$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft File: BD809D8A065DB595DC069383736A1A9C4A96B267.mft (raw, json) Hash identifier: TwtMg+8IGdjS7r0Q2QwwrFJG8JjPFY53lX2uTu8acCA= Subject key identifier: 50:6B:9D:D5:6A:B5:DA:8E:3D:2A:92:AB:91:BC:6C:53:63:9F:6F:19 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 4330DD3527A54D566BA226C58ACCC72692BB5567 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft Manifest number: 0430 Signing time: Fri 17 May 2024 05:31:50 +0000 Manifest this update: Fri 17 May 2024 05:26:50 +0000 Manifest next update: Mon 20 May 2024 07:53:50 +0000 Files and hashes: 1: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: Jc3zACOb+ky7qQSyk3vJI1VtDyon2NtViYt8zo/dIcc=) 2: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: W6vD4UqDZMKvpabWhw9pZyG5XMD9uS7j/1UVScoDxnw=) 3: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: oXDcg/9vzgUkXpGoov5aGgsX/s3nVpZvkOqCdik9Ovc=) 4: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: LdZ0wReVG6fyDqpQLlNK2Oo+/7MuE/4nsyS76Cje1Vg=) 5: 3130332e35362e3230342e302f32342d3234203d3e20313338313135.roa (hash: jGeK0GZJaYDnRqO/vkaJ6dxajEGAKAkJUdqE3PZIu1w=) 6: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: 8C3xiGo6nG+ikxQtcnAMoDIZm8X0CHTX+y3LQvuICic=) 7: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: lEiCjl1rkLtoCwJbvvMZOTib/ZkQHEwwRU1NPS6M2pM=) 8: BD809D8A065DB595DC069383736A1A9C4A96B267.crl (hash: FFUBUIxYy6PfkZgYR4o6oU0Wuw4EmkoQmXy3YfBFNtc=) 9: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: Ck6aITpQS3jNB2+7J4CBgWiBG1E6aY7DXdeahHEEyTg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 07:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:30:dd:35:27:a5:4d:56:6b:a2:26:c5:8a:cc:c7:26:92:bb:55:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: May 17 05:26:50 2024 GMT Not After : May 20 07:53:50 2024 GMT Subject: CN=506B9DD56AB5DA8E3D2A92AB91BC6C53639F6F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:1d:71:14:0b:59:51:ba:e3:c8:f0:c4:ae: d2:93:27:b1:d1:17:34:e3:a2:04:28:c0:d6:e5:a5: 3c:d0:af:72:0b:23:ca:11:03:32:08:28:29:f5:33: a4:3d:25:a5:de:51:88:9a:71:2d:6c:10:63:d1:20: d7:6d:37:9e:93:2e:ba:55:eb:6d:34:ce:cc:74:bc: c5:76:b6:64:b0:38:1e:60:c9:9d:01:d7:3e:91:14: 97:6b:77:92:84:c2:70:78:8d:68:b6:07:00:41:37: 82:d4:4f:7a:40:50:dc:58:42:b0:47:ed:b5:b1:12: 62:29:52:d2:1c:f4:eb:a4:6b:01:93:b2:80:b7:e1: 3b:a1:b1:d5:66:01:04:80:c0:99:5f:04:73:c7:ed: 7a:8a:d0:13:ad:dc:7d:bc:ba:bb:74:93:32:c6:2b: 8a:b0:6f:50:0d:d9:30:70:be:1b:6c:28:16:a6:4f: 44:2f:c3:1d:01:4b:19:fe:da:f0:87:75:a1:5c:26: 6b:dd:26:f2:01:a7:3c:2b:bc:df:08:00:f4:9a:42: 7c:0b:0c:71:30:20:9f:ad:7b:29:b4:75:8e:24:eb: 49:89:d8:fd:f7:22:0c:8c:d7:1d:6b:74:84:35:8c: e6:0d:f2:27:58:e2:f6:6f:57:55:0e:23:78:cc:ce: 2b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6B:9D:D5:6A:B5:DA:8E:3D:2A:92:AB:91:BC:6C:53:63:9F:6F:19 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:98:65:19:fc:d9:6a:1d:bb:d8:53:20:53:ef:4b:41:4f:92: 2c:3c:89:1b:7e:5c:db:ab:0d:b6:d2:2a:61:60:c3:bc:ed:9d: 8a:7c:7b:7a:ef:8f:8d:34:ae:fd:10:cb:4b:43:3f:38:81:99: 0e:4c:39:eb:c5:54:74:d3:88:d8:60:b8:e0:d1:2b:bd:3c:1c: b0:15:05:b3:fa:2e:75:13:43:d6:db:48:75:99:5f:d0:72:e6: a1:fd:5e:36:f0:f5:67:3b:11:99:2c:f6:d3:fd:50:aa:2e:11: 9a:1c:5e:89:02:77:1b:a8:e2:86:97:a3:11:68:31:32:ce:00: 09:06:cc:b4:05:12:c3:fc:56:ea:f9:f9:22:06:7a:7b:95:3e: 68:59:1f:0b:7d:b4:33:54:b7:fc:7d:be:86:5e:45:37:a2:c6: 78:18:e0:02:44:6d:48:94:e8:16:e2:5b:a2:6f:f8:b8:22:d6: a9:05:9b:78:51:a3:15:8e:f5:fe:82:97:17:a3:d0:a1:9d:d9: c6:10:5b:80:be:77:e5:05:00:1b:6b:09:71:65:4d:fd:52:8a: 17:d5:41:08:b0:45:17:b9:da:f7:bc:37:60:f1:07:64:6f:28: e3:e7:86:97:7b:0c:42:fe:6a:54:19:ea:b7:03:cf:16:ff:0f: 4a:ab:ae:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzDdNSelTVZroibFiszHJpK7VWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNDA1MTcwNTI2NTBaFw0yNDA1MjAwNzUzNTBaMDMxMTAvBgNV BAMTKDUwNkI5REQ1NkFCNURBOEUzRDJBOTJBQjkxQkM2QzUzNjM5RjZGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTR1xFAtZUbrjyPDErtKTJ7HR FzTjogQowNblpTzQr3ILI8oRAzIIKCn1M6Q9JaXeUYiacS1sEGPRINdtN56TLrpV 6200zsx0vMV2tmSwOB5gyZ0B1z6RFJdrd5KEwnB4jWi2BwBBN4LUT3pAUNxYQrBH 7bWxEmIpUtIc9OukawGTsoC34TuhsdVmAQSAwJlfBHPH7XqK0BOt3H28urt0kzLG K4qwb1AN2TBwvhtsKBamT0Qvwx0BSxn+2vCHdaFcJmvdJvIBpzwrvN8IAPSaQnwL DHEwIJ+teym0dY4k60mJ2P33IgyM1x1rdIQ1jOYN8idY4vZvV1UOI3jMzisRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUGud1Wq12o49KpKrkbxsU2OfbxkwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFB OUM0QTk2QjI2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeYZRn82Wodu9hTIFPvS0FPkiw8iRt+XNur DbbSKmFgw7ztnYp8e3rvj400rv0Qy0tDPziBmQ5MOevFVHTTiNhguODRK708HLAV BbP6LnUTQ9bbSHWZX9By5qH9Xjbw9Wc7EZks9tP9UKouEZocXokCdxuo4oaXoxFo MTLOAAkGzLQFEsP8Vur5+SIGenuVPmhZHwt9tDNUt/x9voZeRTeixngY4AJEbUiU 6BbiW6Jv+Lgi1qkFm3hRoxWO9f6Clxej0KGd2cYQW4C+d+UFABtrCXFlTf1SihfV QQiwRRe52ve8N2DxB2RvKOPnhpd7DEL+alQZ6rcDzxb/D0qrrok= -----END CERTIFICATE-----Generated at Fri May 17 06:45:36 2024 by rpki-client on console-ams.rpki-client.org