$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: GrkYSvrD6Z5a6syHGeuHoPjg9fEZm+gofKlbxH6Vp7c= Subject key identifier: F0:9A:7F:09:8F:43:02:2A:4C:02:64:FA:95:0E:E1:A5:D0:E6:D4:E1 Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 3FA85C9DB0FCB2B5083F9F64F26823745B992366 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 023F Signing time: Sun 19 May 2024 14:12:03 +0000 Manifest this update: Sun 19 May 2024 14:07:03 +0000 Manifest next update: Thu 23 May 2024 01:24:03 +0000 Files and hashes: 1: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: Bt9u952lrvxt2DvFb8d5Y5+KWz552/1nKFK7h/cns14=) 2: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: IiQiPkj5U4C8v17UqMyziASizWmFIeGjjqeWest9mbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a8:5c:9d:b0:fc:b2:b5:08:3f:9f:64:f2:68:23:74:5b:99:23:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: May 19 14:07:03 2024 GMT Not After : May 23 01:24:03 2024 GMT Subject: CN=F09A7F098F43022A4C0264FA950EE1A5D0E6D4E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:1e:c6:39:d1:5d:99:d7:ad:b0:13:a4:81: 6d:f6:12:1c:cb:df:a3:83:3e:95:4c:9a:a8:d8:df: e3:31:bb:35:74:32:4e:51:6e:09:01:de:b1:e8:05: 40:17:b9:21:e7:f9:53:d6:5e:8c:06:57:35:6c:2d: 30:f2:b2:be:e3:46:e7:aa:f2:05:0a:ee:c5:57:24: db:2c:0f:91:ed:51:b5:41:79:02:22:97:8d:27:d8: 19:04:78:60:68:c1:1c:b6:3f:29:d6:38:71:b8:11: 87:c5:73:4f:77:65:44:21:e9:78:27:01:b8:63:84: 7e:88:19:93:6a:7b:aa:31:9d:af:d6:7a:dc:88:a3: 1e:67:95:e3:26:d3:c7:2c:ab:d5:1d:74:30:d3:59: cd:56:96:ec:27:20:f8:2d:a6:04:34:57:f8:aa:4d: 0d:56:12:fc:71:0e:01:22:a1:7f:56:e4:19:83:a8: a5:18:25:4e:5c:36:07:d5:5e:99:15:91:07:9c:83: d8:e0:a6:ce:9d:70:f2:f4:eb:0e:90:15:66:cc:e3: ca:5d:33:81:25:ae:34:de:4b:40:cc:8e:3f:e1:b7: e5:e9:04:07:34:06:80:23:94:50:64:93:d1:d2:32: 65:8b:4e:07:fc:c9:97:6b:7e:53:1e:22:49:87:b0: 83:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9A:7F:09:8F:43:02:2A:4C:02:64:FA:95:0E:E1:A5:D0:E6:D4:E1 X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e9:7c:2e:a5:95:09:cc:af:43:4d:2b:5a:3b:0f:b8:70:ec: 17:4c:9a:b0:09:e5:f3:92:4a:d9:73:c6:9d:1d:b5:45:ef:60: ab:2a:3b:ee:7a:ac:2c:12:7d:70:48:b1:19:ae:9f:e6:b7:05: 29:dc:98:12:5e:6e:2d:81:ac:ac:39:ee:68:e3:69:05:16:7b: 53:99:61:c6:00:04:3c:c2:bb:08:04:44:45:91:14:cf:69:be: 10:ee:91:80:ee:ad:bc:66:86:d5:05:39:18:22:80:cf:25:63: 37:18:fa:c2:a5:4c:a9:06:3a:85:d5:bd:d1:13:99:af:b1:83: 85:ed:4b:cb:d6:a3:ac:28:bd:2b:84:b0:fe:21:34:36:3d:be: fe:ea:cd:ef:f4:64:ca:3b:b7:07:46:72:da:41:f5:14:06:51: 5e:b4:eb:35:1d:b2:aa:0f:c4:73:bc:57:3b:26:eb:58:98:a9: 50:6e:51:4b:58:4f:fa:e9:e5:8d:df:79:fd:08:94:b3:42:4c: cc:4a:f6:fc:37:a6:9f:34:6e:de:65:49:e8:ef:6d:cc:95:e4: a5:60:57:42:5f:f4:27:f5:b6:76:86:83:35:f0:92:9d:c5:95: 7c:b8:ce:02:ae:ee:23:21:ef:30:0e:52:7c:01:53:52:dc:7a: 7d:c5:a2:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6hcnbD8srUIP59k8mgjdFuZI2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNDA1MTkxNDA3MDNaFw0yNDA1MjMwMTI0MDNaMDMxMTAvBgNV BAMTKEYwOUE3RjA5OEY0MzAyMkE0QzAyNjRGQTk1MEVFMUE1RDBFNkQ0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmR7GOdFdmdetsBOkgW32EhzL 36ODPpVMmqjY3+MxuzV0Mk5RbgkB3rHoBUAXuSHn+VPWXowGVzVsLTDysr7jRueq 8gUK7sVXJNssD5HtUbVBeQIil40n2BkEeGBowRy2PynWOHG4EYfFc093ZUQh6Xgn AbhjhH6IGZNqe6oxna/WetyIox5nleMm08csq9UddDDTWc1WluwnIPgtpgQ0V/iq TQ1WEvxxDgEioX9W5BmDqKUYJU5cNgfVXpkVkQecg9jgps6dcPL06w6QFWbM48pd M4ElrjTeS0DMjj/ht+XpBAc0BoAjlFBkk9HSMmWLTgf8yZdrflMeIkmHsINlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Jp/CY9DAipMAmT6lQ7hpdDm1OEwHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvpfC6llQnMr0NNK1o7D7hw7BdMmrAJ5fOS Stlzxp0dtUXvYKsqO+56rCwSfXBIsRmun+a3BSncmBJebi2BrKw57mjjaQUWe1OZ YcYABDzCuwgEREWRFM9pvhDukYDurbxmhtUFORgigM8lYzcY+sKlTKkGOoXVvdET ma+xg4XtS8vWo6wovSuEsP4hNDY9vv7qze/0ZMo7twdGctpB9RQGUV606zUdsqoP xHO8Vzsm61iYqVBuUUtYT/rp5Y3fef0IlLNCTMxK9vw3pp80bt5lSejvbcyV5KVg V0Jf9Cf1tnaGgzXwkp3FlXy4zgKu7iMh7zAOUnwBU1Lcen3Fons= -----END CERTIFICATE-----Generated at Sun May 19 15:45:23 2024 by rpki-client on console-fra.rpki-client.org