$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: 6VGb4F/G3WrtS/cDOY7bYVJSLgM/RClfQim/PzGlo6Y= Subject key identifier: 3C:0B:47:82:AB:F9:01:CF:96:82:91:6C:5D:E7:19:10:76:D9:2F:70 Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 3FF23E35C1F40F20D0003574B5698F266FB6BA34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 0432 Signing time: Fri 17 May 2024 23:42:07 +0000 Manifest this update: Fri 17 May 2024 23:37:07 +0000 Manifest next update: Tue 21 May 2024 09:08:07 +0000 Files and hashes: 1: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: a+C5WPDYz64dAfOwvg8GBjcOJHdNVPPJwzJv0Vuoul8=) 2: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: gVOcz11bpEnDN5DydGFV8zbBKg6ugM5/K6F0eeXrKwI=) 3: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: MFoJSU9D4GqxHOyByUjoZ8POOol6znNDhSmYmCsxD7U=) 4: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: B05d4l589VTiZSvZIoqN/iC40uOCYPGnMAEHHHLpCwk=) 5: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: dTplUIV2j8ZYpxSDqYJ4z3SfZ9upKzrNaMtuTCrGf6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f2:3e:35:c1:f4:0f:20:d0:00:35:74:b5:69:8f:26:6f:b6:ba:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: May 17 23:37:07 2024 GMT Not After : May 21 09:08:07 2024 GMT Subject: CN=3C0B4782ABF901CF9682916C5DE7191076D92F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:10:ca:d1:a7:ee:1d:52:28:22:bf:72:e1: 37:d3:ae:98:5c:42:52:e1:60:dc:4b:2b:41:64:65: 8a:50:5b:66:86:b6:b6:a7:62:42:ba:ba:42:c1:6b: a8:dc:79:d6:13:bc:be:3a:cc:9a:5b:d7:30:b1:3a: 3b:12:00:ca:59:cd:0d:4e:f4:39:2c:d7:fe:57:63: 54:d7:9a:15:70:16:af:e6:cc:dc:65:40:e4:aa:78: b4:87:ff:fc:84:e4:65:f0:31:73:73:cf:bf:f0:2f: 18:90:62:d4:b9:19:85:83:19:dd:2e:7c:20:d1:6c: 51:92:56:cb:4a:19:43:bb:83:5d:1b:05:d1:8a:06: ac:c2:6b:f1:32:40:cb:d3:c0:66:f9:25:12:55:85: 2f:23:ea:15:c7:fd:7b:e6:45:4a:8b:62:58:7b:00: 03:6e:14:ae:b9:02:a9:a1:fb:c2:b1:5c:46:90:cf: 65:ce:a3:e8:46:c3:74:1c:47:66:e9:21:6b:9f:b4: 84:cc:4e:07:39:3b:a9:a1:52:b8:df:e2:2c:7e:ae: 1b:4b:3c:cc:9f:f3:37:05:f1:71:5d:18:f1:99:8f: c9:5b:24:7f:78:61:0b:5e:72:8e:a4:72:fa:e8:f7: e0:19:14:da:da:af:0e:f0:67:00:d0:a4:38:a1:a7: fb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0B:47:82:AB:F9:01:CF:96:82:91:6C:5D:E7:19:10:76:D9:2F:70 X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:af:df:35:b4:b6:e3:3d:96:a5:1e:89:d9:4b:21:c9:88:50: 13:dd:2b:e3:52:1b:93:3b:13:0a:9c:13:91:9c:75:c7:55:b6: b7:fb:0d:43:59:f3:20:5c:64:63:84:0f:a7:80:8f:d6:23:19: 77:b5:62:0b:af:95:d7:85:05:0c:ba:a8:85:45:0f:48:1a:2c: 78:17:7c:71:f0:3c:50:ac:a8:40:8c:8f:34:93:18:e3:2f:69: c1:27:27:4b:1a:5d:fb:57:a4:23:56:c7:73:01:cc:58:46:17: 67:48:68:59:2e:90:79:75:5c:a1:eb:2f:dd:ca:66:c2:95:2d: 57:43:ef:61:57:9a:fc:44:3b:02:8d:c1:cb:4a:b9:3e:b2:dd: 98:7b:2d:a0:13:a4:ca:61:22:9c:3f:b7:82:26:2c:81:fa:c3: e5:77:66:be:df:a8:4c:6d:d3:af:04:a1:dd:ed:de:e4:21:0b: a1:a8:95:3a:9f:a7:26:1b:d4:a8:40:07:65:2d:41:af:b2:f2: c0:13:41:91:40:72:13:15:39:c2:9a:12:9c:8f:84:e4:46:92: 8b:c8:49:e0:77:6c:aa:32:3f:1f:ab:d0:68:d7:53:c4:79:86: 54:3a:94:37:25:b5:9a:b2:ae:a0:10:e9:2b:8c:41:ba:d1:d3: 2f:9d:88:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP/I+NcH0DyDQADV0tWmPJm+2ujQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNDA1MTcyMzM3MDdaFw0yNDA1MjEwOTA4MDdaMDMxMTAvBgNV BAMTKDNDMEI0NzgyQUJGOTAxQ0Y5NjgyOTE2QzVERTcxOTEwNzZEOTJGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/shDK0afuHVIoIr9y4TfTrphc QlLhYNxLK0FkZYpQW2aGtranYkK6ukLBa6jcedYTvL46zJpb1zCxOjsSAMpZzQ1O 9Dks1/5XY1TXmhVwFq/mzNxlQOSqeLSH//yE5GXwMXNzz7/wLxiQYtS5GYWDGd0u fCDRbFGSVstKGUO7g10bBdGKBqzCa/EyQMvTwGb5JRJVhS8j6hXH/XvmRUqLYlh7 AANuFK65Aqmh+8KxXEaQz2XOo+hGw3QcR2bpIWuftITMTgc5O6mhUrjf4ix+rhtL PMyf8zcF8XFdGPGZj8lbJH94YQteco6kcvro9+AZFNrarw7wZwDQpDihp/ulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPAtHgqv5Ac+WgpFsXecZEHbZL3AwHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmv3zW0tuM9lqUeidlLIcmIUBPdK+NSG5M7 EwqcE5GcdcdVtrf7DUNZ8yBcZGOED6eAj9YjGXe1YguvldeFBQy6qIVFD0gaLHgX fHHwPFCsqECMjzSTGOMvacEnJ0saXftXpCNWx3MBzFhGF2dIaFkukHl1XKHrL93K ZsKVLVdD72FXmvxEOwKNwctKuT6y3Zh7LaATpMphIpw/t4ImLIH6w+V3Zr7fqExt 068Eod3t3uQhC6GolTqfpyYb1KhAB2UtQa+y8sATQZFAchMVOcKaEpyPhORGkovI SeB3bKoyPx+r0GjXU8R5hlQ6lDcltZqyrqAQ6SuMQbrR0y+diJQ= -----END CERTIFICATE-----Generated at Sat May 18 01:29:14 2024 by rpki-client on console-fra.rpki-client.org