$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft File: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft (raw, json) Hash identifier: MacEocj6AMW9B59xWY9gDfMc/SVIpIY7Egv3eeGinR0= Subject key identifier: D2:FE:DA:62:12:5C:4F:82:76:B7:86:0F:72:90:F0:80:16:34:3C:8D Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 Certificate issuer: /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Certificate serial: 345165E992BB2A99598C5E87930C58F54A9EF5F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft Manifest number: 042A Signing time: Thu 02 May 2024 11:10:54 +0000 Manifest this update: Thu 02 May 2024 11:05:54 +0000 Manifest next update: Sun 05 May 2024 17:22:54 +0000 Files and hashes: 1: 3130332e3130302e3138302e302f32342d3234203d3e20313336383430.roa (hash: Bmp6uDaGfxU7uEKi3hxe743VCuq9y3H1SvKNvKTFhPI=) 2: 3130332e3130302e3138322e302f32342d3234203d3e20313336383430.roa (hash: 72X51mOVWTSsd1jr7sPs4F29BA3uHB0vUvKhAPQJ6hU=) 3: 323430313a626663303a3a2f33322d3332203d3e20313336383430.roa (hash: ef5pyszl/eZCVNB+iIfkmyNZzW2TWgOjR8Evx4uEXR0=) 4: F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl (hash: TYUyrSb78PeOJn8/A10PxJRcBJvzm59Lc46CBh3ZPQA=) 5: 3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (hash: vljOpq7OvN6M93H7+9JV3DUYN07B73LWsiogMwNkg/4=) 6: 3130332e3130302e3138302e302f32322d3232203d3e20313336383430.roa (hash: x67r2B14IjWrI46BbltBp0HpYPdGfuGnQVBssYHeV2U=) 7: 3130332e3130302e3138312e302f32342d3234203d3e20313336383430.roa (hash: lKYUujo/wZxeNdciSdEzU7lGgAqVjuJSUCsOAKdUprM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 17:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:51:65:e9:92:bb:2a:99:59:8c:5e:87:93:0c:58:f5:4a:9e:f5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3 Validity Not Before: May 2 11:05:54 2024 GMT Not After : May 5 17:22:54 2024 GMT Subject: CN=D2FEDA62125C4F8276B7860F7290F08016343C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:36:f2:26:c7:48:8c:4a:4b:c3:60:e0:0b: 1f:04:04:c7:6b:e5:0d:19:bd:89:47:1d:2e:4f:fe: 70:53:90:16:dc:b2:97:36:19:f7:98:f7:93:bd:9b: ad:68:79:cb:92:de:15:d8:99:67:5c:d0:58:33:8c: b6:fd:28:34:6a:3a:7c:47:09:b2:a5:cb:7a:0a:38: b1:21:ed:2c:b9:b7:07:19:8e:51:86:78:62:1e:89: 1b:03:68:79:f7:47:00:62:bb:9f:84:a4:1a:40:e8: b3:3e:9e:9b:b1:6c:2d:38:a9:42:b3:85:a8:8f:36: 17:25:ce:00:89:90:59:b3:7f:3f:01:24:5f:bc:f9: c9:42:27:7a:52:c3:b8:4e:15:06:ba:7e:40:11:48: 85:c6:c2:00:fd:98:1d:60:55:60:a4:a0:bc:77:2c: 03:2a:2e:d3:6b:7d:93:70:9f:a2:36:cf:9c:b1:ce: a0:b7:c0:02:90:0b:d5:2a:01:8f:07:6d:6c:8a:09: 9d:57:0f:32:a0:dd:3f:ff:f3:70:80:65:73:d6:9a: 60:ff:63:de:37:7f:63:69:7e:1b:8b:0a:ae:fc:f4: 2f:50:21:73:4c:eb:5e:e9:68:c7:5c:a1:2c:43:92: 8c:06:4e:14:1d:64:6e:75:fc:e7:ff:c0:db:c9:af: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FE:DA:62:12:5C:4F:82:76:B7:86:0F:72:90:F0:80:16:34:3C:8D X509v3 Authority Key Identifier: keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:27:fd:0b:22:2f:97:a7:43:11:c5:02:d1:88:ad:d8:fe:d7: 42:53:62:2c:ba:b0:89:04:bf:56:ef:4f:ee:57:4b:65:76:df: 81:55:1b:59:6f:ee:28:66:d8:36:5d:b2:dd:f5:1d:42:93:2b: 49:fe:d3:04:bf:28:6b:c4:07:b7:18:2a:5a:82:c8:e8:e2:90: 88:ac:50:ef:7b:23:7d:bd:82:70:10:43:0a:6d:60:8b:5c:c6: d7:40:06:9a:4e:99:a6:91:20:89:d8:37:4c:d9:a3:9b:59:6b: 07:9f:5d:70:a4:3b:0a:33:ce:75:f1:03:89:0a:19:e2:3b:32: b8:60:6d:2f:52:ab:09:58:5e:1b:79:80:eb:97:9b:ff:2b:23: 0c:64:71:6f:00:62:1f:a7:12:96:e2:61:bb:02:b7:2e:2d:8b: 60:3c:c0:78:08:3d:44:9b:2d:fa:c0:3a:e3:17:4f:c7:79:3c: 61:fd:a3:9c:ad:5a:fb:52:48:8a:d7:9d:ca:92:f6:88:4f:70: ae:11:03:fc:4c:d5:d3:f8:2c:57:bd:f3:dd:7d:cf:6d:c5:c5: 95:ed:a4:51:78:f5:fe:52:b7:aa:e1:5f:82:e8:47:d1:bd:3c: aa:d1:37:5a:98:fe:a0:60:35:3b:ae:eb:d4:f2:e4:32:c3:16: 30:46:5b:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNFFl6ZK7KplZjF6HkwxY9Uqe9fcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFF RTlDOURBMzAeFw0yNDA1MDIxMTA1NTRaFw0yNDA1MDUxNzIyNTRaMDMxMTAvBgNV BAMTKEQyRkVEQTYyMTI1QzRGODI3NkI3ODYwRjcyOTBGMDgwMTYzNDNDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbjbyJsdIjEpLw2DgCx8EBMdr 5Q0ZvYlHHS5P/nBTkBbcspc2GfeY95O9m61oecuS3hXYmWdc0FgzjLb9KDRqOnxH CbKly3oKOLEh7Sy5twcZjlGGeGIeiRsDaHn3RwBiu5+EpBpA6LM+npuxbC04qUKz haiPNhclzgCJkFmzfz8BJF+8+clCJ3pSw7hOFQa6fkARSIXGwgD9mB1gVWCkoLx3 LAMqLtNrfZNwn6I2z5yxzqC3wAKQC9UqAY8HbWyKCZ1XDzKg3T//83CAZXPWmmD/ Y943f2NpfhuLCq789C9QIXNM617paMdcoSxDkowGThQdZG51/Of/wNvJr6NNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0v7aYhJcT4J2t4YPcpDwgBY0PI0wHwYDVR0j BBgwFoAU8/mrMKwsULPt98kcRTHMmu6cnaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWYwODkwMC1mMmM2LTRkMDctYjY5NC1kMTg4YmFhM2I4ZjIvMC9GM0Y5QUIzMEFD MkM1MEIzRURGN0M5MUM0NTMxQ0M5QUVFOUM5REEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUNDOUFFRTlD OURBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVmMDg5MDAtZjJjNi00ZDA3LWI2 OTQtZDE4OGJhYTNiOGYyLzAvRjNGOUFCMzBBQzJDNTBCM0VERjdDOTFDNDUzMUND OUFFRTlDOURBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMn/QsiL5enQxHFAtGIrdj+10JTYiy6sIkE v1bvT+5XS2V234FVG1lv7ihm2DZdst31HUKTK0n+0wS/KGvEB7cYKlqCyOjikIis UO97I329gnAQQwptYItcxtdABppOmaaRIInYN0zZo5tZawefXXCkOwozznXxA4kK GeI7MrhgbS9SqwlYXht5gOuXm/8rIwxkcW8AYh+nEpbiYbsCty4ti2A8wHgIPUSb LfrAOuMXT8d5PGH9o5ytWvtSSIrXncqS9ohPcK4RA/xM1dP4LFe98919z23FxZXt pFF49f5St6rhX4LoR9G9PKrRN1qY/qBgNTuu69Ty5DLDFjBGWxg= -----END CERTIFICATE-----Generated at Thu May 2 12:22:13 2024 by rpki-client on console-ams.rpki-client.org