$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: Irm8X+A596jf5S8/pRgb9lkbgYbTrY/Ag/l9uyiBcU8= Subject key identifier: 05:8F:53:22:E1:0F:2B:A6:DA:01:1B:21:EB:EC:D1:5B:89:C7:3E:8B Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: F1F9940E3F2470D193861E89D9C2559F7D2C25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 03FD Signing time: Sun 28 Apr 2024 23:41:34 +0000 Manifest this update: Sun 28 Apr 2024 23:36:34 +0000 Manifest next update: Wed 01 May 2024 23:56:34 +0000 Files and hashes: 1: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: KwEqf+z4CK61WiiU/lUVYXB5nQ5F0Dy9wrpP+J+VJxU=) 2: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: Cn1QziE67pMt8b0HUH54kIFtb2lfv1zbC5esKEHqTfo=) 3: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: 8/0SjjzNEyDp/MoMvXfi1pnsjLhs1tqUD5z9JQqkSr8=) 4: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: XuQGeDeRqoJdzzoUAZWITzT6vJEnrodh3pANTr3EBnY=) 5: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: vrQUHtmrpEkk/iDmbB+uHEkm7uM2w4TQx9m9dPyp6vU=) 6: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: u9N3sD+pGAktTBwkS8zynEamuqpktqkypupgfF412r4=) 7: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: FzC6iy0ZKERkBW2HPLnllvR+cZ6XdZJswEzu55/0vLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 23:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f1:f9:94:0e:3f:24:70:d1:93:86:1e:89:d9:c2:55:9f:7d:2c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Apr 28 23:36:34 2024 GMT Not After : May 1 23:56:34 2024 GMT Subject: CN=058F5322E10F2BA6DA011B21EBECD15B89C73E8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:13:87:a3:60:3c:d8:b1:09:88:f8:9a:54: 7f:8f:54:3b:e0:6e:0d:f4:e3:0a:42:51:86:b0:a7: 84:e9:a0:06:b8:56:36:06:2f:38:05:59:e3:fb:ad: d2:04:c3:9b:cb:07:bd:3d:21:b4:10:6c:60:41:43: 62:e8:23:48:ce:8f:62:7d:80:43:68:18:94:00:6f: 4e:dd:08:43:c2:c5:08:84:c4:c9:10:60:c1:bc:12: 8e:8b:31:43:81:25:c7:74:9e:a4:ee:30:23:56:66: a2:8b:4d:bf:47:42:f2:6f:9d:34:2c:e6:b8:27:6b: b1:6b:12:b5:0e:1c:68:2a:d2:2a:6b:ff:9b:4b:f1: 1e:0e:8e:05:00:1c:06:fe:d9:c9:6e:35:8c:28:85: be:39:63:63:8d:7e:f6:4f:23:3d:ff:a7:47:fb:14: 37:70:fc:24:51:f4:09:88:ba:75:59:22:27:03:00: d9:fa:1e:a0:5b:cd:1b:f5:c4:bd:ac:90:21:35:f4: 43:3c:3a:cf:a0:41:25:3d:a4:af:d5:66:af:5f:58: 30:9b:b2:3b:d8:56:4e:a9:c7:8c:15:53:d2:18:ba: 9f:83:34:fa:d4:fd:af:59:8d:94:2f:5e:ff:fe:66: 50:9e:c4:4f:77:38:50:51:b2:a6:be:b1:e1:4a:9f: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8F:53:22:E1:0F:2B:A6:DA:01:1B:21:EB:EC:D1:5B:89:C7:3E:8B X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:31:5e:49:53:94:6d:7c:4d:75:e5:a2:78:ea:41:c1:4f:2a: 3b:cb:bf:33:b5:7f:b8:b0:fb:5f:57:8e:5a:92:a0:47:99:b6: 94:db:54:35:b1:31:d0:9b:4c:4e:b6:b0:c6:0e:c7:50:94:e2: 43:67:e4:33:98:c1:e4:1c:c6:f9:87:bf:ab:49:42:ee:b6:57: 79:8c:54:e3:90:41:bb:a1:3d:62:da:3a:ec:4b:ce:a4:5f:88: 94:85:d7:f2:8a:a4:57:e1:b9:3a:e1:35:94:44:0a:8e:71:3f: 77:30:4b:9b:f7:f9:21:01:95:fd:6c:6d:55:f3:fc:1f:f1:d9: 89:de:a9:0a:3f:55:50:d8:c7:14:7b:0b:95:3c:98:3a:8b:2f: 07:96:46:c3:71:1e:6c:12:e6:70:14:89:7d:83:69:08:aa:e3: 50:0a:a8:a0:1f:cc:a9:d4:28:fc:84:5a:41:e3:b1:24:6d:c0: 91:46:bc:53:7b:d0:d7:8c:5e:be:15:92:67:7b:de:ac:c1:75: 64:3c:b0:c9:7a:04:3d:84:d9:2e:65:f3:4e:48:e8:27:75:6e: 88:80:1b:7a:0f:3f:84:d8:e0:bb:5f:5d:8b:4e:0d:fb:f3:61: de:5b:0f:a4:83:9f:f8:2e:98:c6:fd:be:d3:45:69:a2:e2:49: 68:3b:ed:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPH5lA4/JHDRk4YeidnCVZ99LCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNDA0MjgyMzM2MzRaFw0yNDA1MDEyMzU2MzRaMDMxMTAvBgNV BAMTKDA1OEY1MzIyRTEwRjJCQTZEQTAxMUIyMUVCRUNEMTVCODlDNzNFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nxOHo2A82LEJiPiaVH+PVDvg bg304wpCUYawp4TpoAa4VjYGLzgFWeP7rdIEw5vLB709IbQQbGBBQ2LoI0jOj2J9 gENoGJQAb07dCEPCxQiExMkQYMG8Eo6LMUOBJcd0nqTuMCNWZqKLTb9HQvJvnTQs 5rgna7FrErUOHGgq0ipr/5tL8R4OjgUAHAb+2cluNYwohb45Y2ONfvZPIz3/p0f7 FDdw/CRR9AmIunVZIicDANn6HqBbzRv1xL2skCE19EM8Os+gQSU9pK/VZq9fWDCb sjvYVk6px4wVU9IYup+DNPrU/a9ZjZQvXv/+ZlCexE93OFBRsqa+seFKn4TXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBY9TIuEPK6baARsh6+zRW4nHPoswHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAxXklTlG18TXXlonjqQcFPKjvLvzO1f7iw +19XjlqSoEeZtpTbVDWxMdCbTE62sMYOx1CU4kNn5DOYweQcxvmHv6tJQu62V3mM VOOQQbuhPWLaOuxLzqRfiJSF1/KKpFfhuTrhNZRECo5xP3cwS5v3+SEBlf1sbVXz /B/x2YneqQo/VVDYxxR7C5U8mDqLLweWRsNxHmwS5nAUiX2DaQiq41AKqKAfzKnU KPyEWkHjsSRtwJFGvFN70NeMXr4Vkmd73qzBdWQ8sMl6BD2E2S5l805I6Cd1boiA G3oPP4TY4LtfXYtODfvzYd5bD6SDn/gumMb9vtNFaaLiSWg77do= -----END CERTIFICATE-----Generated at Tue Apr 30 19:12:38 2024 by rpki-client on console-ams.rpki-client.org