$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft File: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft (raw, json) Hash identifier: m0v3N5dhufGesnyeL4nYl7lgU7DVk3J5eRaOAMlnkXI= Subject key identifier: E3:4B:C0:F5:D9:4B:B2:38:F1:6C:40:3A:CF:1D:84:B8:35:B8:23:60 Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 1983E291FD1589960A02267C63D7A323E7B54E24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft Manifest number: 0429 Signing time: Thu 02 May 2024 19:22:11 +0000 Manifest this update: Thu 02 May 2024 19:17:11 +0000 Manifest next update: Mon 06 May 2024 02:12:11 +0000 Files and hashes: 1: 323430353a326363303a363030663a3a2f34382d3438203d3e20313336303739.roa (hash: I964VwwnB7pPNHUmHcIo8CkGdIsoGyVjEhbZZs/LwJs=) 2: 323430353a326363303a363031303a3a2f34382d3438203d3e20313336303739.roa (hash: CfUDLFP70RC1JvYazy8kuiSZSEGbJNUm2ZaJXjPg40E=) 3: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: aTqQ67CA1dL8DFlF5gniBpEvrIs6U/EZqI1/mbinqcs=) 4: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl (hash: vVmtxvTCHJyqQwbzS9e82mlDrZS0NkAdhv52swCrE4w=) 5: 323430353a326363303a363030653a3a2f34382d3438203d3e20313336303739.roa (hash: xrpSzgHa9zaFBa/VYOgjPFbRDtwLodNSxrBTWKN0rmE=) 6: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: YW3W1bKInWsNwEHpougegBQZCByUfkIzqYkvcghIsrU=) 7: 323430353a326363303a363030643a3a2f34382d3438203d3e20313336303739.roa (hash: CGrS3KvosZXIQRRyzP3RUDJC59fZRvRWReMEPox/nIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:83:e2:91:fd:15:89:96:0a:02:26:7c:63:d7:a3:23:e7:b5:4e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: May 2 19:17:11 2024 GMT Not After : May 6 02:12:11 2024 GMT Subject: CN=E34BC0F5D94BB238F16C403ACF1D84B835B82360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:84:d1:81:72:82:c8:a8:d6:57:db:e9:c8: 75:a4:62:26:91:f8:29:92:8d:b5:7c:e0:db:7b:ba: 93:a9:9c:f6:37:77:f8:47:ac:e2:7f:6a:b1:3e:dd: 02:d3:28:55:24:f7:a0:76:7b:d0:50:9f:56:47:8d: e0:c9:1e:f3:a7:8d:5c:bc:a6:0f:0a:c5:58:55:23: 37:c9:b1:df:12:eb:7e:1c:7a:ee:1d:ee:5f:bd:4b: b7:04:c1:b5:b3:f6:de:24:59:f0:96:25:09:84:b1: 9a:6e:1e:34:ef:cd:11:13:7c:10:60:d9:ba:3e:69: a8:f2:9a:8c:8e:f7:d0:aa:32:d8:2b:04:ce:1e:b4: 30:c0:4b:68:40:9e:e0:7f:b3:ed:8a:d0:96:52:58: 0b:e0:d1:e6:59:2e:46:ca:e2:2c:40:3a:02:78:bf: 6e:f6:0b:b0:87:69:85:bf:ad:e9:44:13:73:1e:6b: b3:16:11:47:ac:fe:d5:79:7e:a8:cb:40:c6:a0:70: 74:7f:43:e6:99:21:b5:0c:b5:ea:9b:44:21:91:64: 4d:b9:47:71:c6:0e:76:4f:5e:11:7a:70:37:ec:58: 34:23:f7:f7:c5:37:eb:b7:b5:e5:76:72:e3:e6:22: 01:00:1c:73:ce:6b:68:01:db:ce:7f:5c:f2:ec:1b: 86:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4B:C0:F5:D9:4B:B2:38:F1:6C:40:3A:CF:1D:84:B8:35:B8:23:60 X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:aa:bd:fe:3e:48:7d:0f:ac:aa:2a:dd:d5:c1:4e:bb:bc:af: 7a:11:b9:d5:d5:dd:56:40:df:bb:74:72:51:4f:38:4b:92:66: 17:1d:5b:e9:34:68:35:33:db:dd:f5:64:fe:2e:8e:fc:df:8f: 03:26:02:1f:0a:7e:d1:dc:14:4f:9d:ad:c9:33:79:cc:0d:39: 32:2f:80:db:00:24:bf:3e:1b:da:81:1b:71:c4:64:13:ad:3d: c9:b5:d1:21:f2:81:79:29:9b:94:54:86:d5:b9:50:54:74:79: ad:98:96:8a:92:e5:d4:61:05:a6:8f:35:b1:96:d5:88:9e:17: b1:40:8f:2d:51:06:39:8b:aa:29:3f:24:fd:00:df:e1:d5:6e: b8:60:dc:5a:c2:dc:e6:28:3b:7a:7e:6b:c5:6d:4b:bb:8c:8b: d0:87:eb:5c:f7:06:80:f6:43:6e:c8:9c:31:08:4c:70:d0:36: f9:36:ce:17:b1:13:5e:c5:9b:a2:31:5a:6a:0a:2e:69:c5:e2: 4e:a3:e9:76:eb:51:b6:73:42:9d:ae:ff:46:d6:47:e7:34:72: 7a:c9:fd:e6:cb:84:b1:ec:52:1b:4f:b5:07:9b:26:dd:bd:17: 53:01:b7:27:93:18:45:7c:30:ea:c4:81:4a:46:a2:56:a2:c1: fb:69:3f:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYPikf0ViZYKAiZ8Y9ejI+e1TiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yNDA1MDIxOTE3MTFaFw0yNDA1MDYwMjEyMTFaMDMxMTAvBgNV BAMTKEUzNEJDMEY1RDk0QkIyMzhGMTZDNDAzQUNGMUQ4NEI4MzVCODIzNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjYTRgXKCyKjWV9vpyHWkYiaR +CmSjbV84Nt7upOpnPY3d/hHrOJ/arE+3QLTKFUk96B2e9BQn1ZHjeDJHvOnjVy8 pg8KxVhVIzfJsd8S634ceu4d7l+9S7cEwbWz9t4kWfCWJQmEsZpuHjTvzRETfBBg 2bo+aajymoyO99CqMtgrBM4etDDAS2hAnuB/s+2K0JZSWAvg0eZZLkbK4ixAOgJ4 v272C7CHaYW/relEE3Mea7MWEUes/tV5fqjLQMagcHR/Q+aZIbUMteqbRCGRZE25 R3HGDnZPXhF6cDfsWDQj9/fFN+u3teV2cuPmIgEAHHPOa2gB285/XPLsG4aRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU40vA9dlLsjjxbEA6zx2EuDW4I2AwHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU2OTNiODktNDU5Ny00MGI1LTky YjAtYjI5OWZhNzY5YWZhLzAvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzcz MDJBNzJCNTgzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuqvf4+SH0PrKoq3dXBTru8r3oRudXV3VZA 37t0clFPOEuSZhcdW+k0aDUz2931ZP4ujvzfjwMmAh8KftHcFE+drckzecwNOTIv gNsAJL8+G9qBG3HEZBOtPcm10SHygXkpm5RUhtW5UFR0ea2YloqS5dRhBaaPNbGW 1YieF7FAjy1RBjmLqik/JP0A3+HVbrhg3FrC3OYoO3p+a8VtS7uMi9CH61z3BoD2 Q27InDEITHDQNvk2zhexE17Fm6IxWmoKLmnF4k6j6XbrUbZzQp2u/0bWR+c0cnrJ /ebLhLHsUhtPtQebJt29F1MBtyeTGEV8MOrEgUpGolaiwftpP+g= -----END CERTIFICATE-----Generated at Thu May 2 20:02:07 2024 by rpki-client on console-ams.rpki-client.org