$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft File: BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft (raw, json) Hash identifier: 7M+SbR13wOkpm32HuVrqiNL86xh8tit33eK6/fObQZM= Subject key identifier: FF:08:A8:9A:3C:C4:9D:F0:FE:A5:78:2C:5A:F6:AB:21:4A:FD:B4:6A Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37 Certificate issuer: /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337 Certificate serial: 7E1A4B93E4DEB575F35FED9581107C95C4F23BBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft Manifest number: 042D Signing time: Tue 07 May 2024 06:51:12 +0000 Manifest this update: Tue 07 May 2024 06:46:12 +0000 Manifest next update: Fri 10 May 2024 11:52:12 +0000 Files and hashes: 1: BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl (hash: kQPwBX6k0K10u2FnuuDtgkFIV5/zID8+2VYDEdfxRVc=) 2: 3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (hash: zuK6tSBVOcL0DoRiCvl574IutmMM3i+15NF8Mt7HjNY=) 3: 3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (hash: MyyHAf7985s2kxyxSU9s4YJu7rUlw3VFFCZcdksfFgo=) 4: 323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (hash: i2kiD3mM+MjiHTnZyeF2nS2QLKGMFwRM8UsT3KxQLSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 11:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1a:4b:93:e4:de:b5:75:f3:5f:ed:95:81:10:7c:95:c4:f2:3b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337 Validity Not Before: May 7 06:46:12 2024 GMT Not After : May 10 11:52:12 2024 GMT Subject: CN=FF08A89A3CC49DF0FEA5782C5AF6AB214AFDB46A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a8:6b:b9:4d:d0:ba:55:78:f8:22:78:df:60: d5:60:7f:6b:75:f8:8e:d8:aa:c1:87:3c:b9:ce:ef: e4:4e:38:e2:ed:9b:ca:26:74:10:b3:a7:6c:0b:96: 4d:cb:5c:a3:a2:48:84:cb:8c:1d:b8:52:31:f1:8b: 62:f3:9f:6b:c7:83:17:1e:f8:d3:9c:2d:25:c3:47: 6c:cd:5c:ad:0a:73:f6:d9:b0:cd:8b:11:cd:d9:ca: 9c:02:47:87:74:0a:de:b0:27:d2:72:9b:5e:f9:d5: e2:e4:10:df:46:ac:da:6b:22:66:2a:e8:1a:6e:b5: 9c:16:2d:b1:cf:17:f1:62:5d:b6:44:c2:ed:3c:f2: 10:a2:8c:f8:9b:c6:9c:30:19:7f:4e:b7:0d:f6:fc: 2f:ed:62:89:8d:9d:ae:81:18:b5:4a:93:07:8f:b0: 6c:ae:a9:72:be:8b:3c:cb:1a:1e:c3:e4:4d:48:07: 88:88:a5:ed:f3:a9:7d:9a:8e:d5:9b:8d:50:df:bc: 23:2a:58:cf:01:8b:4b:bf:76:b6:47:08:24:c8:7d: 19:0e:54:cd:79:c8:ba:9e:eb:cc:98:63:e6:54:62: aa:5a:02:33:3a:49:af:54:bd:dd:40:44:d4:e6:9a: 5c:12:b5:7c:ea:e5:40:a8:09:ac:fa:22:e1:f9:12: d5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:08:A8:9A:3C:C4:9D:F0:FE:A5:78:2C:5A:F6:AB:21:4A:FD:B4:6A X509v3 Authority Key Identifier: keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:79:ca:7f:bf:a0:00:46:ae:87:a3:6a:f9:6d:84:61:33:0e: 4b:74:81:19:30:44:ce:fc:f5:1b:6a:b7:97:7d:a2:b8:c6:a9: cf:7c:d9:f7:55:cb:21:08:da:fd:75:35:e5:f4:3a:cf:49:9c: 4e:fa:22:42:a5:11:26:60:f7:f7:a5:ed:9b:53:3d:27:45:bc: ed:7b:d4:f4:79:e3:4d:cf:44:4e:aa:ae:53:57:fe:0b:f8:42: 73:5b:3a:ec:1d:40:7e:3e:f0:3f:56:88:e5:ed:f5:f3:31:47: 49:bb:f9:ab:da:4a:eb:a7:a8:e3:8b:8c:a2:5b:3c:46:d2:b1: 37:19:35:30:52:0f:83:28:b4:f3:d7:8a:ea:e8:4e:d2:b0:86: 9b:98:4b:0c:f8:b9:da:cf:6e:df:e4:77:64:e9:17:9b:13:f6: fc:0c:9a:0b:18:37:25:9c:6f:bb:b1:1f:d3:9b:50:06:d3:4c: 45:58:2e:37:dc:f9:d6:c6:f5:d8:31:0d:7e:40:28:d6:16:c8: 06:df:d2:a5:5c:62:60:fb:fd:d0:da:e0:0d:f0:3f:08:ed:5c: af:68:50:8c:3a:99:f5:ce:da:89:de:66:58:6b:db:21:d7:bc: 53:e5:12:a0:a8:28:be:46:2e:0c:ed:74:c2:e7:1d:f3:70:08: 57:3b:c8:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhpLk+TetXXzX+2VgRB8lcTyO7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUy MDdGQTMzNzAeFw0yNDA1MDcwNjQ2MTJaFw0yNDA1MTAxMTUyMTJaMDMxMTAvBgNV BAMTKEZGMDhBODlBM0NDNDlERjBGRUE1NzgyQzVBRjZBQjIxNEFGREI0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqGu5TdC6VXj4InjfYNVgf2t1 +I7YqsGHPLnO7+ROOOLtm8omdBCzp2wLlk3LXKOiSITLjB24UjHxi2Lzn2vHgxce +NOcLSXDR2zNXK0Kc/bZsM2LEc3ZypwCR4d0Ct6wJ9Jym1751eLkEN9GrNprImYq 6BputZwWLbHPF/FiXbZEwu088hCijPibxpwwGX9Otw32/C/tYomNna6BGLVKkweP sGyuqXK+izzLGh7D5E1IB4iIpe3zqX2ajtWbjVDfvCMqWM8Bi0u/drZHCCTIfRkO VM15yLqe68yYY+ZUYqpaAjM6Sa9Uvd1ARNTmmlwStXzq5UCoCaz6IuH5EtXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/wiomjzEnfD+pXgsWvarIUr9tGowHwYDVR0j BBgwFoAUvKMZU7ksX8RS7ah7kMvZjiB/ozcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTJjNDgxNS1iMmRhLTRjMjAtYmMzMS01MDNhZGY0OWI0OTAvMC9CQ0EzMTk1M0I5 MkM1RkM0NTJFREE4N0I5MENCRDk4RTIwN0ZBMzM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUyMDdG QTMzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UyYzQ4MTUtYjJkYS00YzIwLWJj MzEtNTAzYWRmNDliNDkwLzAvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5 OEUyMDdGQTMzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZ5yn+/oABGroejavlthGEzDkt0gRkwRM78 9Rtqt5d9orjGqc982fdVyyEI2v11NeX0Os9JnE76IkKlESZg9/el7ZtTPSdFvO17 1PR5403PRE6qrlNX/gv4QnNbOuwdQH4+8D9WiOXt9fMxR0m7+avaSuunqOOLjKJb PEbSsTcZNTBSD4MotPPXiuroTtKwhpuYSwz4udrPbt/kd2TpF5sT9vwMmgsYNyWc b7uxH9ObUAbTTEVYLjfc+dbG9dgxDX5AKNYWyAbf0qVcYmD7/dDa4A3wPwjtXK9o UIw6mfXO2oneZlhr2yHXvFPlEqCoKL5GLgztdMLnHfNwCFc7yEE= -----END CERTIFICATE-----Generated at Tue May 7 07:12:27 2024 by rpki-client on console-ams.rpki-client.org