$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft File: 923816C042C964B6465A7BA06B2D44BDAF28D827.mft (raw, json) Hash identifier: wyi9dDncyLjPze4e9s8jsaSQtjHxcTwe2ojREcmDBn0= Subject key identifier: BB:3A:63:D4:4D:34:87:08:BE:70:D1:69:A8:D8:F7:63:EA:B9:0F:C5 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 3FE85723F56644EAB4F909ED6E5E37423B75D62E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft Manifest number: 0139 Signing time: Sun 19 May 2024 07:30:32 +0000 Manifest this update: Sun 19 May 2024 07:25:32 +0000 Manifest next update: Wed 22 May 2024 10:12:32 +0000 Files and hashes: 1: 3130332e3138392e35392e302f32342d3234203d3e20313439373538.roa (hash: +V3zKk//BnUMKBh0jRycVOkFjJKlamieISgMLD1ccTQ=) 2: 3130332e3138392e35382e302f32342d3234203d3e20313439373538.roa (hash: PFr4rzvIS/ntScoYkPL1TWh2LZ5EYrgq10WRX//tNIM=) 3: 923816C042C964B6465A7BA06B2D44BDAF28D827.crl (hash: BfklRdHohTa4fZegBUCylIW2Fgr1IJAJWRPO/pBJasg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e8:57:23:f5:66:44:ea:b4:f9:09:ed:6e:5e:37:42:3b:75:d6:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: May 19 07:25:32 2024 GMT Not After : May 22 10:12:32 2024 GMT Subject: CN=BB3A63D44D348708BE70D169A8D8F763EAB90FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:ba:f9:22:3c:6c:b4:ee:49:79:3a:94:3d: 0c:fb:2c:cc:ff:98:99:46:d1:a5:b2:58:07:e3:56: 4b:72:0e:5a:48:35:00:7e:33:44:68:01:9d:e6:ce: e8:38:f2:df:2b:e0:c4:75:29:af:dd:ca:e3:25:b3: 60:72:4a:05:15:31:bc:e3:4d:78:7d:4f:1c:a2:82: ac:01:e1:67:70:3c:a3:8c:aa:37:e9:90:bb:d2:ec: 99:28:3b:1d:fa:55:17:b2:88:17:3a:96:d2:42:1a: 62:6c:34:ef:99:68:38:d8:25:9b:4c:fe:f8:1f:50: 95:f1:ac:ca:85:3d:7a:ba:84:9a:bf:d7:39:e8:fe: c4:3a:ea:d2:52:ff:1b:ea:14:7e:ac:26:0e:a5:ff: 33:10:40:fb:46:38:c9:9e:5b:66:6c:47:93:85:fa: d1:b6:da:ee:50:8e:80:d3:fd:42:26:f3:6d:b8:f7: f4:f5:c5:42:01:bb:64:0f:e4:1f:9f:18:e2:16:e8: 7e:06:40:f6:9f:7e:d4:69:d6:f4:76:4a:0f:36:00: 94:54:86:cf:06:36:9d:7e:5b:4b:a3:a6:6a:da:e3: 90:30:00:bc:f3:45:87:09:01:79:03:96:7c:31:dc: 66:19:7d:f4:95:a7:5d:68:ad:41:68:3a:3c:9f:a7: f6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3A:63:D4:4D:34:87:08:BE:70:D1:69:A8:D8:F7:63:EA:B9:0F:C5 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:76:0f:4b:48:e8:b7:1f:ca:2d:91:26:c0:5e:f1:ee:f7:a2: 4a:95:1c:14:cc:99:59:45:11:d0:f5:86:b8:1a:4d:3c:f6:2d: 34:fc:90:6d:a4:70:e2:12:c4:64:fb:89:66:c7:21:02:9b:e0: 18:1c:1f:ac:11:95:05:f2:d2:14:5b:62:43:81:3b:b1:65:16: f5:7d:da:7a:bd:e9:11:31:d2:46:0f:d4:19:c8:16:95:85:83: dc:37:ba:2e:b1:77:1a:ad:a2:7f:ee:2b:2a:3d:c6:ea:89:a3: e1:aa:91:b9:66:27:d0:4e:d8:71:d8:0e:2e:03:f4:ce:ae:6e: f7:79:fd:dc:26:11:eb:7c:2e:89:7f:e0:f6:57:ec:8b:6a:ba: 57:4d:f3:db:7d:ee:8c:76:c9:2c:97:55:f9:53:23:85:36:8d: 2f:b2:df:a3:ff:12:64:e8:1c:3b:38:d4:de:2d:ee:51:40:ed: a9:13:43:2a:db:86:9c:5e:05:82:29:b1:fc:cb:0f:a8:58:8b: 63:44:7a:3c:3e:23:1f:44:57:5a:e1:67:ad:44:ce:f8:bb:57: 54:ff:25:05:9c:61:28:99:d6:bd:2e:94:6a:64:0a:96:8c:a3: dc:c8:67:3c:d6:ae:e5:b1:e5:40:04:67:cd:94:ac:de:a3:4b: b9:c5:68:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+hXI/VmROq0+Qntbl43Qjt11i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNDA1MTkwNzI1MzJaFw0yNDA1MjIxMDEyMzJaMDMxMTAvBgNV BAMTKEJCM0E2M0Q0NEQzNDg3MDhCRTcwRDE2OUE4RDhGNzYzRUFCOTBGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqrr5IjxstO5JeTqUPQz7LMz/ mJlG0aWyWAfjVktyDlpINQB+M0RoAZ3mzug48t8r4MR1Ka/dyuMls2BySgUVMbzj TXh9TxyigqwB4WdwPKOMqjfpkLvS7JkoOx36VReyiBc6ltJCGmJsNO+ZaDjYJZtM /vgfUJXxrMqFPXq6hJq/1zno/sQ66tJS/xvqFH6sJg6l/zMQQPtGOMmeW2ZsR5OF +tG22u5QjoDT/UIm82249/T1xUIBu2QP5B+fGOIW6H4GQPafftRp1vR2Sg82AJRU hs8GNp1+W0ujpmra45AwALzzRYcJAXkDlnwx3GYZffSVp11orUFoOjyfp/abAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuzpj1E00hwi+cNFpqNj3Y+q5D8UwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM3ZGZiODgtZmI1MC00OGQxLWI5 MGQtZTUyNTEwMmY0ZjVlLzAvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0 QkRBRjI4RDgyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ2D0tI6Lcfyi2RJsBe8e73okqVHBTMmVlF EdD1hrgaTTz2LTT8kG2kcOISxGT7iWbHIQKb4BgcH6wRlQXy0hRbYkOBO7FlFvV9 2nq96REx0kYP1BnIFpWFg9w3ui6xdxqton/uKyo9xuqJo+GqkblmJ9BO2HHYDi4D 9M6ubvd5/dwmEet8Lol/4PZX7ItquldN89t97ox2ySyXVflTI4U2jS+y36P/EmTo HDs41N4t7lFA7akTQyrbhpxeBYIpsfzLD6hYi2NEejw+Ix9EV1rhZ61Ezvi7V1T/ JQWcYSiZ1r0ulGpkCpaMo9zIZzzWruWx5UAEZ82UrN6jS7nFaJk= -----END CERTIFICATE-----Generated at Sun May 19 08:24:27 2024 by rpki-client on console-ams.rpki-client.org