$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: cwWcmgCV/o7Cu4h6P+uo/p4kpcNGmpgngKfj6+TwFfo= Subject key identifier: 23:6A:FC:3B:B5:F6:3C:03:BD:60:11:CA:74:2D:36:F8:89:49:F1:AC Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 11433BF3C3B665C676B8886B15A4370F4FDBE127 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 01C3 Signing time: Sat 18 May 2024 06:21:55 +0000 Manifest this update: Sat 18 May 2024 06:16:55 +0000 Manifest next update: Tue 21 May 2024 16:11:55 +0000 Files and hashes: 1: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: rGvQozVnQHCVNzuI4OjjKNmZpUX/tmlMj4LE2g/epMo=) 2: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: 1jgLlaBezLH1bN98QVh+doY7e4FkZJNvq1+3PndysYw=) 3: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: yJL8pkleDht+nvNd9Wd0RMymhVbioHdB8IjuKseCoQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:43:3b:f3:c3:b6:65:c6:76:b8:88:6b:15:a4:37:0f:4f:db:e1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: May 18 06:16:55 2024 GMT Not After : May 21 16:11:55 2024 GMT Subject: CN=236AFC3BB5F63C03BD6011CA742D36F88949F1AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fc:ab:a9:16:3c:0d:99:3d:0c:61:17:5b:92: e3:a3:7b:b1:7c:78:c9:d3:09:be:db:61:3f:bc:a1: 08:97:04:5d:67:15:ca:3b:1d:d9:c4:63:9d:ac:f5: 5b:69:1c:ab:fb:a6:4e:bd:a9:51:1e:36:95:5e:32: 0d:09:36:45:c4:bd:d5:2c:dd:ec:42:76:de:8c:00: e7:fd:e0:98:5d:ed:66:39:89:55:69:0b:a3:37:3a: b3:77:3c:c4:bd:c2:33:5b:e8:d1:ab:59:1e:62:68: 94:6a:21:be:33:8c:d3:b0:5e:9d:f6:01:d9:be:48: 6b:48:ae:b7:c7:c1:98:a6:16:72:b6:e4:c5:99:31: 31:62:8e:c4:df:17:1a:7e:27:a5:2c:2c:1a:fd:45: c2:9d:d4:47:24:6a:ef:0b:93:a3:92:c8:bf:77:ba: 27:8b:f8:6b:24:31:2e:38:a8:34:1c:62:e3:15:a8: c2:c3:63:a7:50:4e:5a:85:78:73:7f:b6:3f:e0:8b: e0:9d:86:46:17:59:97:5c:dc:f9:62:8e:5d:38:19: 36:e6:12:5c:20:09:4a:72:18:b4:b2:00:4d:00:71: 29:05:40:54:56:95:11:e9:fb:80:f9:5d:c9:d2:dd: b0:5b:99:14:26:4a:00:c1:35:39:75:3a:59:7d:1e: d4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6A:FC:3B:B5:F6:3C:03:BD:60:11:CA:74:2D:36:F8:89:49:F1:AC X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:20:da:da:37:a8:05:8c:4e:d7:15:9c:c2:a2:8c:12:d1:6a: 9c:5c:8c:c1:c8:27:a0:8b:f6:f0:69:20:83:c4:92:c2:5c:e7: d9:fc:b5:cd:57:42:a4:ab:5e:6b:16:2b:e8:00:44:c1:93:2e: a3:db:cf:01:9a:32:1b:b0:c3:81:0d:ad:60:fc:e6:ad:ab:e5: 26:a5:2d:09:8e:c4:94:e9:3d:0c:c2:03:f9:9f:56:54:42:36: 50:37:56:a0:9e:44:a1:08:fb:06:bd:f0:90:c5:2d:47:c6:64: e5:98:25:8c:05:2b:43:2a:e1:3c:ac:24:e9:ab:05:f2:fd:d1: b5:7b:9b:5e:30:b6:ff:fd:27:10:97:29:52:08:c8:b0:fc:fc: 46:e7:e3:64:07:9e:bc:09:d2:be:b8:79:8a:4c:ac:b5:cb:2e: c3:f2:f9:dd:a3:e7:60:66:1b:12:28:fd:c7:08:72:74:af:d7: 6d:7a:8d:3e:b4:81:ff:1d:5a:29:ca:62:05:91:42:e2:3d:fb: dd:2b:42:40:f0:b1:5b:9d:f2:db:a0:ad:24:c6:49:4c:f6:ce: ad:26:73:9b:26:0c:b8:f3:f0:28:42:3a:06:32:3e:9c:84:b5: 44:8c:df:83:13:f5:71:5a:b5:82:d0:a6:ec:b8:16:af:05:16: b5:be:d3:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEUM788O2ZcZ2uIhrFaQ3D0/b4ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNDA1MTgwNjE2NTVaFw0yNDA1MjExNjExNTVaMDMxMTAvBgNV BAMTKDIzNkFGQzNCQjVGNjNDMDNCRDYwMTFDQTc0MkQzNkY4ODk0OUYxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj/KupFjwNmT0MYRdbkuOje7F8 eMnTCb7bYT+8oQiXBF1nFco7HdnEY52s9VtpHKv7pk69qVEeNpVeMg0JNkXEvdUs 3exCdt6MAOf94Jhd7WY5iVVpC6M3OrN3PMS9wjNb6NGrWR5iaJRqIb4zjNOwXp32 Adm+SGtIrrfHwZimFnK25MWZMTFijsTfFxp+J6UsLBr9RcKd1Eckau8Lk6OSyL93 uieL+GskMS44qDQcYuMVqMLDY6dQTlqFeHN/tj/gi+CdhkYXWZdc3Plijl04GTbm ElwgCUpyGLSyAE0AcSkFQFRWlRHp+4D5XcnS3bBbmRQmSgDBNTl1Oll9HtRbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI2r8O7X2PAO9YBHKdC02+IlJ8awwHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMg2to3qAWMTtcVnMKijBLRapxcjMHIJ6CL 9vBpIIPEksJc59n8tc1XQqSrXmsWK+gARMGTLqPbzwGaMhuww4ENrWD85q2r5Sal LQmOxJTpPQzCA/mfVlRCNlA3VqCeRKEI+wa98JDFLUfGZOWYJYwFK0Mq4TysJOmr BfL90bV7m14wtv/9JxCXKVIIyLD8/Ebn42QHnrwJ0r64eYpMrLXLLsPy+d2j52Bm GxIo/ccIcnSv1216jT60gf8dWinKYgWRQuI9+90rQkDwsVud8tugrSTGSUz2zq0m c5smDLjz8ChCOgYyPpyEtUSM34MT9XFatYLQpuy4Fq8FFrW+00s= -----END CERTIFICATE-----Generated at Sat May 18 07:39:11 2024 by rpki-client on console-ams.rpki-client.org