$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft File: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json) Hash identifier: chnc82xzlmohp9gDscsZsr3XIbHXs9Ek3h+dB8hxYL4= Subject key identifier: 22:DB:55:0C:81:A3:F3:BD:11:0C:77:EE:FE:E9:F6:FB:C8:A9:20:A9 Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Certificate serial: 20791A7A72DE4D12B7DBEADD8E6D401CE686D79C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft Manifest number: D5 Signing time: Fri 17 May 2024 21:50:04 +0000 Manifest this update: Fri 17 May 2024 21:45:04 +0000 Manifest next update: Mon 20 May 2024 22:50:04 +0000 Files and hashes: 1: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: ZGKVuFj7T5aaVSU8VpgBF2DIJjZ5gskuohbO2L3axCo=) 2: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: VhPkgJgRuRIvFBfp5KrcbqFqQDCxgmuJXLYmVyfVrlY=) 3: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: e1X6XxoFMCDikiavzh9utnLXCqqloZlq4fgIdtU07x0=) 4: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: 1sCdYqliqmouQr9aO3moY0v3zqzk2NgBsVyNMs0i8Xo=) 5: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: ltH5xnCskoS1Or603mmRx68ZM/Y4nFtvCENpOq1SJoM=) 6: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: ICHLru3ttqJrvtUB0G3jXEoAZOgThf6FI+tEOSoxM28=) 7: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: M4G3+2ND4JNQkzKKiPu/TTGwUpDm4YJaaeAdjCfIIk4=) 8: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: M1XX69YA4h/dY2a6lbkkrJT2oZb1KyNMzJp9mQ1WMso=) 9: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: hp55s1aaqtg0/53MqP8UsZKmOzBqmgyF+uAtnUwRJl0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 22:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:79:1a:7a:72:de:4d:12:b7:db:ea:dd:8e:6d:40:1c:e6:86:d7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Validity Not Before: May 17 21:45:04 2024 GMT Not After : May 20 22:50:04 2024 GMT Subject: CN=22DB550C81A3F3BD110C77EEFEE9F6FBC8A920A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:df:e0:03:af:c4:79:15:b8:44:98:cc:19: 5d:e0:19:58:04:9e:18:bc:5b:e2:8c:52:ec:55:88: 6c:2d:4d:d0:16:49:f6:18:e6:a4:2d:c5:34:d3:8d: 03:6a:57:b8:a4:03:4e:30:11:a1:6f:54:10:f5:15: 98:0f:45:39:aa:80:d3:88:77:80:08:d7:c9:ce:b1: 6c:99:7d:f3:59:ae:ad:ef:b4:68:6c:9f:e3:19:6a: b8:75:e8:dc:ef:b2:c8:cd:46:ea:86:d6:b1:4a:d0: ad:22:51:ad:54:81:28:a4:69:7b:9e:30:c0:b3:8c: 96:4b:cb:cf:c1:20:58:81:ae:54:35:46:cd:19:c9: 67:d7:97:42:57:ad:41:35:cf:4e:32:17:ed:a7:b7: 4d:9b:51:78:cc:97:c7:9d:93:3c:df:89:89:4f:15: 8c:ab:cf:7b:9b:44:06:50:f6:d5:84:1b:a5:51:a4: 06:fd:a4:c8:fd:6d:fc:5c:14:31:3a:cd:04:c8:52: 1e:cc:a7:7f:e9:ef:11:79:f3:ec:e6:3d:3d:c7:71: 21:5d:57:a0:9b:56:e6:87:91:bc:fb:3c:0e:e3:79: d8:dc:c9:02:d5:6e:55:13:c7:fb:b9:3f:67:73:eb: 34:70:d5:60:3e:b5:e8:37:e6:c0:e7:29:1f:b6:bc: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DB:55:0C:81:A3:F3:BD:11:0C:77:EE:FE:E9:F6:FB:C8:A9:20:A9 X509v3 Authority Key Identifier: keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:7b:da:4c:92:d3:a9:58:80:8c:c9:6a:96:10:94:08:b1:8b: e4:d3:c5:80:0f:ec:68:77:9d:4d:54:ad:54:09:d4:76:1a:2e: 8e:6a:dd:83:3c:5b:31:d2:84:34:fe:e3:19:ca:25:59:1d:05: 86:fe:4f:57:54:14:29:38:f6:ed:eb:38:d1:59:14:f9:e6:3d: 46:14:e7:d7:5a:ff:70:8d:6b:96:0d:3c:5d:6c:f7:a6:81:7f: dd:0f:0f:a3:d6:bb:31:bf:88:86:ed:9c:4e:ea:72:ec:eb:e5: 4f:47:0d:9f:4f:e9:ee:b9:81:16:31:a6:6c:fe:43:59:a3:49: f8:a9:0b:df:b0:0d:8b:3c:59:ae:e0:ca:fe:e0:d7:59:9f:31: ca:6a:94:de:77:5e:ff:50:19:c7:9c:1c:f2:ba:49:9a:23:bc: 70:80:b0:6f:dc:5e:14:b2:76:9e:e5:ce:f0:d5:cf:4d:55:1f: 4a:c2:6c:b1:78:fc:0d:d1:ca:4c:33:c7:70:85:22:84:42:17: 40:32:77:64:9b:55:9c:a0:56:d2:c6:bf:12:a4:10:e3:19:5a: b7:0e:22:11:dc:49:ab:14:b6:c6:ac:b4:16:b8:8f:40:c7:52: c5:e1:8e:b3:b1:fe:60:f7:4a:ca:32:05:11:d7:8a:c7:db:cf: 4f:f2:4a:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHkaenLeTRK32+rdjm1AHOaG15wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw REMxNDY0RjAeFw0yNDA1MTcyMTQ1MDRaFw0yNDA1MjAyMjUwMDRaMDMxMTAvBgNV BAMTKDIyREI1NTBDODFBM0YzQkQxMTBDNzdFRUZFRTlGNkZCQzhBOTIwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTit/gA6/EeRW4RJjMGV3gGVgE nhi8W+KMUuxViGwtTdAWSfYY5qQtxTTTjQNqV7ikA04wEaFvVBD1FZgPRTmqgNOI d4AI18nOsWyZffNZrq3vtGhsn+MZarh16NzvssjNRuqG1rFK0K0iUa1UgSikaXue MMCzjJZLy8/BIFiBrlQ1Rs0ZyWfXl0JXrUE1z04yF+2nt02bUXjMl8edkzzfiYlP FYyrz3ubRAZQ9tWEG6VRpAb9pMj9bfxcFDE6zQTIUh7Mp3/p7xF58+zmPT3HcSFd V6CbVuaHkbz7PA7jedjcyQLVblUTx/u5P2dz6zRw1WA+teg35sDnKR+2vJdLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIttVDIGj870RDHfu/un2+8ipIKkwHwYDVR0j BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx NDY0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURE RDcwREMxNDY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAN72kyS06lYgIzJapYQlAixi+TTxYAP7Gh3 nU1UrVQJ1HYaLo5q3YM8WzHShDT+4xnKJVkdBYb+T1dUFCk49u3rONFZFPnmPUYU 59da/3CNa5YNPF1s96aBf90PD6PWuzG/iIbtnE7qcuzr5U9HDZ9P6e65gRYxpmz+ Q1mjSfipC9+wDYs8Wa7gyv7g11mfMcpqlN53Xv9QGcecHPK6SZojvHCAsG/cXhSy dp7lzvDVz01VH0rCbLF4/A3Rykwzx3CFIoRCF0Ayd2SbVZygVtLGvxKkEOMZWrcO IhHcSasUtsastBa4j0DHUsXhjrOx/mD3SsoyBRHXisfbz0/ySiM= -----END CERTIFICATE-----Generated at Fri May 17 22:51:20 2024 by rpki-client on console-ams.rpki-client.org