$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: Mq8cza3Wwp471XSralXPsl5SP3WDbReQbOzQilI3CFc= Subject key identifier: BF:C1:5B:D3:AD:A9:24:1F:D7:03:F4:FE:80:7B:DF:04:20:FF:47:5E Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 2EC54AF597C4A9BC4E04CE5779C6E9D6C6F2429A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 01CE Signing time: Sat 18 May 2024 07:32:03 +0000 Manifest this update: Sat 18 May 2024 07:27:03 +0000 Manifest next update: Tue 21 May 2024 15:19:03 +0000 Files and hashes: 1: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: OeCwo7XRwilhVeggCAp3bLBXx3tdCCEcCi1z02JbHmU=) 2: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: 3y94+IY2u70zXdPLFiyyFh5oD6XkaWYno3dKctGDgqo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c5:4a:f5:97:c4:a9:bc:4e:04:ce:57:79:c6:e9:d6:c6:f2:42:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: May 18 07:27:03 2024 GMT Not After : May 21 15:19:03 2024 GMT Subject: CN=BFC15BD3ADA9241FD703F4FE807BDF0420FF475E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:26:07:13:b6:ac:df:ed:25:1f:7e:94:a3: e8:70:f3:73:19:38:38:d9:de:a0:64:6d:86:86:dd: c1:88:e2:b6:c4:7a:d7:da:a3:19:3b:35:1f:13:5b: 48:68:6f:98:3e:7d:4b:19:36:08:e2:73:ae:fd:79: 83:1e:3f:52:12:82:c5:f6:5f:09:d7:4a:f9:50:e6: dd:4c:47:ae:b9:6d:70:9d:67:cd:74:0d:42:9f:a2: 6f:cd:56:b0:c7:a1:3f:e3:6c:5a:cd:3a:3f:d9:9a: 2f:d5:d8:fa:75:01:6f:b7:dd:ba:c0:a2:da:2c:84: 81:c3:ab:ea:7d:28:a0:45:a0:98:63:ba:9b:3c:8c: c8:42:53:71:ee:16:7f:bd:e3:4b:4f:26:35:54:d1: c8:bb:d0:d7:1b:48:3d:80:dc:10:58:ec:77:d5:82: be:45:66:cb:89:8c:19:fa:cf:b8:13:76:f4:62:06: e9:1d:4e:09:07:fb:2f:c4:a1:ae:a2:85:15:5d:68: 77:6f:fb:ae:b2:c4:ba:41:07:a5:65:81:95:7c:0b: 2a:95:6c:b2:4a:7d:66:b5:e8:6b:6e:d5:95:2c:ee: 03:17:f4:10:5b:98:4d:db:be:3a:37:3b:ec:23:67: a8:bb:30:60:07:34:75:f5:f6:c4:c7:0e:17:e1:4e: a2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C1:5B:D3:AD:A9:24:1F:D7:03:F4:FE:80:7B:DF:04:20:FF:47:5E X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f8:0a:06:00:82:df:0f:b9:71:82:fe:ca:07:e5:72:49:a9: 9a:8e:0c:3f:04:93:34:b6:16:cf:12:fd:34:e7:d9:bc:58:da: 85:52:d9:da:45:e5:bd:66:61:6e:7d:7e:b1:81:36:17:78:cd: 07:f8:0b:f5:c6:4d:4f:b3:5d:09:f0:90:7e:36:d5:32:b2:bc: 78:3c:d2:c3:09:2f:9f:94:6d:2c:54:f0:74:c8:14:a2:07:8b: c8:a4:ce:2c:f3:be:5f:d2:ce:f0:b1:27:57:bc:7c:4a:67:b8: 29:06:02:84:a7:9b:56:6c:c5:93:ea:32:f3:e7:ec:49:27:25: e6:e1:28:43:56:df:32:6d:2e:9e:99:e5:00:85:50:7f:8d:09: df:3e:8b:fc:10:97:2e:20:dc:64:3b:f8:aa:fe:ac:01:fc:dc: 43:3c:0c:f2:72:09:37:c7:8c:7a:0c:27:d4:cc:44:ef:7e:e7: c1:b4:e3:01:1d:3e:f9:d7:04:f7:e7:9a:11:df:2c:d2:42:09: c3:ed:50:87:1e:1e:bd:16:a0:a8:58:b6:b8:c8:7c:37:2d:a6: e5:24:53:c3:27:30:62:a7:98:a0:4e:a5:98:88:07:48:e2:fa: 8e:9e:a8:ea:c6:89:38:f3:d1:0e:26:5c:50:82:7a:7c:9f:9e: 6b:e1:ea:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsVK9ZfEqbxOBM5Xecbp1sbyQpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNDA1MTgwNzI3MDNaFw0yNDA1MjExNTE5MDNaMDMxMTAvBgNV BAMTKEJGQzE1QkQzQURBOTI0MUZENzAzRjRGRTgwN0JERjA0MjBGRjQ3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKSYHE7as3+0lH36Uo+hw83MZ ODjZ3qBkbYaG3cGI4rbEetfaoxk7NR8TW0hob5g+fUsZNgjic679eYMeP1ISgsX2 XwnXSvlQ5t1MR665bXCdZ810DUKfom/NVrDHoT/jbFrNOj/Zmi/V2Pp1AW+33brA otoshIHDq+p9KKBFoJhjups8jMhCU3HuFn+940tPJjVU0ci70NcbSD2A3BBY7HfV gr5FZsuJjBn6z7gTdvRiBukdTgkH+y/Eoa6ihRVdaHdv+66yxLpBB6VlgZV8CyqV bLJKfWa16Gtu1ZUs7gMX9BBbmE3bvjo3O+wjZ6i7MGAHNHX19sTHDhfhTqK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv8Fb062pJB/XA/T+gHvfBCD/R14wHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD4CgYAgt8PuXGC/soH5XJJqZqODD8EkzS2 Fs8S/TTn2bxY2oVS2dpF5b1mYW59frGBNhd4zQf4C/XGTU+zXQnwkH421TKyvHg8 0sMJL5+UbSxU8HTIFKIHi8ikzizzvl/SzvCxJ1e8fEpnuCkGAoSnm1ZsxZPqMvPn 7EknJebhKENW3zJtLp6Z5QCFUH+NCd8+i/wQly4g3GQ7+Kr+rAH83EM8DPJyCTfH jHoMJ9TMRO9+58G04wEdPvnXBPfnmhHfLNJCCcPtUIceHr0WoKhYtrjIfDctpuUk U8MnMGKnmKBOpZiIB0ji+o6eqOrGiTjz0Q4mXFCCenyfnmvh6hA= -----END CERTIFICATE-----Generated at Sat May 18 08:29:49 2024 by rpki-client on console-ams.rpki-client.org