$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: STIa6qlK9xHu/DwCrwNe1QSFF6RYUVUgHpYwmflu4js= Subject key identifier: B6:53:A5:C8:38:3C:8F:7E:55:7D:39:60:F5:B0:D7:21:5B:DA:0B:DA Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 272160270B3CF1F0213B859F55230DD9513FFECC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 011B Signing time: Sat 18 May 2024 03:12:03 +0000 Manifest this update: Sat 18 May 2024 03:07:03 +0000 Manifest next update: Tue 21 May 2024 09:47:03 +0000 Files and hashes: 1: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: N5AYw9HMNoWvK01M5SNXP0RcExUE7QCLaO6zUXGtA38=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: oqBrw8JJUFlhtNX1WDUJ6yIG9GKSIOx7n+yD8C48tcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:21:60:27:0b:3c:f1:f0:21:3b:85:9f:55:23:0d:d9:51:3f:fe:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: May 18 03:07:03 2024 GMT Not After : May 21 09:47:03 2024 GMT Subject: CN=B653A5C8383C8F7E557D3960F5B0D7215BDA0BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:52:d6:ef:58:8a:41:c5:07:64:a5:5b:1a:66: 10:0b:e7:c3:e9:40:5c:f6:7e:5e:1f:5e:71:4c:b0: c8:29:0e:1e:38:26:49:00:01:72:65:98:12:23:ad: f8:04:13:06:d5:f1:16:4f:7c:55:54:39:33:19:93: bb:39:ac:b4:cc:f3:d3:c3:a8:bf:16:6b:b2:45:e0: 20:9a:65:ef:0c:b4:2c:fb:f8:d2:75:f4:33:54:e9: 36:82:a6:6c:66:0e:67:72:36:d0:53:ae:24:ec:c0: b8:23:11:0b:dd:50:30:1f:3e:62:e6:43:95:19:12: 69:74:e2:7e:a1:f1:3d:6b:a7:e2:fb:1c:0e:22:08: ba:26:0a:3b:aa:50:ca:84:1c:4c:4e:98:af:34:b5: 38:98:82:a1:c0:98:85:eb:3a:73:05:54:82:fc:f5: d8:36:fb:65:72:f2:4a:a0:25:61:49:84:ae:ca:22: ea:3f:2b:c6:f9:ee:08:5f:34:b4:cc:d9:1c:7e:fd: ad:e8:68:5b:5e:2a:4c:a5:66:35:23:f2:ea:dd:f6: 55:a0:e4:1f:7a:b8:03:cf:90:71:5e:25:b7:b7:a1: fa:17:70:b1:11:b7:b3:de:b2:2b:0a:7c:f7:d0:8b: 39:58:40:69:90:1b:bd:99:17:e8:97:cd:01:49:26: 84:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:53:A5:C8:38:3C:8F:7E:55:7D:39:60:F5:B0:D7:21:5B:DA:0B:DA X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3c:92:23:86:d1:b4:fd:f3:99:02:6b:57:c1:3c:15:a2:31: 75:d3:ed:7c:21:26:fd:58:c6:67:1a:a6:ba:83:18:44:b1:b0: f8:50:e2:68:02:a1:ed:31:1c:67:8b:9c:35:7d:21:83:f5:3d: d8:74:e3:fb:79:96:49:dc:e4:95:cb:a8:9b:41:b0:88:b1:b0: 28:f7:65:74:ee:45:3e:1c:5d:56:29:5c:07:69:64:d5:45:fd: fc:60:e1:6d:12:3f:14:42:61:77:19:16:2c:18:dd:67:62:4b: 3b:8d:47:83:f3:ed:03:1c:29:1c:ef:84:3a:b7:7e:8c:85:8a: db:3c:ca:39:ea:73:0c:04:5b:b6:33:41:23:c1:02:87:83:d8: 45:03:39:7b:f1:03:fd:96:fe:81:90:b4:9e:bd:2f:11:e2:ad: 3f:3b:a4:2d:e2:c6:1d:84:97:83:a5:9c:5c:24:16:18:4f:f6: c6:12:50:78:2c:ef:2d:88:b4:ae:43:7f:4c:19:31:f8:62:ee: 8f:f4:38:48:7c:7e:f3:80:9e:27:45:2e:1e:02:1c:8e:9f:10: 2b:eb:b0:cf:f0:86:93:f7:8d:cc:fc:6f:b7:b4:8e:e7:df:28: 5f:0d:d5:66:bc:df:38:b3:63:81:71:04:9a:eb:50:c7:8c:f2: 15:0c:ba:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyFgJws88fAhO4WfVSMN2VE//swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNDA1MTgwMzA3MDNaFw0yNDA1MjEwOTQ3MDNaMDMxMTAvBgNV BAMTKEI2NTNBNUM4MzgzQzhGN0U1NTdEMzk2MEY1QjBENzIxNUJEQTBCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUtbvWIpBxQdkpVsaZhAL58Pp QFz2fl4fXnFMsMgpDh44JkkAAXJlmBIjrfgEEwbV8RZPfFVUOTMZk7s5rLTM89PD qL8Wa7JF4CCaZe8MtCz7+NJ19DNU6TaCpmxmDmdyNtBTriTswLgjEQvdUDAfPmLm Q5UZEml04n6h8T1rp+L7HA4iCLomCjuqUMqEHExOmK80tTiYgqHAmIXrOnMFVIL8 9dg2+2Vy8kqgJWFJhK7KIuo/K8b57ghfNLTM2Rx+/a3oaFteKkylZjUj8urd9lWg 5B96uAPPkHFeJbe3ofoXcLERt7PesisKfPfQizlYQGmQG72ZF+iXzQFJJoR9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtlOlyDg8j35VfTlg9bDXIVvaC9owHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ48kiOG0bT985kCa1fBPBWiMXXT7XwhJv1Y xmcaprqDGESxsPhQ4mgCoe0xHGeLnDV9IYP1Pdh04/t5lknc5JXLqJtBsIixsCj3 ZXTuRT4cXVYpXAdpZNVF/fxg4W0SPxRCYXcZFiwY3WdiSzuNR4Pz7QMcKRzvhDq3 foyFits8yjnqcwwEW7YzQSPBAoeD2EUDOXvxA/2W/oGQtJ69LxHirT87pC3ixh2E l4OlnFwkFhhP9sYSUHgs7y2ItK5Df0wZMfhi7o/0OEh8fvOAnidFLh4CHI6fECvr sM/whpP3jcz8b7e0juffKF8N1Wa83zizY4FxBJrrUMeM8hUMuvs= -----END CERTIFICATE-----Generated at Sat May 18 03:47:49 2024 by rpki-client on console-fra.rpki-client.org