$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: ltqJEVv8nD/rFPGYdCtuMdZm7D6q3KcrHuudhzMXJWA= Subject key identifier: 88:78:E9:33:9C:E8:A1:DA:CB:C1:E4:1E:9A:88:AB:2B:30:29:2E:50 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 19CE2828D37DC7749245BB53AF32D4EA408ED7E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 043D Signing time: Fri 17 May 2024 05:10:41 +0000 Manifest this update: Fri 17 May 2024 05:05:41 +0000 Manifest next update: Mon 20 May 2024 07:05:41 +0000 Files and hashes: 1: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: C7/RuHJP7EiV+AKZ1QqrFL2lGyUEOj4RDS+futbS3hc=) 2: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: t2obVmHT8FK5ne7xarRG0kJfPCB7CHQ9C/eSHm0km78=) 3: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: Qz3VPAtsQ5pmTU4QezJpic7NPbrD51VE+5rq5XP0n9w=) 4: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: wV3mzM6WktIyo2CqHVsIocOV5QSwXhq7wNjEzBZcMLk=) 5: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: EPr1m1oc2Rzl9xcRxX22+vQEOjWBX+SbMde4cfWhYjU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 07:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ce:28:28:d3:7d:c7:74:92:45:bb:53:af:32:d4:ea:40:8e:d7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: May 17 05:05:41 2024 GMT Not After : May 20 07:05:41 2024 GMT Subject: CN=8878E9339CE8A1DACBC1E41E9A88AB2B30292E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b6:9e:76:71:5e:11:35:11:87:91:88:59:e3: dc:5a:fe:02:28:b7:b2:6d:72:c9:fe:2d:4f:64:23: 7a:ba:9d:10:f7:50:46:4d:f8:33:1c:08:a8:af:1e: 31:b0:27:0e:0d:04:e4:95:4a:6f:53:52:32:2a:67: 8e:90:56:e0:e0:d8:c5:b1:fe:ca:43:a9:e6:35:2e: ab:2e:6c:75:61:b5:2f:28:ab:08:79:1d:17:bb:59: 45:17:c1:59:ad:57:69:0a:82:78:af:b0:42:ec:aa: bf:46:fe:d1:fa:f1:02:9e:2b:bb:ae:60:8f:e1:de: d6:a1:da:7b:78:2d:a0:1d:34:9d:0e:53:3a:d3:f3: ef:98:ab:47:5c:e1:9e:4f:8f:2d:3b:74:a9:23:28: 4a:9c:46:d9:ae:41:9e:5e:44:ec:2a:ab:63:96:e4: 94:7d:64:2c:e0:e7:2c:5b:de:e0:d8:bc:10:4d:5f: 86:22:3c:2c:82:b7:4c:ac:52:e5:fe:52:79:59:f8: aa:7c:9b:ab:dc:4e:b5:5e:5a:c1:1f:1d:42:30:30: ad:95:e1:27:df:83:76:e1:e7:de:09:e2:d7:96:c5: d6:10:68:62:89:04:c9:62:18:71:d4:d3:d2:5d:53: b1:c4:e5:3b:d5:02:ec:04:84:b6:50:aa:e9:27:73: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:78:E9:33:9C:E8:A1:DA:CB:C1:E4:1E:9A:88:AB:2B:30:29:2E:50 X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:76:14:97:4e:28:16:ff:da:46:ff:2b:bf:c3:0e:91:0f:90: 6a:b9:07:9d:b7:8d:e8:c6:22:57:a6:8b:ae:23:b8:f3:f3:dc: 1c:dc:17:f4:48:e2:33:0f:e5:41:25:2b:19:05:5d:f7:5a:a9: c1:9b:63:31:70:22:1a:98:8d:0f:14:8d:94:1b:5f:23:17:1b: 24:74:e3:26:81:74:47:4e:4d:7c:c0:5f:3d:65:74:89:ff:16: b6:77:e8:ba:01:4d:bb:94:a3:19:20:70:dc:fb:70:29:a7:a6: e7:d9:cf:43:5b:79:04:bf:18:6d:e4:8f:2f:e6:79:d4:d3:21: 0b:01:fe:e3:29:11:40:12:5e:30:5d:2b:cd:5a:7f:ca:3a:8d: 12:58:bc:47:c9:3d:83:ce:c3:8f:a4:a1:06:04:5a:4e:2b:28: 49:39:34:97:79:9a:f5:c5:8f:db:c2:a8:a4:31:58:08:b5:ca: d0:a0:1c:9c:69:93:c3:42:70:32:a0:11:32:8d:48:99:71:41: f2:37:4d:95:8e:00:8f:e3:92:04:03:7d:f1:85:94:7e:fc:b0: e8:28:0b:47:75:1f:bb:e7:09:65:bf:1d:a1:7a:1b:7e:54:84: 3e:f7:89:e6:a4:78:75:00:b2:2a:62:a4:a0:a8:aa:ba:bb:fb: ae:26:a7:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGc4oKNN9x3SSRbtTrzLU6kCO1+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNDA1MTcwNTA1NDFaFw0yNDA1MjAwNzA1NDFaMDMxMTAvBgNV BAMTKDg4NzhFOTMzOUNFOEExREFDQkMxRTQxRTlBODhBQjJCMzAyOTJFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftp52cV4RNRGHkYhZ49xa/gIo t7Jtcsn+LU9kI3q6nRD3UEZN+DMcCKivHjGwJw4NBOSVSm9TUjIqZ46QVuDg2MWx /spDqeY1LqsubHVhtS8oqwh5HRe7WUUXwVmtV2kKgnivsELsqr9G/tH68QKeK7uu YI/h3tah2nt4LaAdNJ0OUzrT8++Yq0dc4Z5Pjy07dKkjKEqcRtmuQZ5eROwqq2OW 5JR9ZCzg5yxb3uDYvBBNX4YiPCyCt0ysUuX+UnlZ+Kp8m6vcTrVeWsEfHUIwMK2V 4Sffg3bh594J4teWxdYQaGKJBMliGHHU09JdU7HE5TvVAuwEhLZQqukncyy9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiHjpM5zoodrLweQemoirKzApLlAwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt2FJdOKBb/2kb/K7/DDpEPkGq5B523jejG Ilemi64juPPz3BzcF/RI4jMP5UElKxkFXfdaqcGbYzFwIhqYjQ8UjZQbXyMXGyR0 4yaBdEdOTXzAXz1ldIn/FrZ36LoBTbuUoxkgcNz7cCmnpufZz0NbeQS/GG3kjy/m edTTIQsB/uMpEUASXjBdK81af8o6jRJYvEfJPYPOw4+koQYEWk4rKEk5NJd5mvXF j9vCqKQxWAi1ytCgHJxpk8NCcDKgETKNSJlxQfI3TZWOAI/jkgQDffGFlH78sOgo C0d1H7vnCWW/HaF6G35UhD73ieakeHUAsipipKCoqrq7+64mp2Q= -----END CERTIFICATE-----Generated at Fri May 17 06:45:36 2024 by rpki-client on console-ams.rpki-client.org