$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft (raw, json) Hash identifier: WLBsCUJsib8D+2pGkOetUbkJ8iaTXh4GDDASer/Naqo= Subject key identifier: 9F:B2:A5:37:E6:A9:F6:B0:8A:B0:D8:6F:75:16:16:62:41:B8:20:84 Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 14FE2ABEBC1BFFC162F73000EA18E6D58D76D37B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft Manifest number: 0142 Signing time: Fri 17 May 2024 11:00:43 +0000 Manifest this update: Fri 17 May 2024 10:55:43 +0000 Manifest next update: Mon 20 May 2024 20:47:43 +0000 Files and hashes: 1: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: gwZEOTJ9RvHsz8NVnMhDUDNoD6twtkjnxJbK5Yw/hi4=) 2: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: ROpvS3RnkfTnhxjuQ32b+fwz7IB+o1xhpNOdiN2KnhA=) 3: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: iyoiMRwsIajIM2TaWhebxXz1q29AeJvhYkGXkSK1Bd0=) 4: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: tkzZuf7JfbezRTv15414IroAVNAguQHh0TGGYRvOMs4=) 5: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: Q/LrC0lApeEpkcG4EsW/h+HjwO1YTc03oRd8jJlrVMc=) 6: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl (hash: clrCN4Drr7Wm+Rtps4b1JW9JK+klddnBW/TDwomHu2Y=) 7: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: vEN5+8N4lOo4Itdf+oFc07PgLTLPtkSPNTs1/8b7E0U=) 8: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: 3qnCtoCeKXBegDtpX3cC5NA+r2J5bWzaWBUjmHqCK/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 20:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fe:2a:be:bc:1b:ff:c1:62:f7:30:00:ea:18:e6:d5:8d:76:d3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: May 17 10:55:43 2024 GMT Not After : May 20 20:47:43 2024 GMT Subject: CN=9FB2A537E6A9F6B08AB0D86F7516166241B82084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:6e:3b:67:94:7b:86:79:03:c4:70:09:b3: ba:16:d2:c1:a9:3f:11:ba:a9:dd:70:f3:00:75:b4: 34:44:09:db:c2:a1:73:bc:89:c0:10:52:0e:52:73: 64:d6:ed:cc:fa:7a:e3:de:2a:95:3f:73:fd:93:b2: ec:b3:14:7b:6d:64:09:ad:82:d1:4e:0e:a8:1c:15: c8:be:aa:ff:3f:ad:c1:00:1f:19:0d:a7:6c:21:df: c9:bf:b2:2d:b8:0d:ff:05:eb:93:88:14:81:a7:9d: 22:7e:bc:9c:af:ce:46:f1:c8:33:c4:da:84:07:21: 06:65:05:5a:b4:6d:d9:04:fa:e6:84:de:47:00:e6: e6:e6:a8:a1:7c:bd:55:ce:b3:46:1b:d5:87:a1:bd: f7:f6:ef:cb:90:67:14:f5:22:7f:04:d0:58:df:7b: 26:e6:31:f4:c3:d8:00:28:bf:3c:b8:0f:0d:76:28: 85:ad:e9:b0:60:d6:9d:f2:d0:b0:80:03:13:20:55: bc:0f:8d:82:fd:37:6d:02:4e:d1:6e:24:a5:cb:9f: 54:48:9e:a2:b0:ea:e5:aa:2c:97:81:27:a5:1f:6f: 79:79:98:f1:2b:c2:f7:2b:45:55:8d:9e:d3:6b:f9: 7f:6d:9a:87:35:1e:8d:35:0c:6f:78:c4:cb:35:af: 79:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B2:A5:37:E6:A9:F6:B0:8A:B0:D8:6F:75:16:16:62:41:B8:20:84 X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4d:94:f4:35:2c:52:2e:e3:f5:c5:30:a9:3c:83:f9:e4:75: 2d:ae:66:a3:b5:76:18:b8:c5:fb:c6:b7:dc:7f:85:a8:9a:2d: df:3c:37:bb:6b:48:f3:37:57:83:70:34:de:1f:b4:2e:dc:16: a8:f1:f0:97:1c:03:ab:b3:bd:59:cb:ca:52:cb:dd:ff:be:d5: 91:8d:0a:e8:ee:39:2a:e8:0c:57:63:d1:ee:de:4d:59:79:31: e0:0c:af:51:f8:7b:e7:44:0d:3f:ab:03:dc:7f:97:25:37:d7: c6:e0:30:1a:3f:46:36:d0:00:4b:df:49:d3:98:93:6e:ec:a0: 1a:ce:b1:06:9e:67:f1:18:f4:aa:61:5d:f2:a7:64:22:88:4b: 52:00:2d:32:3c:fd:3e:33:42:3c:96:95:39:c2:78:98:58:2f: e4:39:e6:de:00:12:b6:29:90:0f:8c:3e:0c:42:63:a9:20:2e: aa:6f:c3:8e:a9:97:89:44:ff:94:43:54:35:46:79:60:d6:14: af:c3:d6:48:99:c2:4b:ba:a9:2b:08:e0:71:b9:ee:33:b9:0b: b0:56:d3:f6:ec:62:4c:b8:f8:00:89:8d:21:95:51:d6:8d:35: 7d:ef:1a:e3:96:aa:ab:24:cb:43:d5:6d:2a:09:c0:20:ec:70: 0e:9f:7d:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFP4qvrwb/8Fi9zAA6hjm1Y1203swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNDA1MTcxMDU1NDNaFw0yNDA1MjAyMDQ3NDNaMDMxMTAvBgNV BAMTKDlGQjJBNTM3RTZBOUY2QjA4QUIwRDg2Rjc1MTYxNjYyNDFCODIwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyeW47Z5R7hnkDxHAJs7oW0sGp PxG6qd1w8wB1tDRECdvCoXO8icAQUg5Sc2TW7cz6euPeKpU/c/2TsuyzFHttZAmt gtFODqgcFci+qv8/rcEAHxkNp2wh38m/si24Df8F65OIFIGnnSJ+vJyvzkbxyDPE 2oQHIQZlBVq0bdkE+uaE3kcA5ubmqKF8vVXOs0Yb1Yehvff278uQZxT1In8E0Fjf eybmMfTD2AAovzy4Dw12KIWt6bBg1p3y0LCAAxMgVbwPjYL9N20CTtFuJKXLn1RI nqKw6uWqLJeBJ6Ufb3l5mPErwvcrRVWNntNr+X9tmoc1Ho01DG94xMs1r3nXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn7KlN+ap9rCKsNhvdRYWYkG4IIQwHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBC MDU1RjlEQTQxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5NlPQ1LFIu4/XFMKk8g/nkdS2uZqO1dhi4 xfvGt9x/haiaLd88N7trSPM3V4NwNN4ftC7cFqjx8JccA6uzvVnLylLL3f++1ZGN CujuOSroDFdj0e7eTVl5MeAMr1H4e+dEDT+rA9x/lyU318bgMBo/RjbQAEvfSdOY k27soBrOsQaeZ/EY9KphXfKnZCKIS1IALTI8/T4zQjyWlTnCeJhYL+Q55t4AErYp kA+MPgxCY6kgLqpvw46pl4lE/5RDVDVGeWDWFK/D1kiZwku6qSsI4HG57jO5C7BW 0/bsYky4+ACJjSGVUdaNNX3vGuOWqqsky0PVbSoJwCDscA6ffUo= -----END CERTIFICATE-----Generated at Fri May 17 13:11:30 2024 by rpki-client on console-ams.rpki-client.org