$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: nkYyC1K85o79UmLzlZmw44lW/ZKysXUg2Lzrbko0pVg= Subject key identifier: 43:61:E3:BA:65:35:DD:81:A3:5E:4E:A0:35:7D:FE:94:EC:94:BE:6C Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 610352108EDCA2A54F83DAF375F03B3AC26CA058 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 03A0 Signing time: Sat 18 May 2024 07:41:59 +0000 Manifest this update: Sat 18 May 2024 07:36:59 +0000 Manifest next update: Tue 21 May 2024 10:32:59 +0000 Files and hashes: 1: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: pBQ1X5/Iy/UhpPgZzcKtu1IhM3yY9sH7k9K4nB76Xxo=) 2: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 1UU+F/73q+1lwy4SjLrRycRGUitz25jtCJhqM9Ozirg=) 3: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: 8s/IhpK/bUEbMQV/XN0dGQ8a/VTwYAECgf6EPSKy2s4=) 4: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: msnxmInrRhnJfKXmF78Hy2dgzirdItri2kBAVztSWH8=) 5: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: arkQJziYn0l3cLycvM1yDT0/xdDeA+qlTU9SMskmap4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 10:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:03:52:10:8e:dc:a2:a5:4f:83:da:f3:75:f0:3b:3a:c2:6c:a0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: May 18 07:36:59 2024 GMT Not After : May 21 10:32:59 2024 GMT Subject: CN=4361E3BA6535DD81A35E4EA0357DFE94EC94BE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ee:f6:69:eb:84:50:91:03:f4:5a:f3:6d:20: 8f:f2:e7:5d:23:3d:ca:29:24:b3:1f:98:87:0d:98: d6:3d:34:3c:b0:58:db:01:a1:68:d3:c5:fb:f0:0d: b9:52:de:14:4f:37:9f:b9:94:66:12:4d:04:d7:5d: 9a:7f:d7:89:01:0d:e3:de:3c:a5:4a:88:25:a8:d0: e2:75:95:69:30:e7:ae:41:b9:3b:8c:9f:1e:b2:48: d7:e2:b3:d3:60:99:73:0c:65:ca:0a:d3:c7:3b:ce: d3:ee:b7:be:ec:ea:af:90:95:24:42:f5:51:fe:c6: cf:0a:a3:8a:0f:de:80:c2:54:33:fe:db:54:f6:29: 4f:8a:b1:40:e3:aa:d2:a4:d2:3f:13:d5:d4:0b:bb: 4f:2f:a7:12:eb:1e:b3:09:5a:d8:0e:e2:7f:33:5b: c7:b8:6b:5f:00:a7:10:1b:1e:ee:8d:30:d8:5f:30: eb:0c:95:d2:3d:5c:89:85:d5:c9:d5:96:89:e8:af: 54:95:5a:5c:0c:8a:bd:2b:27:22:97:83:87:8a:b9: 21:a7:26:65:e6:60:37:0b:65:38:cd:96:b8:fb:db: 3b:8e:15:b5:42:f2:28:ff:ac:1f:3e:0d:d4:97:ba: 4a:26:bb:96:2e:6b:9e:1a:ff:03:c7:e6:16:bd:f5: 3d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:61:E3:BA:65:35:DD:81:A3:5E:4E:A0:35:7D:FE:94:EC:94:BE:6C X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c0:07:92:78:40:70:9b:6d:f3:22:ec:15:a5:4e:cb:25:1f: 12:b7:0a:f3:04:8a:0e:ea:07:16:93:85:f4:77:ae:f2:0a:28: de:57:5e:ce:90:bc:76:e7:50:25:81:ab:39:a5:77:73:55:7d: b1:50:cc:f4:96:a9:21:be:dc:b1:2b:17:73:d3:39:5d:f8:9e: ea:29:e0:08:0e:8d:eb:5d:d9:e5:d4:67:64:f2:4c:85:18:7f: db:ee:5f:a9:89:ee:f8:99:1e:b4:ef:3a:06:d8:49:fa:36:4a: 44:e4:61:51:2c:5a:dd:2b:d7:e2:1f:2f:0f:7c:01:6f:44:67: 30:3c:05:ff:c8:b9:ce:cd:43:c4:04:c7:69:51:4e:6f:58:29: b7:c1:c4:7a:75:bb:0b:f7:2e:7e:6d:c0:38:8c:7e:ec:0f:a0: 71:db:57:de:47:25:1b:a5:55:e9:64:2b:00:0c:70:82:85:85: ac:dc:9c:26:61:54:f6:cf:94:ca:29:f2:8a:41:f3:15:a9:48: f6:97:1b:4f:d0:45:a9:1b:94:99:d9:0f:64:cc:45:be:17:6d: fb:a6:9c:64:16:e0:c6:24:68:86:db:8a:bf:11:b0:28:1e:75: c8:25:51:28:d7:cd:a5:b7:f2:c2:f7:0c:f9:27:7f:89:72:25: 90:6c:09:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQNSEI7coqVPg9rzdfA7OsJsoFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNDA1MTgwNzM2NTlaFw0yNDA1MjExMDMyNTlaMDMxMTAvBgNV BAMTKDQzNjFFM0JBNjUzNUREODFBMzVFNEVBMDM1N0RGRTk0RUM5NEJFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi7vZp64RQkQP0WvNtII/y510j PcopJLMfmIcNmNY9NDywWNsBoWjTxfvwDblS3hRPN5+5lGYSTQTXXZp/14kBDePe PKVKiCWo0OJ1lWkw565BuTuMnx6ySNfis9NgmXMMZcoK08c7ztPut77s6q+QlSRC 9VH+xs8Ko4oP3oDCVDP+21T2KU+KsUDjqtKk0j8T1dQLu08vpxLrHrMJWtgO4n8z W8e4a18ApxAbHu6NMNhfMOsMldI9XImF1cnVlonor1SVWlwMir0rJyKXg4eKuSGn JmXmYDcLZTjNlrj72zuOFbVC8ij/rB8+DdSXukomu5Yua54a/wPH5ha99T3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ2HjumU13YGjXk6gNX3+lOyUvmwwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbAB5J4QHCbbfMi7BWlTsslHxK3CvMEig7q BxaThfR3rvIKKN5XXs6QvHbnUCWBqzmld3NVfbFQzPSWqSG+3LErF3PTOV34nuop 4AgOjetd2eXUZ2TyTIUYf9vuX6mJ7viZHrTvOgbYSfo2SkTkYVEsWt0r1+IfLw98 AW9EZzA8Bf/Iuc7NQ8QEx2lRTm9YKbfBxHp1uwv3Ln5twDiMfuwPoHHbV95HJRul VelkKwAMcIKFhazcnCZhVPbPlMop8opB8xWpSPaXG0/QRakblJnZD2TMRb4Xbfum nGQW4MYkaIbbir8RsCgedcglUSjXzaW38sL3DPknf4lyJZBsCfw= -----END CERTIFICATE-----Generated at Sat May 18 08:29:49 2024 by rpki-client on console-ams.rpki-client.org