$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft File: FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft (raw, json) Hash identifier: g6rC0Q6WwGRfs6GrGv/p/91MjghBw1DzTw/Rg1ZU8YU= Subject key identifier: A1:35:38:1B:2B:04:36:33:8C:29:63:E7:C4:01:90:B6:52:EB:60:9E Authority key identifier: FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E Certificate issuer: /CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E Certificate serial: 3B7AA7BEF4CBFEAE037C0ACBE3C3197ACDD57DB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft Manifest number: 01B2 Signing time: Wed 08 May 2024 20:52:02 +0000 Manifest this update: Wed 08 May 2024 20:47:02 +0000 Manifest next update: Sun 12 May 2024 06:39:02 +0000 Files and hashes: 1: 323030313a6466303a613930303a3a2f34382d3438203d3e203435373031.roa (hash: bOnNASAxU7FvIcmDh0D0xKu1370xmQnojFY5i6CmnOM=) 2: 3130332e38392e37362e302f32342d3234203d3e203435373031.roa (hash: cVrBhQABD5vWTft3TZ4cQdHX3S+6LC2tNnj6LeA9Vpk=) 3: FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl (hash: 7wTLseHkwrAa6Y+otb3mQZom740XY+uQezS60ZIiikQ=) 4: 3130332e38392e37392e302f32342d3234203d3e203435373031.roa (hash: qa7QfUczq7E13MteALse3+HcU+CRKGoztPl8KJpsjxc=) 5: 3130332e38392e37382e302f32342d3234203d3e203435373031.roa (hash: yjkQvhl3lWhDuwGVVQghf0hSHRRy4Xjnuo/O5QntUbY=) 6: 3130332e38392e37372e302f32342d3234203d3e203435373031.roa (hash: a12GPLLv3TF6ktsY+TJPYFE3XXLFlbUu6bOe9YR8GR0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7a:a7:be:f4:cb:fe:ae:03:7c:0a:cb:e3:c3:19:7a:cd:d5:7d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E Validity Not Before: May 8 20:47:02 2024 GMT Not After : May 12 06:39:02 2024 GMT Subject: CN=A135381B2B0436338C2963E7C40190B652EB609E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:0e:ec:a2:ae:e5:1c:81:01:47:e7:4d:cf: c9:9e:68:81:03:80:9c:cb:92:0d:bc:25:07:1a:53: 81:d2:d4:e4:30:ee:87:d8:23:6b:ae:35:c6:10:2f: c2:80:6b:a2:e2:ff:d4:ff:fc:47:59:8b:0d:45:9e: 91:a7:98:fa:be:73:dd:29:8c:3e:ec:c4:77:d2:2b: 9b:14:1d:e6:25:b2:0c:fc:0c:6a:5c:db:dd:0d:5e: 9f:b0:41:a1:58:ec:00:5c:4c:fd:c7:90:79:20:40: 27:52:df:99:46:4e:5c:3c:9e:9b:ad:30:28:9a:5e: 17:b3:64:46:5c:4d:19:ec:1e:3d:b6:3c:90:12:a5: 08:b4:d3:6f:d5:56:61:a9:f3:2a:62:e5:86:2c:d8: 40:49:2a:52:e1:0c:60:66:1e:cb:7a:81:ab:ec:35: 01:24:a9:0d:90:2b:8c:5a:f5:8a:c1:e1:61:8c:37: 0b:6f:7f:e4:c5:a6:87:e9:f7:6c:e9:bb:08:9c:df: 77:39:94:70:dc:7a:03:d2:e4:82:44:23:d3:39:b3: 41:2b:ff:74:78:a2:bc:89:ff:4e:f6:fe:e5:92:48: 6a:4b:b9:90:83:32:92:fb:46:51:26:83:92:06:a0: b3:2c:25:9d:73:70:6c:b9:27:c2:79:83:de:10:0f: 49:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:35:38:1B:2B:04:36:33:8C:29:63:E7:C4:01:90:B6:52:EB:60:9E X509v3 Authority Key Identifier: keyid:FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b3:85:9b:1c:73:9a:d1:f3:76:79:0a:cb:64:35:d1:df:89: d7:18:06:e3:bb:13:10:37:2d:9a:eb:99:16:cc:59:ed:7b:45: 0f:a0:bd:34:bf:ba:d9:a5:55:4c:fd:be:be:51:ac:1e:20:48: b4:8a:4e:fd:4f:03:7a:f4:a4:b1:a1:67:ab:f7:5f:48:f8:30: 28:38:09:f6:38:5d:2d:f2:be:33:87:55:50:1f:66:31:a6:64: b2:2e:2f:84:3b:56:bd:9b:00:79:e0:12:33:17:4b:5c:22:2d: 67:a8:52:7f:17:96:a4:92:5c:4b:d0:7d:a0:d9:0f:29:69:62: d9:08:88:86:6f:53:f3:59:5f:fb:be:ec:ed:95:14:20:3a:27: f6:78:fa:d8:d3:33:c6:39:04:a5:f8:23:42:7c:d1:03:0e:71: e2:e7:f4:24:ab:4b:9e:6d:49:f4:04:5b:d2:47:d7:ff:34:6a: 3c:64:6d:33:51:f7:f8:71:43:33:42:f8:e8:7a:a2:ad:09:a6: 1f:72:17:2f:d5:5e:ff:7e:8d:b4:55:cf:dc:19:67:c3:c3:b8: e6:c0:1a:71:8a:55:b7:c9:de:6d:99:e9:76:11:b8:f2:09:89: 70:fd:98:2c:f3:23:21:50:63:71:85:bb:ef:15:49:26:57:c0: fe:e0:ed:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3qnvvTL/q4DfArL48MZes3VfbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI4OEE4ODUyNTE2REJDRUFDNDI5QzVCNkY5QjdGOThG QUEwMTQwRTAeFw0yNDA1MDgyMDQ3MDJaFw0yNDA1MTIwNjM5MDJaMDMxMTAvBgNV BAMTKEExMzUzODFCMkIwNDM2MzM4QzI5NjNFN0M0MDE5MEI2NTJFQjYwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8g7soq7lHIEBR+dNz8meaIED gJzLkg28JQcaU4HS1OQw7ofYI2uuNcYQL8KAa6Li/9T//EdZiw1FnpGnmPq+c90p jD7sxHfSK5sUHeYlsgz8DGpc290NXp+wQaFY7ABcTP3HkHkgQCdS35lGTlw8nput MCiaXhezZEZcTRnsHj22PJASpQi002/VVmGp8ypi5YYs2EBJKlLhDGBmHst6gavs NQEkqQ2QK4xa9YrB4WGMNwtvf+TFpofp92zpuwic33c5lHDcegPS5IJEI9M5s0Er /3R4oryJ/072/uWSSGpLuZCDMpL7RlEmg5IGoLMsJZ1zcGy5J8J5g94QD0kRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoTU4GysENjOMKWPnxAGQtlLrYJ4wHwYDVR0j BBgwFoAU+4iohSUW286sQpxbb5t/mPqgFA4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIxY2RkNS0yYjNkLTQ2MWEtOWE3Mi0wMDMxZjBiZmI0NWQvMC9GQjg4QTg4NTI1 MTZEQkNFQUM0MjlDNUI2RjlCN0Y5OEZBQTAxNDBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkI4OEE4ODUyNTE2REJDRUFDNDI5QzVCNkY5QjdGOThGQUEw MTQwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMWNkZDUtMmIzZC00NjFhLTlh NzItMDAzMWYwYmZiNDVkLzAvRkI4OEE4ODUyNTE2REJDRUFDNDI5QzVCNkY5QjdG OThGQUEwMTQwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSzhZscc5rR83Z5CstkNdHfidcYBuO7ExA3 LZrrmRbMWe17RQ+gvTS/utmlVUz9vr5RrB4gSLSKTv1PA3r0pLGhZ6v3X0j4MCg4 CfY4XS3yvjOHVVAfZjGmZLIuL4Q7Vr2bAHngEjMXS1wiLWeoUn8XlqSSXEvQfaDZ DylpYtkIiIZvU/NZX/u+7O2VFCA6J/Z4+tjTM8Y5BKX4I0J80QMOceLn9CSrS55t SfQEW9JH1/80ajxkbTNR9/hxQzNC+Oh6oq0Jph9yFy/VXv9+jbRVz9wZZ8PDuObA GnGKVbfJ3m2Z6XYRuPIJiXD9mCzzIyFQY3GFu+8VSSZXwP7g7bc= -----END CERTIFICATE-----Generated at Wed May 8 22:46:47 2024 by rpki-client on console-ams.rpki-client.org