$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft File: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft (raw, json) Hash identifier: 9atMtHEGlpi5WD1k3xA9dta3zkoPFeSAgO9cYaFrFrw= Subject key identifier: 1F:D6:88:E3:55:FD:7D:94:8F:40:D3:56:DF:9A:C4:B4:71:D8:9B:C9 Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 13D63E85F5BF174B7E928A4195BA38331D7A2FD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft Manifest number: 0430 Signing time: Sat 18 May 2024 08:11:14 +0000 Manifest this update: Sat 18 May 2024 08:06:14 +0000 Manifest next update: Tue 21 May 2024 16:15:14 +0000 Files and hashes: 1: F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl (hash: HfjpuueSuLn5f1Mx1kg8jBTQWP3nAvoESx5XvDR9B3w=) 2: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: YW3W1bKInWsNwEHpougegBQZCByUfkIzqYkvcghIsrU=) 3: 323430353a326363303a363031303a3a2f34382d3438203d3e20313336303739.roa (hash: CfUDLFP70RC1JvYazy8kuiSZSEGbJNUm2ZaJXjPg40E=) 4: 323430353a326363303a363030653a3a2f34382d3438203d3e20313336303739.roa (hash: xrpSzgHa9zaFBa/VYOgjPFbRDtwLodNSxrBTWKN0rmE=) 5: 323430353a326363303a363030643a3a2f34382d3438203d3e20313336303739.roa (hash: CGrS3KvosZXIQRRyzP3RUDJC59fZRvRWReMEPox/nIM=) 6: 323430353a326363303a363030663a3a2f34382d3438203d3e20313336303739.roa (hash: I964VwwnB7pPNHUmHcIo8CkGdIsoGyVjEhbZZs/LwJs=) 7: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: aTqQ67CA1dL8DFlF5gniBpEvrIs6U/EZqI1/mbinqcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d6:3e:85:f5:bf:17:4b:7e:92:8a:41:95:ba:38:33:1d:7a:2f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: May 18 08:06:14 2024 GMT Not After : May 21 16:15:14 2024 GMT Subject: CN=1FD688E355FD7D948F40D356DF9AC4B471D89BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:7f:5c:6c:22:fb:ca:f5:76:b1:91:f2:6b: b8:f5:b4:40:5b:dd:41:df:53:8d:42:b9:c3:a7:02: 2a:fa:c0:8a:5b:1e:95:73:ca:38:aa:f1:8c:d3:97: ee:59:62:55:e9:82:c9:e2:83:a6:e8:03:a1:e8:04: 5c:e1:7d:61:85:89:58:6c:eb:24:8c:5d:d1:92:3b: 42:48:48:10:a0:61:65:cf:73:44:37:46:79:6e:5d: 97:61:18:60:3a:69:ed:49:17:a6:38:83:d2:cf:13: ee:16:af:9b:0d:23:5d:f0:9f:11:ae:ee:8c:46:24: eb:e2:cd:55:ac:a1:79:f6:c4:7c:7c:2b:b1:31:5f: 8e:96:82:a6:8e:ab:09:77:f7:07:36:8e:96:31:5a: a0:f4:76:21:4c:19:60:8c:df:43:f8:a8:56:3e:24: d1:0c:79:de:6e:85:64:1c:cd:64:26:03:0c:51:37: 6c:fc:7e:9a:8e:0e:3f:a1:d2:d9:77:28:c0:91:9a: b0:8e:0a:82:2c:ca:fc:fb:91:2a:62:00:ed:9e:89: 4f:81:d8:9b:2b:97:25:af:e5:a2:46:b6:f8:f2:dd: fd:59:3c:5f:82:00:41:ce:ff:45:90:6e:33:3a:39: 4a:d1:51:0f:7f:f7:8b:e7:df:90:e2:8b:4c:85:1d: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D6:88:E3:55:FD:7D:94:8F:40:D3:56:DF:9A:C4:B4:71:D8:9B:C9 X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f0:1d:c8:0a:be:23:75:9a:59:b0:c9:b2:e6:2d:30:b8:1b: 8d:00:8b:41:c9:72:e3:64:ea:59:a0:ce:54:11:2a:cb:27:4c: dd:1d:0e:92:13:39:93:fe:5d:dd:ee:40:84:1f:b8:57:00:dd: f9:59:bd:46:c9:cd:b9:b2:1a:32:ab:70:c5:98:c6:c1:2a:8d: b8:c0:9e:72:ac:4b:a8:1d:04:48:43:13:7f:71:31:75:84:77: 72:8c:fb:f2:98:9a:b3:56:a3:fc:62:dc:eb:21:d8:8d:b7:1a: 64:17:5c:9a:be:b3:33:0c:5b:3d:68:2a:06:b6:c4:74:2b:ab: e1:86:de:17:e8:41:c7:c8:9f:5a:32:62:4c:25:40:59:47:2e: 94:e5:03:33:56:9c:46:b1:76:fa:20:e0:c4:90:25:6d:86:dd: 94:1d:04:1d:89:53:7a:40:f7:24:e8:06:0e:39:78:4b:3a:e4: e6:65:e8:24:3a:e5:77:20:75:47:2b:7d:99:e6:9c:f7:59:79: ac:d5:68:dc:21:64:68:4b:88:22:ad:4c:f8:a0:b5:1b:10:d7: e9:8b:1c:2b:73:5a:5e:76:88:ba:88:fe:0a:88:0e:34:19:50: d4:9d:a2:02:e6:37:38:39:1f:02:b6:c4:95:3a:8a:43:cf:2b: e5:c5:20:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE9Y+hfW/F0t+kopBlbo4Mx16L9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yNDA1MTgwODA2MTRaFw0yNDA1MjExNjE1MTRaMDMxMTAvBgNV BAMTKDFGRDY4OEUzNTVGRDdEOTQ4RjQwRDM1NkRGOUFDNEI0NzFEODlCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HH9cbCL7yvV2sZHya7j1tEBb 3UHfU41CucOnAir6wIpbHpVzyjiq8YzTl+5ZYlXpgsnig6boA6HoBFzhfWGFiVhs 6ySMXdGSO0JISBCgYWXPc0Q3RnluXZdhGGA6ae1JF6Y4g9LPE+4Wr5sNI13wnxGu 7oxGJOvizVWsoXn2xHx8K7ExX46WgqaOqwl39wc2jpYxWqD0diFMGWCM30P4qFY+ JNEMed5uhWQczWQmAwxRN2z8fpqODj+h0tl3KMCRmrCOCoIsyvz7kSpiAO2eiU+B 2JsrlyWv5aJGtvjy3f1ZPF+CAEHO/0WQbjM6OUrRUQ9/94vn35Dii0yFHY1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH9aI41X9fZSPQNNW35rEtHHYm8kwHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU2OTNiODktNDU5Ny00MGI1LTky YjAtYjI5OWZhNzY5YWZhLzAvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzcz MDJBNzJCNTgzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHwHcgKviN1mlmwybLmLTC4G40Ai0HJcuNk 6lmgzlQRKssnTN0dDpITOZP+Xd3uQIQfuFcA3flZvUbJzbmyGjKrcMWYxsEqjbjA nnKsS6gdBEhDE39xMXWEd3KM+/KYmrNWo/xi3Osh2I23GmQXXJq+szMMWz1oKga2 xHQrq+GG3hfoQcfIn1oyYkwlQFlHLpTlAzNWnEaxdvog4MSQJW2G3ZQdBB2JU3pA 9yToBg45eEs65OZl6CQ65XcgdUcrfZnmnPdZeazVaNwhZGhLiCKtTPigtRsQ1+mL HCtzWl52iLqI/gqIDjQZUNSdogLmNzg5HwK2xJU6ikPPK+XFIOM= -----END CERTIFICATE-----Generated at Sat May 18 09:08:42 2024 by rpki-client on console-ams.rpki-client.org