$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft File: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft (raw, json) Hash identifier: tG7evzjY+chQ9UPCJWDr1IAHYOBJg9ythITzB4yIjFo= Subject key identifier: A6:47:72:AA:42:F2:59:8D:B6:04:1F:9A:96:3B:E0:57:0B:E0:84:B7 Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 Certificate issuer: /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Certificate serial: 7BC9F51558A1A3C44380A63361ACC114C197B4BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft Manifest number: 042F Signing time: Fri 17 May 2024 18:41:28 +0000 Manifest this update: Fri 17 May 2024 18:36:28 +0000 Manifest next update: Tue 21 May 2024 06:05:28 +0000 Files and hashes: 1: 3130332e31352e33362e302f32332d3233203d3e203538343939.roa (hash: y/6TgHyR65B7kj2F6xnEeuXuZI3rC/j++OCGRd8Jy+I=) 2: 3130332e31352e33362e302f32342d3234203d3e203538343939.roa (hash: BcemolyLy1YCqSD2iOG9UetMb8M2PgjvGSFOpbWPsQU=) 3: 323030313a6466303a6338303a3a2f34382d3438203d3e203538343939.roa (hash: d8XIMv2D7e4PA9ooQLphJ1NdcvJsFAwep1Ut37i7qZo=) 4: F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl (hash: 7/q75/nPXjRn70TQ364SBjb0Hku+WDSWdX6mPpDPGOU=) 5: 3130332e31352e33372e302f32342d3234203d3e203538343939.roa (hash: PPgatbzw+ItpjlCllyl7m5G+ltQY1uWHf4RpZ2YB6us=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c9:f5:15:58:a1:a3:c4:43:80:a6:33:61:ac:c1:14:c1:97:b4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5 Validity Not Before: May 17 18:36:28 2024 GMT Not After : May 21 06:05:28 2024 GMT Subject: CN=A64772AA42F2598DB6041F9A963BE0570BE084B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:4f:92:b5:40:f7:42:8d:ad:5d:5d:6c:11: 56:2d:be:ac:5f:8a:e3:47:f1:90:96:3b:3f:46:c4: a4:e5:e3:0e:e0:6b:59:fe:7d:1f:d6:05:dd:48:42: 3b:9b:eb:24:1f:6f:2f:82:76:cf:77:20:c6:2d:f3: 51:c9:0d:ab:0a:4d:f7:5b:ff:cd:0f:31:46:06:51: 79:18:2c:bf:87:41:97:a5:0e:df:72:a3:66:cb:1e: 19:9e:49:ec:5d:be:02:33:e2:65:4c:a1:f7:d4:85: 44:41:e6:1a:73:4e:4e:92:24:75:8f:a1:13:45:c3: 73:6d:ff:14:9d:42:36:44:6a:dc:16:37:e3:a2:3c: 28:d3:44:65:83:55:12:35:27:b6:f8:e7:ce:0e:1d: e7:30:9c:05:04:aa:22:39:b3:43:b8:d1:b4:3e:66: a2:90:5c:7b:f6:7f:87:18:f6:95:34:1a:35:ae:2d: e6:36:da:c0:01:6c:07:28:74:f4:77:ea:b2:92:d7: c5:e5:f2:f0:2f:2d:da:b1:1e:9e:e6:28:6b:44:ed: 58:8b:31:f6:f3:00:07:1c:8f:03:ed:a6:83:cd:b4: 9c:43:f3:41:43:bf:04:75:3c:e2:77:97:e5:3b:56: 30:5c:f8:bb:92:7c:51:30:06:93:8b:1e:64:b6:43: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:47:72:AA:42:F2:59:8D:B6:04:1F:9A:96:3B:E0:57:0B:E0:84:B7 X509v3 Authority Key Identifier: keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:27:89:f9:ad:2e:18:60:e3:10:28:c8:fd:5f:50:88:bd:78: 3a:71:5d:67:7d:f5:fc:93:7a:15:88:4b:02:3e:10:3a:86:e0: 0d:c2:84:ea:8a:30:33:d3:d6:89:cc:6a:d8:f3:4a:de:4a:e6: 21:cd:e3:a7:b2:ec:4c:eb:c7:bc:32:81:0e:70:f6:3d:2d:bf: ec:9b:71:5b:45:c1:22:47:db:1b:66:be:39:73:75:ba:cb:e3: 0e:f0:57:5f:6d:a6:b5:53:f4:b8:94:c5:ef:2d:6e:b5:92:80: f0:d4:32:f9:c2:e9:85:95:5d:1c:12:8e:15:ec:80:91:4a:19: 0f:03:28:9a:ed:cb:99:05:9c:db:3b:b1:cf:02:ad:a2:a8:d7: f5:3a:09:b2:7e:d3:8d:04:95:18:65:fa:2e:10:f2:ce:50:3a: ca:68:97:90:c1:97:db:43:d2:1c:60:7a:b9:aa:18:24:53:9f: ea:a5:94:5f:e2:6c:92:8f:1e:1c:20:10:e6:b3:a6:ce:f7:23: 26:39:2c:02:6e:6c:ba:e6:7a:bf:13:74:89:95:da:aa:7d:14: ef:a1:2c:c1:a6:24:86:5d:e2:d8:f1:3d:da:43:4f:88:f8:f7: 83:e4:4f:40:33:58:c1:8c:fd:90:f9:a8:24:82:72:00:a0:67: 60:9f:5a:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8n1FViho8RDgKYzYazBFMGXtL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3 MEZBRDRBNTAeFw0yNDA1MTcxODM2MjhaFw0yNDA1MjEwNjA1MjhaMDMxMTAvBgNV BAMTKEE2NDc3MkFBNDJGMjU5OERCNjA0MUY5QTk2M0JFMDU3MEJFMDg0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAk+StUD3Qo2tXV1sEVYtvqxf iuNH8ZCWOz9GxKTl4w7ga1n+fR/WBd1IQjub6yQfby+Cds93IMYt81HJDasKTfdb /80PMUYGUXkYLL+HQZelDt9yo2bLHhmeSexdvgIz4mVMoffUhURB5hpzTk6SJHWP oRNFw3Nt/xSdQjZEatwWN+OiPCjTRGWDVRI1J7b4584OHecwnAUEqiI5s0O40bQ+ ZqKQXHv2f4cY9pU0GjWuLeY22sABbAcodPR36rKS18Xl8vAvLdqxHp7mKGtE7ViL MfbzAAccjwPtpoPNtJxD80FDvwR1POJ3l+U7VjBc+LuSfFEwBpOLHmS2Q5yrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkdyqkLyWY22BB+aljvgVwvghLcwHwYDVR0j BBgwFoAU+fIfGNDFZW2PJLP/7gsXoXD61KUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjFjOTU3OS01NmJhLTRhNzAtYmExMy0zYjA1YTZjY2IyMWUvMC9GOUYyMUYxOEQw QzU2NTZEOEYyNEIzRkZFRTBCMTdBMTcwRkFENEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3QTE3MEZB RDRBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWIxYzk1NzktNTZiYS00YTcwLWJh MTMtM2IwNWE2Y2NiMjFlLzAvRjlGMjFGMThEMEM1NjU2RDhGMjRCM0ZGRUUwQjE3 QTE3MEZBRDRBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAknifmtLhhg4xAoyP1fUIi9eDpxXWd99fyT ehWISwI+EDqG4A3ChOqKMDPT1onMatjzSt5K5iHN46ey7Ezrx7wygQ5w9j0tv+yb cVtFwSJH2xtmvjlzdbrL4w7wV19tprVT9LiUxe8tbrWSgPDUMvnC6YWVXRwSjhXs gJFKGQ8DKJrty5kFnNs7sc8CraKo1/U6CbJ+040ElRhl+i4Q8s5QOspol5DBl9tD 0hxgermqGCRTn+qllF/ibJKPHhwgEOazps73IyY5LAJubLrmer8TdImV2qp9FO+h LMGmJIZd4tjxPdpDT4j494PkT0AzWMGM/ZD5qCSCcgCgZ2CfWu8= -----END CERTIFICATE-----Generated at Fri May 17 20:01:48 2024 by rpki-client on console-ams.rpki-client.org