$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft (raw, json) Hash identifier: ZuYEUwYNrKWXNwUyVfyUXW0l23Xz8+RVU0LWjzhOCc4= Subject key identifier: 60:CC:63:4D:DB:AC:66:64:E2:B6:D1:71:83:8E:4B:AD:4C:17:1D:4E Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 0DAF80FE95BF1E59E3B672DFB6D83F5A7BE86089 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft Manifest number: 0433 Signing time: Sun 19 May 2024 10:20:34 +0000 Manifest this update: Sun 19 May 2024 10:15:34 +0000 Manifest next update: Wed 22 May 2024 14:33:34 +0000 Files and hashes: 1: F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl (hash: b1yXWouxH06nX8cWUXj0xbxNaGHAB9oHZdt+bCPqczQ=) 2: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (hash: s3mGhQ5lVJzOCXJQstC2MywVoNlmuMjrSNnmM2hWJAc=) 3: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (hash: O9WLpDuzxRZvUVc+MyrBt8LC5HzacV+oChvYVrFCIyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:af:80:fe:95:bf:1e:59:e3:b6:72:df:b6:d8:3f:5a:7b:e8:60:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: May 19 10:15:34 2024 GMT Not After : May 22 14:33:34 2024 GMT Subject: CN=60CC634DDBAC6664E2B6D171838E4BAD4C171D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f5:4f:9f:c0:83:89:7f:0a:f1:9e:0c:fd:22: b7:29:f4:df:38:e5:0b:8d:52:9d:e1:2c:20:a5:30: fb:77:45:08:ef:bb:90:7b:d2:35:c3:ae:f2:5a:2d: 96:8d:21:ba:98:ad:e1:c1:c2:29:d7:e5:0d:ae:86: 0e:41:f9:5e:a3:70:39:c8:c5:b3:5c:4d:61:28:78: 54:c5:c3:51:bb:5d:36:1c:11:a2:e2:e5:0c:d1:4f: 18:09:49:04:5e:f3:a8:3e:24:a0:bc:9e:07:4f:cb: 92:0f:0a:d1:be:3b:c2:c0:a4:8f:95:9d:e3:25:d4: 96:e9:2e:ac:dc:d6:17:d6:57:33:24:f2:7f:7f:8b: 3b:3d:bb:c8:ba:04:bb:20:25:69:35:ed:32:d7:37: 17:0b:c3:7f:95:fb:e2:97:25:52:d3:24:d2:cb:9f: f1:6f:f7:3f:14:5c:a0:1a:6a:97:5c:c1:7e:85:38: 4f:7f:c6:ff:ed:64:56:6d:e5:6b:16:6a:78:5f:98: 4b:8f:3a:ca:c6:20:c8:d2:ed:4e:32:3c:96:06:ff: e9:68:60:fa:b6:32:fe:6e:b8:df:ee:1d:bd:ba:60: 49:54:0c:b4:21:e2:4d:7c:27:70:15:e4:2a:ef:fa: db:68:f0:b9:de:4c:1d:bb:a3:95:a7:d8:d8:42:84: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CC:63:4D:DB:AC:66:64:E2:B6:D1:71:83:8E:4B:AD:4C:17:1D:4E X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:25:7b:39:af:09:2b:80:f5:1b:60:9c:cd:d1:3b:84:db:3b: 27:bf:9b:d1:54:52:92:e9:92:d0:5d:0e:5b:19:18:94:33:53: 3b:fd:f9:8c:38:dd:eb:b6:db:6e:a6:2e:a8:99:4a:8c:15:d1: 1d:19:18:29:0b:6a:e5:ff:44:da:b5:ae:72:85:d3:63:6e:25: 5e:90:80:b8:df:4d:a3:d1:9b:0b:b5:6d:67:2f:36:7c:ed:e1: a9:9f:32:10:68:08:75:88:1f:60:a5:56:15:a1:6f:12:49:95: b9:5f:17:b4:c4:29:10:b3:dc:ea:cb:50:fa:95:e8:29:cf:af: d2:1d:71:7a:80:30:d5:e1:63:66:1c:b1:3e:6d:ef:9a:04:ed: a9:95:f2:1d:cf:eb:c0:98:bc:8d:f0:6b:95:12:79:97:33:7a: d4:c1:5e:ee:1d:30:15:16:48:65:ab:2e:5b:f9:ab:4d:ba:0a: 2b:4e:d1:04:0d:b1:10:33:d1:c8:f0:af:b1:58:eb:41:64:30: 69:eb:32:87:10:b6:70:48:a8:1f:72:ac:7d:c6:3b:7c:44:c0: 8b:3b:b0:40:5d:f9:b6:c4:8c:4a:c0:94:a3:96:6d:c3:6a:63: 93:78:60:dc:f5:96:e5:53:e4:04:5a:e9:41:9b:7f:1d:b7:2b: 92:81:74:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDa+A/pW/HlnjtnLfttg/WnvoYIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNDA1MTkxMDE1MzRaFw0yNDA1MjIxNDMzMzRaMDMxMTAvBgNV BAMTKDYwQ0M2MzREREJBQzY2NjRFMkI2RDE3MTgzOEU0QkFENEMxNzFENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9U+fwIOJfwrxngz9Ircp9N84 5QuNUp3hLCClMPt3RQjvu5B70jXDrvJaLZaNIbqYreHBwinX5Q2uhg5B+V6jcDnI xbNcTWEoeFTFw1G7XTYcEaLi5QzRTxgJSQRe86g+JKC8ngdPy5IPCtG+O8LApI+V neMl1JbpLqzc1hfWVzMk8n9/izs9u8i6BLsgJWk17TLXNxcLw3+V++KXJVLTJNLL n/Fv9z8UXKAaapdcwX6FOE9/xv/tZFZt5WsWanhfmEuPOsrGIMjS7U4yPJYG/+lo YPq2Mv5uuN/uHb26YElUDLQh4k18J3AV5Crv+tto8LneTB27o5Wn2NhChG8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYMxjTdusZmTittFxg45LrUwXHU4wHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFmMDJhODktN2VlOC00YTgzLTgw MDQtMjM0ZDkxNGEwZmQ0LzAvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2 RjY5NTNGMDc0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIElezmvCSuA9RtgnM3RO4TbOye/m9FUUpLp ktBdDlsZGJQzUzv9+Yw43eu2226mLqiZSowV0R0ZGCkLauX/RNq1rnKF02NuJV6Q gLjfTaPRmwu1bWcvNnzt4amfMhBoCHWIH2ClVhWhbxJJlblfF7TEKRCz3OrLUPqV 6CnPr9IdcXqAMNXhY2YcsT5t75oE7amV8h3P68CYvI3wa5USeZczetTBXu4dMBUW SGWrLlv5q026CitO0QQNsRAz0cjwr7FY60FkMGnrMocQtnBIqB9yrH3GO3xEwIs7 sEBd+bbEjErAlKOWbcNqY5N4YNz1luVT5ARa6UGbfx23K5KBdHA= -----END CERTIFICATE-----Generated at Sun May 19 10:47:50 2024 by rpki-client on console-fra.rpki-client.org