$ rpki-client -vvf repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft File: FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft (raw, json) Hash identifier: 0S0JtZNwy9i2iAA8l5ydh8syd8ZS+hEUxerIp9yQP2k= Subject key identifier: D2:E7:52:76:53:CB:F2:58:4B:6C:B7:3F:FA:AC:3B:E4:57:E1:13:64 Authority key identifier: FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 Certificate issuer: /CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Certificate serial: 0138B80BA5B2CDC7EDA69C3745342C79E221BEE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft Manifest number: 0437 Signing time: Sat 18 May 2024 14:01:42 +0000 Manifest this update: Sat 18 May 2024 13:56:42 +0000 Manifest next update: Tue 21 May 2024 22:49:42 +0000 Files and hashes: 1: FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl (hash: lp/jl2Af8cRTpF1UQrRgF7YGxUMW5iukppuBtbasPus=) 2: 323430373a336538303a363a3a2f34382d3438203d3e203338343936.roa (hash: YflC8mulNNtQ5cxKgtmhVK8hS1tT32XzlOuC2F0eFnw=) 3: 3130332e3233342e3231382e302f32342d3234203d3e203338373638.roa (hash: gORjIIdFdIdiU22QklWkmGPrm7I4ZFddEdMVwl14ZoE=) 4: 323430373a336538303a3a2f33322d3438203d3e203338373638.roa (hash: yvATTzzTbp7Aq1SE/sxgPUmFO2KYTY5bLtm1pi43Cco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:38:b8:0b:a5:b2:cd:c7:ed:a6:9c:37:45:34:2c:79:e2:21:be:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBACFC63658425B36399C4B9D0322622B8C5B7F0 Validity Not Before: May 18 13:56:42 2024 GMT Not After : May 21 22:49:42 2024 GMT Subject: CN=D2E7527653CBF2584B6CB73FFAAC3BE457E11364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:26:a4:57:71:b7:f5:07:e3:22:70:36:ec: 16:a4:a5:82:d4:5c:f0:43:8a:ae:d5:a6:21:cf:f5: 6e:5a:44:98:88:b5:74:30:0b:23:5b:f1:70:b0:9c: b2:12:50:a3:db:55:1e:d1:f9:61:f6:8a:77:5d:7e: ca:b2:14:8d:09:69:76:77:1b:32:06:b3:01:5c:b7: 2f:83:a0:21:74:b3:aa:20:4c:14:4a:b8:61:da:58: 00:73:67:65:29:80:ff:02:1e:d6:2b:d8:86:0e:ce: 32:d8:45:48:e5:0e:d2:b9:59:b2:51:15:95:4e:4f: ea:da:8f:bc:c0:7f:61:b7:3d:da:c9:e0:42:59:f0: 6e:8d:09:57:3b:82:90:1e:13:77:70:db:a2:19:ea: 96:67:65:bc:c4:5c:1e:60:78:a8:19:84:f1:67:c8: 6a:97:b4:35:a1:dd:d7:f6:8a:3b:84:f7:8c:38:62: 79:72:64:37:2d:ca:68:7b:e8:5c:f7:36:84:8b:c8: e0:7c:17:32:88:98:74:d9:bd:49:be:48:3a:c4:ab: 09:f9:e1:60:58:52:47:82:9e:13:15:c7:ef:f1:f9: ea:a0:4a:d6:67:c2:8c:f9:9c:89:ff:1c:06:5b:b8: b4:4b:5a:4f:84:ee:26:11:4f:c7:60:35:eb:af:87: ca:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E7:52:76:53:CB:F2:58:4B:6C:B7:3F:FA:AC:3B:E4:57:E1:13:64 X509v3 Authority Key Identifier: keyid:FB:AC:FC:63:65:84:25:B3:63:99:C4:B9:D0:32:26:22:B8:C5:B7:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBACFC63658425B36399C4B9D0322622B8C5B7F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e94243-87f0-426f-a9ca-4c19edb06b42/0/FBACFC63658425B36399C4B9D0322622B8C5B7F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2c:08:7f:54:c9:25:03:86:9e:9d:e4:9b:51:23:49:ed:b4: 80:e6:ec:52:5b:5d:92:ef:43:a0:df:4d:4b:e0:3c:bb:58:39: 4a:34:22:fe:e8:a5:d5:a2:f0:18:63:f3:ff:5c:ea:a4:0a:00: 35:ec:e7:db:0d:66:95:2c:f6:cb:00:b5:5a:02:34:9f:51:d9: 71:f7:eb:74:29:58:f1:57:31:52:b1:ba:13:0a:f1:5f:fe:d3: 92:8d:a5:9d:97:1e:0e:fb:11:6a:59:2d:01:48:92:bf:04:fb: 4a:d2:80:4d:f7:9d:5f:c2:b0:b7:b5:a7:c4:29:8c:37:ab:d3: 70:a2:58:76:73:3c:e7:77:d5:d6:11:39:fc:34:57:f4:52:5d: a0:bf:28:aa:48:d0:d3:40:9e:b6:73:2d:62:7a:8c:83:59:d3: a3:09:0a:ae:0f:35:95:11:43:a7:8d:7c:c1:95:2e:15:76:b2: 0d:e7:42:ed:71:4d:f8:7d:52:e8:4f:6f:31:63:3a:b2:23:a8: 5c:33:72:d9:3b:f3:0a:27:cb:60:30:66:c9:05:76:54:6c:76: 8f:2f:e4:0b:59:46:1b:82:ca:61:20:2c:8f:d0:bc:e2:fb:4d: f3:e6:40:ab:0d:b6:32:c0:6a:b2:6e:73:87:d1:47:8a:fc:8b: e0:22:1c:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUATi4C6Wyzcftppw3RTQseeIhvuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJC OEM1QjdGMDAeFw0yNDA1MTgxMzU2NDJaFw0yNDA1MjEyMjQ5NDJaMDMxMTAvBgNV BAMTKEQyRTc1Mjc2NTNDQkYyNTg0QjZDQjczRkZBQUMzQkU0NTdFMTEzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn5yakV3G39QfjInA27BakpYLU XPBDiq7VpiHP9W5aRJiItXQwCyNb8XCwnLISUKPbVR7R+WH2inddfsqyFI0JaXZ3 GzIGswFcty+DoCF0s6ogTBRKuGHaWABzZ2UpgP8CHtYr2IYOzjLYRUjlDtK5WbJR FZVOT+raj7zAf2G3PdrJ4EJZ8G6NCVc7gpAeE3dw26IZ6pZnZbzEXB5geKgZhPFn yGqXtDWh3df2ijuE94w4YnlyZDctymh76Fz3NoSLyOB8FzKImHTZvUm+SDrEqwn5 4WBYUkeCnhMVx+/x+eqgStZnwoz5nIn/HAZbuLRLWk+E7iYRT8dgNeuvh8oxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0udSdlPL8lhLbLc/+qw75FfhE2QwHwYDVR0j BBgwFoAU+6z8Y2WEJbNjmcS50DImIrjFt/AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWU5NDI0My04N2YwLTQyNmYtYTljYS00YzE5ZWRiMDZiNDIvMC9GQkFDRkM2MzY1 ODQyNUIzNjM5OUM0QjlEMDMyMjYyMkI4QzVCN0YwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2MjJCOEM1 QjdGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlOTQyNDMtODdmMC00MjZmLWE5 Y2EtNGMxOWVkYjA2YjQyLzAvRkJBQ0ZDNjM2NTg0MjVCMzYzOTlDNEI5RDAzMjI2 MjJCOEM1QjdGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKssCH9UySUDhp6d5JtRI0nttIDm7FJbXZLv Q6DfTUvgPLtYOUo0Iv7opdWi8Bhj8/9c6qQKADXs59sNZpUs9ssAtVoCNJ9R2XH3 63QpWPFXMVKxuhMK8V/+05KNpZ2XHg77EWpZLQFIkr8E+0rSgE33nV/CsLe1p8Qp jDer03CiWHZzPOd31dYROfw0V/RSXaC/KKpI0NNAnrZzLWJ6jINZ06MJCq4PNZUR Q6eNfMGVLhV2sg3nQu1xTfh9UuhPbzFjOrIjqFwzctk78wony2AwZskFdlRsdo8v 5AtZRhuCymEgLI/QvOL7TfPmQKsNtjLAarJuc4fRR4r8i+AiHGA= -----END CERTIFICATE-----Generated at Sat May 18 15:25:21 2024 by rpki-client on console-fra.rpki-client.org