$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: hkIbDb/IXynR1ajLIBKFu+/x1JosAklCm7U4hCQ1xaE= Subject key identifier: 82:0E:53:54:D8:8A:31:2A:34:B7:04:44:5E:08:E2:81:08:37:8F:A9 Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 52187575C9150769C0E345A3D97D6C0D92A1FF0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 0299 Signing time: Fri 17 May 2024 15:21:49 +0000 Manifest this update: Fri 17 May 2024 15:16:49 +0000 Manifest next update: Mon 20 May 2024 21:56:49 +0000 Files and hashes: 1: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: /tT7ocSOhax83+vxPwrd/Xj42jBYy0O67YHMb3TDOyQ=) 2: 3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (hash: 4RriOrJrgRmm8TVWDrA9B41vx60bIoOBHkOPfEn1Ot0=) 3: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: Fzy1Ohuj04Qx3Xp/VXiKCcDYwuFrI7ixfa8VG/Qhnpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 21:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:18:75:75:c9:15:07:69:c0:e3:45:a3:d9:7d:6c:0d:92:a1:ff:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: May 17 15:16:49 2024 GMT Not After : May 20 21:56:49 2024 GMT Subject: CN=820E5354D88A312A34B704445E08E28108378FA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4f:4c:aa:39:de:ff:60:d8:1c:53:03:a4:7d: 72:24:90:4a:18:a9:5f:4c:7f:c0:46:70:f5:38:72: 93:29:8e:86:87:1d:cb:64:b2:c0:3c:65:d7:73:ec: 77:0c:67:9a:34:14:21:92:b2:57:35:1d:82:04:10: 47:7e:50:68:40:75:09:39:c4:01:c1:5f:b4:2c:25: d4:69:f2:db:2f:70:28:19:25:9b:90:7d:20:ac:14: eb:95:ee:fd:ee:89:22:c3:dc:dd:e7:a5:b7:20:e2: 5d:06:fc:84:96:0b:95:b6:23:7e:a7:1b:67:e5:04: 1e:30:50:f6:39:fa:d6:5e:a7:8b:e7:68:af:89:ac: 0f:13:31:5d:5d:1d:f7:96:08:81:d7:00:c9:da:30: c3:38:fc:03:45:aa:e1:22:a4:22:b8:99:a0:d4:9f: fc:5f:bd:f9:ae:7c:fa:09:dc:02:df:0f:9f:13:0b: 4c:d9:d2:4f:b7:42:5b:bb:25:8b:4b:61:8f:6d:f8: 98:f3:34:2a:dd:99:19:69:ba:98:99:e0:08:44:ef: da:3d:72:ec:51:4d:8a:c9:c6:f4:14:17:97:5f:0d: a9:d6:0e:16:2f:94:e8:2f:61:49:c6:b9:51:f9:01: 3e:3c:91:69:23:e2:19:af:76:3a:ea:ef:8e:85:58: 8e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0E:53:54:D8:8A:31:2A:34:B7:04:44:5E:08:E2:81:08:37:8F:A9 X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:98:cf:3b:d9:c3:d1:21:99:d1:f0:da:f3:07:c9:d2:7d:35: bb:b4:f2:23:b5:2f:5d:1d:0a:70:90:5f:af:b3:7f:44:6f:b1: 55:47:c7:24:b2:fa:c2:87:4e:27:11:d6:06:1b:e9:96:f1:82: 1b:da:70:42:c6:7f:a5:18:35:d2:f3:07:bf:62:6e:e0:30:36: 8b:e5:11:32:a4:06:d2:7f:f5:0f:08:ba:ad:ac:80:77:cc:9e: 5e:47:d9:dc:d3:f4:61:c9:33:39:ff:45:45:00:7b:ba:24:d7: d6:9e:56:43:18:e8:01:46:6c:29:5c:a9:d6:98:57:a5:67:1c: d1:5d:54:de:85:55:25:0b:30:98:53:5e:9b:2f:04:ee:66:73: 14:11:7f:2d:e6:bd:be:8c:ea:58:50:0b:2a:5a:48:01:70:da: ae:ca:4e:21:00:68:8c:a0:dc:ae:5b:46:ca:f0:cb:b6:94:cd: 46:78:89:20:b1:c0:0c:16:65:6a:b5:a6:2e:ee:72:2e:80:f7: 40:26:a3:f6:fc:c5:be:18:ed:41:df:6b:3e:bc:32:b8:2a:0f: cf:91:b7:e1:33:c7:74:7f:48:dd:37:30:8d:15:55:30:d9:08: ac:08:8f:96:a7:8a:d9:6b:ae:87:e0:27:b3:04:5d:ec:c0:a5: 2a:87:21:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUhh1dckVB2nA40Wj2X1sDZKh/wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNDA1MTcxNTE2NDlaFw0yNDA1MjAyMTU2NDlaMDMxMTAvBgNV BAMTKDgyMEU1MzU0RDg4QTMxMkEzNEI3MDQ0NDVFMDhFMjgxMDgzNzhGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwT0yqOd7/YNgcUwOkfXIkkEoY qV9Mf8BGcPU4cpMpjoaHHctkssA8Zddz7HcMZ5o0FCGSslc1HYIEEEd+UGhAdQk5 xAHBX7QsJdRp8tsvcCgZJZuQfSCsFOuV7v3uiSLD3N3npbcg4l0G/ISWC5W2I36n G2flBB4wUPY5+tZep4vnaK+JrA8TMV1dHfeWCIHXAMnaMMM4/ANFquEipCK4maDU n/xfvfmufPoJ3ALfD58TC0zZ0k+3Qlu7JYtLYY9t+JjzNCrdmRlpupiZ4AhE79o9 cuxRTYrJxvQUF5dfDanWDhYvlOgvYUnGuVH5AT48kWkj4hmvdjrq746FWI7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgg5TVNiKMSo0twREXgjigQg3j6kwHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiYzzvZw9EhmdHw2vMHydJ9Nbu08iO1L10d CnCQX6+zf0RvsVVHxySy+sKHTicR1gYb6ZbxghvacELGf6UYNdLzB79ibuAwNovl ETKkBtJ/9Q8Iuq2sgHfMnl5H2dzT9GHJMzn/RUUAe7ok19aeVkMY6AFGbClcqdaY V6VnHNFdVN6FVSULMJhTXpsvBO5mcxQRfy3mvb6M6lhQCypaSAFw2q7KTiEAaIyg 3K5bRsrwy7aUzUZ4iSCxwAwWZWq1pi7uci6A90Amo/b8xb4Y7UHfaz68MrgqD8+R t+Ezx3R/SN03MI0VVTDZCKwIj5anitlrrofgJ7MEXezApSqHIVE= -----END CERTIFICATE-----Generated at Fri May 17 17:47:03 2024 by rpki-client on console-ams.rpki-client.org