$ rpki-client -vvf repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft File: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft (raw, json) Hash identifier: noG9vZbM5WJKl9WIicxx6+OF6n2z3rdIJyk8XVEuDMc= Subject key identifier: 4E:38:EA:85:2D:44:9D:58:D2:FF:A8:27:41:CE:96:2E:64:79:73:D9 Authority key identifier: F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 Certificate issuer: /CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Certificate serial: 7C674DCD89D39DD774B90C2FBA74D6AF79B168A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft Manifest number: 3B Signing time: Thu 06 Jun 2024 12:41:44 +0000 Manifest this update: Thu 06 Jun 2024 12:36:44 +0000 Manifest next update: Sun 09 Jun 2024 17:48:44 +0000 Files and hashes: 1: F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl (hash: oQMKEoh6+nKTYCJUQph3Uxzo1SO7CXFkYu2Zkiv4lUA=) 2: 3135372e31302e3137382e302f32342d3234203d3e20313532333435.roa (hash: rlRoREqH3GBWi4gtO2pznE3ezYOKKSTuRmJPe4qM4yY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 17:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:67:4d:cd:89:d3:9d:d7:74:b9:0c:2f:ba:74:d6:af:79:b1:68:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C9E79ADDDE2928BC5FA27C3D621C1D93252169 Validity Not Before: Jun 6 12:36:44 2024 GMT Not After : Jun 9 17:48:44 2024 GMT Subject: CN=4E38EA852D449D58D2FFA82741CE962E647973D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:ef:40:c4:74:6b:71:a8:39:71:53:e4:4c: 75:52:5e:6e:bf:c8:22:c9:25:12:c1:f7:1c:c2:41: 40:97:66:9e:3a:04:81:66:e1:03:a4:19:55:15:db: bd:fb:76:63:7c:00:67:f1:ee:25:37:c7:26:14:ec: c8:6d:98:8d:f4:8f:d5:6d:2c:0e:71:7e:0a:5d:b7: 02:ac:6d:9a:60:cc:80:36:e9:b8:61:b4:38:2c:8e: fb:67:92:78:0b:fd:bd:4d:14:df:2d:be:a6:08:81: f4:2b:78:1f:33:eb:3f:f1:e2:9a:a2:46:ee:ec:44: 35:30:ae:25:d1:d3:fa:7d:0a:78:a6:c4:2d:fe:9b: bc:53:ca:bb:54:22:d1:f1:07:29:f5:e4:67:b7:9e: 09:67:cf:72:b2:27:d1:6e:0f:1a:e3:ae:86:1f:0c: 48:5c:13:26:f6:48:5f:63:f1:9b:48:e6:fb:fb:d7: bc:7a:67:69:2c:d7:b5:bb:a5:76:ea:5b:c0:b3:06: 4b:a8:a0:fa:79:0e:bb:4c:1b:98:e0:6e:a3:96:2b: 49:85:be:94:0b:51:0f:a4:51:70:47:17:76:80:93: 2e:6b:20:fa:d6:1c:76:56:99:fe:4c:2f:34:23:f7: 71:78:05:42:a3:57:05:28:ea:0e:f3:41:0e:32:33: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:38:EA:85:2D:44:9D:58:D2:FF:A8:27:41:CE:96:2E:64:79:73:D9 X509v3 Authority Key Identifier: keyid:F8:C9:E7:9A:DD:DE:29:28:BC:5F:A2:7C:3D:62:1C:1D:93:25:21:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83c891d7-4fcc-4770-82d4-367b87bb551e/0/F8C9E79ADDDE2928BC5FA27C3D621C1D93252169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:1b:f4:8f:38:c7:66:6c:25:74:d2:25:4f:7b:18:c5:da:29: 77:b1:84:21:e9:63:24:46:67:10:cf:07:bb:91:33:71:d2:9d: e3:c0:85:df:2f:2e:a7:52:82:d6:ba:d0:aa:c9:f9:89:47:28: ce:4e:57:40:38:6a:41:a2:3c:11:b7:b0:83:76:0c:39:36:93: 9a:55:dc:ca:5a:03:4b:66:4e:43:09:ad:b4:02:9a:4c:8e:ca: b8:5a:99:5b:b7:99:2b:1a:89:c9:11:a5:53:d9:8f:fb:ca:83: 4d:d2:66:39:6e:76:c0:03:c0:a7:0f:13:ea:94:12:1e:b6:d4: 35:cf:03:46:a4:33:71:fe:5e:39:b6:56:84:d8:a5:41:89:75: 34:4d:8c:ec:5a:58:7b:86:d4:4c:d5:83:7a:83:7a:e0:af:b6: 5e:87:c0:dc:a5:aa:0e:50:ff:db:06:8d:e1:72:90:66:e5:cd: c2:e6:3c:2d:4e:83:9c:83:16:48:f4:54:80:8d:c8:d6:b6:51: 19:03:2a:80:24:35:a0:77:51:e4:06:fc:30:66:3a:7e:b1:95: 4e:5f:99:2d:22:e1:78:01:f3:05:4d:f1:19:90:70:6b:31:cb: a9:bc:55:46:bb:91:d3:f9:c3:b0:46:c3:3a:cf:b9:10:7b:fa: 0c:ff:67:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfGdNzYnTndd0uQwvunTWr3mxaKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5 MzI1MjE2OTAeFw0yNDA2MDYxMjM2NDRaFw0yNDA2MDkxNzQ4NDRaMDMxMTAvBgNV BAMTKDRFMzhFQTg1MkQ0NDlENThEMkZGQTgyNzQxQ0U5NjJFNjQ3OTczRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwju9AxHRrcag5cVPkTHVSXm6/ yCLJJRLB9xzCQUCXZp46BIFm4QOkGVUV2737dmN8AGfx7iU3xyYU7MhtmI30j9Vt LA5xfgpdtwKsbZpgzIA26bhhtDgsjvtnkngL/b1NFN8tvqYIgfQreB8z6z/x4pqi Ru7sRDUwriXR0/p9CnimxC3+m7xTyrtUItHxByn15Ge3nglnz3KyJ9FuDxrjroYf DEhcEyb2SF9j8ZtI5vv717x6Z2ks17W7pXbqW8CzBkuooPp5DrtMG5jgbqOWK0mF vpQLUQ+kUXBHF3aAky5rIPrWHHZWmf5MLzQj93F4BUKjVwUo6g7zQQ4yMwfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTjjqhS1EnVjS/6gnQc6WLmR5c9kwHwYDVR0j BBgwFoAU+Mnnmt3eKSi8X6J8PWIcHZMlIWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2M4OTFkNy00ZmNjLTQ3NzAtODJkNC0zNjdiODdiYjU1MWUvMC9GOEM5RTc5QURE REUyOTI4QkM1RkEyN0MzRDYyMUMxRDkzMjUyMTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFDMUQ5MzI1 MjE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjODkxZDctNGZjYy00NzcwLTgy ZDQtMzY3Yjg3YmI1NTFlLzAvRjhDOUU3OUFERERFMjkyOEJDNUZBMjdDM0Q2MjFD MUQ5MzI1MjE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMb9I84x2ZsJXTSJU97GMXaKXexhCHpYyRG ZxDPB7uRM3HSnePAhd8vLqdSgta60KrJ+YlHKM5OV0A4akGiPBG3sIN2DDk2k5pV 3MpaA0tmTkMJrbQCmkyOyrhamVu3mSsaickRpVPZj/vKg03SZjludsADwKcPE+qU Eh621DXPA0akM3H+Xjm2VoTYpUGJdTRNjOxaWHuG1EzVg3qDeuCvtl6HwNylqg5Q /9sGjeFykGblzcLmPC1Og5yDFkj0VICNyNa2URkDKoAkNaB3UeQG/DBmOn6xlU5f mS0i4XgB8wVN8RmQcGsxy6m8VUa7kdP5w7BGwzrPuRB7+gz/Zyk= -----END CERTIFICATE-----Generated at Thu Jun 6 15:02:32 2024 by rpki-client on console-ams.rpki-client.org