$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: c63HclTznqozdDN3zWoo7cKoTCEWJL7a6ry+boOZPd4= Subject key identifier: 8D:7F:48:A1:F1:10:9A:15:52:9F:32:EA:9B:B8:49:EC:0E:AD:F4:3A Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 46EAB5BEE2E25CD03A97976FF6F3E44462F2FD4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 03F8 Signing time: Fri 17 May 2024 23:50:35 +0000 Manifest this update: Fri 17 May 2024 23:45:35 +0000 Manifest next update: Tue 21 May 2024 10:04:35 +0000 Files and hashes: 1: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: 1DcSMBzexLMXh9NSRQoQdgCkwz5YHnVgt0aG5LQu7zQ=) 2: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: cRUTu7rwe7xYHYVGw44a27actRy94gDgPmy2YATjQ8s=) 3: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: Ju7eFpMbYJvTpy2UHjqdND2R5YtwDqy7ILQDrGiOUis=) 4: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: ngvmjZh2icLtJGXI+t6e8rEMwqq9Q4Cz9YQPFxmtUHg=) 5: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: J7i391hIJxMfyvqtQvqe8sWLAUU/GR6bdewT6EqoOS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ea:b5:be:e2:e2:5c:d0:3a:97:97:6f:f6:f3:e4:44:62:f2:fd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: May 17 23:45:35 2024 GMT Not After : May 21 10:04:35 2024 GMT Subject: CN=8D7F48A1F1109A15529F32EA9BB849EC0EADF43A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a9:b1:5e:c8:56:54:91:5e:f1:02:66:f1:f9: 5c:57:4b:80:ee:74:5e:bd:40:0e:a9:a2:b5:f4:b1: e5:4c:c4:bd:c4:1f:ae:b0:d2:35:24:cf:69:0f:a3: 33:74:3a:8f:4c:d7:3f:25:20:d2:e6:39:a2:00:dd: 8b:f9:ed:24:3c:01:6a:6f:da:11:1c:cd:69:44:5e: 51:09:24:47:2b:7b:5d:f7:57:4d:76:ca:f2:6e:d0: 21:a5:91:f3:7d:b9:64:07:0e:e1:c8:b0:41:a6:dc: 20:75:da:96:62:c8:3f:34:d0:4d:38:47:2d:6e:98: 20:05:74:3e:13:74:92:35:0f:dc:45:3f:4f:58:e8: bb:a2:1b:48:6e:68:12:79:46:d9:40:a3:1c:ff:62: ee:49:dc:0e:5c:08:99:b7:76:15:34:71:42:83:f2: 47:27:8c:ec:c7:eb:5e:a9:73:a0:14:73:46:96:36: 67:33:c3:00:f6:57:3d:0d:a2:13:0b:75:d6:d6:ca: 18:18:86:c5:98:29:14:21:86:6f:ba:10:4d:af:c4: 60:b4:91:79:23:0d:3d:59:d3:9e:dc:0a:00:a3:c0: 86:86:3f:43:f6:42:56:52:73:99:a6:f5:74:92:54: 3f:9a:d5:0b:f4:53:ce:d9:e3:97:9d:66:6c:1f:57: d9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7F:48:A1:F1:10:9A:15:52:9F:32:EA:9B:B8:49:EC:0E:AD:F4:3A X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:02:e8:70:67:1d:99:49:33:49:0a:d9:5d:2b:32:28:64:f7: 9c:f4:a3:31:1f:1e:fe:e9:5d:70:27:c3:ee:f1:17:d0:fb:11: 7f:dd:c9:ca:24:6b:c2:f0:ea:62:cd:87:fa:4c:32:91:5d:b2: 2b:a0:c4:65:98:6c:8b:2d:27:ed:f4:f6:6f:dd:4d:c3:a7:52: 69:6a:90:56:7a:d2:dd:e9:9b:cb:35:68:79:36:8c:bb:fc:08: b1:b6:97:fe:8a:4c:26:e9:03:77:e9:58:b4:71:f1:f0:3a:8a: 94:13:22:25:6a:f9:a4:d9:11:e5:f5:ea:3b:69:45:33:09:1f: 2b:df:73:f1:98:d7:b1:bd:b1:a2:78:4c:35:6a:d3:00:e9:43: d3:74:77:7a:28:e3:76:da:a5:62:23:24:83:62:a9:df:00:66: a0:4d:2e:c3:5b:5a:99:45:ba:ac:bf:a3:d1:4b:b2:ac:aa:c0: c2:b4:d3:be:1b:85:ef:a5:2f:90:7c:fa:c1:c1:2a:08:79:64: 9f:bd:87:b6:b1:cc:39:bd:f6:19:b5:1e:4b:49:2a:e6:04:ba: bd:84:5b:a5:4e:12:17:35:a2:9b:1a:8a:b1:99:da:0c:bd:b4: 76:3f:f7:60:e4:64:7b:94:3b:40:1d:ea:9e:2d:a3:4c:57:d9: 7d:86:f0:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURuq1vuLiXNA6l5dv9vPkRGLy/UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNDA1MTcyMzQ1MzVaFw0yNDA1MjExMDA0MzVaMDMxMTAvBgNV BAMTKDhEN0Y0OEExRjExMDlBMTU1MjlGMzJFQTlCQjg0OUVDMEVBREY0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1qbFeyFZUkV7xAmbx+VxXS4Du dF69QA6porX0seVMxL3EH66w0jUkz2kPozN0Oo9M1z8lINLmOaIA3Yv57SQ8AWpv 2hEczWlEXlEJJEcre133V012yvJu0CGlkfN9uWQHDuHIsEGm3CB12pZiyD800E04 Ry1umCAFdD4TdJI1D9xFP09Y6LuiG0huaBJ5RtlAoxz/Yu5J3A5cCJm3dhU0cUKD 8kcnjOzH616pc6AUc0aWNmczwwD2Vz0NohMLddbWyhgYhsWYKRQhhm+6EE2vxGC0 kXkjDT1Z057cCgCjwIaGP0P2QlZSc5mm9XSSVD+a1Qv0U87Z45edZmwfV9kpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjX9IofEQmhVSnzLqm7hJ7A6t9DowHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQC6HBnHZlJM0kK2V0rMihk95z0ozEfHv7p XXAnw+7xF9D7EX/dycoka8Lw6mLNh/pMMpFdsiugxGWYbIstJ+309m/dTcOnUmlq kFZ60t3pm8s1aHk2jLv8CLG2l/6KTCbpA3fpWLRx8fA6ipQTIiVq+aTZEeX16jtp RTMJHyvfc/GY17G9saJ4TDVq0wDpQ9N0d3oo43bapWIjJINiqd8AZqBNLsNbWplF uqy/o9FLsqyqwMK0074bhe+lL5B8+sHBKgh5ZJ+9h7axzDm99hm1HktJKuYEur2E W6VOEhc1opsairGZ2gy9tHY/92DkZHuUO0Ad6p4to0xX2X2G8EI= -----END CERTIFICATE-----Generated at Sat May 18 01:29:14 2024 by rpki-client on console-fra.rpki-client.org