$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: Aebm5Rmf0cw0TNJeMBCnGV46ePiOwTms4GLeTIUoNrU= Subject key identifier: 17:FD:7F:BE:7F:39:2E:10:9E:C0:D7:82:6A:B6:19:47:18:7B:00:95 Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 05503A8798DADAC447EBC23A4DA4E1BA956D451F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 0431 Signing time: Fri 17 May 2024 03:40:56 +0000 Manifest this update: Fri 17 May 2024 03:35:56 +0000 Manifest next update: Mon 20 May 2024 15:00:56 +0000 Files and hashes: 1: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: bJ98Iqs/5dstISBU6icQBhdFSwzyMfXqJH4V9McGY7U=) 2: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: frcVSY+wnOb5Kg3e/Ynd1pLfwzJ2MdFs/WH4aaCdrE0=) 3: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: 5z0FJZZNL1ZgSA7cwJi2RHE15Sc8siEY3Hqa7ac0Y2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 10:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:50:3a:87:98:da:da:c4:47:eb:c2:3a:4d:a4:e1:ba:95:6d:45:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: May 17 03:35:56 2024 GMT Not After : May 20 15:00:56 2024 GMT Subject: CN=17FD7FBE7F392E109EC0D7826AB61947187B0095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:cf:ad:fc:1f:09:fe:50:f4:17:2e:5d:9e: 27:e5:09:76:b7:97:4c:cd:13:89:03:e6:de:5b:25: c2:40:63:08:f8:64:80:bd:93:e6:13:c8:a4:4d:91: 26:47:96:00:24:3e:e1:06:96:1b:ff:ee:f8:20:d0: 78:d1:8b:02:99:8b:91:cb:ac:24:e0:f3:a9:2c:e0: 39:5c:84:31:ad:e8:26:ab:98:ee:ee:ae:58:3a:83: 60:9a:3f:bb:59:d9:3f:86:f5:95:55:c3:6c:c3:20: a5:e7:c6:68:74:c7:a5:5a:ed:8a:e6:78:9f:9e:97: f6:43:c9:83:f2:3c:8f:20:3f:88:dd:a8:e4:fc:41: d3:fc:7f:ba:c9:9d:4c:45:fc:e3:99:2e:06:4e:ab: 37:a7:91:1d:b9:74:2a:f0:98:82:f6:36:29:81:c6: 3d:de:5e:1e:37:31:25:ab:34:5c:4a:c2:9c:9d:85: a8:ad:f9:cc:d2:d7:3b:f8:a7:23:14:df:98:80:25: 2a:ea:74:03:54:de:3e:7e:8e:c1:fd:bc:97:2c:73: f5:0e:89:1d:1b:3e:6b:a5:70:9d:de:72:85:a8:69: 00:e0:63:32:c6:ef:a5:99:69:2c:18:a7:ea:6d:4a: 25:b3:84:26:e2:1f:b1:b6:00:80:0f:71:2c:74:3d: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FD:7F:BE:7F:39:2E:10:9E:C0:D7:82:6A:B6:19:47:18:7B:00:95 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:04:12:3f:5e:22:ac:a4:29:3b:bd:d8:42:61:cb:7d:72:91: 9b:23:1d:c4:a6:fd:ca:04:40:50:34:b6:0e:2c:80:ce:ad:b1: e4:17:43:67:8c:4e:1d:e8:d0:9e:27:b2:a1:f9:9d:13:19:d1: 9f:58:29:11:4b:93:bc:84:2a:d4:66:41:28:f9:26:e3:3b:fa: 34:90:f0:51:d3:05:e0:df:55:93:19:72:fa:13:b4:40:db:cb: b4:b1:6f:cb:77:de:e2:e1:02:8a:69:1e:76:a5:03:76:5a:59: 92:76:39:18:51:a1:97:ba:ab:b1:99:ae:cb:d2:34:5a:fa:73: ae:71:f0:8b:83:e8:c0:69:75:91:57:9c:7e:6f:2f:20:f1:72: c4:41:98:78:7e:38:15:da:02:61:38:5a:7b:a4:e7:e7:d9:52: 7f:06:cb:b3:b7:b5:82:e9:1c:2d:2d:96:09:48:df:84:d5:73: 2e:82:fa:7a:6f:9e:d3:73:eb:aa:51:99:97:b3:ba:72:1a:ee: d3:a2:1c:79:8f:6c:08:0a:ee:5e:fd:11:b4:9a:26:e9:74:71: 01:63:60:f2:dd:5f:52:6e:20:68:79:b5:c9:e7:83:8e:24:f0: 8a:39:5f:56:7f:bc:90:d2:09:74:a6:6d:3d:08:d1:fa:79:6a: 6c:4e:7e:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVA6h5ja2sRH68I6TaThupVtRR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNDA1MTcwMzM1NTZaFw0yNDA1MjAxNTAwNTZaMDMxMTAvBgNV BAMTKDE3RkQ3RkJFN0YzOTJFMTA5RUMwRDc4MjZBQjYxOTQ3MTg3QjAwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjTc+t/B8J/lD0Fy5dniflCXa3 l0zNE4kD5t5bJcJAYwj4ZIC9k+YTyKRNkSZHlgAkPuEGlhv/7vgg0HjRiwKZi5HL rCTg86ks4DlchDGt6CarmO7urlg6g2CaP7tZ2T+G9ZVVw2zDIKXnxmh0x6Va7Yrm eJ+el/ZDyYPyPI8gP4jdqOT8QdP8f7rJnUxF/OOZLgZOqzenkR25dCrwmIL2NimB xj3eXh43MSWrNFxKwpydhait+czS1zv4pyMU35iAJSrqdANU3j5+jsH9vJcsc/UO iR0bPmulcJ3ecoWoaQDgYzLG76WZaSwYp+ptSiWzhCbiH7G2AIAPcSx0PXuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/1/vn85LhCewNeCarYZRxh7AJUwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8EEj9eIqykKTu92EJhy31ykZsjHcSm/coE QFA0tg4sgM6tseQXQ2eMTh3o0J4nsqH5nRMZ0Z9YKRFLk7yEKtRmQSj5JuM7+jSQ 8FHTBeDfVZMZcvoTtEDby7Sxb8t33uLhAoppHnalA3ZaWZJ2ORhRoZe6q7GZrsvS NFr6c65x8IuD6MBpdZFXnH5vLyDxcsRBmHh+OBXaAmE4Wnuk5+fZUn8Gy7O3tYLp HC0tlglI34TVcy6C+npvntNz66pRmZezunIa7tOiHHmPbAgK7l79EbSaJul0cQFj YPLdX1JuIGh5tcnng44k8Io5X1Z/vJDSCXSmbT0I0fp5amxOftk= -----END CERTIFICATE-----Generated at Fri May 17 04:26:15 2024 by rpki-client on console-fra.rpki-client.org