203d3e203436303139.roa (hash: cIh7AeQoTmqNjdCKCQgoJST4L8Z/MHBHqxUbrV/FBVA=) 6: 9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl (hash: oItVo1CNMzJWWLOScRxApPDYQeJ1dXBWgB/IndBPiOc=) 7: 3137352e34352e3138342e302f32312d3231203d3e203436303139.roa (hash: 6jCPD84y8MH7uTvQ3xE/CNM90suM2uvSs7LwiDSJt8o=) 8: 3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (hash: 2xHHHzYf/At8Ok4Z385XEQl71Q9QdJynkDIBcmmxALU=) 9: 3137352e34352e3138362e302f32342d3234203d3e203436303139.roa (hash: NmyBnETYxpAcjvVD2XcMMaR0y+Uu3jUeZgk4v2ZiU8w=) 10: 3137352e34352e3138382e302f32342d3234203d3e203436303139.roa (hash: 6Xbsz8T36BaFpMPY7FxvqXCGDPH1cHpfbt4okPJGNb0=) 11: 3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (hash: ZJjYeosySZMfgYwIaz+349Zsu8L81BUeesBmEwnPj6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:96:ca:a5:a2:fd:92:fa:28:bb:c5:2a:5f:14:1d:ea:b9:95:c6:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5 Validity Not Before: Apr 18 13:46:33 2024 GMT Not After : Apr 21 14:02:33 2024 GMT Subject: CN=8527EEE9F5604B17A65C388927C60B995811C88B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2e:10:a7:83:f3:e8:b6:49:43:3b:88:89:b2: 97:00:cd:e5:50:c3:9f:4b:69:b6:f9:53:47:e5:1a: 76:01:39:16:62:c8:ee:22:03:67:c8:59:b8:eb:bb: 27:3c:5d:f3:5e:a4:51:ab:d2:a4:f1:f1:6c:22:aa: 44:a9:1a:81:6a:c5:fa:d2:36:ea:c6:db:92:4e:d4: 4a:02:e2:e1:db:8f:38:23:b2:ee:a6:31:98:80:0e: 74:50:e6:21:53:42:55:37:e8:ed:fe:d7:17:83:0d: bc:d9:d6:1a:f0:69:23:5a:e8:7a:2c:da:5e:73:45: 5a:14:fc:89:33:b7:d2:5f:8d:52:bb:9f:c2:b3:cf: 6c:86:f9:06:83:2d:8a:45:5c:ab:56:2a:a8:14:b0: 64:fc:7d:36:2a:67:4b:e2:29:2a:18:34:fb:98:1a: 24:69:4a:71:ce:7f:67:cc:e4:98:46:bf:f2:e7:d9: 1c:ee:64:de:2a:67:18:4c:9a:9c:d7:f7:fa:53:c7: a0:1c:3a:3c:90:c0:61:04:fb:1b:b1:4d:51:ab:53: f7:c6:7a:2a:52:a6:72:c3:06:af:30:74:bb:7d:84: 3f:32:71:65:c0:15:cb:d6:b1:90:85:5f:fb:8c:b9: 6c:59:e3:5a:be:81:b7:d8:cd:04:94:9f:a6:e0:16: f6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:27:EE:E9:F5:60:4B:17:A6:5C:38:89:27:C6:0B:99:58:11:C8:8B X509v3 Authority Key Identifier: keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:eb:a7:0b:c3:c0:1d:7d:ee:74:22:90:54:07:bc:ab:ac:42: 6c:4c:42:8c:be:ed:d6:a8:fa:a5:b4:ee:29:7f:c2:05:5e:0d: ae:1a:8e:a3:10:ce:d6:81:67:93:93:5a:c3:b7:6d:ea:17:22: 91:71:e1:6b:86:64:da:6b:36:14:2d:35:8d:59:a9:07:cb:39: 5d:77:63:87:05:e6:b4:ba:32:6b:f6:2f:83:ac:49:bf:7f:3f: 00:2a:3c:47:c4:f5:54:7b:30:52:be:c8:81:c2:6e:b1:2d:72: 17:d6:cc:f9:5d:d3:ad:cb:87:8d:04:58:bc:4a:ce:4a:f4:be: 99:14:2e:0b:17:fa:e4:17:3c:17:ef:24:1b:7a:f3:01:a1:dd: 6b:c7:28:76:f2:fa:c6:f6:6c:eb:d4:5a:01:8f:e4:60:46:0f: 5a:b1:83:3f:cc:f8:e9:d3:81:64:ab:ab:5c:f4:1c:8b:91:73: ce:40:6f:5a:11:68:22:1e:cc:18:92:b4:7a:d9:f1:bd:54:a5: 7a:85:82:b4:6f:32:9b:97:62:fb:74:b9:6f:96:f5:44:cb:ac: 15:6e:e6:ed:5b:2e:8c:f7:ef:6c:5b:03:bf:b7:24:13:32:95: b2:1b:86:5f:84:e5:c4:cf:df:37:b9:64:72:16:1e:e1:67:0c: 78:c9:8b:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSpbKpaL9kvoou8UqXxQd6rmVxjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEz RjBCNzBCNTAeFw0yNDA0MTgxMzQ2MzNaFw0yNDA0MjExNDAyMzNaMDMxMTAvBgNV BAMTKDg1MjdFRUU5RjU2MDRCMTdBNjVDMzg4OTI3QzYwQjk5NTgxMUM4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLhCng/PotklDO4iJspcAzeVQ w59Labb5U0flGnYBORZiyO4iA2fIWbjruyc8XfNepFGr0qTx8WwiqkSpGoFqxfrS NurG25JO1EoC4uHbjzgjsu6mMZiADnRQ5iFTQlU36O3+1xeDDbzZ1hrwaSNa6Hos 2l5zRVoU/Ikzt9JfjVK7n8Kzz2yG+QaDLYpFXKtWKqgUsGT8fTYqZ0viKSoYNPuY GiRpSnHOf2fM5JhGv/Ln2RzuZN4qZxhMmpzX9/pTx6AcOjyQwGEE+xuxTVGrU/fG eipSpnLDBq8wdLt9hD8ycWXAFcvWsZCFX/uMuWxZ41q+gbfYzQSUn6bgFvY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhSfu6fVgSxemXDiJJ8YLmVgRyIswHwYDVR0j BBgwFoAUn1bsUNoU0T0Un1FF1ir8Wj8LcLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmY3MWM5MS0xNjI0LTRmYzAtOGM2My0yZWZhZmQ0NmZiYzEvMC85RjU2RUM1MERB MTREMTNEMTQ5RjUxNDVENjJBRkM1QTNGMEI3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZDNUEzRjBC NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJmNzFjOTEtMTYyNC00ZmMwLThj NjMtMmVmYWZkNDZmYmMxLzAvOUY1NkVDNTBEQTE0RDEzRDE0OUY1MTQ1RDYyQUZD NUEzRjBCNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfrpwvDwB197nQikFQHvKusQmxMQoy+7dao +qW07il/wgVeDa4ajqMQztaBZ5OTWsO3beoXIpFx4WuGZNprNhQtNY1ZqQfLOV13 Y4cF5rS6Mmv2L4OsSb9/PwAqPEfE9VR7MFK+yIHCbrEtchfWzPld063Lh40EWLxK zkr0vpkULgsX+uQXPBfvJBt68wGh3WvHKHby+sb2bOvUWgGP5GBGD1qxgz/M+OnT gWSrq1z0HIuRc85Ab1oRaCIezBiStHrZ8b1UpXqFgrRvMpuXYvt0uW+W9UTLrBVu 5u1bLoz372xbA7+3JBMylbIbhl+E5cTP3ze5ZHIWHuFnDHjJi+U= -----END CERTIFICATE-----Generated at Thu Apr 18 17:41:01 2024 by rpki-client on console-ams.rpki-client.org