$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: 2nqlQLYm8GPWZWFo9qgIN/hrBy3hyhcvseyOFJRF8ps= Subject key identifier: 5B:4F:C1:36:A1:E2:B3:C2:4D:CD:4F:E5:E1:57:F1:30:94:5C:1F:F4 Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 35A2A0EC390C14D8890A99908971275D06B41CF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 01D6 Signing time: Thu 02 May 2024 00:02:08 +0000 Manifest this update: Wed 01 May 2024 23:57:08 +0000 Manifest next update: Sun 05 May 2024 08:02:08 +0000 Files and hashes: 1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: dnh9d3IgFVkqwLCUQ4VQCng+U+eVup8SYNG5+KQPAas=) 2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: Wt6D8/rroxImPq2j09RIXIUVcoINACpNCy43GZdoo5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 22:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a2:a0:ec:39:0c:14:d8:89:0a:99:90:89:71:27:5d:06:b4:1c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: May 1 23:57:08 2024 GMT Not After : May 5 08:02:08 2024 GMT Subject: CN=5B4FC136A1E2B3C24DCD4FE5E157F130945C1FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:33:69:38:f2:12:49:b0:23:71:40:4a:da: 49:78:e6:db:01:20:f1:be:60:7f:0e:7f:d4:05:1b: 9e:38:33:56:97:2b:1c:df:8b:79:c7:0f:91:4d:67: e1:ff:b1:78:d1:66:73:2c:05:68:75:f5:fc:ec:dd: b3:16:a4:28:5c:ce:17:e8:2d:f2:bc:09:a6:0c:a1: 13:84:40:c5:96:fc:f7:aa:03:6a:4e:2d:9e:be:89: e0:54:1d:5a:d6:60:76:e3:6e:a0:a2:9b:8f:0a:12: d0:5b:1d:57:da:d6:73:42:05:2f:69:b9:a1:c9:ae: e2:08:a2:6c:6a:47:7d:9a:a0:44:49:3f:9f:04:e3: e9:07:99:4d:98:39:c4:ef:e3:b8:5a:65:a3:fb:72: 37:77:74:17:a8:bd:7e:d7:f5:73:42:d4:91:6b:b8: 71:5f:65:55:04:8f:82:8b:44:cf:ea:30:46:df:17: 2b:1f:20:f5:0f:96:3a:6d:45:6f:98:aa:f8:a6:9c: fa:8b:08:f1:87:aa:d3:35:05:bb:89:b3:88:5e:88: a2:b9:e8:7b:6f:c9:4c:5a:61:90:1d:ba:c9:f6:38: 68:13:f8:ba:96:1c:48:49:91:d6:e1:fc:38:66:2e: 69:be:51:15:d8:d7:5f:48:bd:f3:35:22:26:90:d1: d6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4F:C1:36:A1:E2:B3:C2:4D:CD:4F:E5:E1:57:F1:30:94:5C:1F:F4 X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:bd:db:26:68:f3:5d:12:38:ad:06:3f:3e:7d:1c:63:ef:e4: a5:bb:4e:7b:6b:bd:7d:9a:05:6c:9d:75:2c:fe:b3:40:14:76: eb:e4:34:df:fd:af:ef:01:67:65:ae:b8:0f:8b:7d:02:ee:1e: 11:c6:9f:9d:24:9d:55:2a:33:7b:27:6c:1d:06:fd:29:4f:c2: 28:3a:25:f1:cc:75:f3:51:4d:a1:13:ed:53:56:12:dc:2f:ad: 09:0c:98:63:d1:08:89:20:8b:ea:64:88:c4:67:97:9d:bd:4c: ec:2d:33:0f:7a:05:db:49:2d:50:d9:fe:bc:09:cd:59:3a:2f: eb:70:85:7e:bf:89:34:1c:4f:7b:9c:ed:b6:93:36:7b:79:06: cf:2f:b4:1d:62:1c:c6:c3:8c:c7:7b:12:27:17:51:80:37:f6: 78:55:7b:22:9e:51:83:9f:ab:a5:59:a7:a2:36:4d:d6:94:67: 2f:bb:56:0a:3f:b4:8c:35:51:77:65:44:e7:e6:b4:41:f2:c2: ee:b2:0e:c1:08:54:98:8b:9c:96:71:1d:a7:2b:9f:7a:7a:f4: 84:8c:f8:98:ae:e2:3d:56:b2:15:1d:83:b2:ef:91:e0:75:e9: 06:1f:db:20:49:59:55:5f:d5:e9:e8:75:37:60:59:52:50:2d: 7f:be:d1:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNaKg7DkMFNiJCpmQiXEnXQa0HPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNDA1MDEyMzU3MDhaFw0yNDA1MDUwODAyMDhaMDMxMTAvBgNV BAMTKDVCNEZDMTM2QTFFMkIzQzI0RENENEZFNUUxNTdGMTMwOTQ1QzFGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+jNpOPISSbAjcUBK2kl45tsB IPG+YH8Of9QFG544M1aXKxzfi3nHD5FNZ+H/sXjRZnMsBWh19fzs3bMWpChczhfo LfK8CaYMoROEQMWW/PeqA2pOLZ6+ieBUHVrWYHbjbqCim48KEtBbHVfa1nNCBS9p uaHJruIIomxqR32aoERJP58E4+kHmU2YOcTv47haZaP7cjd3dBeovX7X9XNC1JFr uHFfZVUEj4KLRM/qMEbfFysfIPUPljptRW+YqvimnPqLCPGHqtM1BbuJs4heiKK5 6HtvyUxaYZAdusn2OGgT+LqWHEhJkdbh/DhmLmm+URXY119IvfM1IiaQ0dYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW0/BNqHis8JNzU/l4VfxMJRcH/QwHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMW92yZo810SOK0GPz59HGPv5KW7TntrvX2a BWyddSz+s0AUduvkNN/9r+8BZ2WuuA+LfQLuHhHGn50knVUqM3snbB0G/SlPwig6 JfHMdfNRTaET7VNWEtwvrQkMmGPRCIkgi+pkiMRnl529TOwtMw96BdtJLVDZ/rwJ zVk6L+twhX6/iTQcT3uc7baTNnt5Bs8vtB1iHMbDjMd7EicXUYA39nhVeyKeUYOf q6VZp6I2TdaUZy+7Vgo/tIw1UXdlROfmtEHywu6yDsEIVJiLnJZxHacrn3p69ISM +Jiu4j1WshUdg7LvkeB16QYf2yBJWVVf1enodTdgWVJQLX++0ag= -----END CERTIFICATE-----Generated at Thu May 2 01:04:45 2024 by rpki-client on console-fra.rpki-client.org