$ rpki-client -vvf repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft File: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft (raw, json) Hash identifier: m4lloohUm4R6BOe0CA45m6r8yYqCcLp96ZDE+SbaVTY= Subject key identifier: 1C:46:6C:AE:84:4B:AC:BB:9E:2F:C5:61:7A:91:60:DC:48:73:C6:40 Authority key identifier: 96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 Certificate issuer: /CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Certificate serial: 3F8F2445C398BB719CD53F5E2392C43437E3FEC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft Manifest number: FB Signing time: Sat 18 May 2024 23:12:05 +0000 Manifest this update: Sat 18 May 2024 23:07:05 +0000 Manifest next update: Wed 22 May 2024 10:11:05 +0000 Files and hashes: 1: 968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl (hash: ZG7u5e7Qdo23l/gH1A+m40PN9Crc+23aaP8ut4Wk2zo=) 2: 3130332e38372e36382e302f32342d3234203d3e20313530323439.roa (hash: aoO1Q+ERHLlQagfR0NLvIuUCSbUBuYF0ZocvqmBnNYk=) 3: 323030313a6466313a373334303a3a2f34382d3438203d3e20313530323439.roa (hash: dKbbT+P5STGxhy1pISto5dy9uWvbr7aNNVjGcOLE5yQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:8f:24:45:c3:98:bb:71:9c:d5:3f:5e:23:92:c4:34:37:e3:fe:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=968A6FAD637E47068D2FBC547FBF2C1C12F8C588 Validity Not Before: May 18 23:07:05 2024 GMT Not After : May 22 10:11:05 2024 GMT Subject: CN=1C466CAE844BACBB9E2FC5617A9160DC4873C640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:8b:d8:18:c8:77:97:62:fa:16:eb:b9:b7: 6b:53:44:51:61:c0:c7:45:ae:54:8f:c8:a4:46:3f: 41:9b:8b:3e:c1:21:cb:40:21:42:65:01:a9:7e:92: 6d:5d:dd:b2:b1:44:8d:ca:34:75:e9:73:57:35:f3: 49:d2:60:40:c0:fc:10:73:c4:c9:5f:f1:04:d0:fb: 6e:6e:85:e1:b7:9d:ce:68:90:11:a7:41:da:35:d3: 7e:30:cb:4f:c5:21:9e:27:47:b0:91:85:d5:4b:e6: b8:c1:f2:0e:22:37:48:80:78:58:5c:09:03:19:92: 03:46:07:87:89:92:fc:67:c9:46:88:0a:85:3b:e5: 37:67:b9:7c:16:e6:03:fd:fb:8e:bb:d7:8a:5e:4d: 03:ef:8e:04:95:ea:88:5c:0e:eb:a4:8d:8d:5c:bd: f4:6b:ad:d7:f8:4f:62:d7:b0:84:6d:f0:97:43:67: 93:80:f8:b7:13:5f:c7:47:bd:06:47:d8:53:72:b7: 17:00:79:b9:c1:26:1a:1f:3b:ad:cb:7e:b1:75:92: 99:8f:17:d0:b0:94:ae:4c:1e:be:c5:87:5a:ae:d5: a7:82:4f:c3:ac:7a:70:8d:cc:e8:66:79:6a:ba:b3: 76:19:8f:ce:1e:4b:04:c3:8c:67:e4:9f:94:a0:43: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:46:6C:AE:84:4B:AC:BB:9E:2F:C5:61:7A:91:60:DC:48:73:C6:40 X509v3 Authority Key Identifier: keyid:96:8A:6F:AD:63:7E:47:06:8D:2F:BC:54:7F:BF:2C:1C:12:F8:C5:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a39c5484-2e37-48f9-8eba-0af4ef62947d/0/968A6FAD637E47068D2FBC547FBF2C1C12F8C588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ae:90:7e:c1:e9:fa:b5:21:24:8a:47:41:e8:3b:51:bb:5d: 83:db:62:dd:70:3e:55:2e:bb:4e:47:36:44:07:8e:bb:82:32: 96:37:b1:f6:81:88:26:7d:77:f0:c0:35:e3:ff:2b:ba:9a:80: ec:19:90:a3:5b:81:ea:5e:ae:ea:01:8f:40:bb:3b:70:fd:71: 70:bc:ad:94:61:a6:cf:bb:a1:a0:f3:3c:48:96:d2:40:2b:cb: 39:5f:13:b8:9e:86:bc:18:10:74:1a:c5:ec:41:6b:41:b3:93: 33:99:8d:39:9f:18:88:5a:b3:e0:7d:c6:6b:e4:f2:0c:95:42: 49:3f:71:a9:43:dd:3a:64:54:19:6a:7e:39:0e:f9:17:76:db: 13:7b:0c:c0:57:44:a9:08:5a:15:4e:9a:dd:b3:5f:16:c0:c6: b4:2b:c1:d1:96:af:ff:b5:bd:45:d2:c4:98:34:04:87:a0:12: 6a:58:c3:d9:bf:13:01:f8:b3:0d:62:18:d0:f9:49:a1:28:a9: 4a:95:c4:6e:38:08:fa:60:53:da:f6:51:9d:54:77:0a:65:d8: 5f:ca:2a:c4:21:a5:98:57:49:43:91:c2:f8:ae:71:74:55:62: a5:83:ca:74:43:a2:b6:4c:e6:c6:e9:10:fc:38:e8:34:19:e7: ea:b2:72:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP48kRcOYu3Gc1T9eI5LENDfj/sEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMx MkY4QzU4ODAeFw0yNDA1MTgyMzA3MDVaFw0yNDA1MjIxMDExMDVaMDMxMTAvBgNV BAMTKDFDNDY2Q0FFODQ0QkFDQkI5RTJGQzU2MTdBOTE2MERDNDg3M0M2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9ovYGMh3l2L6Fuu5t2tTRFFh wMdFrlSPyKRGP0Gbiz7BIctAIUJlAal+km1d3bKxRI3KNHXpc1c180nSYEDA/BBz xMlf8QTQ+25uheG3nc5okBGnQdo1034wy0/FIZ4nR7CRhdVL5rjB8g4iN0iAeFhc CQMZkgNGB4eJkvxnyUaICoU75TdnuXwW5gP9+46714peTQPvjgSV6ohcDuukjY1c vfRrrdf4T2LXsIRt8JdDZ5OA+LcTX8dHvQZH2FNytxcAebnBJhofO63LfrF1kpmP F9CwlK5MHr7Fh1qu1aeCT8OsenCNzOhmeWq6s3YZj84eSwTDjGfkn5SgQ4txAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHEZsroRLrLueL8VhepFg3EhzxkAwHwYDVR0j BBgwFoAUlopvrWN+RwaNL7xUf78sHBL4xYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzljNTQ4NC0yZTM3LTQ4ZjktOGViYS0wYWY0ZWY2Mjk0N2QvMC85NjhBNkZBRDYz N0U0NzA2OEQyRkJDNTQ3RkJGMkMxQzEyRjhDNTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJDMUMxMkY4 QzU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM5YzU0ODQtMmUzNy00OGY5LThl YmEtMGFmNGVmNjI5NDdkLzAvOTY4QTZGQUQ2MzdFNDcwNjhEMkZCQzU0N0ZCRjJD MUMxMkY4QzU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiukH7B6fq1ISSKR0HoO1G7XYPbYt1wPlUu u05HNkQHjruCMpY3sfaBiCZ9d/DANeP/K7qagOwZkKNbgeperuoBj0C7O3D9cXC8 rZRhps+7oaDzPEiW0kAryzlfE7iehrwYEHQaxexBa0GzkzOZjTmfGIhas+B9xmvk 8gyVQkk/calD3TpkVBlqfjkO+Rd22xN7DMBXRKkIWhVOmt2zXxbAxrQrwdGWr/+1 vUXSxJg0BIegEmpYw9m/EwH4sw1iGND5SaEoqUqVxG44CPpgU9r2UZ1Udwpl2F/K KsQhpZhXSUORwviucXRVYqWDynRDorZM5sbpEPw46DQZ5+qyclY= -----END CERTIFICATE-----Generated at Sun May 19 00:29:31 2024 by rpki-client on console-ams.rpki-client.org