$ rpki-client -vvf repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft (raw, json) Hash identifier: lF1X3L458RwfQWe8eiHYN3yBmrtWyczKFI1zPBvX12Q= Subject key identifier: 92:D5:82:76:B5:83:99:61:10:A2:52:3B:6B:41:98:4E:8B:22:E3:12 Authority key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Certificate issuer: /CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Certificate serial: 48313993A54480678D1A6838A223D3114C9DC2E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft Manifest number: 02AD Signing time: Sat 11 May 2024 14:31:16 +0000 Manifest this update: Sat 11 May 2024 14:26:16 +0000 Manifest next update: Tue 14 May 2024 15:12:16 +0000 Files and hashes: 1: 3130332e3136342e3137302e302f32332d3234203d3e203137393935.roa (hash: KYQ2qFYOLvXXRwpi7qJpeFGTXfoc6jQamjCZpOn04V4=) 2: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl (hash: Knu8L/tywkHgPIvnvRqHHHlbZMPjhujgDxpimIyTcNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 15:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:31:39:93:a5:44:80:67:8d:1a:68:38:a2:23:d3:11:4c:9d:c2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Validity Not Before: May 11 14:26:16 2024 GMT Not After : May 14 15:12:16 2024 GMT Subject: CN=92D58276B583996110A2523B6B41984E8B22E312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:9f:62:53:5c:29:59:fb:de:f9:03:00:40: 49:d6:f6:40:07:d3:de:6b:b3:22:10:68:6c:12:96: e7:d9:f0:67:19:38:70:b0:6a:60:15:b8:8a:5a:9e: 0b:21:eb:92:ce:31:58:d2:5d:25:70:16:76:d1:89: 82:9d:7e:ae:53:25:59:e2:b5:63:9c:6e:f0:5c:22: f3:f2:1b:30:d6:ed:39:65:e0:ca:c0:38:6a:b9:ba: f7:ec:39:02:a5:dd:b0:56:ed:40:cc:d3:00:46:5f: a1:c2:c1:75:42:be:0c:dd:61:9d:f9:21:e0:fc:5e: 87:4f:fc:6d:8d:3b:da:72:4e:46:ec:93:8d:f8:27: bc:9d:18:2f:24:d2:8c:0e:d1:33:2a:0f:bb:5b:80: 0e:e3:09:77:7e:53:b8:65:a4:af:73:74:6a:f2:07: b8:67:19:11:f4:04:03:65:5f:35:23:23:6b:e5:2c: 85:fe:2c:5e:6e:1f:f8:b9:7a:29:9a:1d:6e:73:48: 0e:a9:d5:fa:8e:37:ae:86:da:e6:2c:c2:79:27:27: 1d:d5:56:89:84:6f:ab:74:87:b1:cf:c2:aa:ba:e6: 28:b9:37:ec:e5:d0:25:eb:30:aa:8c:c1:a9:d4:b5: 7d:12:62:56:7f:cc:88:3f:9f:7a:65:72:27:07:be: 12:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D5:82:76:B5:83:99:61:10:A2:52:3B:6B:41:98:4E:8B:22:E3:12 X509v3 Authority Key Identifier: keyid:FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f7:d4:52:33:81:50:7c:cc:86:8b:3f:a7:f8:09:2c:51:08: 77:e1:89:21:ed:b7:cf:34:bf:8c:3f:3e:4e:ef:7c:48:a4:a6: d5:b7:1b:95:56:9d:fd:47:77:39:8c:62:d5:2c:e2:b0:20:f6: a3:20:13:74:f9:68:09:f6:89:f5:20:91:75:7b:43:66:5c:44: ab:26:86:12:21:44:e8:67:da:fc:d0:20:8f:93:89:8c:72:90: b8:63:1e:12:a8:26:8a:bc:6d:3c:1f:77:80:50:f0:97:88:ae: c7:b1:e7:f1:4f:30:f4:12:78:dd:23:50:2d:70:d1:20:db:b1: 98:7d:04:d8:57:2e:a7:22:d9:a8:1c:aa:68:14:f0:83:00:25: 10:1c:8d:c4:42:26:80:0a:72:80:ce:d4:25:bc:b0:e6:ce:5b: 51:00:eb:05:51:fd:65:e9:94:a3:f9:d9:be:e3:df:c7:99:76: 41:91:68:a0:65:c0:f5:0d:61:4b:62:b3:c8:9a:a1:d0:a7:99: 6b:49:a6:14:3b:e3:18:18:38:2a:1e:79:1a:5b:15:e5:3a:51: c1:11:0f:8d:81:07:67:1a:dd:a9:a9:97:46:2c:94:52:24:39: a4:ca:72:b7:22:c8:39:61:d8:db:a3:52:69:36:65:01:f0:cb: 5f:8d:78:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDE5k6VEgGeNGmg4oiPTEUydwuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVD RTY3NDI0NTAeFw0yNDA1MTExNDI2MTZaFw0yNDA1MTQxNTEyMTZaMDMxMTAvBgNV BAMTKDkyRDU4Mjc2QjU4Mzk5NjExMEEyNTIzQjZCNDE5ODRFOEIyMkUzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCar59iU1wpWfve+QMAQEnW9kAH 095rsyIQaGwSlufZ8GcZOHCwamAVuIpangsh65LOMVjSXSVwFnbRiYKdfq5TJVni tWOcbvBcIvPyGzDW7Tll4MrAOGq5uvfsOQKl3bBW7UDM0wBGX6HCwXVCvgzdYZ35 IeD8XodP/G2NO9pyTkbsk434J7ydGC8k0owO0TMqD7tbgA7jCXd+U7hlpK9zdGry B7hnGRH0BANlXzUjI2vlLIX+LF5uH/i5eimaHW5zSA6p1fqON66G2uYswnknJx3V VomEb6t0h7HPwqq65ii5N+zl0CXrMKqMwanUtX0SYlZ/zIg/n3plcicHvhLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUktWCdrWDmWEQolI7a0GYTosi4xIwHwYDVR0j BBgwFoAU+z/MGmmxvZLWoxnX/YIO7s5nQkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMC9GQjNGQ0MxQTY5 QjFCRDkyRDZBMzE5RDdGRDgyMEVFRUNFNjc0MjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBFRUVDRTY3 NDI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ4N2JlZWQtNjMzMC00ZjMzLTkx MDUtODc3MjJjZGYyZGQwLzAvRkIzRkNDMUE2OUIxQkQ5MkQ2QTMxOUQ3RkQ4MjBF RUVDRTY3NDI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAL31FIzgVB8zIaLP6f4CSxRCHfhiSHtt880 v4w/Pk7vfEikptW3G5VWnf1HdzmMYtUs4rAg9qMgE3T5aAn2ifUgkXV7Q2ZcRKsm hhIhROhn2vzQII+TiYxykLhjHhKoJoq8bTwfd4BQ8JeIrsex5/FPMPQSeN0jUC1w 0SDbsZh9BNhXLqci2agcqmgU8IMAJRAcjcRCJoAKcoDO1CW8sObOW1EA6wVR/WXp lKP52b7j38eZdkGRaKBlwPUNYUtis8iaodCnmWtJphQ74xgYOCoeeRpbFeU6UcER D42BB2ca3ampl0YslFIkOaTKcrciyDlh2NujUmk2ZQHwy1+NePE= -----END CERTIFICATE-----Generated at Sat May 11 15:13:06 2024 by rpki-client on console-ams.rpki-client.org