$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: DGvqn5R6jKgMkR69YNWGGPsO42UxXeK5j5BKjNTqN+Y= Subject key identifier: C9:BE:A0:1E:3F:AF:FD:01:EB:56:71:C1:6C:0E:5D:32:6E:D1:29:13 Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 1BCA8B101F061414E1E21B3BD969394875860E66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 0444 Signing time: Thu 23 May 2024 12:50:56 +0000 Manifest this update: Thu 23 May 2024 12:45:56 +0000 Manifest next update: Sun 26 May 2024 12:59:56 +0000 Files and hashes: 1: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: lSr4jBPNp0TRLq0sA3DI0GerL3iqlQX0oMPciqYj4cs=) 2: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: QVZuPq3BUFL5N2WHZJeGql3KDEfbvUsECXHeyyQQoV0=) 3: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: M99xhdoZnUSArNFQBcH8UXTf7qQpf114JTc+bpmm89I=) 4: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: J+QZPa0iRBadwQdN4R9X8cYET2owXIaBqYuZ7epKyC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 12:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ca:8b:10:1f:06:14:14:e1:e2:1b:3b:d9:69:39:48:75:86:0e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: May 23 12:45:56 2024 GMT Not After : May 26 12:59:56 2024 GMT Subject: CN=C9BEA01E3FAFFD01EB5671C16C0E5D326ED12913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:63:08:aa:ff:39:d7:3c:59:72:91:51:99:0b: 62:58:3f:7b:78:0d:b4:4f:55:d8:e5:7c:0b:f2:4e: c0:3f:47:c3:23:65:34:99:72:b1:c6:c7:a3:f7:42: c6:aa:bc:12:20:02:2d:99:5b:f1:09:9b:cc:f9:be: 91:06:bd:f3:50:e5:6b:b7:c5:90:50:1a:d3:75:37: 6b:8b:ff:90:db:ad:aa:60:8f:ae:50:07:de:40:21: ef:e9:01:3e:50:bd:8c:0c:24:c6:95:cd:dd:a4:e8: 49:a9:6b:7e:c7:03:9d:82:77:69:46:c2:9b:b7:7a: 50:24:1d:83:3d:c6:ba:44:4a:21:19:ec:89:d7:f9: 01:85:61:2e:a0:10:4e:b2:ff:8d:0d:2a:13:06:51: 63:a8:e2:d3:13:27:a1:69:88:0e:ee:5f:65:b5:c0: ff:78:43:4c:58:ef:86:c6:a5:75:e8:29:8c:e0:d2: 69:5f:c7:37:99:8a:3d:d7:6c:0d:62:af:b2:cd:2a: 43:44:5e:f4:7c:0a:96:e5:99:6b:16:a7:74:3f:01: b3:9e:e9:b3:08:d6:65:a1:84:85:05:1f:6e:ba:e8: 5c:5e:b1:7a:52:32:61:38:8a:4e:a0:0c:f6:a1:44: d1:64:55:2a:a9:34:72:cb:39:f5:b5:2d:38:65:fb: 7c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BE:A0:1E:3F:AF:FD:01:EB:56:71:C1:6C:0E:5D:32:6E:D1:29:13 X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:dd:21:06:c9:3b:e3:5c:4e:21:25:04:3a:0b:3c:f5:43:14: fe:4d:26:a2:ec:78:0c:66:14:37:22:d2:fd:5b:cd:4e:53:22: 29:dd:0d:1d:a1:e0:81:39:ab:1d:13:43:24:2a:21:38:77:2b: ab:c1:e8:99:ad:c5:6c:e6:7a:6e:51:d5:9c:44:4c:f1:ba:23: 1a:ff:fc:f2:99:cb:c3:69:33:7f:69:f6:8b:bc:82:a1:24:82: 7a:c9:ee:f3:9d:08:47:8f:3c:a2:ab:95:16:87:7f:c0:79:58: aa:28:1a:0e:9e:9a:e8:be:85:ca:7d:b6:71:89:ed:1d:e4:bf: 6d:7f:19:7b:21:73:e4:06:19:49:d7:15:ed:00:50:d4:b2:7e: b9:eb:e4:e4:55:ea:37:82:92:9d:43:16:19:d5:87:60:5f:5f: 32:ef:8b:b5:52:76:ee:1b:ab:3c:5d:4c:0e:92:b8:ec:3c:15: 2e:51:0e:a6:00:eb:99:f2:ca:30:81:86:bb:fe:f4:ac:5f:8e: 19:6a:1a:81:fa:20:1e:93:59:8e:55:6a:c6:17:46:28:40:d6: f8:9d:e8:65:96:47:ca:e5:68:20:23:15:1a:e0:08:13:ec:59: f1:34:6a:f4:a1:11:05:38:7c:b5:7c:d7:bc:ca:76:80:a3:08: 4e:00:5a:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8qLEB8GFBTh4hs72Wk5SHWGDmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNDA1MjMxMjQ1NTZaFw0yNDA1MjYxMjU5NTZaMDMxMTAvBgNV BAMTKEM5QkVBMDFFM0ZBRkZEMDFFQjU2NzFDMTZDMEU1RDMyNkVEMTI5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcYwiq/znXPFlykVGZC2JYP3t4 DbRPVdjlfAvyTsA/R8MjZTSZcrHGx6P3QsaqvBIgAi2ZW/EJm8z5vpEGvfNQ5Wu3 xZBQGtN1N2uL/5Dbrapgj65QB95AIe/pAT5QvYwMJMaVzd2k6Empa37HA52Cd2lG wpu3elAkHYM9xrpESiEZ7InX+QGFYS6gEE6y/40NKhMGUWOo4tMTJ6FpiA7uX2W1 wP94Q0xY74bGpXXoKYzg0mlfxzeZij3XbA1ir7LNKkNEXvR8CpblmWsWp3Q/AbOe 6bMI1mWhhIUFH2666FxesXpSMmE4ik6gDPahRNFkVSqpNHLLOfW1LThl+3zHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyb6gHj+v/QHrVnHBbA5dMm7RKRMwHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjdIQbJO+NcTiElBDoLPPVDFP5NJqLseAxm FDci0v1bzU5TIindDR2h4IE5qx0TQyQqITh3K6vB6JmtxWzmem5R1ZxETPG6Ixr/ /PKZy8NpM39p9ou8gqEkgnrJ7vOdCEePPKKrlRaHf8B5WKooGg6emui+hcp9tnGJ 7R3kv21/GXshc+QGGUnXFe0AUNSyfrnr5ORV6jeCkp1DFhnVh2BfXzLvi7VSdu4b qzxdTA6SuOw8FS5RDqYA65nyyjCBhrv+9KxfjhlqGoH6IB6TWY5VasYXRihA1vid 6GWWR8rlaCAjFRrgCBPsWfE0avShEQU4fLV817zKdoCjCE4AWnU= -----END CERTIFICATE-----Generated at Thu May 23 16:19:32 2024 by rpki-client on console-ams.rpki-client.org