$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft File: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft (raw, json) Hash identifier: 8RybWO+7qIfi/8/etaohFAODRmDOonrQOuHQsJa5ElA= Subject key identifier: 35:38:A4:12:7D:9C:AD:77:06:F5:1C:4D:6E:DE:FB:17:94:7E:DB:87 Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF Certificate issuer: /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Certificate serial: 133AD88A36A625AFCB265B4E2E73A05C4EA15FC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft Manifest number: DB Signing time: Mon 27 May 2024 17:11:14 +0000 Manifest this update: Mon 27 May 2024 17:06:14 +0000 Manifest next update: Thu 30 May 2024 18:13:14 +0000 Files and hashes: 1: FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl (hash: Y9WlqfzYtZ9N/vrYhOpU245kB2LPoL+gfdE95LL4Vs0=) 2: 3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (hash: R4GnEXhAf/fgh2Q8FVP7pFzbA7+Mg/qDs/dM/4iifsA=) 3: 3130332e3132312e3133322e302f32332d3234203d3e20313335343738.roa (hash: Lgk4GdneRGkZOUMBiyBObeMivIaxjrMhdmHSNkgOEog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 18:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3a:d8:8a:36:a6:25:af:cb:26:5b:4e:2e:73:a0:5c:4e:a1:5f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF Validity Not Before: May 27 17:06:14 2024 GMT Not After : May 30 18:13:14 2024 GMT Subject: CN=3538A4127D9CAD7706F51C4D6EDEFB17947EDB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:5a:78:02:00:90:07:a3:16:71:ba:e8:f9: 86:dd:1a:b5:45:17:ae:c9:45:bd:82:6f:70:82:ee: 07:77:25:16:96:d4:71:55:20:9d:4a:a8:37:cc:73: 27:0b:4f:bc:40:09:83:a4:0e:83:29:b6:a7:22:fc: f3:aa:73:31:d8:49:27:38:f6:19:2d:e0:9e:92:14: cf:e1:2d:6d:a9:70:20:31:1a:a2:a8:fe:06:70:64: f8:85:7d:0b:3e:96:4b:fb:b8:76:8e:df:6c:c9:8a: 3a:b8:37:fd:a3:45:93:a2:e1:ac:05:28:48:d1:a2: 3c:8b:41:6a:c5:dd:e8:0d:98:00:d1:8b:09:1c:09: fd:2d:25:a5:4c:80:ab:99:cf:60:01:06:c7:1c:78: 7b:9a:a2:f4:58:ec:3b:1a:80:9a:7e:da:dc:b7:f1: dc:8d:15:40:67:8a:e1:22:e5:53:26:19:ff:53:e1: ee:52:5a:76:2e:3c:a9:24:76:7d:d9:ad:be:56:c4: f5:0e:63:7e:07:27:16:93:78:23:4d:cf:71:52:3b: d9:c3:53:e7:8e:f4:77:9e:a8:72:a0:ba:48:89:a6: 82:f1:af:12:3a:a1:d1:a9:e2:d4:88:37:be:07:3c: 46:7e:26:7e:5d:c0:1e:b5:f7:0b:00:23:97:e9:04: 77:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:38:A4:12:7D:9C:AD:77:06:F5:1C:4D:6E:DE:FB:17:94:7E:DB:87 X509v3 Authority Key Identifier: keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f6:3e:c2:fb:ef:52:bd:72:4f:2b:51:a4:1a:21:b8:26:5b: 98:d9:4f:6e:d4:d5:38:a6:9b:b2:1e:3a:43:cd:7a:34:57:62: 2d:64:32:9f:69:b2:f8:0c:b8:eb:36:90:c4:9b:d7:cd:b0:c7: 71:22:ac:3e:be:a1:dc:cd:bd:2b:79:c1:96:7d:b8:62:13:b3: 41:b7:88:85:05:98:19:7f:0d:e8:89:f0:c7:0c:0f:92:e1:dc: d7:d6:9e:9d:bb:40:ab:f8:d9:3e:79:af:a1:fc:80:1c:3c:55: 20:da:83:85:89:13:82:34:3f:61:fe:7e:05:21:42:aa:26:67: 60:f7:cd:7c:66:24:26:9d:5d:ae:e8:2c:5f:11:65:a2:95:62: 29:0f:65:ea:92:3f:84:58:69:f2:b4:97:34:a0:33:8c:31:34: b7:cc:aa:ec:af:dd:9d:fc:75:a4:53:f2:83:0e:71:09:39:01: c4:60:5a:fb:85:8c:0a:87:42:a2:80:7b:82:cf:c6:1a:90:0e: 9f:52:13:e0:36:dc:38:3e:bb:ef:04:55:82:d2:3c:5f:f6:c1: 47:0d:9c:88:5e:97:62:71:ae:b6:10:db:8c:1f:22:51:79:de: 51:60:88:9c:57:2f:a3:70:73:5d:9e:b5:20:67:96:b6:c9:81: 00:57:85:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzrYijamJa/LJltOLnOgXE6hX8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdF MzMwQkVFRjAeFw0yNDA1MjcxNzA2MTRaFw0yNDA1MzAxODEzMTRaMDMxMTAvBgNV BAMTKDM1MzhBNDEyN0Q5Q0FENzcwNkY1MUM0RDZFREVGQjE3OTQ3RURCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7lp4AgCQB6MWcbro+YbdGrVF F67JRb2Cb3CC7gd3JRaW1HFVIJ1KqDfMcycLT7xACYOkDoMptqci/POqczHYSSc4 9hkt4J6SFM/hLW2pcCAxGqKo/gZwZPiFfQs+lkv7uHaO32zJijq4N/2jRZOi4awF KEjRojyLQWrF3egNmADRiwkcCf0tJaVMgKuZz2ABBscceHuaovRY7DsagJp+2ty3 8dyNFUBniuEi5VMmGf9T4e5SWnYuPKkkdn3Zrb5WxPUOY34HJxaTeCNNz3FSO9nD U+eO9HeeqHKgukiJpoLxrxI6odGp4tSIN74HPEZ+Jn5dwB619wsAI5fpBHcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNTikEn2crXcG9RxNbt77F5R+24cwHwYDVR0j BBgwFoAU/3Wu3cYFnoorgw5IfXK+d+Mwvu8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjM3ODRmZS1mOWZlLTRjYmUtODc2OC0yNjNhNzY5ODZhM2EvMC9GRjc1QUVEREM2 MDU5RThBMkI4MzBFNDg3RDcyQkU3N0UzMzBCRUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJFNzdFMzMw QkVFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzNzg0ZmUtZjlmZS00Y2JlLTg3 NjgtMjYzYTc2OTg2YTNhLzAvRkY3NUFFRERDNjA1OUU4QTJCODMwRTQ4N0Q3MkJF NzdFMzMwQkVFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAED2PsL771K9ck8rUaQaIbgmW5jZT27U1Tim m7IeOkPNejRXYi1kMp9psvgMuOs2kMSb182wx3EirD6+odzNvSt5wZZ9uGITs0G3 iIUFmBl/DeiJ8McMD5Lh3NfWnp27QKv42T55r6H8gBw8VSDag4WJE4I0P2H+fgUh QqomZ2D3zXxmJCadXa7oLF8RZaKVYikPZeqSP4RYafK0lzSgM4wxNLfMquyv3Z38 daRT8oMOcQk5AcRgWvuFjAqHQqKAe4LPxhqQDp9SE+A23Dg+u+8EVYLSPF/2wUcN nIhel2JxrrYQ24wfIlF53lFgiJxXL6Nwc12etSBnlrbJgQBXhbM= -----END CERTIFICATE-----Generated at Mon May 27 19:32:53 2024 by rpki-client on console-fra.rpki-client.org