$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: avXtdWy3O3qVWsCtE3OK9HlPlIitloj8mlmJEie9OsI= Subject key identifier: DB:35:7B:F1:5D:FD:02:5F:65:44:85:FA:A2:54:60:30:FF:C4:5E:47 Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 501C1088BAB992DA6D796B63E3EE4A6AB9E684E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 023E Signing time: Wed 29 May 2024 08:21:41 +0000 Manifest this update: Wed 29 May 2024 08:16:41 +0000 Manifest next update: Sat 01 Jun 2024 16:58:41 +0000 Files and hashes: 1: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: EJNiZ5CP4NViKAT2AQrbTMiN3p2wBvG9Nimx2GtcP7I=) 2: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: SI2Yqil5PNaXDHVxwBvfufMzOw8lcXcZxZAO+X5fcsk=) 3: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: sqowCTVcff+WCjw1ve/CA7Eqg5I0+nlzMAfv+mco9qc=) 4: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: LhmwQnM0WLclUNfq3PlKz6KuQApKmrcOyIRrTgFok7w=) 5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: RNNnBL7fQcUS564xdPE+tLBRnYs5RcVNLA03tc1ubGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 14:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1c:10:88:ba:b9:92:da:6d:79:6b:63:e3:ee:4a:6a:b9:e6:84:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: May 29 08:16:41 2024 GMT Not After : Jun 1 16:58:41 2024 GMT Subject: CN=DB357BF15DFD025F654485FAA2546030FFC45E47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:ad:15:ce:30:8a:28:86:19:3e:b0:7c:d2: 57:cd:9f:40:1f:4d:ce:aa:70:06:55:5d:57:e0:ca: 51:f1:3c:67:9a:78:96:45:4f:fc:13:d2:1d:27:36: bb:7e:cc:43:17:ff:df:23:b5:e8:99:3d:94:db:e0: 5c:af:c8:a4:55:9b:dc:57:73:c2:b2:db:1a:f3:12: 81:26:c9:fc:69:c1:c9:e5:8d:c4:73:d8:22:7f:c0: 2a:72:79:20:6b:77:f3:dd:ba:78:94:8f:68:d8:9e: c0:95:3c:cb:8c:fe:e9:51:8c:e6:0f:bb:1d:2c:3f: fb:77:d2:fe:e1:81:c6:d3:57:07:01:b2:93:35:cf: 17:11:98:44:dc:f4:5c:05:90:0b:b8:fe:56:98:05: 10:26:4b:b5:de:22:f0:1a:06:07:2a:11:fe:0f:30: 7e:a4:59:cb:2a:fb:9e:5f:f8:91:f7:89:19:d2:07: 40:4b:91:b2:67:5f:c2:06:21:92:17:18:04:6b:d5: 6b:5c:78:b1:e5:a5:d6:d8:a1:bd:3a:2d:5a:cd:09: eb:ca:6a:2f:86:3f:cf:7a:58:94:0d:cb:c6:f8:72: 87:e7:99:ce:bc:c6:96:ad:62:37:c8:12:6e:1b:6f: 88:dc:d7:c5:c3:6c:92:2e:ff:b0:be:d0:a2:1b:7c: 0c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:35:7B:F1:5D:FD:02:5F:65:44:85:FA:A2:54:60:30:FF:C4:5E:47 X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c1:b9:c3:35:2d:e3:75:b1:b3:78:4f:68:5d:71:31:ce:fd: 05:58:46:cb:2c:fa:9a:c0:99:6d:48:d7:1a:f3:f3:28:59:e2: b4:c0:97:a5:83:8f:e2:43:5d:da:74:7d:51:f6:7e:2e:1e:c2: 7c:61:bf:4b:d7:92:9c:27:66:b8:d0:a0:9f:d0:aa:1e:dc:b2: cb:94:17:1c:a3:bf:9d:7d:26:91:4f:89:8a:8f:fe:5a:76:f0: 3f:98:4a:a9:02:71:23:62:0b:de:9e:61:4e:d7:49:69:b8:ca: 96:3f:31:fc:59:14:52:4b:b0:e4:8d:00:fd:eb:d0:76:21:a1: 3c:1c:5e:5b:09:e9:1e:b7:f7:51:4e:2a:aa:5f:9c:c7:e7:e5: 31:18:19:45:c9:64:81:f3:e2:d9:46:86:11:a0:9a:04:9d:1a: c3:9d:24:77:ae:d6:7b:4c:7c:30:30:65:d8:80:2f:99:e0:35: da:2e:ba:fa:c6:f6:68:49:47:72:db:d4:ba:18:92:44:72:6a: 7a:59:98:a6:9a:b7:04:fd:de:72:96:2c:cf:72:c0:e7:3d:d7: 1d:3c:cb:c0:e0:0a:07:1d:a1:5a:76:88:d7:7d:a6:10:04:3f: 12:a8:24:84:27:61:ce:44:ba:d6:66:f9:30:74:4d:bf:e7:86: 2f:b9:78:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBwQiLq5ktpteWtj4+5KarnmhOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNDA1MjkwODE2NDFaFw0yNDA2MDExNjU4NDFaMDMxMTAvBgNV BAMTKERCMzU3QkYxNURGRDAyNUY2NTQ0ODVGQUEyNTQ2MDMwRkZDNDVFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwLq0VzjCKKIYZPrB80lfNn0Af Tc6qcAZVXVfgylHxPGeaeJZFT/wT0h0nNrt+zEMX/98jteiZPZTb4FyvyKRVm9xX c8Ky2xrzEoEmyfxpwcnljcRz2CJ/wCpyeSBrd/PduniUj2jYnsCVPMuM/ulRjOYP ux0sP/t30v7hgcbTVwcBspM1zxcRmETc9FwFkAu4/laYBRAmS7XeIvAaBgcqEf4P MH6kWcsq+55f+JH3iRnSB0BLkbJnX8IGIZIXGARr1WtceLHlpdbYob06LVrNCevK ai+GP896WJQNy8b4cofnmc68xpatYjfIEm4bb4jc18XDbJIu/7C+0KIbfAyZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2zV78V39Al9lRIX6olRgMP/EXkcwHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvBucM1LeN1sbN4T2hdcTHO/QVYRsss+prA mW1I1xrz8yhZ4rTAl6WDj+JDXdp0fVH2fi4ewnxhv0vXkpwnZrjQoJ/Qqh7cssuU Fxyjv519JpFPiYqP/lp28D+YSqkCcSNiC96eYU7XSWm4ypY/MfxZFFJLsOSNAP3r 0HYhoTwcXlsJ6R6391FOKqpfnMfn5TEYGUXJZIHz4tlGhhGgmgSdGsOdJHeu1ntM fDAwZdiAL5ngNdouuvrG9mhJR3Lb1LoYkkRyanpZmKaatwT93nKWLM9ywOc91x08 y8DgCgcdoVp2iNd9phAEPxKoJIQnYc5EutZm+TB0Tb/nhi+5eGI= -----END CERTIFICATE-----Generated at Wed May 29 10:41:07 2024 by rpki-client on console-ams.rpki-client.org