$ rpki-client -vvf repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft File: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft (raw, json) Hash identifier: 15frYNFwfMF8J33VjwgIb1nD9SpkcU35IkXH90WDJxc= Subject key identifier: C9:23:30:33:07:37:53:45:48:50:29:C3:C7:86:C8:10:54:D1:CE:8D Authority key identifier: F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D Certificate issuer: /CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Certificate serial: 4CD437D14CC5B65D62ED868B57EA5F3ADCAAB549 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft Manifest number: A6 Signing time: Sat 18 May 2024 22:41:52 +0000 Manifest this update: Sat 18 May 2024 22:36:52 +0000 Manifest next update: Wed 22 May 2024 07:08:52 +0000 Files and hashes: 1: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: WXqPXDZEhgEpmmiqr/3nFnyXes//UrqM9h1i2YkagDY=) 2: F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl (hash: fQLxQaC1cSZgOw1aIM+z0yUIb4lWm8mfVkBFgNkUS0w=) 3: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: La1quV5xL1KTG1v+nvH9ljJA9HFP/8NINc3ux3PZIM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d4:37:d1:4c:c5:b6:5d:62:ed:86:8b:57:ea:5f:3a:dc:aa:b5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03499B3CFC25C7C508C14462AC4268BF1E9F67D Validity Not Before: May 18 22:36:52 2024 GMT Not After : May 22 07:08:52 2024 GMT Subject: CN=C923303307375345485029C3C786C81054D1CE8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:e2:c7:12:78:22:ec:d0:51:22:07:fc:ad: fb:64:2d:5f:81:56:b7:c7:50:3d:64:73:89:a8:9f: 6d:15:ba:06:a2:e4:85:74:30:b5:fd:fc:ca:4a:6e: b6:23:d1:82:aa:21:54:d8:cd:76:a2:87:64:e7:f3: d2:bb:55:fa:2f:5b:ac:16:b4:19:69:e4:8b:48:30: 2a:f7:17:db:25:c3:b5:01:bc:20:53:a5:bb:49:27: 23:d0:e6:b1:26:91:60:41:39:58:fb:e8:21:60:b5: b3:dc:22:e6:92:b0:fe:a7:d2:a5:e0:f3:8f:ce:ab: 49:f8:e8:1e:1c:5b:01:6a:62:0b:4f:1b:dd:7e:b6: 6a:cd:85:98:9a:b2:d8:f9:12:a8:55:bb:fb:6a:0c: f7:52:a2:9b:04:02:82:18:e5:0b:db:e8:06:2e:80: be:f6:7a:5d:52:91:58:cf:3b:57:fc:e8:50:77:1d: 67:ff:e9:41:24:ab:ce:c8:1a:b5:4c:14:fe:97:67: d5:02:dc:9e:9d:82:56:49:5c:3d:d8:87:00:96:f1: db:f3:50:6e:76:0d:56:85:f2:71:80:55:33:64:83: ed:a9:df:47:3f:9e:94:1d:37:33:0e:a0:a4:4b:01: 9e:74:92:7b:3f:a3:51:46:d3:55:3b:a0:30:40:ae: 40:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:23:30:33:07:37:53:45:48:50:29:C3:C7:86:C8:10:54:D1:CE:8D X509v3 Authority Key Identifier: keyid:F0:34:99:B3:CF:C2:5C:7C:50:8C:14:46:2A:C4:26:8B:F1:E9:F6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/F03499B3CFC25C7C508C14462AC4268BF1E9F67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:58:1e:0f:da:c1:10:59:68:c5:85:85:06:97:71:d6:f8:cc: bb:75:3b:4b:88:d6:e2:20:4a:74:a6:6c:8c:91:28:d6:65:43: 93:fa:a2:54:28:1e:d2:35:eb:91:60:cf:b9:65:59:98:6a:de: c2:eb:05:a3:1c:cf:b6:3b:73:8f:b4:5b:ea:00:d8:a4:ec:34: 07:61:a7:2a:1a:ca:db:01:31:53:bd:87:c9:c6:b4:79:d1:ef: 3f:0a:c5:5a:cb:d3:16:6a:91:00:23:2f:e9:b2:3f:a1:98:65: 6b:11:3e:96:21:fa:30:d3:ae:9c:fb:91:24:00:aa:f2:47:a5: 0e:ae:6c:fc:07:0d:81:21:48:c4:7e:33:89:f5:d6:fa:bf:3e: 52:1e:93:16:70:ef:d7:dc:34:af:e0:ec:30:4c:ac:3e:d2:9d: 01:62:5b:39:17:53:0a:16:fc:f7:4c:64:85:92:3b:69:24:a5: d1:ff:ca:a4:63:3e:db:2a:28:99:bb:99:f6:9c:0f:45:c2:7d: c4:84:00:a8:fb:f2:87:f0:36:9d:c5:d2:7d:18:ea:ac:b3:e8: 79:3b:bf:05:db:91:10:ef:da:34:73:60:7b:07:a9:6b:21:84: bb:6b:74:61:24:fc:bf:fc:c2:88:4d:be:0b:45:3c:95:a2:04: c2:98:56:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNQ30UzFtl1i7YaLV+pfOtyqtUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJG MUU5RjY3RDAeFw0yNDA1MTgyMjM2NTJaFw0yNDA1MjIwNzA4NTJaMDMxMTAvBgNV BAMTKEM5MjMzMDMzMDczNzUzNDU0ODUwMjlDM0M3ODZDODEwNTREMUNFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jeLHEngi7NBRIgf8rftkLV+B VrfHUD1kc4mon20Vugai5IV0MLX9/MpKbrYj0YKqIVTYzXaih2Tn89K7VfovW6wW tBlp5ItIMCr3F9slw7UBvCBTpbtJJyPQ5rEmkWBBOVj76CFgtbPcIuaSsP6n0qXg 84/Oq0n46B4cWwFqYgtPG91+tmrNhZiastj5EqhVu/tqDPdSopsEAoIY5Qvb6AYu gL72el1SkVjPO1f86FB3HWf/6UEkq87IGrVMFP6XZ9UC3J6dglZJXD3YhwCW8dvz UG52DVaF8nGAVTNkg+2p30c/npQdNzMOoKRLAZ50kns/o1FG01U7oDBArkDVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUySMwMwc3U0VIUCnDx4bIEFTRzo0wHwYDVR0j BBgwFoAU8DSZs8/CXHxQjBRGKsQmi/Hp9n0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDA0ZTUzMC0yZmNmLTRjZDYtYjA1Yy1lYjNjMGMxMzU2MDgvMC9GMDM0OTlCM0NG QzI1QzdDNTA4QzE0NDYyQUM0MjY4QkYxRTlGNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2OEJGMUU5 RjY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvRjAzNDk5QjNDRkMyNUM3QzUwOEMxNDQ2MkFDNDI2 OEJGMUU5RjY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBYHg/awRBZaMWFhQaXcdb4zLt1O0uI1uIg SnSmbIyRKNZlQ5P6olQoHtI165Fgz7llWZhq3sLrBaMcz7Y7c4+0W+oA2KTsNAdh pyoaytsBMVO9h8nGtHnR7z8KxVrL0xZqkQAjL+myP6GYZWsRPpYh+jDTrpz7kSQA qvJHpQ6ubPwHDYEhSMR+M4n11vq/PlIekxZw79fcNK/g7DBMrD7SnQFiWzkXUwoW /PdMZIWSO2kkpdH/yqRjPtsqKJm7mfacD0XCfcSEAKj78ofwNp3F0n0Y6qyz6Hk7 vwXbkRDv2jRzYHsHqWshhLtrdGEk/L/8wohNvgtFPJWiBMKYVpY= -----END CERTIFICATE-----Generated at Sun May 19 00:29:18 2024 by rpki-client on console-ams.rpki-client.org