$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: rdgwCPMkFpn6Fk/7Nlg6fv0O1XHHLlrqH6TL3kqx3Go= Subject key identifier: 1E:1F:46:DD:44:7A:FD:0A:46:37:CA:03:85:AC:D2:61:FA:BC:2F:C8 Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 6C89201D27CBCC1BCAB8897654014CB842D2E59A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 01E6 Signing time: Fri 17 May 2024 22:30:51 +0000 Manifest this update: Fri 17 May 2024 22:25:51 +0000 Manifest next update: Tue 21 May 2024 06:16:51 +0000 Files and hashes: 1: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: ESN0lMXhSBtmH++VEMwRffFT37rbpMgrPnTqbFdyUL0=) 2: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: oJyzDgVif3M+BhGOa8yUV8jWlmKVZA4J41I5y9USs+Q=) 3: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: nRpcBBd9z+UR9ymkMW6WA3hKaMSRACBIYmECF+DObnY=) 4: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: V4o4eZPGlXe/x9kdxBmcnulDz+BsRJyad3r6tM586ms=) 5: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: 39aKSIELmxGzoCk7PF5WK8w71vZ3IRIe1yHLTJgUsgw=) 6: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: bL5uQBPtk+Oq7hoZYOZFWXlC7TfVF75PIxrPCIuJ9PY=) 7: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: Pn0JChCqAFSJih8+9p/oYUW5kV14x2VJi4U+xlBVFuk=) 8: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: EDrNB3utAWbosoNI20MLpSILV+E4QOccbi1rJaxH50Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:89:20:1d:27:cb:cc:1b:ca:b8:89:76:54:01:4c:b8:42:d2:e5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: May 17 22:25:51 2024 GMT Not After : May 21 06:16:51 2024 GMT Subject: CN=1E1F46DD447AFD0A4637CA0385ACD261FABC2FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:01:70:41:e9:84:59:34:a4:22:e7:d1:8d: 16:2d:42:67:21:8d:83:12:dd:b2:b0:97:ba:69:43: 82:34:6b:4f:ef:0d:9c:a6:5f:9f:42:71:6f:c9:bb: 17:67:c9:46:fd:8a:79:76:98:79:9e:74:4a:35:13: 86:4f:59:b5:a3:02:b2:9c:18:86:8c:c3:e6:45:37: e9:fa:50:f5:37:c3:5f:aa:6a:81:47:4b:47:69:7c: 70:e9:f2:75:ac:0d:83:72:f5:a0:ea:e3:22:62:10: b0:c8:12:6e:24:7b:5e:38:35:5b:a4:db:1c:1f:e1: 82:72:9e:a4:d5:6c:c3:2e:b7:09:e8:8e:19:f3:fe: 46:13:fc:3b:6b:5a:4a:07:15:e7:29:4a:53:3d:ab: a4:62:a8:a9:72:ad:47:ec:b2:a3:5d:1c:df:b5:93: b8:eb:03:b1:88:7f:0c:06:94:25:cb:e6:5a:f6:71: 07:9d:c7:58:4c:a4:84:18:3b:a8:f7:93:18:37:6e: d2:8f:83:c3:92:7e:44:53:8e:18:e8:f1:77:15:61: b9:e6:17:98:38:70:bc:87:33:ab:dc:21:d3:52:4b: 04:7a:83:79:fd:0d:57:f9:5b:c6:f6:f7:60:b5:a7: 6a:79:ef:5e:ad:50:1c:52:84:a3:2d:3e:74:61:5b: 2b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1F:46:DD:44:7A:FD:0A:46:37:CA:03:85:AC:D2:61:FA:BC:2F:C8 X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:b4:12:2f:3c:97:f8:ce:c9:f9:fa:33:1a:2f:9a:7e:8a:2a: aa:67:88:7b:26:6b:a8:a0:94:32:7f:4a:b1:03:a0:33:6d:f8: ec:36:4f:7c:b7:ee:05:ab:5d:e8:46:b4:d7:b3:f2:16:64:7a: aa:55:bb:ff:ea:ad:ae:a0:01:30:78:0f:c6:5e:5a:e3:ed:bc: 0a:25:af:38:81:ed:e0:6d:86:9b:b1:a3:b5:c1:e2:e6:c2:a9: 09:c6:5b:28:65:fa:60:02:ab:eb:af:55:5b:b7:e2:a6:b8:fd: 13:07:5e:15:77:bf:3e:c7:4a:ac:be:7e:d1:fe:34:d4:1d:b7: 66:4a:8b:0f:8a:6f:b7:06:51:7b:c8:10:30:7a:93:bc:97:b9: c0:b6:34:e6:c4:98:ba:4e:74:18:d5:e2:cb:9a:2a:ac:16:fc: a1:57:c3:1a:b7:11:bd:9e:d3:b5:af:94:76:2e:99:19:a4:63: 4d:31:68:01:f0:a8:e0:f4:a5:3f:a8:de:4a:53:2f:4a:74:75: 8d:38:ce:14:8f:3c:f6:6e:79:b3:76:bc:ab:9d:69:57:26:47: 9d:05:18:43:6b:b7:e0:17:40:07:c7:64:e2:33:25:7c:d2:3b: 63:a7:76:6c:75:72:cd:d0:4e:b8:0b:ae:a8:55:e1:fc:b7:d8: 71:20:1b:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbIkgHSfLzBvKuIl2VAFMuELS5ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNDA1MTcyMjI1NTFaFw0yNDA1MjEwNjE2NTFaMDMxMTAvBgNV BAMTKDFFMUY0NkRENDQ3QUZEMEE0NjM3Q0EwMzg1QUNEMjYxRkFCQzJGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfTQFwQemEWTSkIufRjRYtQmch jYMS3bKwl7ppQ4I0a0/vDZymX59CcW/JuxdnyUb9inl2mHmedEo1E4ZPWbWjArKc GIaMw+ZFN+n6UPU3w1+qaoFHS0dpfHDp8nWsDYNy9aDq4yJiELDIEm4ke144NVuk 2xwf4YJynqTVbMMutwnojhnz/kYT/DtrWkoHFecpSlM9q6RiqKlyrUfssqNdHN+1 k7jrA7GIfwwGlCXL5lr2cQedx1hMpIQYO6j3kxg3btKPg8OSfkRTjhjo8XcVYbnm F5g4cLyHM6vcIdNSSwR6g3n9DVf5W8b292C1p2p5716tUBxShKMtPnRhWyuLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHh9G3UR6/QpGN8oDhazSYfq8L8gwHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM20Ei88l/jOyfn6Mxovmn6KKqpniHsma6ig lDJ/SrEDoDNt+Ow2T3y37gWrXehGtNez8hZkeqpVu//qra6gATB4D8ZeWuPtvAol rziB7eBthpuxo7XB4ubCqQnGWyhl+mACq+uvVVu34qa4/RMHXhV3vz7HSqy+ftH+ NNQdt2ZKiw+Kb7cGUXvIEDB6k7yXucC2NObEmLpOdBjV4suaKqwW/KFXwxq3Eb2e 07WvlHYumRmkY00xaAHwqOD0pT+o3kpTL0p0dY04zhSPPPZuebN2vKudaVcmR50F GENrt+AXQAfHZOIzJXzSO2Ondmx1cs3QTrgLrqhV4fy32HEgG1o= -----END CERTIFICATE-----Generated at Fri May 17 22:53:43 2024 by rpki-client on console-fra.rpki-client.org