$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft (raw, json) Hash identifier: Qg4gAOFSMXweZxBHoq6ze4IIYuqg1SXupMXVDA2V5LA= Subject key identifier: 58:A6:DB:7E:4D:41:7C:80:7F:84:2C:EB:CA:20:E7:A1:49:D0:F8:F8 Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 42BEB29AC5D57FADC164A445BA6D27FB74806904 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft Manifest number: D6 Signing time: Sat 18 May 2024 10:41:52 +0000 Manifest this update: Sat 18 May 2024 10:36:52 +0000 Manifest next update: Tue 21 May 2024 18:40:52 +0000 Files and hashes: 1: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: gfSNXO/7tCdEUlvBTifLsPb5YJfDLfnsjOTNQzWLgZA=) 2: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl (hash: 1Qa4doqsxaC2jsCOdVrsG7ybMpR+LLWLiGjsCWOU9Vs=) 3: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: 8OO6DLpqnlpBk81xASwZPv96p/91vtqjLHKSKPsI2ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:be:b2:9a:c5:d5:7f:ad:c1:64:a4:45:ba:6d:27:fb:74:80:69:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: May 18 10:36:52 2024 GMT Not After : May 21 18:40:52 2024 GMT Subject: CN=58A6DB7E4D417C807F842CEBCA20E7A149D0F8F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b5:a1:07:59:cb:a0:c3:2d:3a:de:52:32:6e: 9e:84:24:73:23:f1:82:56:51:c1:08:1b:d1:4b:65: 52:61:28:35:1d:ef:07:e3:58:d6:71:53:f2:96:3c: 3e:18:06:55:2f:fe:de:ba:35:a9:26:24:86:54:09: f8:53:fb:c8:8b:55:21:2d:9d:a2:70:8d:c3:44:96: 39:e2:97:f5:26:03:e3:d6:77:42:ce:f7:1b:a5:fa: 19:d2:96:dc:d2:b4:bd:e1:83:56:7b:b2:9f:1c:62: 43:3c:72:54:3f:a7:21:0b:3c:b8:da:f5:ee:da:e8: dc:16:54:48:6f:da:53:d0:b6:02:75:a4:76:7d:07: 3f:cf:ea:e6:c8:30:9c:c8:ed:23:7f:cc:ef:de:72: 47:78:1b:92:2e:8f:2f:54:ba:41:d4:e0:22:f4:d9: 75:5a:25:54:79:19:d5:86:22:16:fb:88:aa:4d:ec: ac:69:a9:9e:23:7e:76:aa:a1:95:b0:3b:99:1d:b4: e1:2c:77:68:55:45:99:6f:e0:73:e5:5f:bb:23:cb: 1f:89:43:b6:33:46:3a:9e:81:6a:d1:8e:c0:a2:bd: 92:0e:bf:e4:44:6e:49:9d:6f:01:b3:c8:dd:97:a5: e8:d1:02:c8:98:ce:d3:09:fa:a3:b5:82:c0:1e:0d: 2d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A6:DB:7E:4D:41:7C:80:7F:84:2C:EB:CA:20:E7:A1:49:D0:F8:F8 X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e3:9e:ca:c7:fe:1c:15:7d:ea:8d:50:e4:1c:6e:60:aa:c1: 52:88:58:18:46:22:fc:85:9b:bf:c1:69:d0:3c:d8:32:f7:de: ae:55:a1:0b:36:24:9a:07:11:a2:ba:be:a5:93:40:80:cd:1f: d1:d6:b6:51:6d:09:e3:87:5c:d8:be:df:71:e0:ee:3c:72:40: b4:97:5b:d0:25:a4:c0:2b:d6:e1:1c:ce:26:a4:f8:7d:04:58: fa:99:49:8b:62:2f:d8:dc:e7:7b:93:8c:4f:c0:fb:6f:06:1b: 79:de:bd:97:9d:0e:a2:d6:db:19:66:2e:55:22:71:53:5e:c2: 16:c2:98:b0:45:24:59:05:63:f4:c2:30:6d:95:49:76:1c:b6: ef:00:74:a6:54:23:6e:ea:66:64:ec:6c:f3:c6:cd:20:34:ea: 16:b5:23:47:d2:39:ab:d4:2d:ce:ce:27:d4:00:c6:23:88:7f: 67:a2:a2:36:05:f2:0e:39:d2:1a:16:fc:46:25:57:98:10:80: 22:38:93:ef:8e:44:68:b0:e7:4d:91:31:4a:75:6d:d3:e8:8c: 0a:8a:8b:f1:15:7f:f8:34:d9:67:c0:d1:ab:e0:9a:88:15:9a: 28:e1:f9:dd:3b:e5:15:0c:99:a4:6b:9b:9b:fe:97:97:1e:4f: 4e:ae:2e:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQr6ymsXVf63BZKRFum0n+3SAaQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYw QzEyMENGODAeFw0yNDA1MTgxMDM2NTJaFw0yNDA1MjExODQwNTJaMDMxMTAvBgNV BAMTKDU4QTZEQjdFNEQ0MTdDODA3Rjg0MkNFQkNBMjBFN0ExNDlEMEY4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtaEHWcugwy063lIybp6EJHMj 8YJWUcEIG9FLZVJhKDUd7wfjWNZxU/KWPD4YBlUv/t66NakmJIZUCfhT+8iLVSEt naJwjcNEljnil/UmA+PWd0LO9xul+hnSltzStL3hg1Z7sp8cYkM8clQ/pyELPLja 9e7a6NwWVEhv2lPQtgJ1pHZ9Bz/P6ubIMJzI7SN/zO/eckd4G5Iujy9UukHU4CL0 2XVaJVR5GdWGIhb7iKpN7KxpqZ4jfnaqoZWwO5kdtOEsd2hVRZlv4HPlX7sjyx+J Q7YzRjqegWrRjsCivZIOv+REbkmdbwGzyN2XpejRAsiYztMJ+qO1gsAeDS1rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKbbfk1BfIB/hCzryiDnoUnQ+PgwHwYDVR0j BBgwFoAU/KVf5ovxR64g8AxF2tzflgwSDPgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhC RjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIwQ0Y4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYwQzEy MENGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RG OTYwQzEyMENGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzjnsrH/hwVfeqNUOQcbmCqwVKIWBhGIvyF m7/BadA82DL33q5VoQs2JJoHEaK6vqWTQIDNH9HWtlFtCeOHXNi+33Hg7jxyQLSX W9AlpMAr1uEcziak+H0EWPqZSYtiL9jc53uTjE/A+28GG3nevZedDqLW2xlmLlUi cVNewhbCmLBFJFkFY/TCMG2VSXYctu8AdKZUI27qZmTsbPPGzSA06ha1I0fSOavU Lc7OJ9QAxiOIf2eiojYF8g450hoW/EYlV5gQgCI4k++ORGiw502RMUp1bdPojAqK i/EVf/g02WfA0avgmogVmijh+d075RUMmaRrm5v+l5ceT06uLiA= -----END CERTIFICATE-----Generated at Sat May 18 11:39:18 2024 by rpki-client on console-fra.rpki-client.org