$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft (raw, json) Hash identifier: a4NdXu1XT1kzLUvmgUPz7EfX5IAExy0eQRPTINnQK2c= Subject key identifier: 5D:CE:7B:20:A3:93:22:60:10:9A:30:56:19:CE:89:83:65:B9:15:F3 Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 5CCE6111BD4D99CBD40FF412A1D8E29954716AFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft Manifest number: D4 Signing time: Mon 13 May 2024 15:31:55 +0000 Manifest this update: Mon 13 May 2024 15:26:55 +0000 Manifest next update: Fri 17 May 2024 02:39:55 +0000 Files and hashes: 1: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl (hash: lcOBlCRdxRuT1nDkMq8QaVnqd3NPNUbOwDr7x4V918Y=) 2: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: 8OO6DLpqnlpBk81xASwZPv96p/91vtqjLHKSKPsI2ik=) 3: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: gfSNXO/7tCdEUlvBTifLsPb5YJfDLfnsjOTNQzWLgZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 May 2024 21:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ce:61:11:bd:4d:99:cb:d4:0f:f4:12:a1:d8:e2:99:54:71:6a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: May 13 15:26:55 2024 GMT Not After : May 17 02:39:55 2024 GMT Subject: CN=5DCE7B20A3932260109A305619CE898365B915F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:20:e1:95:f6:d8:d9:45:9d:b2:d4:8e:ed: ae:16:ac:64:4b:fc:7f:32:7f:69:f4:92:57:bd:de: ca:74:9d:40:8b:d1:90:42:b6:8b:ab:18:d1:55:da: a1:63:49:49:f2:14:21:17:88:48:08:f0:fb:16:06: ed:ce:3d:ef:7d:a2:2f:aa:42:43:75:2a:23:df:79: 1c:88:b3:be:3b:01:5a:d4:97:62:00:da:9c:b5:81: d0:3d:74:62:29:22:bf:0e:74:4d:3d:fa:81:bf:85: 7a:bc:ee:9c:78:88:2b:73:67:01:db:97:4a:a2:f9: 7b:b0:55:f1:48:7f:76:50:79:b2:fb:2b:38:f8:57: ff:37:fc:08:2c:da:6c:57:2a:5c:5d:71:cf:14:3a: 75:f5:5c:fa:22:7e:f4:db:5f:52:12:ec:7a:2e:a2: 97:a4:4a:c0:cd:fb:48:0b:21:16:8a:93:77:34:72: fd:39:20:6f:50:6a:01:25:9f:6a:ff:e1:5f:97:08: 97:e0:53:b6:0a:94:8d:9f:6b:c6:4b:1a:bf:9b:8e: c3:c7:93:59:7f:22:6b:d9:3a:79:d8:d6:16:cc:2d: 98:a6:e1:db:c3:6a:8d:28:6d:20:f0:44:71:b6:22: 6d:39:42:5f:01:2f:f6:22:cb:20:27:b1:b2:aa:54: 76:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CE:7B:20:A3:93:22:60:10:9A:30:56:19:CE:89:83:65:B9:15:F3 X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6d:20:37:5c:f2:27:ff:e2:2b:22:10:31:88:85:8c:5c:7f: 2b:57:6a:3b:4b:f1:b3:bb:f0:cd:f3:bf:59:19:58:94:00:ac: c1:f4:2e:1d:9b:97:f4:a9:cb:5b:b7:f3:02:b9:a1:8a:df:19: c9:7f:1e:55:46:82:cd:8d:6e:99:80:8f:15:48:37:4e:43:7f: 33:f0:27:11:50:f7:a7:ec:e3:c0:c6:97:40:36:d7:09:3d:55: e8:c3:de:52:df:e3:44:3f:9e:2e:64:98:60:9e:ec:ae:dd:0f: 9a:44:78:36:cf:4e:49:06:0a:0f:56:97:9a:6a:97:87:40:f9: 52:a4:9c:d7:84:6c:bd:59:f2:98:02:75:f1:3f:1e:8a:3e:85: 11:ea:5c:ea:44:96:a5:41:21:62:ca:f8:99:6e:c0:38:04:68: c6:f8:5b:12:24:90:2f:4d:4f:2f:53:52:8d:73:db:19:2f:72: 33:98:f7:b1:05:ca:68:ae:4e:87:83:ea:57:23:f0:4e:41:b4: d2:58:2c:20:f4:15:27:57:c2:63:57:19:14:85:84:97:c1:f0: 38:e6:96:b3:00:f7:ea:92:34:71:53:d2:1a:da:fd:84:6c:9f: 03:e5:ed:ed:6b:d8:e7:dd:65:1b:74:d1:ed:01:a1:83:7b:d2: 3d:ce:9f:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXM5hEb1NmcvUD/QSodjimVRxavswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYw QzEyMENGODAeFw0yNDA1MTMxNTI2NTVaFw0yNDA1MTcwMjM5NTVaMDMxMTAvBgNV BAMTKDVEQ0U3QjIwQTM5MzIyNjAxMDlBMzA1NjE5Q0U4OTgzNjVCOTE1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqCyDhlfbY2UWdstSO7a4WrGRL /H8yf2n0kle93sp0nUCL0ZBCtourGNFV2qFjSUnyFCEXiEgI8PsWBu3OPe99oi+q QkN1KiPfeRyIs747AVrUl2IA2py1gdA9dGIpIr8OdE09+oG/hXq87px4iCtzZwHb l0qi+XuwVfFIf3ZQebL7Kzj4V/83/Ags2mxXKlxdcc8UOnX1XPoifvTbX1IS7Hou opekSsDN+0gLIRaKk3c0cv05IG9QagEln2r/4V+XCJfgU7YKlI2fa8ZLGr+bjsPH k1l/ImvZOnnY1hbMLZim4dvDao0obSDwRHG2Im05Ql8BL/YiyyAnsbKqVHZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXc57IKOTImAQmjBWGc6Jg2W5FfMwHwYDVR0j BBgwFoAU/KVf5ovxR64g8AxF2tzflgwSDPgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhC RjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIwQ0Y4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYwQzEy MENGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RG OTYwQzEyMENGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBtIDdc8if/4isiEDGIhYxcfytXajtL8bO7 8M3zv1kZWJQArMH0Lh2bl/Spy1u38wK5oYrfGcl/HlVGgs2NbpmAjxVIN05DfzPw JxFQ96fs48DGl0A21wk9VejD3lLf40Q/ni5kmGCe7K7dD5pEeDbPTkkGCg9Wl5pq l4dA+VKknNeEbL1Z8pgCdfE/Hoo+hRHqXOpElqVBIWLK+JluwDgEaMb4WxIkkC9N Ty9TUo1z2xkvcjOY97EFymiuToeD6lcj8E5BtNJYLCD0FSdXwmNXGRSFhJfB8Djm lrMA9+qSNHFT0hra/YRsnwPl7e1r2OfdZRt00e0BoYN70j3Onxw= -----END CERTIFICATE-----Generated at Mon May 13 16:50:36 2024 by rpki-client on console-ams.rpki-client.org