$ rpki-client -vvf repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft File: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft (raw, json) Hash identifier: qr0t0ziDoK/K9q0IzpPvKBeUTgrtYelXBXlWUWL/N0A= Subject key identifier: D1:7E:C0:FB:0D:DF:76:9A:B1:FE:1F:2C:12:20:35:14:ED:02:6B:99 Authority key identifier: FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 Certificate issuer: /CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Certificate serial: 220B4B775B0490C7871712FAB3978DB1414F66B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft Manifest number: 0435 Signing time: Thu 30 May 2024 09:21:00 +0000 Manifest this update: Thu 30 May 2024 09:16:00 +0000 Manifest next update: Sun 02 Jun 2024 19:01:00 +0000 Files and hashes: 1: FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl (hash: YcYJC3hBhrrV3kmCyE/VZY6daRRtj0Qa+q1m5QqYMOk=) 2: 3130332e33312e3130392e302f32342d3234203d3e20313331373537.roa (hash: hg9gvpgrFr8Z5PIr50od7tdQR+wDb7C/AqkEXRVC2Ck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 10:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0b:4b:77:5b:04:90:c7:87:17:12:fa:b3:97:8d:b1:41:4f:66:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72 Validity Not Before: May 30 09:16:00 2024 GMT Not After : Jun 2 19:01:00 2024 GMT Subject: CN=D17EC0FB0DDF769AB1FE1F2C12203514ED026B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:29:d6:cc:06:63:eb:30:ab:49:9a:e6:f9:44: 11:59:5e:8e:e9:b4:8c:d0:b3:a1:4d:fc:e6:28:d8: 36:c9:69:17:b1:7e:d6:ac:dd:b9:1a:bd:98:60:26: 9a:e7:d8:f9:4c:ad:0e:96:67:fe:49:ff:4d:e3:bc: d9:f3:d1:7a:9c:36:e1:63:10:19:8c:d3:17:6f:c8: 5b:56:40:a6:09:83:60:9e:0f:97:f2:a2:fc:a9:4b: 31:91:04:8b:82:ca:cf:50:37:70:3c:bb:d9:4c:59: 7f:9a:7c:16:b7:35:5e:51:b1:b2:9c:e3:ec:1f:02: 17:1c:f1:be:95:c4:b0:11:6e:57:1e:ae:ed:6c:56: 51:91:1d:78:cd:04:0f:c7:54:6b:9d:34:65:6b:d5: 75:39:06:ef:91:77:27:59:2f:0f:e6:ba:71:3b:22: 86:d5:54:3e:fd:69:e2:b1:e6:68:87:45:05:8e:a8: a1:ea:ef:e4:82:19:92:a1:ac:77:41:59:aa:8f:7e: fa:c5:d2:6b:7c:ef:97:91:0f:c6:fe:3f:3a:1d:e5: ef:6a:e8:f7:bb:40:f8:f2:c2:f0:e0:59:0e:b9:52: a1:7a:ec:67:cc:1d:64:08:1c:ee:05:51:cf:5c:9b: 1d:c1:08:d2:bc:c6:17:db:5b:d8:e0:4f:0c:ff:b3: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7E:C0:FB:0D:DF:76:9A:B1:FE:1F:2C:12:20:35:14:ED:02:6B:99 X509v3 Authority Key Identifier: keyid:FC:9D:A1:A7:62:5B:27:FD:B4:66:B1:D8:A6:90:37:7E:4C:7B:CE:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f6aa31a-dd0d-4c10-b5dd-b1a83fa57763/0/FC9DA1A7625B27FDB466B1D8A690377E4C7BCE72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a6:0a:8e:2c:46:a9:0f:91:f1:40:f4:b4:fa:44:d4:8e:37: 19:5f:74:8d:f3:db:b9:0f:cc:54:61:12:b7:0c:f6:2b:42:6d: d9:73:fb:fd:af:70:5e:6b:a7:34:6b:b4:b2:7b:c9:93:c9:27: 65:cf:84:82:18:e1:eb:89:27:e6:60:7c:da:07:cc:4b:25:04: a7:1a:fa:4d:65:75:04:52:b2:10:8a:43:9f:7d:b1:36:ef:05: 8f:26:05:84:64:da:42:e1:6f:c2:fc:d5:a3:59:a8:bb:0a:fd: fb:b3:f3:39:81:8b:44:f4:ba:a5:18:1c:76:8c:c5:ac:1b:a9: 30:2b:f8:0f:a0:06:ca:c8:35:4f:74:07:45:d2:e1:46:3a:47: 86:2d:25:2c:0b:84:40:7c:6b:36:6e:db:6c:71:02:6a:48:92: 83:0c:af:e3:71:da:d6:a9:d9:d5:ea:9d:29:ca:bc:fe:bc:57: c2:e3:24:5a:74:54:58:d5:5d:eb:b5:2b:9a:ac:60:cd:3c:00: 9b:ef:c0:c6:c2:0b:d1:25:3c:54:a9:dc:85:29:c8:9b:10:ad: f9:0a:d4:9d:99:93:ab:12:3c:44:28:82:80:fb:75:49:43:0d: a4:47:10:61:13:9a:38:fd:5a:d7:c8:a1:c2:25:ef:07:82:01: 4b:34:c2:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgtLd1sEkMeHFxL6s5eNsUFPZrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0 QzdCQ0U3MjAeFw0yNDA1MzAwOTE2MDBaFw0yNDA2MDIxOTAxMDBaMDMxMTAvBgNV BAMTKEQxN0VDMEZCMERERjc2OUFCMUZFMUYyQzEyMjAzNTE0RUQwMjZCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrKdbMBmPrMKtJmub5RBFZXo7p tIzQs6FN/OYo2DbJaRexftas3bkavZhgJprn2PlMrQ6WZ/5J/03jvNnz0XqcNuFj EBmM0xdvyFtWQKYJg2CeD5fyovypSzGRBIuCys9QN3A8u9lMWX+afBa3NV5RsbKc 4+wfAhcc8b6VxLARblceru1sVlGRHXjNBA/HVGudNGVr1XU5Bu+RdydZLw/munE7 IobVVD79aeKx5miHRQWOqKHq7+SCGZKhrHdBWaqPfvrF0mt875eRD8b+Pzod5e9q 6Pe7QPjywvDgWQ65UqF67GfMHWQIHO4FUc9cmx3BCNK8xhfbW9jgTwz/s3I5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0X7A+w3fdpqx/h8sEiA1FO0Ca5kwHwYDVR0j BBgwFoAU/J2hp2JbJ/20ZrHYppA3fkx7znIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjZhYTMxYS1kZDBkLTRjMTAtYjVkZC1iMWE4M2ZhNTc3NjMvMC9GQzlEQTFBNzYy NUIyN0ZEQjQ2NkIxRDhBNjkwMzc3RTRDN0JDRTcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3N0U0QzdC Q0U3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY2YWEzMWEtZGQwZC00YzEwLWI1 ZGQtYjFhODNmYTU3NzYzLzAvRkM5REExQTc2MjVCMjdGREI0NjZCMUQ4QTY5MDM3 N0U0QzdCQ0U3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKmCo4sRqkPkfFA9LT6RNSONxlfdI3z27kP zFRhErcM9itCbdlz+/2vcF5rpzRrtLJ7yZPJJ2XPhIIY4euJJ+ZgfNoHzEslBKca +k1ldQRSshCKQ599sTbvBY8mBYRk2kLhb8L81aNZqLsK/fuz8zmBi0T0uqUYHHaM xawbqTAr+A+gBsrINU90B0XS4UY6R4YtJSwLhEB8azZu22xxAmpIkoMMr+Nx2tap 2dXqnSnKvP68V8LjJFp0VFjVXeu1K5qsYM08AJvvwMbCC9ElPFSp3IUpyJsQrfkK 1J2Zk6sSPEQogoD7dUlDDaRHEGETmjj9WtfIocIl7weCAUs0wvA= -----END CERTIFICATE-----Generated at Thu May 30 11:27:40 2024 by rpki-client on console-ams.rpki-client.org