$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft (raw, json) Hash identifier: y+ePzPhbGRyimVBmpHTazDeUULM4/t5sKZ4Qtj8LrnY= Subject key identifier: 68:CB:6D:34:39:26:16:64:68:B2:1D:0A:8B:39:78:71:A6:E2:13:11 Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 2668633005CD8D78F3149B61EE0756FE40C96087 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft Manifest number: 0436 Signing time: Thu 30 May 2024 02:11:07 +0000 Manifest this update: Thu 30 May 2024 02:06:07 +0000 Manifest next update: Sun 02 Jun 2024 02:53:07 +0000 Files and hashes: 1: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: F7dPR+DTiYf/vFIYLFjsIyXUYzfzEJmvx/fKwNnoydI=) 2: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl (hash: LOoGYrGDeqvz/PU6TOMVDRWF3JYr5Rkxei6mt3IFXik=) 3: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: L6RC9ldytX+ERqfEdKcW6bNYxt3CytK6uSaNPmMefjQ=) 4: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: UBD4YSX2GrKOcis2ffdiBkbZonrDnfLgQDUAL7583H4=) 5: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: 3J2qLK+LYy3SzdHJ7Spp0gzbCHY+ctygtc+I9oEzhYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 01:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:68:63:30:05:cd:8d:78:f3:14:9b:61:ee:07:56:fe:40:c9:60:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: May 30 02:06:07 2024 GMT Not After : Jun 2 02:53:07 2024 GMT Subject: CN=68CB6D343926166468B21D0A8B397871A6E21311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:e0:2e:5c:18:09:b2:97:90:48:3b:28:5d: f6:94:4d:75:72:28:d7:3f:4e:28:c1:17:8a:59:e2: 8d:fc:d2:80:c9:c9:97:d2:df:4a:a9:03:10:1a:34: 9d:1f:9c:31:5b:e4:77:3b:2c:a5:bf:08:12:dd:b9: 83:6a:91:9f:15:a6:0c:b7:be:43:74:f5:4c:00:5e: 97:ee:7f:cf:83:a4:eb:e2:e1:1e:bb:27:de:ed:ab: 3f:92:6c:48:0e:de:a5:39:0d:db:08:51:bd:60:69: d8:94:54:e1:13:6c:1a:48:39:20:c4:c0:0f:8e:f0: c7:42:1a:2a:9f:af:65:1c:5f:fb:84:e6:be:f0:0e: e7:9c:ac:bb:fd:2c:f5:47:cf:00:12:47:92:71:ed: 18:c3:71:ce:68:2b:4a:ed:46:d6:5c:02:52:90:28: 7b:a7:a9:81:7c:e5:98:6f:a6:de:c6:96:68:05:73: e4:7d:9e:e9:bd:95:b2:2e:73:75:87:9c:0c:4c:28: 4e:50:0e:19:23:a5:77:09:10:49:6e:80:bf:a7:86: a2:32:a9:bd:bb:27:0d:e4:cf:0d:2f:43:aa:e9:e7: 38:91:8c:14:ba:39:7e:de:88:c2:ea:06:98:d7:8d: d7:54:1b:01:f9:6f:64:3a:26:74:97:fb:a0:35:d7: e0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CB:6D:34:39:26:16:64:68:B2:1D:0A:8B:39:78:71:A6:E2:13:11 X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:74:2d:53:c6:af:6c:6a:64:dc:04:02:11:d3:f9:1a:02:1a: 3e:9c:db:c1:8b:fb:2f:dd:71:4e:e2:47:66:39:1f:0b:a2:ca: 07:bf:8e:56:d5:32:64:72:50:0d:36:29:f6:a4:8f:7e:1d:6b: 10:55:26:d0:8d:5d:8c:cd:40:ee:45:d2:95:c6:01:60:57:88: 5b:0e:24:e8:c6:c5:19:67:f6:17:da:96:0b:65:1b:e3:87:25: 1b:52:bf:74:b4:12:5b:17:bd:2a:2b:f0:dd:3f:10:c0:6e:ce: 3a:30:dc:d2:d2:16:fd:73:be:0c:b4:18:01:97:84:e8:c8:8c: 87:0b:20:9c:a0:36:f1:be:a4:fc:34:ff:c3:33:06:bf:db:4e: 1a:46:9a:05:47:ef:c2:93:13:68:91:6f:27:83:76:e1:c1:8e: 5a:49:d4:a6:6e:00:00:f3:39:5f:ac:1d:c8:0d:08:2e:bf:95: c7:e5:0d:39:6e:18:73:68:3a:81:6a:54:70:7f:b1:7d:4f:81: 32:e7:b9:02:73:b1:67:04:94:36:83:77:2a:65:da:94:49:77: 85:36:bf:a2:56:4c:84:27:fb:13:d4:36:53:b3:8b:50:52:db: 27:2b:a4:df:65:70:ec:b7:b2:c1:cd:21:c5:6b:35:5c:69:52: c6:68:5f:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmhjMAXNjXjzFJth7gdW/kDJYIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNDA1MzAwMjA2MDdaFw0yNDA2MDIwMjUzMDdaMDMxMTAvBgNV BAMTKDY4Q0I2RDM0MzkyNjE2NjQ2OEIyMUQwQThCMzk3ODcxQTZFMjEzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zOAuXBgJspeQSDsoXfaUTXVy KNc/TijBF4pZ4o380oDJyZfS30qpAxAaNJ0fnDFb5Hc7LKW/CBLduYNqkZ8Vpgy3 vkN09UwAXpfuf8+DpOvi4R67J97tqz+SbEgO3qU5DdsIUb1gadiUVOETbBpIOSDE wA+O8MdCGiqfr2UcX/uE5r7wDuecrLv9LPVHzwASR5Jx7RjDcc5oK0rtRtZcAlKQ KHunqYF85Zhvpt7GlmgFc+R9num9lbIuc3WHnAxMKE5QDhkjpXcJEElugL+nhqIy qb27Jw3kzw0vQ6rp5ziRjBS6OX7eiMLqBpjXjddUGwH5b2Q6JnSX+6A11+DzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaMttNDkmFmRosh0Kizl4cabiExEwHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBD QkMxM0ZGREE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANF0LVPGr2xqZNwEAhHT+RoCGj6c28GL+y/d cU7iR2Y5Hwuiyge/jlbVMmRyUA02Kfakj34daxBVJtCNXYzNQO5F0pXGAWBXiFsO JOjGxRln9hfalgtlG+OHJRtSv3S0ElsXvSor8N0/EMBuzjow3NLSFv1zvgy0GAGX hOjIjIcLIJygNvG+pPw0/8MzBr/bThpGmgVH78KTE2iRbyeDduHBjlpJ1KZuAADz OV+sHcgNCC6/lcflDTluGHNoOoFqVHB/sX1PgTLnuQJzsWcElDaDdypl2pRJd4U2 v6JWTIQn+xPUNlOzi1BS2ycrpN9lcOy3ssHNIcVrNVxpUsZoX9U= -----END CERTIFICATE-----Generated at Thu May 30 03:37:49 2024 by rpki-client on console-ams.rpki-client.org