$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: op1E8cUfKERnyplMorpzOTi+JxibBYsAdLv7r7OoHSI= Subject key identifier: 8E:2A:1A:E2:EC:21:CF:3E:58:DB:16:23:52:FA:8E:09:64:09:B2:25 Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 4FF218A0C8EFE6B105B8E89DCEE50A2F92C06410 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: BC Signing time: Sat 18 May 2024 15:51:27 +0000 Manifest this update: Sat 18 May 2024 15:46:27 +0000 Manifest next update: Wed 22 May 2024 03:32:27 +0000 Files and hashes: 1: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: fXUgq36ejSe6Mt9Z8iAmIYvwwQjs0rTb2Jv+srY4OWA=) 2: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: ED/6+BwM8sod94k9wXfselYq/3g3ss3r+glcWXmOBlI=) 3: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: Fb4tLrqJoZos25kCGNCZOgpy0++sIR5jzr5AGe3rv9s=) 4: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: BocXSIosxuksTef6ZcHpXTPxb1Pj4IgJAQqBiOzvXbc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f2:18:a0:c8:ef:e6:b1:05:b8:e8:9d:ce:e5:0a:2f:92:c0:64:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: May 18 15:46:27 2024 GMT Not After : May 22 03:32:27 2024 GMT Subject: CN=8E2A1AE2EC21CF3E58DB162352FA8E096409B225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:86:9f:f1:ee:bd:06:e6:6b:b1:b2:f1:60: 9c:fd:f5:0a:59:6a:05:e4:f1:8c:99:b1:7f:f8:1e: 48:f9:8d:92:bf:d9:ed:4b:b8:63:a8:00:a1:95:e1: ac:bf:99:bf:18:e9:ba:db:0c:4a:3b:49:b8:77:32: f6:c7:f4:be:34:1f:8d:05:ea:ba:90:a7:11:fb:00: 56:e6:3a:7e:9b:a0:66:ac:9f:d1:46:a0:7c:e2:d9: 17:ea:23:f2:9b:5c:98:08:24:5b:41:91:c2:37:0f: 85:9e:74:3f:e6:a5:2c:f1:9a:6d:6d:7f:cd:1d:c0: af:ef:01:12:ba:95:34:de:90:e7:2c:82:e0:e9:e2: 4e:75:1b:82:7e:6c:f9:fb:b6:12:43:c2:a9:bc:63: db:a9:61:69:99:7e:13:27:40:f5:ad:40:3b:de:81: 27:57:91:bb:2c:13:19:cf:29:63:ea:75:bb:4f:f0: 1a:96:0a:56:e1:82:f0:e1:be:6e:97:61:9e:4b:ca: 3d:73:1a:6c:67:fa:91:f3:04:91:61:e7:05:17:be: dd:da:8f:27:b6:8f:24:63:f0:b4:60:27:d8:67:ac: 2c:29:b9:b6:1c:c1:28:b3:63:10:56:4a:8b:3c:3a: 52:cf:da:c8:ea:a6:0e:6b:ba:94:65:f9:5e:dc:07: c5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2A:1A:E2:EC:21:CF:3E:58:DB:16:23:52:FA:8E:09:64:09:B2:25 X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:70:37:5b:c3:35:e5:3e:94:46:5a:b6:f4:7f:c9:cc:53:0a: 91:0f:1e:a6:7a:d6:6f:e0:cc:c3:1e:ef:1e:dd:d7:5f:79:dc: 9a:a0:03:b8:15:c2:2d:0d:3a:11:b2:5e:3a:57:49:58:27:ba: 6f:cd:40:6c:40:33:30:6b:36:68:a1:09:61:97:ff:99:b2:72: ef:8e:5a:7d:10:3b:50:51:9a:9f:1f:5b:53:77:5f:49:f3:6d: cb:6f:5b:d7:9f:fb:7c:ea:9e:66:9d:bd:cc:a2:76:0f:eb:c2: 79:23:4a:27:96:cd:02:3e:e7:f3:46:ee:e2:24:c4:59:54:16: 50:52:6c:4d:eb:c2:23:54:db:6e:0c:5d:65:55:93:65:cc:79: 7f:e8:b1:30:80:c8:2f:2e:a1:7e:36:89:0f:ad:4b:18:35:58: 4a:96:64:10:0f:13:b6:b0:2c:e7:1b:2b:b2:48:e5:1a:8b:62: f2:c3:4e:e4:ed:2a:63:08:52:2b:a1:ec:70:54:63:0d:89:3b: 9c:dc:52:d3:af:7c:81:50:f1:fb:cf:20:b4:e7:a2:82:a9:3a: 0a:59:75:46:8f:66:3b:ac:32:46:5c:58:ac:ca:18:e3:5d:2d: 1e:68:ed:21:18:24:f9:22:3b:4b:05:c8:be:ba:d0:ec:67:97: 04:c6:c5:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/IYoMjv5rEFuOidzuUKL5LAZBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNDA1MTgxNTQ2MjdaFw0yNDA1MjIwMzMyMjdaMDMxMTAvBgNV BAMTKDhFMkExQUUyRUMyMUNGM0U1OERCMTYyMzUyRkE4RTA5NjQwOUIyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0Yaf8e69BuZrsbLxYJz99QpZ agXk8YyZsX/4Hkj5jZK/2e1LuGOoAKGV4ay/mb8Y6brbDEo7Sbh3MvbH9L40H40F 6rqQpxH7AFbmOn6boGasn9FGoHzi2RfqI/KbXJgIJFtBkcI3D4WedD/mpSzxmm1t f80dwK/vARK6lTTekOcsguDp4k51G4J+bPn7thJDwqm8Y9upYWmZfhMnQPWtQDve gSdXkbssExnPKWPqdbtP8BqWClbhgvDhvm6XYZ5Lyj1zGmxn+pHzBJFh5wUXvt3a jye2jyRj8LRgJ9hnrCwpubYcwSizYxBWSos8OlLP2sjqpg5rupRl+V7cB8VRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjioa4uwhzz5Y2xYjUvqOCWQJsiUwHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRwN1vDNeU+lEZatvR/ycxTCpEPHqZ61m/g zMMe7x7d11953JqgA7gVwi0NOhGyXjpXSVgnum/NQGxAMzBrNmihCWGX/5mycu+O Wn0QO1BRmp8fW1N3X0nzbctvW9ef+3zqnmadvcyidg/rwnkjSieWzQI+5/NG7uIk xFlUFlBSbE3rwiNU224MXWVVk2XMeX/osTCAyC8uoX42iQ+tSxg1WEqWZBAPE7aw LOcbK7JI5RqLYvLDTuTtKmMIUiuh7HBUYw2JO5zcUtOvfIFQ8fvPILTnooKpOgpZ dUaPZjusMkZcWKzKGONdLR5o7SEYJPkiO0sFyL660OxnlwTGxZM= -----END CERTIFICATE-----Generated at Sat May 18 17:19:17 2024 by rpki-client on console-ams.rpki-client.org