$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: C7IROyFMAacZmxfAUojNsh0H+Su2+cd+ikpnVyMqrOk= Subject key identifier: EB:80:AF:43:BF:1E:D4:5A:D6:EE:CA:97:F0:67:35:02:8D:F1:7F:39 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 61CED1226CC6719DB23D465C14411687D62ACAC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 0427 Signing time: Tue 30 Apr 2024 11:01:49 +0000 Manifest this update: Tue 30 Apr 2024 10:56:49 +0000 Manifest next update: Fri 03 May 2024 20:55:49 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: OMySImfpgyCIMlwLth368LnTxjS5g3j3UZAHGZWt0KA=) 2: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: cSdngTV94O65yDIZ0g4l51QfCkFo9al7+56w1pvMiBg=) 3: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: H5gfU2EdRZKEllDZxSQG+9WZL8tWkFK7a5sSljWp8lI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ce:d1:22:6c:c6:71:9d:b2:3d:46:5c:14:41:16:87:d6:2a:ca:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Apr 30 10:56:49 2024 GMT Not After : May 3 20:55:49 2024 GMT Subject: CN=EB80AF43BF1ED45AD6EECA97F06735028DF17F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:bb:bc:43:ed:0b:0d:2c:e6:20:07:80:c4: 54:35:43:55:b0:52:25:a4:15:59:70:3a:95:76:d5: 5b:ab:17:a8:eb:15:44:d1:18:7c:0c:8d:fd:74:2d: 5b:a0:ee:7c:98:39:49:63:91:0e:7d:05:1b:ac:6d: 6d:79:57:ed:37:39:bd:ff:d1:e9:18:c5:aa:81:dd: 4f:cd:7a:34:b5:79:f3:3c:d3:dd:81:1c:59:02:e0: 33:8b:1e:f9:13:d0:e5:6c:f7:2c:79:d5:21:5b:e5: 8b:f5:f7:1a:c7:a8:9d:2f:fb:13:ff:19:71:8c:35: 51:14:2b:e4:c3:b5:38:41:d2:23:8e:e2:94:7c:7c: c8:4c:27:a5:5b:42:c5:d6:6e:c2:4b:dd:80:24:eb: b0:11:5a:91:4b:0a:aa:c3:c3:4c:63:da:5c:f2:87: 77:d6:23:dd:ab:57:b5:4a:17:e3:39:21:22:0c:71: fe:a9:58:ec:01:1d:8f:80:13:90:23:60:64:0e:dc: 0b:87:ac:bd:60:62:b7:2d:4b:38:23:a0:bc:58:d8: 7e:dc:40:33:6d:60:ba:55:a3:01:d7:fb:35:3b:18: 06:81:a0:c4:f0:dc:84:17:6a:90:75:ca:37:4e:a3: 25:36:6e:79:e7:ca:50:8a:a6:66:46:aa:4f:06:39: de:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:80:AF:43:BF:1E:D4:5A:D6:EE:CA:97:F0:67:35:02:8D:F1:7F:39 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:8e:04:c8:35:c3:eb:fa:84:21:d6:cb:16:64:b3:1c:a9:8f: 22:a4:d4:ad:49:ff:50:0b:81:8a:6a:59:bc:77:13:ce:3e:85: aa:56:28:2f:9d:83:9a:42:59:3b:56:ad:dd:65:84:0f:63:31: 65:ac:8e:b1:d1:88:6e:74:5b:a6:e6:46:a4:7d:8c:67:aa:4e: 63:05:14:ba:d0:00:6e:8b:9c:76:ef:f1:12:54:9b:9e:fc:d8: 94:0b:82:d9:dd:d6:fb:70:9b:48:30:72:93:d7:96:58:7b:ee: f1:37:2b:42:db:79:3f:bd:44:94:1f:d2:9f:24:10:46:a6:d5: 61:58:bd:ae:64:1d:96:3a:bd:68:8b:30:c1:b4:22:2b:d5:b7: 27:29:f9:07:74:73:a6:bc:21:97:18:cc:ca:94:83:a7:86:79: aa:cc:de:01:fd:0d:1b:1b:11:44:c7:63:69:2d:c9:6a:d0:48: 49:99:2c:bc:d6:82:3c:76:43:7b:6b:a4:ca:22:ad:64:3a:49: f1:71:da:4a:db:ac:34:55:cf:9f:3d:cc:9f:a4:71:4f:82:67: c1:8a:8d:2c:2e:a6:40:52:2b:e5:fd:8c:3d:f3:90:7d:1b:f8: bf:89:e5:bd:c0:d1:3c:7b:8b:ab:5f:38:4f:66:fa:e3:96:d6: 53:1e:bb:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYc7RImzGcZ2yPUZcFEEWh9YqysYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNDA0MzAxMDU2NDlaFw0yNDA1MDMyMDU1NDlaMDMxMTAvBgNV BAMTKEVCODBBRjQzQkYxRUQ0NUFENkVFQ0E5N0YwNjczNTAyOERGMTdGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgbu8Q+0LDSzmIAeAxFQ1Q1Ww UiWkFVlwOpV21VurF6jrFUTRGHwMjf10LVug7nyYOUljkQ59BRusbW15V+03Ob3/ 0ekYxaqB3U/NejS1efM8092BHFkC4DOLHvkT0OVs9yx51SFb5Yv19xrHqJ0v+xP/ GXGMNVEUK+TDtThB0iOO4pR8fMhMJ6VbQsXWbsJL3YAk67ARWpFLCqrDw0xj2lzy h3fWI92rV7VKF+M5ISIMcf6pWOwBHY+AE5AjYGQO3AuHrL1gYrctSzgjoLxY2H7c QDNtYLpVowHX+zU7GAaBoMTw3IQXapB1yjdOoyU2bnnnylCKpmZGqk8GOd7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU64CvQ78e1FrW7sqX8Gc1Ao3xfzkwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGOBMg1w+v6hCHWyxZksxypjyKk1K1J/1AL gYpqWbx3E84+hapWKC+dg5pCWTtWrd1lhA9jMWWsjrHRiG50W6bmRqR9jGeqTmMF FLrQAG6LnHbv8RJUm5782JQLgtnd1vtwm0gwcpPXllh77vE3K0LbeT+9RJQf0p8k EEam1WFYva5kHZY6vWiLMMG0IivVtycp+Qd0c6a8IZcYzMqUg6eGearM3gH9DRsb EUTHY2ktyWrQSEmZLLzWgjx2Q3trpMoirWQ6SfFx2krbrDRVz589zJ+kcU+CZ8GK jSwupkBSK+X9jD3zkH0b+L+J5b3A0Tx7i6tfOE9m+uOW1lMeu2A= -----END CERTIFICATE-----Generated at Tue Apr 30 19:13:20 2024 by rpki-client on console-ams.rpki-client.org