$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: cRtQ4Fc6d2oHv5fY8O5jlDXfH/mnYwWs65hpP29pE0c= Subject key identifier: FD:DE:ED:F1:34:D8:3D:71:AE:2D:C1:58:CB:40:A4:5D:A3:0E:76:BC Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 54D42AFE8D4D79F52C18F8C114752207CF1B9C70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 0433 Signing time: Wed 29 May 2024 18:02:00 +0000 Manifest this update: Wed 29 May 2024 17:57:00 +0000 Manifest next update: Sun 02 Jun 2024 01:46:00 +0000 Files and hashes: 1: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: dthX6KCsa5SBHytTXuYP8cR/gxsChjNKaGwIvw51LyY=) 2: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: TPb9sPuiNvRLuDGDwtPWdoqzKN3tFVPD5c0Ec8szSFw=) 3: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: bhIqWXDE8zv/OfLjLDPctL1qDOf+BD8e8ofAuH5hMN4=) 4: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: /bHrMl0W07beZ0CaZOhv2DYItyxoNBXk7HdPKk6F5XE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d4:2a:fe:8d:4d:79:f5:2c:18:f8:c1:14:75:22:07:cf:1b:9c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: May 29 17:57:00 2024 GMT Not After : Jun 2 01:46:00 2024 GMT Subject: CN=FDDEEDF134D83D71AE2DC158CB40A45DA30E76BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:56:01:f4:cf:b0:1f:60:c4:b5:b8:20:41:ae: 20:8b:28:9d:b7:4d:2f:22:d0:a3:5b:d5:22:b7:4b: f9:b1:16:71:1f:86:d2:58:26:b3:2f:25:04:b9:1e: 47:dd:27:1a:17:14:da:f7:69:d8:34:32:be:46:6b: 2d:65:5b:01:28:a0:d9:20:48:c6:e5:0b:29:4d:83: ae:03:a6:dd:2c:ff:28:48:3a:5d:b5:fa:c2:c6:f3: 1a:00:7f:a9:70:cf:89:68:93:1a:6d:1b:29:ff:52: 61:6b:8f:cb:4a:e3:bd:78:83:ac:ff:d5:a7:5d:c8: 91:1d:f5:30:70:10:0a:2d:f5:d8:d0:6d:b6:48:39: 76:cd:a0:53:de:fd:5c:0e:84:67:f2:ca:64:a1:86: b2:78:9d:35:6f:ad:bd:13:c6:bc:37:51:22:5b:cb: c2:ad:80:6f:91:01:d0:03:18:d2:b1:06:de:9f:9d: cc:c5:ea:5c:c3:1b:b6:fd:ce:78:77:f0:3d:ca:36: 08:84:cc:83:8f:7c:96:c2:6b:7c:d7:7f:dc:eb:e6: 3d:22:45:4a:3c:83:b2:3b:a6:5e:94:00:fe:3b:42: a9:b1:f8:19:03:8f:2d:4a:27:45:11:21:6a:b4:e8: 9b:79:ac:a5:19:3b:7e:05:89:7e:f0:be:57:13:e2: f4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DE:ED:F1:34:D8:3D:71:AE:2D:C1:58:CB:40:A4:5D:A3:0E:76:BC X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:0b:5b:31:6d:71:99:bd:a0:24:90:bb:58:a5:f2:df:56:3b: 4e:bd:64:03:3b:e8:dc:f1:69:7c:a2:d5:c4:1f:91:06:80:18: d7:de:0e:5d:b7:69:3a:e9:f8:27:ca:f1:cb:cc:cf:f6:1d:1c: 1f:07:6f:62:c3:ff:06:12:7e:a0:da:1f:1d:be:44:bd:b9:ec: e6:d8:f5:7e:f7:9a:56:fd:af:f2:99:70:2b:fd:5c:24:38:f7: 9f:a1:b2:a1:30:9e:73:df:5d:3b:c2:2e:8c:0f:d6:80:00:92: 03:8b:82:c7:67:e5:ed:05:cf:ec:5c:b1:29:fb:62:6b:f5:29: e1:84:70:5a:26:be:83:a3:54:5c:16:9c:2b:43:5c:8e:de:76: 5d:4f:25:0c:a5:83:6c:df:d5:ad:a1:b6:f4:34:d9:0e:18:5b: e5:c1:f0:d0:28:a6:b9:c4:39:57:bd:49:4c:a4:b8:2c:40:55: f3:11:43:98:6b:24:71:23:bf:20:c3:81:0a:51:69:c8:f3:e8: 98:a2:ea:c7:e5:9d:e3:f4:12:1b:45:17:06:36:12:8e:cf:0e: 07:28:b7:e8:0e:e9:cf:12:03:5a:c7:aa:8a:e9:8c:15:7a:ac: 48:b2:37:41:9f:ca:af:9f:f9:03:16:75:42:43:89:93:06:2e: de:c4:87:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNQq/o1NefUsGPjBFHUiB88bnHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNDA1MjkxNzU3MDBaFw0yNDA2MDIwMTQ2MDBaMDMxMTAvBgNV BAMTKEZEREVFREYxMzREODNENzFBRTJEQzE1OENCNDBBNDVEQTMwRTc2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVgH0z7AfYMS1uCBBriCLKJ23 TS8i0KNb1SK3S/mxFnEfhtJYJrMvJQS5HkfdJxoXFNr3adg0Mr5Gay1lWwEooNkg SMblCylNg64Dpt0s/yhIOl21+sLG8xoAf6lwz4lokxptGyn/UmFrj8tK4714g6z/ 1addyJEd9TBwEAot9djQbbZIOXbNoFPe/VwOhGfyymShhrJ4nTVvrb0Txrw3USJb y8KtgG+RAdADGNKxBt6fnczF6lzDG7b9znh38D3KNgiEzIOPfJbCa3zXf9zr5j0i RUo8g7I7pl6UAP47Qqmx+BkDjy1KJ0URIWq06Jt5rKUZO34FiX7wvlcT4vTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/d7t8TTYPXGuLcFYy0CkXaMOdrwwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0LWzFtcZm9oCSQu1il8t9WO069ZAM76Nzx aXyi1cQfkQaAGNfeDl23aTrp+CfK8cvMz/YdHB8Hb2LD/wYSfqDaHx2+RL257ObY 9X73mlb9r/KZcCv9XCQ495+hsqEwnnPfXTvCLowP1oAAkgOLgsdn5e0Fz+xcsSn7 Ymv1KeGEcFomvoOjVFwWnCtDXI7edl1PJQylg2zf1a2htvQ02Q4YW+XB8NAoprnE OVe9SUykuCxAVfMRQ5hrJHEjvyDDgQpRacjz6Jii6sflneP0EhtFFwY2Eo7PDgco t+gO6c8SA1rHqorpjBV6rEiyN0Gfyq+f+QMWdUJDiZMGLt7Ehww= -----END CERTIFICATE-----Generated at Wed May 29 21:55:25 2024 by rpki-client on console-ams.rpki-client.org