$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: Ect9TNzY+7lA3PeMOGLFkcqXFT0vB2/WdHw73AVYDNg= Subject key identifier: 6A:CF:98:1C:9C:A5:C4:3D:67:34:40:B8:20:BA:8A:A5:A5:4F:40:2E Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 2C099F51930DC29E9144EB1037449549E8143F37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 0137 Signing time: Thu 30 May 2024 02:11:17 +0000 Manifest this update: Thu 30 May 2024 02:06:17 +0000 Manifest next update: Sun 02 Jun 2024 08:18:17 +0000 Files and hashes: 1: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: NUPlEw08Zx7YoeB4OqO+Ox+lwPcpmhcKsBziz0RYTAM=) 2: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: WBfZU9EJWBBDPGyhu5utNPjbaRfLoIm18idP5VVohKw=) 3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 5QmpoA9m0mmWsLSv00ogy7OAuITKadv3G3HLB3Oky3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 01:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:09:9f:51:93:0d:c2:9e:91:44:eb:10:37:44:95:49:e8:14:3f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: May 30 02:06:17 2024 GMT Not After : Jun 2 08:18:17 2024 GMT Subject: CN=6ACF981C9CA5C43D673440B820BA8AA5A54F402E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:5d:db:eb:51:3c:b1:90:99:ed:fc:42:0c: fb:54:11:66:62:2f:8e:b4:8a:90:f6:19:e7:17:1a: dc:18:89:95:ae:48:ae:35:9d:b5:ee:77:5b:3b:49: 26:58:f6:52:f9:fa:c6:19:40:9a:88:a7:7a:a1:52: 70:30:4c:0d:58:59:41:44:01:3b:11:fb:31:dd:09: 41:c3:a5:bf:98:aa:c1:ee:7c:2e:4e:c5:06:bf:1b: 23:68:8e:9c:b9:fe:a8:61:1b:fc:3e:45:68:9d:d8: c8:05:42:ac:25:a8:ef:30:a0:b2:63:67:07:01:bc: 91:d9:e6:f5:bb:30:68:98:f8:f9:1f:d4:8e:2a:03: 0c:fe:a0:ee:eb:0c:b1:17:11:ae:be:9f:8a:69:51: 97:8f:c8:05:6e:d2:5a:8e:6b:0a:a6:ec:05:65:e1: 68:f0:3c:ac:0a:12:f4:c9:25:11:88:07:60:c1:2f: c1:69:51:5b:f2:97:ca:fd:90:c2:b4:53:1b:6a:86: b9:57:39:98:b4:a4:c6:52:08:13:c6:71:57:3f:cc: e1:2e:6f:5b:f2:61:e1:d8:37:0b:c8:eb:32:ab:d9: 73:92:61:80:09:f1:a4:ff:b5:88:c7:a2:2d:08:72: 4f:e6:08:c4:2e:61:ab:9f:79:23:ef:bc:c3:b3:af: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CF:98:1C:9C:A5:C4:3D:67:34:40:B8:20:BA:8A:A5:A5:4F:40:2E X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e4:4d:63:31:02:e1:f2:54:ca:f5:80:68:c8:e7:9f:ce:f4: 16:92:3c:64:97:e0:ba:5b:d2:da:dd:8c:af:41:ba:ae:9a:4b: 61:44:56:02:c3:f6:81:e1:1b:ef:8e:2c:4a:e4:e1:c3:25:5b: ba:54:6c:01:5c:54:cb:22:88:20:ad:97:ac:84:cc:ba:ab:c3: 22:2a:6a:e4:00:52:df:3b:fa:c6:ad:72:bd:85:87:5b:0a:de: d0:3b:5a:fe:f8:a0:c3:f1:17:b6:39:ff:2a:c4:bf:55:bf:8b: bd:56:65:58:a8:3e:ce:87:b5:cb:c0:65:50:b0:b8:0e:75:06: c8:e4:a6:f5:22:30:29:17:49:67:f7:2a:f0:bb:69:25:5a:91: fc:d0:21:22:3f:19:7a:3f:6e:90:92:06:94:8c:a4:96:27:7e: 2e:ea:13:fe:81:0e:fe:99:29:37:c7:df:d2:2f:24:de:06:5b: 1c:22:7c:c2:8b:f2:87:2c:ae:40:46:7c:cd:88:40:8d:97:1f: 4c:3f:c8:9e:54:70:f0:7e:9d:d8:5b:a9:9d:8f:53:8b:de:7f: 7b:83:79:0a:96:e8:30:85:41:1b:c8:d3:99:a1:95:06:ee:8c: d1:ff:a7:1d:68:b1:91:43:92:6b:06:b8:38:2a:7a:22:85:a8: ae:fb:7f:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAmfUZMNwp6RROsQN0SVSegUPzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNDA1MzAwMjA2MTdaFw0yNDA2MDIwODE4MTdaMDMxMTAvBgNV BAMTKDZBQ0Y5ODFDOUNBNUM0M0Q2NzM0NDBCODIwQkE4QUE1QTU0RjQwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwF3b61E8sZCZ7fxCDPtUEWZi L460ipD2GecXGtwYiZWuSK41nbXud1s7SSZY9lL5+sYZQJqIp3qhUnAwTA1YWUFE ATsR+zHdCUHDpb+YqsHufC5OxQa/GyNojpy5/qhhG/w+RWid2MgFQqwlqO8woLJj ZwcBvJHZ5vW7MGiY+Pkf1I4qAwz+oO7rDLEXEa6+n4ppUZePyAVu0lqOawqm7AVl 4WjwPKwKEvTJJRGIB2DBL8FpUVvyl8r9kMK0UxtqhrlXOZi0pMZSCBPGcVc/zOEu b1vyYeHYNwvI6zKr2XOSYYAJ8aT/tYjHoi0Ick/mCMQuYaufeSPvvMOzryxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUas+YHJylxD1nNEC4ILqKpaVPQC4wHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbkTWMxAuHyVMr1gGjI55/O9BaSPGSX4Lpb 0trdjK9Buq6aS2FEVgLD9oHhG++OLErk4cMlW7pUbAFcVMsiiCCtl6yEzLqrwyIq auQAUt87+satcr2Fh1sK3tA7Wv74oMPxF7Y5/yrEv1W/i71WZVioPs6HtcvAZVCw uA51BsjkpvUiMCkXSWf3KvC7aSVakfzQISI/GXo/bpCSBpSMpJYnfi7qE/6BDv6Z KTfH39IvJN4GWxwifMKL8ocsrkBGfM2IQI2XH0w/yJ5UcPB+ndhbqZ2PU4vef3uD eQqW6DCFQRvI05mhlQbujNH/px1osZFDkmsGuDgqeiKFqK77f+Q= -----END CERTIFICATE-----Generated at Thu May 30 03:37:49 2024 by rpki-client on console-ams.rpki-client.org