$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft File: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft (raw, json) Hash identifier: 36qHdzGFPnFQilyfxe4sFUJsCTpmV63REtW6m0XZTzA= Subject key identifier: 0F:C3:97:A4:D0:2C:45:F1:40:C6:F7:BA:AA:AF:AD:79:9F:F2:AA:7F Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 Certificate issuer: /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Certificate serial: 6762A9C863D10D83CE4EF6CF8E6C4CE2F3627ED6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft Manifest number: 0431 Signing time: Sat 18 May 2024 13:41:15 +0000 Manifest this update: Sat 18 May 2024 13:36:15 +0000 Manifest next update: Wed 22 May 2024 00:56:15 +0000 Files and hashes: 1: 3130332e3134382e38342e302f32332d3233203d3e20313339393836.roa (hash: tjdYt0lcYryCBYsYLiHg79fFH+OX5gjH/Bt4NYN924g=) 2: 3130332e3134382e38352e302f32342d3234203d3e20313339393836.roa (hash: g60Cnw+7HFy+aplkv5aDRsnWS9W4K9EVD/2Mrb2gWUM=) 3: 3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (hash: hDMr/1M/yTXBkVL4ppMkYvqpM9GpnAmE6xEBAPzq6Ms=) 4: 95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl (hash: wZjYYowzndIqDeZqDy/7cAuteckow9annOVpp7JqciE=) 5: 323030313a6466323a633738303a3a2f34382d3438203d3e20313339393836.roa (hash: Cii8WQtlAmw6mi2OXGfCCktkOny8bdFPxl4Ma82SMQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:62:a9:c8:63:d1:0d:83:ce:4e:f6:cf:8e:6c:4c:e2:f3:62:7e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8 Validity Not Before: May 18 13:36:15 2024 GMT Not After : May 22 00:56:15 2024 GMT Subject: CN=0FC397A4D02C45F140C6F7BAAAAFAD799FF2AA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:03:9c:c8:f4:0e:37:28:10:1b:f8:32:bd:06: a5:eb:57:80:67:0e:91:66:91:f3:ff:c1:f1:75:c3: c2:bb:ff:fb:72:85:25:eb:ed:f7:85:5a:aa:84:7b: 3b:4f:1b:30:7b:94:4c:dd:25:b8:0c:69:bf:1c:3e: 73:ed:f4:c9:af:86:b7:be:1c:e5:a7:ba:0f:57:9b: 65:e3:cf:1a:ed:fd:fc:75:74:d7:9e:47:af:a1:6d: 6c:4e:a1:6b:88:d1:bf:73:f7:47:f1:4e:5a:4c:ed: 41:28:58:45:35:b8:46:6d:25:25:13:21:00:c0:87: 9f:fd:74:d3:15:70:1b:2a:01:37:03:fb:ff:3c:d9: 90:0a:e4:5d:96:aa:79:25:80:2f:ea:6a:f2:33:d7: ae:71:a0:f0:4c:d1:15:b7:44:86:78:72:17:1a:ca: 4e:f4:5a:fb:2c:22:16:c7:49:e6:c3:87:48:97:5f: 71:81:9d:f5:fe:b1:9a:f0:e8:59:51:84:70:1d:c2: 49:d6:19:22:35:35:27:4e:e4:c7:e7:1e:dc:bd:1f: f5:65:29:7c:8d:0e:85:da:55:cd:f1:64:61:23:7d: 47:bf:74:42:d1:77:fd:18:5e:48:62:f9:f9:3e:d0: 10:6c:80:e3:f4:da:f9:93:5d:f4:d1:12:e1:ec:31: a5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C3:97:A4:D0:2C:45:F1:40:C6:F7:BA:AA:AF:AD:79:9F:F2:AA:7F X509v3 Authority Key Identifier: keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:fe:14:66:91:9c:53:8f:23:d8:31:0c:74:de:b1:64:ea:d7: 4d:aa:50:73:e4:9c:47:8d:21:0c:4e:6a:2b:22:d3:77:1c:0d: 37:47:d3:e4:d2:2b:39:b7:df:d6:ef:8e:8f:b3:76:30:66:db: 8d:dd:e6:9e:ef:cd:b2:b7:87:fb:93:c4:88:5a:33:c6:eb:c0: 73:b7:e9:22:6b:23:8b:c8:d7:f1:7e:b6:62:00:d1:ea:7d:dd: 93:60:73:7d:63:a1:92:37:60:50:63:aa:f6:e1:9f:89:36:df: 2b:79:ff:7f:11:77:17:27:7e:0b:08:d3:5f:73:03:b8:78:8a: 23:81:e5:1f:e6:68:12:dd:93:27:82:3f:3b:15:b5:bf:e5:c7: d1:db:6b:f0:a0:fe:6a:af:a2:15:a7:b2:03:55:f3:2d:b7:66: ba:22:03:16:c6:df:c3:b6:36:58:38:cd:54:8f:ef:2c:e3:29: 3c:37:11:6d:e7:8a:b9:c4:18:5e:50:0b:5f:85:ea:dc:41:3a: 27:1f:4a:3c:5d:b7:46:e7:cd:21:4e:10:4d:5a:7d:8f:40:c8: 74:b7:43:f5:92:2e:4e:41:9e:ab:a6:b4:e4:82:04:39:05:50: 99:48:ec:41:9f:03:a6:4c:57:0a:1c:d3:1e:3e:42:3b:e3:29: 49:4e:4d:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2KpyGPRDYPOTvbPjmxM4vNiftYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE QTQ2QjNDODAeFw0yNDA1MTgxMzM2MTVaFw0yNDA1MjIwMDU2MTVaMDMxMTAvBgNV BAMTKDBGQzM5N0E0RDAyQzQ1RjE0MEM2RjdCQUFBQUZBRDc5OUZGMkFBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeA5zI9A43KBAb+DK9BqXrV4Bn DpFmkfP/wfF1w8K7//tyhSXr7feFWqqEeztPGzB7lEzdJbgMab8cPnPt9Mmvhre+ HOWnug9Xm2Xjzxrt/fx1dNeeR6+hbWxOoWuI0b9z90fxTlpM7UEoWEU1uEZtJSUT IQDAh5/9dNMVcBsqATcD+/882ZAK5F2WqnklgC/qavIz165xoPBM0RW3RIZ4chca yk70WvssIhbHSebDh0iXX3GBnfX+sZrw6FlRhHAdwknWGSI1NSdO5MfnHty9H/Vl KXyNDoXaVc3xZGEjfUe/dELRd/0YXkhi+fk+0BBsgOP02vmTXfTREuHsMaW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD8OXpNAsRfFAxve6qq+teZ/yqn8wHwYDVR0j BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2 QjNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZTljOWYtZDYwNy00NDk3LWFm MjgtNGQyYjkwOTJkNWE2LzAvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMx RjlEQTQ2QjNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7+FGaRnFOPI9gxDHTesWTq102qUHPknEeN IQxOaisi03ccDTdH0+TSKzm339bvjo+zdjBm243d5p7vzbK3h/uTxIhaM8brwHO3 6SJrI4vI1/F+tmIA0ep93ZNgc31joZI3YFBjqvbhn4k23yt5/38RdxcnfgsI019z A7h4iiOB5R/maBLdkyeCPzsVtb/lx9Hba/Cg/mqvohWnsgNV8y23ZroiAxbG38O2 Nlg4zVSP7yzjKTw3EW3nirnEGF5QC1+F6txBOicfSjxdt0bnzSFOEE1afY9AyHS3 Q/WSLk5BnqumtOSCBDkFUJlI7EGfA6ZMVwoc0x4+QjvjKUlOTVU= -----END CERTIFICATE-----Generated at Sat May 18 15:57:28 2024 by rpki-client on console-ams.rpki-client.org