$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft File: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft (raw, json) Hash identifier: TE/VFnd+YUtI/ycB5l2D2GJ4PuQd1Oh8WgQuGxbVTW8= Subject key identifier: F6:F5:E5:86:19:17:3B:F1:48:04:99:42:65:AF:73:88:59:E0:28:C6 Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 1E7693E8CFE82411FE58A0D4208B4568FF04FC85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft Manifest number: 0142 Signing time: Wed 29 May 2024 05:12:07 +0000 Manifest this update: Wed 29 May 2024 05:07:07 +0000 Manifest next update: Sat 01 Jun 2024 14:48:07 +0000 Files and hashes: 1: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (hash: XoL0ZPngBP0byGwDlhB4lXxaaXcnR74YfmodJijlChw=) 2: C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl (hash: o6Ym1ksMVW0TfqnPSVzkZQFw3VmL/ULDyiXVjpKTLBM=) 3: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (hash: 2/5TZckWubTXUzgrmTNs3NUAJzLDFQn+wpvO5LjzFTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:76:93:e8:cf:e8:24:11:fe:58:a0:d4:20:8b:45:68:ff:04:fc:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: May 29 05:07:07 2024 GMT Not After : Jun 1 14:48:07 2024 GMT Subject: CN=F6F5E58619173BF14804994265AF738859E028C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:89:1c:b5:cb:34:af:7f:f2:67:13:fd:88: d1:5c:d1:aa:b0:32:ef:a1:2a:bb:90:e3:cf:ef:a9: 8b:8a:e1:f5:59:ed:53:dd:45:69:6b:88:0c:99:12: f0:4f:8a:aa:75:2f:74:bf:53:ca:61:50:55:e1:49: e5:3e:31:e7:fc:c1:d7:e0:79:f9:e0:de:92:74:56: b2:27:70:80:f0:39:f4:5b:fe:03:32:2e:3e:4d:cb: 2a:8f:9f:b2:6c:1c:4e:5a:a5:ef:44:15:da:70:c4: 9d:a7:05:00:05:c8:31:79:54:4d:b6:41:3e:ee:a5: fa:86:73:72:24:34:b9:57:b9:98:8f:d2:a5:c2:22: da:30:6c:b6:d3:d3:6e:d7:44:59:47:e7:2d:e6:33: 33:f9:06:7c:3d:e5:63:56:f1:02:21:38:71:97:df: ac:5b:58:e2:a6:6f:a6:90:78:9f:79:f8:51:e8:9f: 14:89:4a:41:ed:08:c1:2e:ce:fa:bb:5f:36:3b:0c: 6b:a3:02:b2:ec:8e:cb:f5:dd:0d:b2:08:9f:49:eb: cf:4e:8c:97:74:54:32:2c:04:ea:d9:52:f7:1d:54: 08:3e:29:57:74:6b:45:8d:94:39:57:3b:78:c0:77: 70:dc:d3:7c:ac:38:6e:a9:18:db:e4:bf:15:07:d6: 2d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F5:E5:86:19:17:3B:F1:48:04:99:42:65:AF:73:88:59:E0:28:C6 X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ef:27:7a:92:af:e8:a0:a2:95:75:37:0a:e9:cf:01:b2:eb: bf:c3:71:8e:26:13:0a:5c:fd:54:d5:5f:5a:92:a9:61:21:22: 89:6b:eb:f8:74:71:c3:b1:d1:1e:c7:97:65:17:a7:30:f9:ab: fb:b7:70:49:cc:6a:72:6a:36:4e:97:22:08:72:89:38:0e:c3: c8:84:c8:88:97:a4:7e:63:99:e3:05:cd:b0:be:f7:5b:a5:c9: 1c:07:37:91:b5:6a:c1:d4:68:55:0b:e9:69:21:01:d8:94:8d: 2f:5b:fa:4b:61:91:b4:a4:43:e3:34:e1:2b:6f:2e:8c:84:67: 78:85:2c:80:1e:08:55:e4:42:6a:b8:76:2b:f7:da:84:18:45: 76:2d:91:fd:fd:e9:72:8e:5e:cb:8a:58:f2:b1:3c:df:51:70: 93:e4:a7:68:a7:ce:1e:db:49:31:e8:f6:27:cd:99:cb:0e:38: bf:29:02:46:76:97:57:b9:68:8d:d2:75:5c:39:83:ff:2d:a8: 51:09:99:8d:f2:0c:63:71:ef:5a:e4:a2:b1:24:15:c9:7e:77: 73:09:8d:db:a9:cc:4c:af:2a:f9:32:b2:1e:9f:05:2f:16:cd: 05:9d:b9:b2:4d:5c:78:5f:6a:2e:cb:db:27:c4:2a:d6:0c:cb: 92:88:81:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHnaT6M/oJBH+WKDUIItFaP8E/IUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNDA1MjkwNTA3MDdaFw0yNDA2MDExNDQ4MDdaMDMxMTAvBgNV BAMTKEY2RjVFNTg2MTkxNzNCRjE0ODA0OTk0MjY1QUY3Mzg4NTlFMDI4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72Ikctcs0r3/yZxP9iNFc0aqw Mu+hKruQ48/vqYuK4fVZ7VPdRWlriAyZEvBPiqp1L3S/U8phUFXhSeU+Mef8wdfg efng3pJ0VrIncIDwOfRb/gMyLj5NyyqPn7JsHE5ape9EFdpwxJ2nBQAFyDF5VE22 QT7upfqGc3IkNLlXuZiP0qXCItowbLbT027XRFlH5y3mMzP5Bnw95WNW8QIhOHGX 36xbWOKmb6aQeJ95+FHonxSJSkHtCMEuzvq7XzY7DGujArLsjsv13Q2yCJ9J689O jJd0VDIsBOrZUvcdVAg+KVd0a0WNlDlXO3jAd3Dc03ysOG6pGNvkvxUH1i3nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9vXlhhkXO/FIBJlCZa9ziFngKMYwHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJhMGI4ZjgtNGZjZi00YjliLTk3 OTQtY2QzYjRlNDA2ZWFiLzAvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZG NUI2ODNFRDcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnvJ3qSr+igopV1NwrpzwGy67/DcY4mEwpc /VTVX1qSqWEhIolr6/h0ccOx0R7Hl2UXpzD5q/u3cEnManJqNk6XIghyiTgOw8iE yIiXpH5jmeMFzbC+91ulyRwHN5G1asHUaFUL6WkhAdiUjS9b+kthkbSkQ+M04Stv LoyEZ3iFLIAeCFXkQmq4div32oQYRXYtkf396XKOXsuKWPKxPN9RcJPkp2inzh7b STHo9ifNmcsOOL8pAkZ2l1e5aI3SdVw5g/8tqFEJmY3yDGNx71rkorEkFcl+d3MJ jdupzEyvKvkysh6fBS8WzQWdubJNXHhfai7L2yfEKtYMy5KIgZo= -----END CERTIFICATE-----Generated at Wed May 29 06:01:24 2024 by rpki-client on console-fra.rpki-client.org