$ rpki-client -vvf repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft File: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft (raw, json) Hash identifier: Df9AAgyJ61Q7bKA7yzLdA+oOgkEm8krZluIpqqMglvs= Subject key identifier: CD:2B:00:81:0B:8B:53:21:46:77:1D:FE:77:74:7A:E7:5D:10:27:3B Authority key identifier: 11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 Certificate issuer: /CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Certificate serial: 6B4C7B3CDF06B5B59B674441546D69C04B50343E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft Manifest number: 0435 Signing time: Tue 30 Apr 2024 22:10:04 +0000 Manifest this update: Tue 30 Apr 2024 22:05:04 +0000 Manifest next update: Sat 04 May 2024 08:21:04 +0000 Files and hashes: 1: 3230332e38342e3135322e302f32312d3234203d3e203234353233.roa (hash: hXje9mIfVgk4ohcWZ7xGsgDg8rtl32iRSk0AQWpayvk=) 2: 323430323a313230303a3a2f33322d3438203d3e203234353233.roa (hash: 4/CxRSt4qkOvDU143A3dtgYsRm1Vy4RXLJT8x+uxMwY=) 3: 3230332e3137342e382e302f32312d3234203d3e203234353233.roa (hash: lt2MvMMqmroZe7dFxmkIm2V3PWypC/SYW0RZJAbc04I=) 4: 3130332e32322e3234302e302f32322d3234203d3e203234353233.roa (hash: EolruLdmy3smhO0Vs3FVfk2w6M0kb6HSRkPTeONxysc=) 5: 34332e3234372e32322e302f32342d3234203d3e20313331373830.roa (hash: S9gPJK5L6o1S0w1M8txYDL3sTXGmtsIUs5UlQOJS5nQ=) 6: 116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl (hash: fcBCl364fqfYTEJMNNwF4/RWShIkrQd9ieug3IiOIJo=) 7: 3230322e36322e31322e302f32322d3234203d3e203234353233.roa (hash: 2hUq9sQt5qY1h3e31R3uSoYPSdCwunHedXmRXN36Mkw=) 8: 3131302e352e39362e302f32302d3234203d3e203234353233.roa (hash: wO5lSlY20jCFEOTaw7c8GGRg7bxoI9C06gHRHpJbCP4=) 9: 34332e3234372e32302e302f32322d3234203d3e203234353233.roa (hash: jDlQknjTzCAH0MG8hdH2xAqqvd2DKZ+TWHMy5LzwSDM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4c:7b:3c:df:06:b5:b5:9b:67:44:41:54:6d:69:c0:4b:50:34:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=116B1B493114E6F87244DA54CAB8D8EAB2503A38 Validity Not Before: Apr 30 22:05:04 2024 GMT Not After : May 4 08:21:04 2024 GMT Subject: CN=CD2B00810B8B532146771DFE77747AE75D10273B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0f:26:99:01:af:90:6e:ff:e9:ce:10:33:82: ad:6c:55:a7:f6:33:a8:74:ca:5b:f4:04:c9:00:37: 72:57:e7:a2:77:e1:87:1f:0a:78:c6:11:e6:e9:78: d6:07:d4:63:7e:ce:17:30:04:f8:4e:68:02:6a:ee: ed:f0:bb:ad:20:12:ca:80:ea:02:5c:69:fd:ba:16: ca:44:bc:1d:87:27:9b:ca:f4:06:43:5d:65:c8:03: b8:de:70:3e:f0:d9:6f:35:e8:1d:0b:09:f3:a7:65: 7d:9a:0a:f8:64:8f:ae:cd:ee:44:a7:dd:00:56:60: 4b:a0:94:42:d7:39:9d:f2:29:8b:75:dc:a0:f8:7f: f2:93:5f:33:a8:ff:e3:bc:57:82:87:e3:6e:39:9d: 97:cb:86:ca:cf:a2:8d:13:b2:18:36:e8:df:32:00: 58:a4:dc:e6:3b:84:5e:18:a2:05:a7:b0:e7:22:1f: c2:7a:85:76:33:e4:1a:b8:9b:f3:d7:8d:5b:e3:ac: e5:a8:e0:63:9a:87:f7:b5:34:9e:52:2e:3a:0f:2d: 99:8b:58:db:02:f6:14:4d:d0:1c:c4:fd:75:4c:f8: 02:eb:97:aa:cd:7c:c3:be:bd:0a:76:33:92:a8:f6: b7:e9:b7:a8:d5:48:01:d0:02:5e:1e:54:c3:34:36: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2B:00:81:0B:8B:53:21:46:77:1D:FE:77:74:7A:E7:5D:10:27:3B X509v3 Authority Key Identifier: keyid:11:6B:1B:49:31:14:E6:F8:72:44:DA:54:CA:B8:D8:EA:B2:50:3A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/116B1B493114E6F87244DA54CAB8D8EAB2503A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c667769-80dc-4093-b5f7-dfe7c5720486/0/116B1B493114E6F87244DA54CAB8D8EAB2503A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8a:ff:59:9b:1e:d5:34:bd:41:62:98:76:c0:c0:d2:83:ee: 27:61:b9:da:28:26:7f:7b:e9:e4:d0:5c:46:c9:a9:60:11:5e: ec:b1:57:bc:32:32:35:87:67:43:bf:5c:ce:93:a0:67:05:91: a4:cc:cc:1f:a0:c9:92:b1:ac:13:11:61:d5:bb:ab:6d:18:d5: ba:3a:21:e7:bc:85:d0:57:24:c1:54:3a:4a:f2:09:4e:33:65: dc:49:2c:52:7d:b6:e6:06:28:72:7f:b2:4d:a0:21:87:a8:3e: 41:d4:f6:b1:9a:13:fc:62:1f:78:e8:b9:79:7f:36:8a:15:24: 25:d4:9e:1c:76:f5:6f:cf:e6:ea:a9:54:1c:57:fe:2c:df:af: b5:3d:b3:61:7d:cf:84:da:fa:bd:28:d4:52:f4:44:d2:fe:72: d4:96:aa:d2:83:92:39:f4:bd:3b:aa:6d:fa:42:d8:41:06:71: 13:e1:22:2d:de:5c:a9:66:dc:46:ac:75:a8:e3:57:5a:c5:41: c7:16:a8:22:2a:dd:48:76:50:0f:3b:5d:d1:ed:d4:6b:de:5b: da:60:36:52:ea:48:b3:97:68:e2:23:0f:13:0a:f9:5d:d0:6c: 26:d9:a7:ef:fc:73:52:87:16:ac:d2:2c:53:af:78:d5:3c:12: b2:d7:66:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0x7PN8GtbWbZ0RBVG1pwEtQND4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFC MjUwM0EzODAeFw0yNDA0MzAyMjA1MDRaFw0yNDA1MDQwODIxMDRaMDMxMTAvBgNV BAMTKENEMkIwMDgxMEI4QjUzMjE0Njc3MURGRTc3NzQ3QUU3NUQxMDI3M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DyaZAa+Qbv/pzhAzgq1sVaf2 M6h0ylv0BMkAN3JX56J34YcfCnjGEebpeNYH1GN+zhcwBPhOaAJq7u3wu60gEsqA 6gJcaf26FspEvB2HJ5vK9AZDXWXIA7jecD7w2W816B0LCfOnZX2aCvhkj67N7kSn 3QBWYEuglELXOZ3yKYt13KD4f/KTXzOo/+O8V4KH4245nZfLhsrPoo0Tshg26N8y AFik3OY7hF4YogWnsOciH8J6hXYz5Bq4m/PXjVvjrOWo4GOah/e1NJ5SLjoPLZmL WNsC9hRN0BzE/XVM+ALrl6rNfMO+vQp2M5Ko9rfpt6jVSAHQAl4eVMM0NpbRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSsAgQuLUyFGdx3+d3R6510QJzswHwYDVR0j BBgwFoAUEWsbSTEU5vhyRNpUyrjY6rJQOjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzY2Nzc2OS04MGRjLTQwOTMtYjVmNy1kZmU3YzU3MjA0ODYvMC8xMTZCMUI0OTMx MTRFNkY4NzI0NERBNTRDQUI4RDhFQUIyNTAzQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4RUFCMjUw M0EzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGM2Njc3NjktODBkYy00MDkzLWI1 ZjctZGZlN2M1NzIwNDg2LzAvMTE2QjFCNDkzMTE0RTZGODcyNDREQTU0Q0FCOEQ4 RUFCMjUwM0EzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqK/1mbHtU0vUFimHbAwNKD7idhudooJn97 6eTQXEbJqWARXuyxV7wyMjWHZ0O/XM6ToGcFkaTMzB+gyZKxrBMRYdW7q20Y1bo6 Iee8hdBXJMFUOkryCU4zZdxJLFJ9tuYGKHJ/sk2gIYeoPkHU9rGaE/xiH3jouXl/ NooVJCXUnhx29W/P5uqpVBxX/izfr7U9s2F9z4Ta+r0o1FL0RNL+ctSWqtKDkjn0 vTuqbfpC2EEGcRPhIi3eXKlm3EasdajjV1rFQccWqCIq3Uh2UA87XdHt1GveW9pg NlLqSLOXaOIjDxMK+V3QbCbZp+/8c1KHFqzSLFOveNU8ErLXZms= -----END CERTIFICATE-----Generated at Tue Apr 30 22:54:57 2024 by rpki-client on console-fra.rpki-client.org