$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: yMDI/Wn70dCNM/ZNWXK1qTY0b7MM8EdLRPQkn5HnphU= Subject key identifier: F0:CD:31:1F:1F:16:B2:05:5A:98:68:8A:D6:6D:1C:00:2C:E9:1C:80 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 1C046A0346513FC935810998C8483BAF4E52F6D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 0433 Signing time: Sun 19 May 2024 11:50:44 +0000 Manifest this update: Sun 19 May 2024 11:45:44 +0000 Manifest next update: Wed 22 May 2024 22:24:44 +0000 Files and hashes: 1: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: tIGGo5XgnM0dHxNrHkJQRnlvxQQ+H+0ml8ldNkicIvA=) 2: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: fA1rTAXPks6jSArUjCL0qne5dDgcLPYEGfcG0TF+2UE=) 3: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: /wi/ULAWa6WjqplHVfbKjvKt0tgAIhy4Y28PJh2tQcU=) 4: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: FQsn5Zw6kJE099e70G5IkP/u+Nh42eQD513VM5qS7Ts=) 5: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: S2VX9B55OQzHQYwSFdoVDrRezCQ+VYeN1hb0PQK+c+4=) 6: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: PX3Lg3oc3Rl2o9w7yZy5NB+xtheINm1htX/QXBr8MQc=) 7: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: TqLgh4lvf6MIJbOUBm/DC+FwZISh4asalbl6cNHb4VQ=) 8: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: qGAQjU82DMrYy0FQtS9J5kftDpMHLeKjpqvt4hR5ij8=) 9: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: yvigKTJOg63wZijU9KqLK2For+QFd0lE2NCo4Gvx/7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:04:6a:03:46:51:3f:c9:35:81:09:98:c8:48:3b:af:4e:52:f6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: May 19 11:45:44 2024 GMT Not After : May 22 22:24:44 2024 GMT Subject: CN=F0CD311F1F16B2055A98688AD66D1C002CE91C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b2:4c:e4:53:d9:77:6c:9c:f1:08:1b:c1:74: ed:e6:c2:cc:9d:ee:c7:84:98:be:70:aa:dc:75:99: 27:e5:ef:17:c1:a1:8a:e2:f8:d5:4b:82:01:7d:8f: ee:1b:e1:14:04:65:26:35:be:a2:bf:9d:ed:1d:f5: 68:c6:a4:46:54:a3:b1:e3:6f:12:4e:8d:d1:6b:e8: e3:6b:60:ca:ad:6f:35:82:86:fc:6d:d7:7b:85:ab: d9:a0:59:2c:78:57:1b:ee:f7:c9:1b:b1:35:9a:3a: e5:a5:1f:c5:74:b4:30:2d:aa:37:32:17:61:9e:0e: 03:de:aa:70:c8:fd:9a:d8:5e:7a:86:3d:01:d9:8d: fc:9b:65:82:09:62:1f:d4:a4:66:fc:2f:56:c1:5b: f9:84:2d:46:d8:1b:4a:3b:f3:e2:1c:a9:b8:b2:4d: 44:30:68:66:fd:f4:2c:4e:c6:f1:50:04:75:25:10: 16:d1:82:34:d9:8b:e4:a9:83:b7:a5:0e:30:1f:ce: b8:4e:2c:4c:22:f8:bb:fe:07:de:c1:eb:e2:f1:86: 97:3a:4f:99:16:ff:52:78:18:d3:24:7e:7e:e2:2d: 80:ac:9b:76:f2:2e:82:67:e9:7a:57:89:12:6f:30: ea:d9:dc:f3:9d:2d:91:63:81:d9:eb:c4:a0:a4:c4: fa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CD:31:1F:1F:16:B2:05:5A:98:68:8A:D6:6D:1C:00:2C:E9:1C:80 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:35:c6:e1:df:fd:88:b7:05:41:19:e2:ee:8d:ba:c9:e3:b5: 18:53:70:1f:34:4e:8a:a1:75:b0:7d:e5:73:42:65:03:d1:72: be:c1:98:db:91:16:f9:d7:51:d9:a1:91:4c:a8:c5:7d:fd:63: c7:54:24:d7:ca:cc:eb:66:4f:0b:76:ee:e3:d3:17:0a:91:cd: 5e:84:cb:0d:a5:5b:c6:ad:42:4c:91:bd:fe:fc:16:ca:3b:d3: 5a:95:24:e6:fd:dc:d0:d6:63:59:62:aa:75:20:9d:07:3c:e7: 4f:26:59:b7:d8:df:3f:4f:e1:55:b7:4c:dd:a9:7d:91:61:06: 20:79:a4:f0:62:c2:00:5a:02:90:07:92:8d:76:62:17:c7:06: e3:0d:cf:4e:5c:57:1b:13:04:d5:75:03:1a:b1:3d:a2:fc:11: e7:3e:08:5f:e8:c6:4f:ac:f5:05:0f:d3:35:8c:3a:de:bd:9c: d4:13:ec:62:7b:51:98:1f:5a:79:d2:33:e8:fa:8e:6e:a0:eb: 4d:f0:c7:0d:3a:8b:99:3f:03:ea:d9:55:70:66:62:a6:0c:8b: 51:57:b1:f0:79:94:41:62:03:f6:a6:61:e2:a9:f8:df:7a:eb: 53:73:65:86:53:41:2a:6c:e0:02:0c:b7:35:5c:66:de:28:a7: 3e:34:23:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHARqA0ZRP8k1gQmYyEg7r05S9tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNDA1MTkxMTQ1NDRaFw0yNDA1MjIyMjI0NDRaMDMxMTAvBgNV BAMTKEYwQ0QzMTFGMUYxNkIyMDU1QTk4Njg4QUQ2NkQxQzAwMkNFOTFDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuskzkU9l3bJzxCBvBdO3mwsyd 7seEmL5wqtx1mSfl7xfBoYri+NVLggF9j+4b4RQEZSY1vqK/ne0d9WjGpEZUo7Hj bxJOjdFr6ONrYMqtbzWChvxt13uFq9mgWSx4Vxvu98kbsTWaOuWlH8V0tDAtqjcy F2GeDgPeqnDI/ZrYXnqGPQHZjfybZYIJYh/UpGb8L1bBW/mELUbYG0o78+Icqbiy TUQwaGb99CxOxvFQBHUlEBbRgjTZi+Spg7elDjAfzrhOLEwi+Lv+B97B6+Lxhpc6 T5kW/1J4GNMkfn7iLYCsm3byLoJn6XpXiRJvMOrZ3POdLZFjgdnrxKCkxPrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8M0xHx8WsgVamGiK1m0cACzpHIAwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABE1xuHf/Yi3BUEZ4u6NusnjtRhTcB80Toqh dbB95XNCZQPRcr7BmNuRFvnXUdmhkUyoxX39Y8dUJNfKzOtmTwt27uPTFwqRzV6E yw2lW8atQkyRvf78Fso701qVJOb93NDWY1liqnUgnQc8508mWbfY3z9P4VW3TN2p fZFhBiB5pPBiwgBaApAHko12YhfHBuMNz05cVxsTBNV1AxqxPaL8Eec+CF/oxk+s 9QUP0zWMOt69nNQT7GJ7UZgfWnnSM+j6jm6g603wxw06i5k/A+rZVXBmYqYMi1FX sfB5lEFiA/amYeKp+N9661NzZYZTQSps4AIMtzVcZt4opz40I6k= -----END CERTIFICATE-----Generated at Sun May 19 12:37:48 2024 by rpki-client on console-fra.rpki-client.org