$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: D5DBDEMGVbhbUe9ec44mEG1SCG1woSvxOw9hxj4C6P8= Subject key identifier: 83:F5:89:50:D1:54:F1:8F:1D:3A:2C:3F:EC:5E:86:60:66:89:B1:FD Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 408D69475FD9672FF530C54202E9AA27689EB8E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 013B Signing time: Thu 30 May 2024 15:01:16 +0000 Manifest this update: Thu 30 May 2024 14:56:16 +0000 Manifest next update: Mon 03 Jun 2024 00:21:16 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: beyY00a00VBGERsYQlRNcF1U0dKVBEdyWazQu6YOtc8=) 2: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: Uowc4LS0rPkZprKI9FgJzlG8BId7NbDJndr4mEYy8jw=) 3: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: rjF83Vd4GIyaxA62zkPjKtAvzUELtQl5EiQ3hxLbM50=) 4: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: W9SlEeOl3X8ocbNoZ4DhRgPCmpzG9cK0+5yGb5bLv0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 22:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8d:69:47:5f:d9:67:2f:f5:30:c5:42:02:e9:aa:27:68:9e:b8:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: May 30 14:56:16 2024 GMT Not After : Jun 3 00:21:16 2024 GMT Subject: CN=83F58950D154F18F1D3A2C3FEC5E86606689B1FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7a:fc:4d:14:54:f9:24:f3:47:31:16:1b:a3: 39:f7:2c:24:9a:32:60:9e:0b:5f:37:9a:e2:36:31: e5:ef:60:e3:14:cd:a7:ce:ec:2f:1f:dc:f3:9c:e9: e8:71:33:8c:e0:00:b5:a9:3b:ed:9f:22:0a:4e:9c: c7:4a:86:3d:29:3f:d9:15:4c:73:6d:08:ff:50:7b: 85:59:e4:1f:76:3b:73:ab:2d:b2:3d:47:54:82:59: 60:7d:42:81:47:16:31:9b:32:ef:92:6e:78:69:0b: c7:9d:4c:2e:6b:ce:84:cd:84:f6:bc:e0:4d:f9:62: 03:f5:36:85:6c:8b:a0:7b:db:1f:6e:7c:21:e0:eb: 2a:66:29:c2:33:85:da:f8:d7:9c:94:de:67:ba:ee: 9a:ed:b2:e5:fd:b6:2b:24:c6:53:3a:ee:64:09:62: 9c:b1:7a:15:4a:b7:fc:69:b9:67:73:21:63:11:2d: 50:09:e0:56:a0:49:18:df:df:c6:00:78:10:7f:9a: 57:d1:a2:e3:16:a7:7b:3e:81:60:21:d8:2e:e2:07: 3f:a0:5a:19:bd:f0:0c:40:cc:0a:57:04:7b:e7:a3: b3:7b:5f:e9:c8:ae:08:64:7c:88:8c:ca:77:f9:d2: 44:5e:dc:e0:3a:d2:bb:84:c0:06:f5:9f:7e:45:e1: 4b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F5:89:50:D1:54:F1:8F:1D:3A:2C:3F:EC:5E:86:60:66:89:B1:FD X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e8:6c:a0:06:ab:79:66:16:96:76:0a:66:19:32:f3:bf:58: 04:81:07:f4:79:cc:44:19:60:e0:b0:aa:f2:14:05:b8:76:a8: 1b:e7:b9:5d:ad:e4:a6:fd:ed:c4:c1:d6:a5:22:83:47:50:1a: 39:e3:09:49:83:d2:39:1a:63:a9:b1:88:ff:5a:9b:04:45:89: db:7d:4d:f9:91:e5:94:f7:a6:9b:7a:a6:10:27:46:07:f4:c7: 85:37:5b:03:f0:79:2e:98:7c:22:34:e5:9f:eb:37:ee:97:ea: 87:53:73:a7:d3:60:b3:76:1e:1c:6d:b4:5f:9e:2f:42:c5:58: f3:4e:d7:d5:a6:36:a3:f2:11:15:24:d6:40:dd:17:9d:7e:36: e2:1c:85:77:f9:d0:66:cc:94:1f:21:af:35:61:7e:21:9e:7c: 17:3d:4b:ca:99:16:52:b6:4b:42:92:17:13:70:26:3a:61:7e: 56:b2:ae:64:e7:70:2f:62:1b:2b:31:6e:d1:0f:d7:70:b0:f1: 8b:6f:37:54:5b:6b:b3:14:f9:4d:98:87:28:54:85:c7:a5:dc: 8e:e7:e8:ce:c6:90:8c:fa:23:99:8b:32:37:a1:7d:26:73:b7: fd:96:ff:e1:3d:50:70:b2:ac:cf:9c:9e:68:d3:42:14:6f:ff: 7e:4d:2f:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQI1pR1/ZZy/1MMVCAumqJ2ieuOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNDA1MzAxNDU2MTZaFw0yNDA2MDMwMDIxMTZaMDMxMTAvBgNV BAMTKDgzRjU4OTUwRDE1NEYxOEYxRDNBMkMzRkVDNUU4NjYwNjY4OUIxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeevxNFFT5JPNHMRYbozn3LCSa MmCeC183muI2MeXvYOMUzafO7C8f3POc6ehxM4zgALWpO+2fIgpOnMdKhj0pP9kV THNtCP9Qe4VZ5B92O3OrLbI9R1SCWWB9QoFHFjGbMu+SbnhpC8edTC5rzoTNhPa8 4E35YgP1NoVsi6B72x9ufCHg6ypmKcIzhdr415yU3me67prtsuX9tiskxlM67mQJ YpyxehVKt/xpuWdzIWMRLVAJ4FagSRjf38YAeBB/mlfRouMWp3s+gWAh2C7iBz+g Whm98AxAzApXBHvno7N7X+nIrghkfIiMynf50kRe3OA60ruEwAb1n35F4UufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg/WJUNFU8Y8dOiw/7F6GYGaJsf0wHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3obKAGq3lmFpZ2CmYZMvO/WASBB/R5zEQZ YOCwqvIUBbh2qBvnuV2t5Kb97cTB1qUig0dQGjnjCUmD0jkaY6mxiP9amwRFidt9 TfmR5ZT3ppt6phAnRgf0x4U3WwPweS6YfCI05Z/rN+6X6odTc6fTYLN2HhxttF+e L0LFWPNO19WmNqPyERUk1kDdF51+NuIchXf50GbMlB8hrzVhfiGefBc9S8qZFlK2 S0KSFxNwJjphflayrmTncC9iGysxbtEP13Cw8YtvN1Rba7MU+U2YhyhUhcel3I7n 6M7GkIz6I5mLMjehfSZzt/2W/+E9UHCyrM+cnmjTQhRv/35NL+4= -----END CERTIFICATE-----Generated at Thu May 30 16:03:54 2024 by rpki-client on console-fra.rpki-client.org