$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: 1BDh7FFDNGvlySwlZC4AcKJ63kqV3v7lPf/hAogZX9Y= Subject key identifier: 3C:3A:50:62:E8:72:4D:0D:9D:FE:29:17:6D:CB:47:87:91:75:8B:71 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 13F219AD01C3F97FD4C8AFA10EE66AF70A602B8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: C1 Signing time: Fri 24 May 2024 02:40:33 +0000 Manifest this update: Fri 24 May 2024 02:35:33 +0000 Manifest next update: Mon 27 May 2024 09:35:33 +0000 Files and hashes: 1: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: kXaPYoG9D4DI+zdEull909ak88MfGxW/CjNgLcEkyrY=) 2: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: X/RSOXUq7KW+7LVhNjqX4Q2vYkD2wUSDkeHP3hdjPZw=) 3: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: L1nP2+pxchPIkSU0l3/nlJDDpNPW8AazHmyGzOWryzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 08:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f2:19:ad:01:c3:f9:7f:d4:c8:af:a1:0e:e6:6a:f7:0a:60:2b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: May 24 02:35:33 2024 GMT Not After : May 27 09:35:33 2024 GMT Subject: CN=3C3A5062E8724D0D9DFE29176DCB478791758B71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:0f:ff:dc:60:1f:9a:30:13:08:a6:48:f8: 4e:f9:39:19:f7:fb:7e:ce:a3:d6:9d:65:ea:28:60: 96:49:29:16:48:f5:33:ba:98:31:73:86:d0:32:ec: 69:4b:6d:52:0c:30:4e:69:a9:52:56:a4:f1:c3:38: e3:b5:83:f5:f3:c6:5e:15:cd:66:ca:dc:e5:76:da: 8a:68:b9:cf:1d:ac:da:0f:62:eb:69:58:ba:00:f8: 3b:ed:a1:1f:14:0e:15:53:ac:3e:ac:09:e4:09:0e: 22:65:98:c9:f0:31:58:9e:d0:7f:f5:d8:e7:3b:7c: 74:a4:b0:24:37:c5:7a:91:e8:54:a8:8d:43:be:85: ee:18:4e:da:83:91:31:89:15:53:81:44:e7:95:ef: 0a:25:ce:f5:72:10:2b:12:f6:23:8d:6b:14:1b:c4: 29:cb:10:cc:13:a8:17:d6:da:1c:20:55:b0:c4:99: 1c:b9:9e:94:4a:0c:32:20:68:9d:1d:31:09:d2:e6: 74:26:66:ba:4d:d4:a4:67:6c:7f:88:94:63:95:67: b8:dd:d8:01:b6:e8:a8:c8:30:2d:7b:38:d7:45:a5: 3d:6e:93:8b:33:57:24:e1:56:0e:ea:f1:75:96:23: 77:79:f5:e7:61:08:ee:a5:7e:71:79:93:b2:fa:95: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3A:50:62:E8:72:4D:0D:9D:FE:29:17:6D:CB:47:87:91:75:8B:71 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:2a:d5:e8:5b:17:3e:be:3b:72:d0:74:fe:a9:3d:b3:c5:9c: b5:b2:6e:da:7b:a0:d3:ac:bf:ec:d5:6c:21:bf:5f:4c:86:f3: 0f:f9:ec:01:e9:43:ca:b8:a9:c4:59:1c:16:20:a9:f3:01:4c: 8b:1f:79:fe:a7:96:2a:80:12:8d:5c:e1:26:73:6f:31:2c:38: 61:9d:69:e8:48:5f:3a:4a:12:8e:cc:c0:0e:a1:44:fa:05:fb: a6:31:11:1f:8a:76:b5:f3:ba:0b:7f:eb:47:95:45:36:d4:f4: 33:c9:35:da:f8:81:ed:ff:a2:22:67:0c:ab:63:16:97:d7:6c: 26:4d:7b:51:0f:bb:c7:93:ee:ba:58:92:d0:93:8e:db:67:d2: cd:d7:61:14:19:a2:31:f5:30:22:7f:da:e7:32:04:7d:b0:12: 39:22:34:30:a8:d1:f5:b3:4b:b6:ec:3e:e7:23:ee:7b:dc:be: 50:38:56:2e:31:64:64:1b:37:b5:8b:41:fe:d7:ee:57:00:96: e5:d9:58:82:68:4f:ee:53:0e:d8:c6:cc:44:53:69:df:99:84: dc:97:25:2b:7f:42:06:4c:90:7f:6f:d7:41:ad:4d:7e:ca:5b: c1:dc:ed:f5:d7:b9:f3:98:b4:4f:a3:9e:f3:3b:1b:b3:72:0b: f3:3c:76:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/IZrQHD+X/UyK+hDuZq9wpgK40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNDA1MjQwMjM1MzNaFw0yNDA1MjcwOTM1MzNaMDMxMTAvBgNV BAMTKDNDM0E1MDYyRTg3MjREMEQ5REZFMjkxNzZEQ0I0Nzg3OTE3NThCNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/w//3GAfmjATCKZI+E75ORn3 +37Oo9adZeooYJZJKRZI9TO6mDFzhtAy7GlLbVIMME5pqVJWpPHDOOO1g/Xzxl4V zWbK3OV22opouc8drNoPYutpWLoA+DvtoR8UDhVTrD6sCeQJDiJlmMnwMVie0H/1 2Oc7fHSksCQ3xXqR6FSojUO+he4YTtqDkTGJFVOBROeV7wolzvVyECsS9iONaxQb xCnLEMwTqBfW2hwgVbDEmRy5npRKDDIgaJ0dMQnS5nQmZrpN1KRnbH+IlGOVZ7jd 2AG26KjIMC17ONdFpT1uk4szVyThVg7q8XWWI3d59edhCO6lfnF5k7L6ldQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPDpQYuhyTQ2d/ikXbctHh5F1i3EwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMq1ehbFz6+O3LQdP6pPbPFnLWybtp7oNOs v+zVbCG/X0yG8w/57AHpQ8q4qcRZHBYgqfMBTIsfef6nliqAEo1c4SZzbzEsOGGd aehIXzpKEo7MwA6hRPoF+6YxER+KdrXzugt/60eVRTbU9DPJNdr4ge3/oiJnDKtj FpfXbCZNe1EPu8eT7rpYktCTjttn0s3XYRQZojH1MCJ/2ucyBH2wEjkiNDCo0fWz S7bsPucj7nvcvlA4Vi4xZGQbN7WLQf7X7lcAluXZWIJoT+5TDtjGzERTad+ZhNyX JSt/QgZMkH9v10GtTX7KW8Hc7fXXufOYtE+jnvM7G7NyC/M8dsM= -----END CERTIFICATE-----Generated at Fri May 24 03:29:46 2024 by rpki-client on console-fra.rpki-client.org