$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: /SAWH2aRzkRx/wlRyLtoBR0TRthDY6OY3APFiUHho+A= Subject key identifier: 8D:99:0A:FF:62:EE:D2:19:B9:90:5F:66:D6:5D:D2:C9:5D:7A:9B:5C Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 1F330E19F05FDF68D8A915A74ACA29868301CCE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 03B3 Signing time: Mon 27 May 2024 07:20:45 +0000 Manifest this update: Mon 27 May 2024 07:15:45 +0000 Manifest next update: Thu 30 May 2024 14:01:45 +0000 Files and hashes: 1: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: uQ/iiWtxQYDUG0IcnJMiNj9n9sU3K4xrTV6KscNrnZA=) 2: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: 6USgUA/IBIeNbeRHcGp1aFjgk++P7t0qm1AdG6yLS2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 13:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:33:0e:19:f0:5f:df:68:d8:a9:15:a7:4a:ca:29:86:83:01:cc:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: May 27 07:15:45 2024 GMT Not After : May 30 14:01:45 2024 GMT Subject: CN=8D990AFF62EED219B9905F66D65DD2C95D7A9B5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:53:40:31:96:a9:2c:e2:1f:4f:e5:a5:43: cb:b6:9b:d6:a2:9f:0f:4d:4b:dd:d2:24:b2:24:ec: 89:9d:d7:76:0a:e0:79:64:12:70:4d:6b:1e:fa:ac: dc:85:d1:86:d4:3d:0f:69:54:bf:bb:dd:3c:d9:60: b5:9d:14:34:6b:b9:ef:b5:0c:8b:f8:47:78:2a:38: 2c:a1:af:4e:cf:40:c4:9b:a0:dc:d0:22:28:eb:1c: 1d:73:36:01:e4:26:3f:9f:a5:56:ac:6b:4d:a3:ae: bc:6d:a3:37:cf:47:e4:df:aa:b1:b2:36:73:bd:8c: ff:89:25:4b:fe:9d:ed:57:1d:02:9b:f2:fd:c4:13: d7:08:5b:4c:0d:20:ca:74:17:22:71:ab:ec:9b:fd: 33:fe:68:de:78:c6:c3:10:75:98:90:d1:42:ab:9a: 85:5b:a6:83:a8:33:76:a7:f2:f4:e9:fd:bd:cd:b5: f9:c6:1c:0a:de:61:68:8d:83:72:fe:d9:58:5d:e6: 03:e7:cd:a9:33:3c:09:3f:10:1f:b2:85:b4:6a:3e: 5e:1f:da:bd:57:73:62:ac:47:4d:7d:ca:90:06:9a: e0:76:bb:b4:6e:c0:0e:6c:0c:79:7b:0c:bc:49:a0: d6:5a:f3:39:1b:31:bd:5c:e7:d8:f9:c3:0d:36:07: b9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:99:0A:FF:62:EE:D2:19:B9:90:5F:66:D6:5D:D2:C9:5D:7A:9B:5C X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1b:e2:ff:08:b6:16:05:d4:f4:8b:e5:be:7a:e6:58:86:35: 32:b2:b2:ea:37:98:f9:10:ba:a1:f0:9e:9a:fa:bc:80:b6:f2: 3b:44:94:11:f0:c2:bf:90:b1:d4:3a:87:ee:29:2e:52:59:24: 75:c9:80:86:c5:1b:ec:65:c6:35:49:f9:41:a0:ba:1b:24:9e: 8e:d0:3b:2a:c6:15:25:11:6c:0f:1f:bc:01:b1:27:2f:a0:b9: 58:49:98:62:5f:5a:c8:39:9b:32:44:84:8e:56:4f:9d:d9:bd: bb:51:3c:68:76:71:0e:f7:c2:20:04:d1:dc:e3:6a:0d:59:78: 9f:df:3b:6f:5a:a4:3d:02:7d:25:0a:e3:62:5b:c8:fb:6b:c9: 6e:89:bf:be:a0:8d:e9:bd:0a:ef:db:dd:01:77:85:81:9d:1a: f1:6f:c0:54:59:95:e8:37:21:1e:5f:59:be:35:89:8e:e3:28: cc:ef:59:69:19:40:0e:c8:15:30:f2:e7:e7:3b:eb:1d:41:9d: df:7b:6e:6f:7c:22:87:40:4e:0d:37:54:48:90:58:8d:07:97: 57:75:34:63:3b:50:a7:c9:b2:8f:7d:b0:31:78:97:eb:b2:0c: 73:81:4a:88:67:5a:7a:67:05:be:82:5a:36:68:99:d6:e5:ab: 17:2f:c3:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzMOGfBf32jYqRWnSsophoMBzOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNDA1MjcwNzE1NDVaFw0yNDA1MzAxNDAxNDVaMDMxMTAvBgNV BAMTKDhEOTkwQUZGNjJFRUQyMTlCOTkwNUY2NkQ2NUREMkM5NUQ3QTlCNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ElNAMZapLOIfT+WlQ8u2m9ai nw9NS93SJLIk7Imd13YK4HlkEnBNax76rNyF0YbUPQ9pVL+73TzZYLWdFDRrue+1 DIv4R3gqOCyhr07PQMSboNzQIijrHB1zNgHkJj+fpVasa02jrrxtozfPR+TfqrGy NnO9jP+JJUv+ne1XHQKb8v3EE9cIW0wNIMp0FyJxq+yb/TP+aN54xsMQdZiQ0UKr moVbpoOoM3an8vTp/b3NtfnGHAreYWiNg3L+2Vhd5gPnzakzPAk/EB+yhbRqPl4f 2r1Xc2KsR019ypAGmuB2u7RuwA5sDHl7DLxJoNZa8zkbMb1c59j5ww02B7mpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjZkK/2Lu0hm5kF9m1l3SyV16m1wwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgb4v8IthYF1PSL5b565liGNTKysuo3mPkQ uqHwnpr6vIC28jtElBHwwr+QsdQ6h+4pLlJZJHXJgIbFG+xlxjVJ+UGguhskno7Q OyrGFSURbA8fvAGxJy+guVhJmGJfWsg5mzJEhI5WT53ZvbtRPGh2cQ73wiAE0dzj ag1ZeJ/fO29apD0CfSUK42JbyPtryW6Jv76gjem9Cu/b3QF3hYGdGvFvwFRZleg3 IR5fWb41iY7jKMzvWWkZQA7IFTDy5+c76x1Bnd97bm98IodATg03VEiQWI0Hl1d1 NGM7UKfJso99sDF4l+uyDHOBSohnWnpnBb6CWjZomdblqxcvwxM= -----END CERTIFICATE-----Generated at Mon May 27 08:06:49 2024 by rpki-client on console-ams.rpki-client.org