$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft File: F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft (raw, json) Hash identifier: UxKm/HpC1/ClePOiuiDVfugcUhfHPDk+k2T8qyBcbXU= Subject key identifier: 9C:62:B7:04:57:E0:1D:91:1F:FB:A9:8C:DF:4A:12:61:3C:EA:8B:E4 Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 Certificate issuer: /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Certificate serial: 55D750C5414B4120A2F40E09E67B4CF226F1E100 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft Manifest number: 01A2 Signing time: Mon 27 May 2024 08:20:01 +0000 Manifest this update: Mon 27 May 2024 08:15:01 +0000 Manifest next update: Thu 30 May 2024 16:21:01 +0000 Files and hashes: 1: 3130332e3234302e3131312e302f32342d3234203d3e203538383139.roa (hash: kLmlfC9IiLplXtCmB9tuTL3W46yIIud26yzmhgk2v7c=) 2: 3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (hash: 46mr85Rahc1cIB66kaX1uIqSbsPKnWLUb/qQhq4YJH4=) 3: F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl (hash: qRZLX4fah6AHOlVUl6di0SWquqBxw6pUTzE9SxyYVyQ=) 4: 3130332e3234302e3130382e302f32342d3234203d3e203538383139.roa (hash: ZJEgge1kIM7jSnLX3L+GPLoVOAAWU+Rl/K5kxexvAiY=) 5: 3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (hash: r6C9lT4DQsB4+6vwP+dtSYUJ6ayQniZY7rPw46SL+JY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 13:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d7:50:c5:41:4b:41:20:a2:f4:0e:09:e6:7b:4c:f2:26:f1:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7 Validity Not Before: May 27 08:15:01 2024 GMT Not After : May 30 16:21:01 2024 GMT Subject: CN=9C62B70457E01D911FFBA98CDF4A12613CEA8BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5e:8e:fd:9e:f8:62:36:2f:25:6a:dd:b1:23: b2:6a:1e:a1:be:8e:a0:0f:98:5a:e0:f1:ff:d2:79: 29:e5:c0:71:f9:23:2f:49:e8:74:40:a8:39:e9:99: 4b:b7:8f:fd:5d:a9:75:9a:22:c4:b5:e6:75:e9:0e: 80:62:a0:e2:45:64:1b:f1:c5:4c:93:bd:fd:a8:c1: 45:68:fa:90:6d:12:eb:36:60:39:16:6c:dd:5f:75: 88:d9:eb:1d:aa:cc:11:e9:56:1e:2e:0e:c4:eb:a3: f1:9b:ea:3b:07:a9:7f:b7:17:80:52:50:fc:2f:8b: 28:e1:20:97:39:e1:58:0b:b3:53:14:a3:5a:02:9b: 81:70:27:9b:f5:f0:05:61:25:5f:36:d1:1a:70:09: 8b:e7:18:43:c4:5c:a3:53:af:3e:36:74:17:8c:63: 81:5f:05:86:a9:9e:ba:76:8c:0f:7a:2c:19:fb:85: 91:48:cd:66:b3:01:e8:50:79:19:81:9f:01:ff:26: c7:ba:d6:04:37:2d:a4:b9:75:ce:ab:73:0b:00:1d: c9:cd:4c:00:e3:b7:a2:b9:ad:13:68:f6:b4:72:90: e4:40:21:53:50:3f:98:ba:98:56:23:08:75:51:8f: 0c:0c:b7:48:dd:23:35:fa:09:9c:56:b2:26:4e:49: 7c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:62:B7:04:57:E0:1D:91:1F:FB:A9:8C:DF:4A:12:61:3C:EA:8B:E4 X509v3 Authority Key Identifier: keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5d:18:28:fb:76:bc:14:d0:aa:3f:06:0f:70:1c:87:05:46: fd:3e:1e:42:e6:ff:35:0a:12:96:84:5d:12:ae:77:27:bf:b1: 31:32:a7:50:2d:f5:00:bf:08:57:79:5f:1f:cc:02:65:55:41: 6d:e1:f4:fa:6a:57:81:2c:95:78:fd:ba:e5:3c:89:bf:8f:35: d3:c6:14:cc:44:be:61:ea:1f:b3:52:a6:e1:db:17:19:2a:33: 5e:b5:d5:4d:10:f0:c5:88:0c:94:20:56:45:77:77:47:7f:46: 7e:b4:7d:8f:f1:4d:d2:06:96:12:c5:2e:12:be:c1:63:cd:21: 63:dd:83:c0:1b:7b:52:69:21:15:cb:cb:ea:f6:36:d1:b6:78: 56:78:78:93:2c:9e:ef:4b:9b:98:15:2e:6f:46:16:48:a2:fb: c4:42:9a:1a:b9:53:2b:ef:a4:7d:76:d2:04:a6:7a:24:fb:12: bf:3d:73:b8:9e:cf:3e:65:9b:a8:63:7b:64:e1:a1:08:67:b4: b6:20:ae:26:e0:82:bd:ce:e1:49:ad:a7:fd:f8:1c:cf:f0:bb: ea:08:ee:d4:97:73:a5:c6:8b:3d:c3:66:c4:ab:49:02:de:f2: 33:86:86:18:7f:70:08:bb:a1:29:fd:7f:49:96:5e:cd:2e:e4: 7e:94:3f:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVddQxUFLQSCi9A4J5ntM8ibx4QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkx QkJCOTJGNzAeFw0yNDA1MjcwODE1MDFaFw0yNDA1MzAxNjIxMDFaMDMxMTAvBgNV BAMTKDlDNjJCNzA0NTdFMDFEOTExRkZCQTk4Q0RGNEExMjYxM0NFQThCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxXo79nvhiNi8lat2xI7JqHqG+ jqAPmFrg8f/SeSnlwHH5Iy9J6HRAqDnpmUu3j/1dqXWaIsS15nXpDoBioOJFZBvx xUyTvf2owUVo+pBtEus2YDkWbN1fdYjZ6x2qzBHpVh4uDsTro/Gb6jsHqX+3F4BS UPwviyjhIJc54VgLs1MUo1oCm4FwJ5v18AVhJV820RpwCYvnGEPEXKNTrz42dBeM Y4FfBYapnrp2jA96LBn7hZFIzWazAehQeRmBnwH/Jse61gQ3LaS5dc6rcwsAHcnN TADjt6K5rRNo9rRykORAIVNQP5i6mFYjCHVRjwwMt0jdIzX6CZxWsiZOSXyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnGK3BFfgHZEf+6mM30oSYTzqi+QwHwYDVR0j BBgwFoAU+N9A5Mlfnr+BRThwc2mV6Ru7kvcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDAzYWYwMS1mMjM5LTRhMWYtODFjZC00MTA2YmViYjJhMjIvMC9GOERGNDBFNEM5 NUY5RUJGODE0NTM4NzA3MzY5OTVFOTFCQkI5MkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1RTkxQkJC OTJGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQwM2FmMDEtZjIzOS00YTFmLTgx Y2QtNDEwNmJlYmIyYTIyLzAvRjhERjQwRTRDOTVGOUVCRjgxNDUzODcwNzM2OTk1 RTkxQkJCOTJGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpdGCj7drwU0Ko/Bg9wHIcFRv0+HkLm/zUK EpaEXRKudye/sTEyp1At9QC/CFd5Xx/MAmVVQW3h9PpqV4EslXj9uuU8ib+PNdPG FMxEvmHqH7NSpuHbFxkqM1611U0Q8MWIDJQgVkV3d0d/Rn60fY/xTdIGlhLFLhK+ wWPNIWPdg8Abe1JpIRXLy+r2NtG2eFZ4eJMsnu9Lm5gVLm9GFkii+8RCmhq5Uyvv pH120gSmeiT7Er89c7iezz5lm6hje2ThoQhntLYgribggr3O4Umtp/34HM/wu+oI 7tSXc6XGiz3DZsSrSQLe8jOGhhh/cAi7oSn9f0mWXs0u5H6UP6U= -----END CERTIFICATE-----Generated at Mon May 27 10:24:25 2024 by rpki-client on console-fra.rpki-client.org