$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft File: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json) Hash identifier: D2nmjyPC1mIrcAXtYbtJUyVs6ndynGHBuhcnM/XL+yc= Subject key identifier: DF:91:16:A4:F3:BF:3B:0F:43:EB:B8:DB:53:8A:2B:70:66:1D:82:5C Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 333A06858BAD46D727D492970B02546ED50ABD04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft Manifest number: A0 Signing time: Fri 17 May 2024 13:20:57 +0000 Manifest this update: Fri 17 May 2024 13:15:57 +0000 Manifest next update: Mon 20 May 2024 20:15:57 +0000 Files and hashes: 1: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: Gb6cmB9c5IloqAGtHWl4vy/3F4HBcv1T5WmdzZY9mKQ=) 2: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: DH7WWVtAQQ47TWDTD90je7Z6JKC1KCw81hWr+pcQMqQ=) 3: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: ECldTT7EpItwfxLDByM37zLx8vcI4wsesM44ZA7sMNQ=) 4: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: 7l6YRpFjq/BhvNKbQ/PDp93vukbCortB3lZQzaVdDOo=) 5: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: jbjmyKqcmlUFZAY0I4sDhXYJTXQVsc2puip0ulWkQ90=) 6: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: V4XrEeNOosoedxgaQCsURJSNMQUej/s1J7hrxyGIKD0=) 7: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 1pRZrrE17sw3xGiIXZ5TMzKe5CByHhOuDhw0e6Vb83A=) 8: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: BJAghN3kSWOge2YiqNG9kFVvRASQDTJ4iS3/cZWbLF8=) 9: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: YvHz/fT40yaf5jjeMepwi7E7sGbG48wQXaHcv1H3p7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 20:15:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3a:06:85:8b:ad:46:d7:27:d4:92:97:0b:02:54:6e:d5:0a:bd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: May 17 13:15:57 2024 GMT Not After : May 20 20:15:57 2024 GMT Subject: CN=DF9116A4F3BF3B0F43EBB8DB538A2B70661D825C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:55:12:af:15:92:a1:e5:7e:17:42:b8:b0:6b: bd:d6:47:b7:ac:7a:d9:84:c7:a3:ab:49:19:a8:21: 04:1e:ae:4a:d3:5f:19:2f:46:e9:2c:a5:57:43:81: f3:88:c9:22:ab:c9:5b:ed:04:99:75:f2:2d:fc:19: 24:24:ed:4b:ad:3c:26:82:a9:ae:f9:95:b2:e5:68: fb:1c:42:32:ac:8e:1d:0e:ff:eb:70:11:a3:24:25: a1:0b:d2:94:52:1b:4a:d1:95:6b:05:24:e5:c3:41: d2:c8:db:e7:6a:41:16:28:b6:66:9a:70:ea:86:fd: 77:0e:bd:f6:de:c0:fc:f7:6d:ef:2a:ac:cb:52:54: 1d:34:8e:36:20:f5:4d:26:77:58:ba:a4:e2:eb:e2: d7:c9:21:71:ad:2d:12:b3:b4:af:9b:af:ee:c4:47: c9:7c:cc:68:64:ef:0f:e3:0b:77:73:7e:eb:17:e8: 23:3a:81:f3:fc:80:9d:0e:54:e9:1d:44:94:2c:ee: 06:94:f8:89:5b:df:17:a7:06:3b:4c:25:29:06:25: a4:13:ee:3a:78:c6:06:ce:63:19:78:a8:16:71:e0: ad:af:20:ec:c2:92:39:a1:1e:1a:ef:54:32:b3:d7: df:c5:e8:c5:db:ea:ca:d2:b3:23:64:0b:91:43:5f: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:91:16:A4:F3:BF:3B:0F:43:EB:B8:DB:53:8A:2B:70:66:1D:82:5C X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fc:5e:eb:9e:94:a7:68:23:1c:d0:f7:65:b9:29:cb:0a:8f: 45:f9:03:19:b4:5e:4f:bd:96:09:c8:a2:fd:f7:72:2a:39:a2: 18:09:7d:77:ba:37:c2:f5:6e:41:3d:4b:64:79:fc:82:a6:8b: 8e:fc:16:d2:0a:84:c7:ac:7a:f8:e5:b9:4b:83:91:19:1d:1e: 85:32:f2:ed:b3:23:de:7b:4f:cb:71:ea:59:38:cc:8f:2b:a4: c4:53:97:28:36:fc:13:00:86:6c:82:1f:45:0c:dc:40:11:39: 01:2b:87:bb:71:b3:dd:19:dc:95:31:fb:c4:55:d7:35:56:c3: b2:b5:af:89:e0:9f:88:c6:f6:a8:f8:04:46:19:f1:9f:99:a5: 4c:ce:27:ec:9e:0a:5d:59:d1:42:ef:76:2a:dc:6b:56:5d:72: af:c1:83:cd:d0:70:ad:13:69:11:0f:52:38:ea:e6:e4:56:46: 2d:39:be:14:42:e9:7d:b9:a9:75:dd:3d:ea:e1:ba:03:da:08: 44:d4:40:cf:aa:c9:59:f2:cf:ac:79:aa:c1:c5:84:5e:98:8a: e9:12:0f:45:2e:63:2a:11:2b:c1:dc:2a:70:09:ae:0c:ae:82: 8b:49:76:b3:f6:a4:4c:88:f4:1c:b3:b5:e7:04:a2:e4:2d:8d: 30:07:4e:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzoGhYutRtcn1JKXCwJUbtUKvQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNDA1MTcxMzE1NTdaFw0yNDA1MjAyMDE1NTdaMDMxMTAvBgNV BAMTKERGOTExNkE0RjNCRjNCMEY0M0VCQjhEQjUzOEEyQjcwNjYxRDgyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlVRKvFZKh5X4XQriwa73WR7es etmEx6OrSRmoIQQerkrTXxkvRukspVdDgfOIySKryVvtBJl18i38GSQk7UutPCaC qa75lbLlaPscQjKsjh0O/+twEaMkJaEL0pRSG0rRlWsFJOXDQdLI2+dqQRYotmaa cOqG/XcOvfbewPz3be8qrMtSVB00jjYg9U0md1i6pOLr4tfJIXGtLRKztK+br+7E R8l8zGhk7w/jC3dzfusX6CM6gfP8gJ0OVOkdRJQs7gaU+Ilb3xenBjtMJSkGJaQT 7jp4xgbOYxl4qBZx4K2vIOzCkjmhHhrvVDKz19/F6MXb6srSsyNkC5FDX56jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU35EWpPO/Ow9D67jbU4orcGYdglwwHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU1YTFhNDQtMzM3ZC00ZGI0LTkw ZDctNWJkNGYzNzIxNGI4LzAvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4 N0I2MDM5NDQ4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn8XuuelKdoIxzQ92W5KcsKj0X5Axm0Xk+9 lgnIov33cio5ohgJfXe6N8L1bkE9S2R5/IKmi478FtIKhMesevjluUuDkRkdHoUy 8u2zI957T8tx6lk4zI8rpMRTlyg2/BMAhmyCH0UM3EAROQErh7txs90Z3JUx+8RV 1zVWw7K1r4ngn4jG9qj4BEYZ8Z+ZpUzOJ+yeCl1Z0ULvdirca1Zdcq/Bg83QcK0T aREPUjjq5uRWRi05vhRC6X25qXXdPerhugPaCETUQM+qyVnyz6x5qsHFhF6YiukS D0UuYyoRK8HcKnAJrgyugotJdrP2pEyI9ByztecEouQtjTAHTmI= -----END CERTIFICATE-----Generated at Fri May 17 15:21:31 2024 by rpki-client on console-ams.rpki-client.org