$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: qcA8kTkoSbUWp+Hbj6FDoQFWv6Bxbn7HnS/GK64GJM4= Subject key identifier: 3D:61:2F:FB:4D:C8:53:84:C9:02:EC:DB:0A:A4:D9:98:1B:79:27:FA Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 4E7713637EE98F51A4728E5FBEF334B1A20C68C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0434 Signing time: Sat 25 May 2024 17:40:32 +0000 Manifest this update: Sat 25 May 2024 17:35:32 +0000 Manifest next update: Tue 28 May 2024 20:35:32 +0000 Files and hashes: 1: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: qlN4FdxUiSdYPZSXapq5HJoYDoJPI9SMHmWtGq9s71s=) 2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: efhf5Nk2xbq8feLBY5SmsJ3sbXi6MPyny7iu+b1sHcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 09:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:77:13:63:7e:e9:8f:51:a4:72:8e:5f:be:f3:34:b1:a2:0c:68:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: May 25 17:35:32 2024 GMT Not After : May 28 20:35:32 2024 GMT Subject: CN=3D612FFB4DC85384C902ECDB0AA4D9981B7927FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:86:03:00:86:f1:c6:0d:bb:9e:92:4d:8a: b4:ef:8a:5d:55:f5:a2:bf:44:69:51:96:2b:27:71: 36:3e:65:3e:3a:3b:aa:12:94:ef:75:41:03:90:4f: 9e:51:a5:aa:92:7e:5d:55:ae:b3:c3:c5:e7:05:9f: 96:34:d0:8c:0e:3b:ba:47:ca:75:d9:9a:9c:08:06: 5a:17:bc:81:7e:0b:18:46:f6:32:80:a1:a9:c5:bb: e8:c9:3d:79:fa:e6:2d:96:ac:c7:bd:2f:cc:78:ac: 5c:c8:b0:95:2d:4e:fa:20:78:57:9c:14:a4:a3:e9: 35:aa:43:d7:d7:3c:e0:42:91:7c:98:60:7f:33:3f: cc:5f:98:ec:28:b9:7f:16:88:30:9d:a9:fd:29:06: 2c:75:75:3c:51:fc:b8:c8:9f:87:cc:5a:dc:c0:f8: 60:04:2b:04:66:de:5c:ea:77:f9:38:29:ba:17:04: bb:d4:22:f1:e8:91:a5:66:84:7d:ac:c5:97:e4:bf: 03:18:c6:7e:c2:e6:e1:3a:39:1d:85:50:21:13:f2: c3:1b:a1:72:d3:f8:a7:a2:cd:4b:f7:e6:11:fb:63: a4:af:7e:4d:3f:29:e2:9b:4e:19:06:ad:97:ad:fe: fe:6f:4e:ad:b3:1a:44:7b:58:c9:37:2f:19:5e:ea: ee:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:61:2F:FB:4D:C8:53:84:C9:02:EC:DB:0A:A4:D9:98:1B:79:27:FA X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:4f:94:64:31:35:b1:ea:5a:b7:19:f8:74:2e:75:e7:7a:4b: 08:54:50:a4:10:74:2f:7b:42:8f:06:e3:7b:73:12:40:bb:da: 78:cb:c5:2c:8e:de:79:e6:65:ac:56:78:ea:51:e6:df:98:da: 82:9c:aa:03:a9:f3:8f:d1:7d:d1:37:bf:68:fa:7c:17:e4:a0: 90:84:76:63:c5:37:be:2b:30:90:30:61:21:89:3e:9c:6e:b9: 04:12:0f:b0:69:98:2c:c8:62:93:11:ec:d3:16:9b:39:06:dc: fd:55:a5:57:f1:8f:12:76:a1:42:e2:07:34:36:b8:fa:26:5f: 5a:d0:92:c6:36:7d:3e:65:f6:2f:92:22:bc:a6:e8:24:31:8f: 6d:8c:a4:07:c5:99:0a:40:f3:79:5f:db:20:a5:81:73:a5:4b: 14:c9:a7:71:e4:d4:05:3e:b1:21:ef:c7:a1:16:82:86:01:45: 93:be:c5:94:dd:99:85:38:42:d6:14:fd:06:e8:2d:43:96:d7: a3:84:f6:17:1a:07:8e:40:6e:d1:ac:44:77:44:07:2e:25:a1: 89:10:91:59:a4:f4:04:87:25:9c:24:f7:ea:d8:c5:ca:e9:84: 0e:8a:68:32:e6:58:1a:4f:32:1f:15:c8:79:8e:4d:37:42:ad: 14:4f:75:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTncTY37pj1Gkco5fvvM0saIMaMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNDA1MjUxNzM1MzJaFw0yNDA1MjgyMDM1MzJaMDMxMTAvBgNV BAMTKDNENjEyRkZCNERDODUzODRDOTAyRUNEQjBBQTREOTk4MUI3OTI3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGYYDAIbxxg27npJNirTvil1V 9aK/RGlRlisncTY+ZT46O6oSlO91QQOQT55RpaqSfl1VrrPDxecFn5Y00IwOO7pH ynXZmpwIBloXvIF+CxhG9jKAoanFu+jJPXn65i2WrMe9L8x4rFzIsJUtTvogeFec FKSj6TWqQ9fXPOBCkXyYYH8zP8xfmOwouX8WiDCdqf0pBix1dTxR/LjIn4fMWtzA +GAEKwRm3lzqd/k4KboXBLvUIvHokaVmhH2sxZfkvwMYxn7C5uE6OR2FUCET8sMb oXLT+KeizUv35hH7Y6Svfk0/KeKbThkGrZet/v5vTq2zGkR7WMk3Lxle6u63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPWEv+03IU4TJAuzbCqTZmBt5J/owHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMNPlGQxNbHqWrcZ+HQuded6SwhUUKQQdC97 Qo8G43tzEkC72njLxSyO3nnmZaxWeOpR5t+Y2oKcqgOp84/RfdE3v2j6fBfkoJCE dmPFN74rMJAwYSGJPpxuuQQSD7BpmCzIYpMR7NMWmzkG3P1VpVfxjxJ2oULiBzQ2 uPomX1rQksY2fT5l9i+SIrym6CQxj22MpAfFmQpA83lf2yClgXOlSxTJp3Hk1AU+ sSHvx6EWgoYBRZO+xZTdmYU4QtYU/QboLUOW16OE9hcaB45AbtGsRHdEBy4loYkQ kVmk9ASHJZwk9+rYxcrphA6KaDLmWBpPMh8VyHmOTTdCrRRPdR8= -----END CERTIFICATE-----Generated at Sat May 25 20:53:02 2024 by rpki-client on console-ams.rpki-client.org