$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: 2HSk4ljqH/bH7Jm7lqOOfKHdThJASvPCUi9O/oPifYA= Subject key identifier: A6:B4:CB:3F:50:EB:4E:E0:C3:D1:0C:1D:C2:0B:5F:26:38:E9:DA:59 Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 1B70BBDF95FC9D7A7DC1AB8044736FF3BF11699C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 042C Signing time: Wed 01 May 2024 22:11:23 +0000 Manifest this update: Wed 01 May 2024 22:06:23 +0000 Manifest next update: Sun 05 May 2024 01:10:23 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: bImXu9iW+V52f0PdV9u/n0AyTwHBJm38/WtcWyj4cdY=) 2: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: VRlEMBsdZ13dWBBxjd5/IJZXqkYYr5RaxtHTuTZRIZE=) 3: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: uI/teqWImURMMgCEevqcVQ97etqVxmQ0asBUxtany50=) 4: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: JOHlwd9MSwCeyp6MGNc9rCFZxBgd3Hr7PcC9+iyEblg=) 5: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: GWQscMoRwA26t3ilcn7ceKBW6qj1NIHcA+fjb8FfPGo=) 6: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: VfsjHz1Yrct8mcgY9sofRiOh7BiQIbotdBv7PxlfiYI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:70:bb:df:95:fc:9d:7a:7d:c1:ab:80:44:73:6f:f3:bf:11:69:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: May 1 22:06:23 2024 GMT Not After : May 5 01:10:23 2024 GMT Subject: CN=A6B4CB3F50EB4EE0C3D10C1DC20B5F2638E9DA59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:8e:12:ec:40:21:26:d5:cf:52:f7:47:a7: 10:58:71:d7:63:57:4f:e4:29:8f:41:e2:7d:0d:d4: da:79:22:c3:3a:b9:f8:db:29:9e:d1:4b:13:06:2b: 6b:17:62:f0:bf:b6:17:b8:e5:3e:64:38:87:0a:b7: ca:8f:03:25:9e:47:35:21:46:e1:88:76:da:15:34: f2:ee:c6:2d:44:0c:d7:7c:5f:fa:1d:e5:2b:2c:2b: 01:e1:26:49:37:fe:7d:0b:43:f8:b7:a5:43:a9:6a: 13:4a:21:96:85:52:dd:1b:8a:a4:91:b6:fe:39:2d: 35:fa:2a:fe:3f:7f:53:30:c2:3a:8b:15:22:c5:8a: fe:36:4b:af:44:66:80:66:1b:e8:f9:b6:2b:38:f6: f3:7d:ec:41:60:3a:01:c1:2c:cf:7d:5b:6b:94:80: 1c:e1:51:45:7f:34:06:96:8a:b0:08:f1:db:8f:0a: c4:5e:3a:cd:18:87:73:2c:2e:10:f4:58:af:18:ff: a9:4d:c3:15:bb:a3:65:43:90:46:ad:44:f7:8a:28: f4:40:ab:f7:32:07:b7:39:43:b6:e4:88:03:61:6d: f5:8e:64:ef:d5:d0:44:32:1c:9c:05:61:36:6d:36: da:67:e1:bc:3f:6d:18:9f:68:2f:73:d9:0a:c0:1d: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B4:CB:3F:50:EB:4E:E0:C3:D1:0C:1D:C2:0B:5F:26:38:E9:DA:59 X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:8f:97:7c:6d:d4:83:4e:d5:2e:9a:63:cc:89:08:1d:35:0c: be:6d:10:fc:dc:16:6c:fb:21:b6:78:25:b8:7e:eb:38:31:88: 22:02:aa:07:9e:b5:49:59:3b:55:63:af:56:42:d3:da:33:ef: af:29:b4:a6:95:a5:f4:9d:99:2d:2d:d6:89:41:b8:11:ed:56: 9e:71:16:23:ed:cb:46:ae:5d:d5:0f:1a:de:ef:83:e6:d7:fa: 17:96:0d:17:45:cd:a5:8c:03:a2:99:00:4c:3c:f1:2b:ae:e8: 88:55:97:2c:72:1f:a3:b0:78:b0:7b:90:bb:c9:41:1a:a1:99: 1f:3f:b5:e9:cc:a4:a6:b8:55:d5:97:8a:ea:19:e8:8f:62:eb: b4:9e:61:ec:36:8d:70:f5:00:54:62:0e:d5:60:0e:ab:6d:20: 37:32:de:d2:5d:1d:41:a2:11:67:86:e3:9a:3c:93:0b:72:ee: 4d:50:51:e6:6a:ab:05:68:57:ee:64:2b:58:7f:64:b4:6d:e5: 65:32:62:9c:fb:c1:7f:9d:41:4b:7e:97:8d:95:db:6d:5c:2b: a0:47:00:8b:4b:04:2a:37:50:5d:96:16:ab:4b:73:ab:88:79: 0a:55:4e:af:1d:83:8e:d0:17:16:09:b3:22:d2:2c:99:29:11: a5:3e:4f:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3C735X8nXp9wauARHNv878RaZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNDA1MDEyMjA2MjNaFw0yNDA1MDUwMTEwMjNaMDMxMTAvBgNV BAMTKEE2QjRDQjNGNTBFQjRFRTBDM0QxMEMxREMyMEI1RjI2MzhFOURBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYpI4S7EAhJtXPUvdHpxBYcddj V0/kKY9B4n0N1Np5IsM6ufjbKZ7RSxMGK2sXYvC/the45T5kOIcKt8qPAyWeRzUh RuGIdtoVNPLuxi1EDNd8X/od5SssKwHhJkk3/n0LQ/i3pUOpahNKIZaFUt0biqSR tv45LTX6Kv4/f1MwwjqLFSLFiv42S69EZoBmG+j5tis49vN97EFgOgHBLM99W2uU gBzhUUV/NAaWirAI8duPCsReOs0Yh3MsLhD0WK8Y/6lNwxW7o2VDkEatRPeKKPRA q/cyB7c5Q7bkiANhbfWOZO/V0EQyHJwFYTZtNtpn4bw/bRifaC9z2QrAHa0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUprTLP1DrTuDD0QwdwgtfJjjp2lkwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOPl3xt1INO1S6aY8yJCB01DL5tEPzcFmz7 IbZ4Jbh+6zgxiCICqgeetUlZO1Vjr1ZC09oz768ptKaVpfSdmS0t1olBuBHtVp5x FiPty0auXdUPGt7vg+bX+heWDRdFzaWMA6KZAEw88Suu6IhVlyxyH6OweLB7kLvJ QRqhmR8/tenMpKa4VdWXiuoZ6I9i67SeYew2jXD1AFRiDtVgDqttIDcy3tJdHUGi EWeG45o8kwty7k1QUeZqqwVoV+5kK1h/ZLRt5WUyYpz7wX+dQUt+l42V221cK6BH AItLBCo3UF2WFqtLc6uIeQpVTq8dg47QFxYJsyLSLJkpEaU+T94= -----END CERTIFICATE-----Generated at Wed May 1 22:50:25 2024 by rpki-client on console-ams.rpki-client.org