$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: /b/+9M1GtchZ4JKXAT5/tCjGN5UZTq+APoO1csSH6+Y= Subject key identifier: 67:F6:98:DE:24:75:37:F6:81:AC:28:1F:9B:57:A4:A7:66:80:FD:9C Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 28CFC2F4BBB6372CDF24EBB4CA57BF04729E37F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 0395 Signing time: Thu 09 May 2024 14:01:51 +0000 Manifest this update: Thu 09 May 2024 13:56:51 +0000 Manifest next update: Sun 12 May 2024 20:50:51 +0000 Files and hashes: 1: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: TJd7Y3wfP84prGibqKk8GLq8tUoRV9YHBFdrUmigk/0=) 2: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: GNR1G9qgqANJN1bFgQVrQ3f5CNVGdCJvyCo5IAjGvvE=) 3: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: 2LbzKlFZoCKAH46Dbgno2Llx2xiuTdQE65AGDfQdIfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 14:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:cf:c2:f4:bb:b6:37:2c:df:24:eb:b4:ca:57:bf:04:72:9e:37:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: May 9 13:56:51 2024 GMT Not After : May 12 20:50:51 2024 GMT Subject: CN=67F698DE247537F681AC281F9B57A4A76680FD9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f5:12:b5:f0:89:6b:62:91:6e:7a:d6:4c:07: 41:96:d4:b2:1f:52:e8:77:b0:2c:0c:60:29:c8:33: b7:78:0f:c6:3f:4d:dd:5c:6b:55:b0:2e:94:81:03: 03:7f:cd:bb:0e:0e:a6:72:9b:ea:89:88:71:d5:1a: 92:8d:d3:75:f6:50:d6:09:25:ab:95:71:12:90:3a: 3e:fe:0b:4c:44:c8:41:a9:88:ce:5c:0f:c5:4d:b0: 53:c7:26:14:7d:22:a6:e1:a2:1e:9d:94:cd:5a:fb: da:91:1f:bb:ca:57:27:54:c2:25:55:87:fb:da:65: 00:3d:0b:b6:08:3b:ac:b8:a4:a6:ae:eb:37:c6:bf: b5:bd:6a:1a:26:88:c0:d7:a7:98:2b:82:47:e6:68: 75:87:aa:3e:88:00:64:5d:e2:2e:2b:20:68:41:1e: 24:da:5f:0c:98:41:d1:2f:0d:64:52:be:e3:c3:24: 6c:c0:ff:64:44:bb:ad:31:42:94:4b:56:0c:12:b2: 02:d8:24:ac:e6:08:f6:13:9a:4b:2d:fd:55:9d:b3: 10:aa:dd:84:64:37:90:d2:00:f8:b7:6c:0c:10:bc: e1:9a:4a:1a:4f:75:5e:a2:11:9e:26:e7:48:9b:70: 40:1f:c8:de:8c:d4:0a:aa:2c:39:c6:95:3d:4c:0c: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F6:98:DE:24:75:37:F6:81:AC:28:1F:9B:57:A4:A7:66:80:FD:9C X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:5c:78:aa:75:f7:09:90:0d:1d:02:81:5b:14:ef:f0:27:dd: 90:c3:fe:bf:49:68:98:3e:c3:c0:04:b1:43:88:56:b1:92:cb: dd:01:05:01:c7:f3:f5:20:70:57:3d:f6:98:1c:4a:f8:a0:3b: 7f:45:8e:7f:21:40:51:fc:bd:03:6b:d2:9e:00:33:23:0b:4b: 65:e7:78:16:82:6b:5a:0b:f5:39:83:e8:37:10:72:86:57:4a: 92:21:e0:fb:72:06:30:80:dc:c7:70:60:80:d4:b4:22:b6:64: 71:63:3e:b4:bf:c6:62:fe:66:53:87:3c:5e:69:04:03:7a:40: aa:43:ad:c4:a0:f4:7b:1e:15:7f:4c:f2:bf:26:ff:e9:9d:d0: ba:39:9a:a1:cf:e9:74:d6:5c:13:ab:37:e6:93:8a:4c:69:d2: 62:e0:9f:6f:ca:4c:c0:52:77:cb:ce:88:61:83:cf:6b:42:8b: 93:8d:b1:6d:ab:84:e4:4f:d1:fb:9a:73:f5:cc:8d:b5:56:2c: 35:d0:b9:37:10:03:f9:0f:b6:5e:a7:1a:8f:05:02:47:3e:f8: 8c:81:24:99:c4:69:52:d0:27:8a:e3:65:a3:ce:a2:aa:93:bc: 1c:50:29:a7:49:08:fe:83:0d:f3:6c:34:06:f6:3b:7f:f6:26: ec:57:91:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKM/C9Lu2NyzfJOu0yle/BHKeN/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNDA1MDkxMzU2NTFaFw0yNDA1MTIyMDUwNTFaMDMxMTAvBgNV BAMTKDY3RjY5OERFMjQ3NTM3RjY4MUFDMjgxRjlCNTdBNEE3NjY4MEZEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk9RK18IlrYpFuetZMB0GW1LIf Uuh3sCwMYCnIM7d4D8Y/Td1ca1WwLpSBAwN/zbsODqZym+qJiHHVGpKN03X2UNYJ JauVcRKQOj7+C0xEyEGpiM5cD8VNsFPHJhR9Iqbhoh6dlM1a+9qRH7vKVydUwiVV h/vaZQA9C7YIO6y4pKau6zfGv7W9ahomiMDXp5grgkfmaHWHqj6IAGRd4i4rIGhB HiTaXwyYQdEvDWRSvuPDJGzA/2REu60xQpRLVgwSsgLYJKzmCPYTmkst/VWdsxCq 3YRkN5DSAPi3bAwQvOGaShpPdV6iEZ4m50ibcEAfyN6M1AqqLDnGlT1MDIJvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ/aY3iR1N/aBrCgfm1ekp2aA/ZwwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGJceKp19wmQDR0CgVsU7/An3ZDD/r9JaJg+ w8AEsUOIVrGSy90BBQHH8/UgcFc99pgcSvigO39Fjn8hQFH8vQNr0p4AMyMLS2Xn eBaCa1oL9TmD6DcQcoZXSpIh4PtyBjCA3MdwYIDUtCK2ZHFjPrS/xmL+ZlOHPF5p BAN6QKpDrcSg9HseFX9M8r8m/+md0Lo5mqHP6XTWXBOrN+aTikxp0mLgn2/KTMBS d8vOiGGDz2tCi5ONsW2rhORP0fuac/XMjbVWLDXQuTcQA/kPtl6nGo8FAkc++IyB JJnEaVLQJ4rjZaPOoqqTvBxQKadJCP6DDfNsNAb2O3/2JuxXkVc= -----END CERTIFICATE-----Generated at Thu May 9 14:22:39 2024 by rpki-client on console-fra.rpki-client.org