$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: XuKrnuoThP4TPT4AdeVN8K8N07r7trZ8njKTbBMPq5U= Subject key identifier: 8E:DE:0C:E7:4E:E4:3A:4E:C1:06:30:01:5D:87:AA:0C:36:76:DB:88 Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 5062DEA763D8D508C103C4DE46AE4E735AFF18DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 0435 Signing time: Tue 28 May 2024 20:41:32 +0000 Manifest this update: Tue 28 May 2024 20:36:32 +0000 Manifest next update: Sat 01 Jun 2024 04:36:32 +0000 Files and hashes: 1: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: l6S7ekaCFeYGjR1SnMPplYolzKgkU16zZlB4elURTUY=) 2: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: xerDXUHPRgOJEQZDwO/guLYB9O9Rz4ehy9O1J7N87V0=) 3: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: 4/GU1Qyk0d9dbAhzkGGHUuEymrHAtO/w7LuPJlOqHa8=) 4: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: xmt+A4bLBuKOdD4dviM6s0qu1j+ylxINDSy/aubpxOM=) 5: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: 2WLJ+rEgAPDo1hU0HNK07FK2W6QSdCym8G23LAxHFpU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:62:de:a7:63:d8:d5:08:c1:03:c4:de:46:ae:4e:73:5a:ff:18:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: May 28 20:36:32 2024 GMT Not After : Jun 1 04:36:32 2024 GMT Subject: CN=8EDE0CE74EE43A4EC10630015D87AA0C3676DB88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:be:f0:b7:50:79:0c:6c:32:38:de:f2:04: c9:44:13:38:9f:c7:cf:a6:4b:a0:c7:22:21:cf:a8: e1:1b:3b:cb:dc:58:e8:0b:27:e0:19:79:94:ad:88: 31:2f:6f:61:3a:4b:c3:3c:23:60:ff:02:f2:78:00: 47:7d:d6:dc:5d:2f:d2:6b:9e:78:f5:5f:07:36:7c: fa:98:6b:df:77:88:55:45:a6:9d:09:c0:8c:80:ce: 7c:32:da:2b:8b:2d:18:36:81:10:08:a2:32:ff:17: 7a:8a:9f:55:ad:00:f9:b7:24:b0:be:8f:a2:a0:b7: c4:1e:e8:1c:00:34:fd:e8:99:09:e6:e0:05:f4:71: aa:2e:3c:a0:4f:4a:60:08:60:75:df:b3:2b:49:e9: f1:36:a2:ed:af:e5:bb:c6:3b:1a:d4:86:ee:a1:cc: 22:94:7f:0e:94:8a:7c:d1:71:48:86:9a:35:1c:6d: 50:1d:bf:c2:fa:c8:13:78:be:56:b7:49:74:26:e8: 7a:95:6d:57:d2:c9:10:15:bc:cb:5f:6c:2b:d1:93: a7:05:e4:aa:7f:a3:a0:03:06:72:81:1c:2c:d4:1e: 85:0e:6f:65:6f:b6:e7:14:30:f5:b2:b5:1a:1e:74: 7c:ce:3b:d0:fe:de:89:45:cb:14:2f:ee:80:d1:8a: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DE:0C:E7:4E:E4:3A:4E:C1:06:30:01:5D:87:AA:0C:36:76:DB:88 X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:09:f3:f4:9d:d1:07:2a:bc:94:4e:fc:02:0a:a9:61:43:75: b5:7c:66:d9:0b:de:fc:b0:43:5f:d9:97:d3:e7:73:27:9a:e6: 9b:54:0c:91:8c:b9:2b:ca:49:20:de:ac:2b:2d:88:e4:11:1d: 53:da:73:88:62:7f:2d:2b:0b:73:96:87:4b:d8:7d:5c:5f:a4: a8:12:e8:6e:83:d8:cb:96:ca:cf:2f:3f:86:90:60:11:b4:0e: 6f:4a:d0:a3:e1:76:84:32:fe:5b:25:6f:1e:43:05:53:e8:7a: 7a:1b:34:0f:69:80:a0:02:12:e4:d4:da:84:05:c2:95:2f:e5: dd:99:5a:3a:04:db:a9:49:15:c4:b2:23:d7:ad:a6:2e:83:7c: a2:46:1d:2a:cf:da:5b:61:e8:84:1d:01:2e:88:6c:96:4e:c6: 7c:3e:14:70:98:ba:22:90:b3:bd:69:1a:59:46:ca:2c:41:99: f6:1a:42:13:f7:58:f2:3c:7c:f8:56:10:e9:a8:a5:d8:13:3d: 13:77:52:f1:26:a8:e7:dd:eb:6c:53:9f:91:6d:64:5c:f4:5a: 13:1f:54:7d:91:91:d0:63:40:31:70:cc:d8:64:95:aa:e5:63: 13:4a:ae:c6:c2:5e:44:3a:79:f3:3f:8d:de:e0:0f:7e:0c:7e: e1:36:ea:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUGLep2PY1QjBA8TeRq5Oc1r/GN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNDA1MjgyMDM2MzJaFw0yNDA2MDEwNDM2MzJaMDMxMTAvBgNV BAMTKDhFREUwQ0U3NEVFNDNBNEVDMTA2MzAwMTVEODdBQTBDMzY3NkRCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOiL7wt1B5DGwyON7yBMlEEzif x8+mS6DHIiHPqOEbO8vcWOgLJ+AZeZStiDEvb2E6S8M8I2D/AvJ4AEd91txdL9Jr nnj1Xwc2fPqYa993iFVFpp0JwIyAznwy2iuLLRg2gRAIojL/F3qKn1WtAPm3JLC+ j6Kgt8Qe6BwANP3omQnm4AX0caouPKBPSmAIYHXfsytJ6fE2ou2v5bvGOxrUhu6h zCKUfw6UinzRcUiGmjUcbVAdv8L6yBN4vla3SXQm6HqVbVfSyRAVvMtfbCvRk6cF 5Kp/o6ADBnKBHCzUHoUOb2VvtucUMPWytRoedHzOO9D+3olFyxQv7oDRiscpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjt4M507kOk7BBjABXYeqDDZ224gwHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkJ8/Sd0QcqvJRO/AIKqWFDdbV8ZtkL3vyw Q1/Zl9Pncyea5ptUDJGMuSvKSSDerCstiOQRHVPac4hify0rC3OWh0vYfVxfpKgS 6G6D2MuWys8vP4aQYBG0Dm9K0KPhdoQy/lslbx5DBVPoenobNA9pgKACEuTU2oQF wpUv5d2ZWjoE26lJFcSyI9etpi6DfKJGHSrP2lth6IQdAS6IbJZOxnw+FHCYuiKQ s71pGllGyixBmfYaQhP3WPI8fPhWEOmopdgTPRN3UvEmqOfd62xTn5FtZFz0WhMf VH2RkdBjQDFwzNhklarlYxNKrsbCXkQ6efM/jd7gD34MfuE26iY= -----END CERTIFICATE-----Generated at Tue May 28 22:49:01 2024 by rpki-client on console-ams.rpki-client.org