$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft File: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft (raw, json) Hash identifier: Ew1NPXcqaEogvrHyMqyd76tHcCiAvyn6FaBVIcf6uJQ= Subject key identifier: D9:4B:D8:09:25:42:4B:B4:C1:E9:E7:4B:E4:63:EE:D1:4C:F9:E1:CD Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E Certificate issuer: /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Certificate serial: 699FD47733BB5FD5252A730D0F7E227709C27BF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft Manifest number: 015D Signing time: Tue 28 May 2024 18:11:38 +0000 Manifest this update: Tue 28 May 2024 18:06:38 +0000 Manifest next update: Fri 31 May 2024 22:18:38 +0000 Files and hashes: 1: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: R7g52f42WGqIihM0phqB51wPKfARKThwN/QcGJCLcUw=) 2: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: mYfH315eP068ERJYYE5247VW3yxdOs2HUR3r6PYDS0s=) 3: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl (hash: 8sj0DjFTElDqA25HvJ9Yba/671H+uDsyAH/bJ9xT2DM=) 4: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: zAcA0BmrAGpI2x1qPJ/5zl3N7iUAkyEYd57j0/HZ4ok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 22:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9f:d4:77:33:bb:5f:d5:25:2a:73:0d:0f:7e:22:77:09:c2:7b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Validity Not Before: May 28 18:06:38 2024 GMT Not After : May 31 22:18:38 2024 GMT Subject: CN=D94BD80925424BB4C1E9E74BE463EED14CF9E1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:48:ad:bf:e4:b2:2f:b1:0a:f3:12:a6:a3: cb:f1:6c:f5:19:a3:c5:c0:cf:ac:19:32:2c:99:72: 8e:56:ef:ef:27:fe:aa:66:44:7d:96:a4:13:ab:da: 1d:67:59:31:11:0d:6b:cb:7e:2f:27:aa:34:33:2a: bf:89:77:ea:70:35:43:41:c0:2a:6d:eb:08:73:a7: 7e:fe:2f:fd:db:ae:14:52:13:28:65:90:71:96:d0: 09:3e:2e:94:88:9f:f7:21:c2:25:80:5c:7e:f2:25: 93:cf:a7:15:e5:b9:39:bb:55:cb:6d:e3:53:63:c3: dc:5c:e5:01:ca:e3:f0:ee:03:19:31:9b:90:e7:7e: b1:60:2a:df:19:59:58:ea:a9:33:3a:03:6e:10:2e: c4:45:de:e9:67:1c:e0:db:5f:b3:f5:2e:47:54:66: c6:c5:46:6a:45:91:c1:5d:e2:f7:77:6e:db:72:6a: 53:3d:b6:fc:11:1a:42:5f:60:81:00:2f:22:6c:e4: f1:d1:3b:1c:6a:90:8f:08:ee:d3:92:14:d2:19:f7: 1d:c2:07:88:8b:e5:91:6c:21:80:1c:85:4d:b6:36: 58:ca:f9:86:32:97:a2:8b:7c:f9:0f:e7:6e:a1:f3: 95:01:c6:7d:25:79:09:10:5a:92:ea:3f:8b:29:a3: cd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4B:D8:09:25:42:4B:B4:C1:E9:E7:4B:E4:63:EE:D1:4C:F9:E1:CD X509v3 Authority Key Identifier: keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9e:9e:3a:9d:ca:1d:28:01:e9:26:7a:25:66:c9:cf:e1:3c: 45:24:cc:bd:00:8b:18:57:96:1b:84:ab:62:90:e3:59:1d:c9: 0a:31:a3:28:76:e9:37:c1:7b:56:60:44:07:6f:91:da:56:5c: 10:7c:d1:91:6d:53:ba:55:f8:ad:38:60:b4:c2:08:41:5b:47: 10:4a:5a:55:b8:1f:dd:39:ff:12:92:2f:07:ef:67:e3:b8:81: 30:2b:16:4e:e3:e3:82:57:18:1f:f4:86:ed:53:61:30:a3:f7: f3:2b:01:19:40:ad:05:5f:f5:a8:2b:0b:3c:05:d8:bd:41:08: ae:55:e2:2a:c2:80:fb:96:b7:1a:72:5a:f7:90:ec:f3:f8:dd: 00:9f:a6:4e:87:aa:79:e6:f5:a4:0d:f1:30:89:84:57:d3:5c: 65:34:f7:1d:c4:05:de:b9:ff:13:d5:2e:5f:16:c8:43:8c:67: 68:4a:29:d1:59:7f:f9:e1:a6:a9:ec:f7:1e:81:54:0a:0d:2f: e5:ed:ea:ad:56:b6:13:26:6e:65:84:39:9d:31:5d:c7:14:74: d1:ef:17:ab:c8:92:cf:6d:83:91:51:82:64:dd:be:c8:8b:d8: 59:41:4f:1b:c1:27:a1:56:7e:69:a8:ad:98:1b:7e:38:39:82: d4:d3:c3:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZ/UdzO7X9UlKnMND34idwnCe/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdF MkZGMjYzRTAeFw0yNDA1MjgxODA2MzhaFw0yNDA1MzEyMjE4MzhaMDMxMTAvBgNV BAMTKEQ5NEJEODA5MjU0MjRCQjRDMUU5RTc0QkU0NjNFRUQxNENGOUUxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pkitv+SyL7EK8xKmo8vxbPUZ o8XAz6wZMiyZco5W7+8n/qpmRH2WpBOr2h1nWTERDWvLfi8nqjQzKr+Jd+pwNUNB wCpt6whzp37+L/3brhRSEyhlkHGW0Ak+LpSIn/chwiWAXH7yJZPPpxXluTm7Vctt 41Njw9xc5QHK4/DuAxkxm5DnfrFgKt8ZWVjqqTM6A24QLsRF3ulnHODbX7P1LkdU ZsbFRmpFkcFd4vd3bttyalM9tvwRGkJfYIEALyJs5PHROxxqkI8I7tOSFNIZ9x3C B4iL5ZFsIYAchU22NljK+YYyl6KLfPkP526h85UBxn0leQkQWpLqP4spo811AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2UvYCSVCS7TB6edL5GPu0Uz54c0wHwYDVR0j BBgwFoAUhuZ5Wsq5nPKc58fhDX/M5+L/Jj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGUxYWM3Yy05MDRkLTQ5M2YtYmE1ZS01ZTA4MzdkY2JkMjkvMC84NkU2Nzk1QUNB Qjk5Q0YyOUNFN0M3RTEwRDdGQ0NFN0UyRkYyNjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdFMkZG MjYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkND RTdFMkZGMjYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqenjqdyh0oAekmeiVmyc/hPEUkzL0AixhX lhuEq2KQ41kdyQoxoyh26TfBe1ZgRAdvkdpWXBB80ZFtU7pV+K04YLTCCEFbRxBK WlW4H905/xKSLwfvZ+O4gTArFk7j44JXGB/0hu1TYTCj9/MrARlArQVf9agrCzwF 2L1BCK5V4irCgPuWtxpyWveQ7PP43QCfpk6Hqnnm9aQN8TCJhFfTXGU09x3EBd65 /xPVLl8WyEOMZ2hKKdFZf/nhpqns9x6BVAoNL+Xt6q1WthMmbmWEOZ0xXccUdNHv F6vIks9tg5FRgmTdvsiL2FlBTxvBJ6FWfmmorZgbfjg5gtTTw4M= -----END CERTIFICATE-----Generated at Tue May 28 19:28:19 2024 by rpki-client on console-ams.rpki-client.org