$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: 4va6OlNNPal01pcOx9iVLUDbZy9aswAtpBu1oibOJ60= Subject key identifier: 03:FC:0F:41:B2:46:56:3B:8C:20:C2:9B:A3:43:41:B8:8E:C2:8B:6B Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 708BCE7682F9135BE8F73BEB4EB9056F476CE1BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 03F5 Signing time: Sat 18 May 2024 15:10:41 +0000 Manifest this update: Sat 18 May 2024 15:05:41 +0000 Manifest next update: Wed 22 May 2024 00:12:41 +0000 Files and hashes: 1: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: X3vdUPdok1DFgevnVJZs7SKCW9ZQJsp/Pt0t6yGsFDU=) 2: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: uFCVIFD+fYdTu7D1b00bNNncZ326eb63YXkjLDvdKuY=) 3: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: IRrmTamJx/6iCEGdIsogELD47zF5U2VnDj5Ct9Nu7UA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8b:ce:76:82:f9:13:5b:e8:f7:3b:eb:4e:b9:05:6f:47:6c:e1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: May 18 15:05:41 2024 GMT Not After : May 22 00:12:41 2024 GMT Subject: CN=03FC0F41B246563B8C20C29BA34341B88EC28B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a0:14:32:09:e0:ef:8a:a4:86:86:18:1f:f3: f1:0c:52:eb:2a:a8:49:51:f3:28:9e:7c:45:63:68: 43:e3:18:d1:c0:f5:01:d7:f5:41:07:22:22:c3:fd: bf:6e:d4:db:64:f5:86:37:90:6a:85:9d:49:46:fc: 5f:e6:92:00:c4:8b:dd:c8:96:42:9e:e5:02:46:53: 08:60:aa:09:f6:e1:87:12:38:9a:31:7d:8c:75:08: e0:2d:bd:9a:f3:85:f3:15:fe:2f:ad:cf:b2:bb:53: 8c:ef:b1:49:f8:56:3e:2d:b5:9c:f4:62:2f:be:12: e1:22:d4:5c:81:78:df:0b:a2:08:c6:0e:2c:38:9c: 9d:f5:56:e1:4c:0b:97:4e:8a:07:67:46:40:d1:6f: ad:8a:16:2d:8b:a5:6e:85:05:a6:20:f0:64:5b:be: bb:a3:1d:3b:1b:90:18:5c:fc:fb:8e:0a:34:ed:01: bb:79:c6:44:8e:a0:01:f0:02:f4:ad:9d:f2:cf:12: 0c:73:26:5a:1b:86:27:bd:f7:a4:18:4b:be:7a:a9: 43:7a:f0:b0:18:37:34:3c:b5:f7:aa:bc:69:d5:eb: 19:68:3d:70:4c:f4:08:90:e4:62:ae:8f:56:c7:3f: 07:4b:9e:d5:cb:b5:74:f8:77:15:83:a1:f0:22:29: a2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FC:0F:41:B2:46:56:3B:8C:20:C2:9B:A3:43:41:B8:8E:C2:8B:6B X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:8a:09:70:8a:be:e4:04:a2:e6:68:93:5a:3e:56:9d:78:e3: cd:02:f9:ac:76:66:cc:51:76:10:c3:9b:18:8d:3f:77:cf:68: c0:9d:f4:5b:53:56:75:d8:5c:5a:fc:48:e0:ff:e3:b3:79:e2: 6c:23:71:86:0c:ae:55:cd:11:18:25:1a:37:0b:9a:f3:96:7f: 5c:6a:03:7a:6c:e7:d4:f1:49:4c:56:2e:31:8e:2f:ec:10:22: 98:ac:59:81:73:e4:d2:40:6f:06:e5:6f:d5:9f:29:bf:02:f9: c9:5a:15:a2:c7:2e:28:c4:a0:12:6c:96:86:ac:0f:b7:d7:2b: aa:e3:2d:48:af:2d:ce:22:42:37:42:24:f9:c0:30:6d:60:b1: 95:14:2b:26:c1:d4:d8:11:ab:f7:aa:3c:f9:ab:3c:6e:b2:24: d3:c5:16:5d:8c:33:8e:3a:b0:dc:b9:ce:b5:8f:4c:51:92:a7: af:b7:11:2d:ce:86:dd:02:b3:28:5d:66:1f:82:88:bf:b8:b2: 2b:4e:b2:df:26:1c:60:fb:45:cc:02:e7:47:91:19:ca:33:fb: 2e:75:d2:d2:1d:99:61:15:00:ef:c1:4f:db:dc:8e:79:19:d2: b6:1b:65:83:39:c8:5d:aa:7e:3f:e8:24:be:5a:bf:c9:98:4f: 86:9f:04:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcIvOdoL5E1vo9zvrTrkFb0ds4b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNDA1MTgxNTA1NDFaFw0yNDA1MjIwMDEyNDFaMDMxMTAvBgNV BAMTKDAzRkMwRjQxQjI0NjU2M0I4QzIwQzI5QkEzNDM0MUI4OEVDMjhCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChoBQyCeDviqSGhhgf8/EMUusq qElR8yiefEVjaEPjGNHA9QHX9UEHIiLD/b9u1Ntk9YY3kGqFnUlG/F/mkgDEi93I lkKe5QJGUwhgqgn24YcSOJoxfYx1COAtvZrzhfMV/i+tz7K7U4zvsUn4Vj4ttZz0 Yi++EuEi1FyBeN8LogjGDiw4nJ31VuFMC5dOigdnRkDRb62KFi2LpW6FBaYg8GRb vrujHTsbkBhc/PuOCjTtAbt5xkSOoAHwAvStnfLPEgxzJlobhie996QYS756qUN6 8LAYNzQ8tfeqvGnV6xloPXBM9AiQ5GKuj1bHPwdLntXLtXT4dxWDofAiKaJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA/wPQbJGVjuMIMKbo0NBuI7Ci2swHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlF MkZBQ0Q1QTNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqKCXCKvuQEouZok1o+Vp14480C+ax2ZsxR dhDDmxiNP3fPaMCd9FtTVnXYXFr8SOD/47N54mwjcYYMrlXNERglGjcLmvOWf1xq A3ps59TxSUxWLjGOL+wQIpisWYFz5NJAbwblb9WfKb8C+claFaLHLijEoBJsloas D7fXK6rjLUivLc4iQjdCJPnAMG1gsZUUKybB1NgRq/eqPPmrPG6yJNPFFl2MM446 sNy5zrWPTFGSp6+3ES3Oht0CsyhdZh+CiL+4sitOst8mHGD7RcwC50eRGcoz+y51 0tIdmWEVAO/BT9vcjnkZ0rYbZYM5yF2qfj/oJL5av8mYT4afBKE= -----END CERTIFICATE-----Generated at Sat May 18 15:57:29 2024 by rpki-client on console-ams.rpki-client.org