$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: QNzGU4ccUZFjnGvvcs3LGd6SupkRy9pyeuSgRlwJrBs= Subject key identifier: 1B:E2:1A:CE:D0:83:76:A5:EB:79:E7:27:6E:0E:76:B8:B0:B0:74:D3 Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 06F89FE8E283722AEB306812EE217B9E2548A922 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 0431 Signing time: Fri 17 May 2024 04:31:51 +0000 Manifest this update: Fri 17 May 2024 04:26:51 +0000 Manifest next update: Mon 20 May 2024 06:37:51 +0000 Files and hashes: 1: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: 46Twwt5Ev6F0NQO+J73DngOTHUOzO/QJQNxk1ZRVhuE=) 2: 323430343a343738303a313a3a2f34382d3438203d3e20313430333939.roa (hash: Aj7SkuUfGUEHg3ZvocvK1b8gnuT/F1GrtYg9gvGoY9g=) 3: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: YA5E9Om21qeU7/AWnaaPUL0uSrmqqw7vWYdqxr8e0d8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 06:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f8:9f:e8:e2:83:72:2a:eb:30:68:12:ee:21:7b:9e:25:48:a9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: May 17 04:26:51 2024 GMT Not After : May 20 06:37:51 2024 GMT Subject: CN=1BE21ACED08376A5EB79E7276E0E76B8B0B074D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3a:67:e7:e1:ec:08:5d:b2:f0:5d:4e:0d:ac: cb:2a:08:cd:15:d8:f7:99:db:ad:9f:65:e9:18:a6: 8e:95:51:f3:86:07:39:8c:4b:87:2d:79:20:88:19: 01:83:f4:1e:cb:e8:59:ab:4f:0e:91:6c:85:38:64: 49:78:27:0b:38:cc:27:68:44:34:3e:a1:8d:30:6e: 75:eb:f0:ee:ea:58:ea:66:c7:67:10:08:fb:c3:a5: 70:03:ed:28:b8:e3:4c:93:8a:d3:e6:f0:af:6f:a7: 99:9f:ac:e5:be:0e:1e:6e:4b:a1:3d:5d:a7:45:1e: 6a:a0:80:2e:35:63:cd:08:b4:6b:f6:72:b9:45:44: 55:f6:27:43:34:8d:96:e7:d7:9d:ed:dc:e0:fb:d3: 6f:2d:0d:41:d0:dd:13:22:a5:ef:59:1d:2c:71:7d: b4:2c:88:76:a7:67:96:59:73:6b:07:14:c5:7b:eb: b7:d7:31:71:0f:f5:5c:d9:65:f6:8f:4e:e8:b3:01: 7a:a6:d2:19:e9:91:32:7d:3d:54:b8:f4:92:40:8e: 54:d7:38:cf:98:a8:02:83:ef:5b:a0:2d:51:34:08: 47:b1:eb:82:bd:ad:a4:bf:44:1d:08:a0:12:62:97: b4:32:aa:7a:e0:e7:74:5a:58:0d:4b:d3:99:f7:30: 55:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E2:1A:CE:D0:83:76:A5:EB:79:E7:27:6E:0E:76:B8:B0:B0:74:D3 X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:21:90:ad:ce:c9:e1:71:66:60:36:47:52:35:19:64:0d:c6: aa:03:b7:f1:d6:05:9c:c4:43:08:5d:f1:53:6e:e0:a2:b0:ad: 32:bd:02:e5:06:56:ad:f7:21:8a:70:d0:2e:f2:c2:27:0f:8d: 02:61:14:8c:96:80:27:5f:a7:25:0d:09:fc:f9:ed:55:a4:0a: 75:af:64:55:79:25:16:16:a7:a8:cd:01:5e:92:ac:ee:7d:75: 33:75:af:82:7e:14:97:b6:b0:b0:e8:3f:98:16:e7:93:bb:77: 99:3b:4e:59:cc:b5:70:90:90:1e:d8:fa:dc:85:a0:49:a4:3d: 15:b7:c3:3a:8e:b8:31:50:76:b9:f1:0c:11:20:26:70:42:c0: fa:b4:94:6d:03:36:9e:3d:d3:45:4e:17:fb:a6:04:e6:1f:f9: 44:50:59:9b:4f:1d:0a:b5:da:55:43:a5:e5:cb:fe:1a:2e:83: 5e:02:1e:d2:56:a9:90:0a:a5:03:6c:93:d2:cc:34:cc:d7:9b: 80:1e:a9:2e:78:d6:b9:37:7c:07:e3:7a:0f:9d:b9:e2:b0:9d: 13:a8:c7:d2:3e:78:dc:33:f4:70:71:1e:59:64:4f:e9:41:bb: 3d:b9:0e:8d:dd:49:ba:9e:04:66:b4:8a:ae:0b:dd:7e:88:f5: 76:1a:b6:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvif6OKDcirrMGgS7iF7niVIqSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNDA1MTcwNDI2NTFaFw0yNDA1MjAwNjM3NTFaMDMxMTAvBgNV BAMTKDFCRTIxQUNFRDA4Mzc2QTVFQjc5RTcyNzZFMEU3NkI4QjBCMDc0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROmfn4ewIXbLwXU4NrMsqCM0V 2PeZ262fZekYpo6VUfOGBzmMS4cteSCIGQGD9B7L6FmrTw6RbIU4ZEl4Jws4zCdo RDQ+oY0wbnXr8O7qWOpmx2cQCPvDpXAD7Si440yTitPm8K9vp5mfrOW+Dh5uS6E9 XadFHmqggC41Y80ItGv2crlFRFX2J0M0jZbn153t3OD7028tDUHQ3RMipe9ZHSxx fbQsiHanZ5ZZc2sHFMV767fXMXEP9VzZZfaPTuizAXqm0hnpkTJ9PVS49JJAjlTX OM+YqAKD71ugLVE0CEex64K9raS/RB0IoBJil7Qyqnrg53RaWA1L05n3MFWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG+IaztCDdqXreecnbg52uLCwdNMwHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMEhkK3OyeFxZmA2R1I1GWQNxqoDt/HWBZzE Qwhd8VNu4KKwrTK9AuUGVq33IYpw0C7ywicPjQJhFIyWgCdfpyUNCfz57VWkCnWv ZFV5JRYWp6jNAV6SrO59dTN1r4J+FJe2sLDoP5gW55O7d5k7TlnMtXCQkB7Y+tyF oEmkPRW3wzqOuDFQdrnxDBEgJnBCwPq0lG0DNp4900VOF/umBOYf+URQWZtPHQq1 2lVDpeXL/houg14CHtJWqZAKpQNsk9LMNMzXm4AeqS541rk3fAfjeg+dueKwnROo x9I+eNwz9HBxHllkT+lBuz25Do3dSbqeBGa0iq4L3X6I9XYatok= -----END CERTIFICATE-----Generated at Fri May 17 06:17:22 2024 by rpki-client on console-fra.rpki-client.org