$ rpki-client -vvf repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft File: 88BD1AAEA16D8A24550416CDB95E232152249B3E.mft (raw, json) Hash identifier: t4S1Y7VDGLR+VzM3K0Nnab42t/FG+r6gcCeu4SzCtJ0= Subject key identifier: 8B:D1:CA:68:E7:11:02:39:66:86:BD:1D:1C:85:F4:91:96:3A:44:C0 Authority key identifier: 88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E Certificate issuer: /CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Certificate serial: 61A21B01141AAD62B7E783FD32036A323888ABAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft Manifest number: 0220 Signing time: Sat 18 May 2024 18:42:03 +0000 Manifest this update: Sat 18 May 2024 18:37:03 +0000 Manifest next update: Tue 21 May 2024 23:29:03 +0000 Files and hashes: 1: 3130332e3133382e37302e302f32332d3233203d3e20313338383834.roa (hash: HT2lAyWS+oH+TfDrn69+mlHw0OCfGVmZzVdhK8lCDI8=) 2: 88BD1AAEA16D8A24550416CDB95E232152249B3E.crl (hash: 9P0Z2vIawf+RGiTxZITCMX6LrtdKQzns7wodgeDz+Yg=) 3: 323430343a636534303a3a2f33322d3332203d3e20313338383834.roa (hash: Pras/Prs5aSvBjJzIUKsE4xa/IXWQzTDkIlNJPEHoCs=) 4: 323430343a636534303a333a3a2f34382d3438203d3e20313338383834.roa (hash: FMLrB74V7w4wcw1UPw1ssqjz7kmoW8OjDA2kiEiEt3A=) 5: 323430343a636534303a3a2f34382d3438203d3e20313338383834.roa (hash: OvdBPdZUJDsIK6X0rtWJogIrqQZ2101X3HuFH2GWr2c=) 6: 3130332e3133382e37312e302f32342d3234203d3e20313338383834.roa (hash: nhb/GkfGlkdpbtSswi5Z3PDF3aAa1rRM8qCaNe9Yz/A=) 7: 323430343a636534303a323a3a2f34382d3438203d3e20313338383834.roa (hash: YJLwKUZ1DDEaBCYEQlcaDOvoIDSXH7Q/abskmWmYeQk=) 8: 3130332e3133382e37302e302f32342d3234203d3e20313338383834.roa (hash: Xyv0mAm+IjPhVjyME2BeHcFLgb88W3AeXsUZMbcu0yk=) 9: 323430343a636534303a3a2f33362d3336203d3e20313338383834.roa (hash: /W9/rAm/ntB/kwhZl1WtxB3UaTgY4ooxJ8W3ArqQByY=) 10: 323430343a636534303a313a3a2f34382d3438203d3e20313338383834.roa (hash: C3prBIFoyZAl+oX7uQPQSMPmxFpppJZuejMfJQu3eJ8=) 11: 323430343a636534303a313030303a3a2f33362d3336203d3e20313338383834.roa (hash: l6dRrmYHksllBIt1ng0VtTnT2PJRmDXxTq5SVD7XCIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a2:1b:01:14:1a:ad:62:b7:e7:83:fd:32:03:6a:32:38:88:ab:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88BD1AAEA16D8A24550416CDB95E232152249B3E Validity Not Before: May 18 18:37:03 2024 GMT Not After : May 21 23:29:03 2024 GMT Subject: CN=8BD1CA68E71102396686BD1D1C85F491963A44C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:eb:b7:91:b9:b6:04:72:fc:0d:2d:a2:18: 29:6c:fa:b6:c4:23:ec:25:67:4a:a5:29:a7:d5:c2: 5f:50:74:5f:60:38:12:2d:a3:50:56:11:ae:29:c8: cf:f2:03:09:7d:b1:0e:f7:30:fa:67:ee:90:82:b1: ec:97:f5:28:db:ce:4e:4d:ea:18:4c:51:a5:fe:86: cb:31:b4:62:4a:0a:2f:22:18:70:7d:d2:86:da:e9: c8:66:fa:3d:3c:bb:6d:57:45:ab:6d:9a:bc:58:86: ae:25:f9:56:ea:ab:3b:e6:c4:0b:ce:4f:28:e5:0c: ed:e2:49:1e:d5:81:1d:33:e3:11:f8:e2:f6:2b:73: 69:a2:67:8b:29:27:a3:7b:03:61:67:10:18:76:16: bc:32:7e:60:17:32:17:86:f2:d0:86:84:b8:18:08: db:57:c1:00:62:9e:ac:04:68:5f:54:88:f7:4e:3f: d1:0c:62:55:c8:85:4f:e2:7f:88:66:e5:87:98:9c: 5b:7b:3f:fc:3e:9c:ee:17:8c:79:51:bd:b6:ea:12: 96:5b:f9:8b:5a:e8:9d:99:62:e1:21:c1:42:1c:a5: 33:1e:c7:d8:a6:0f:25:df:5e:dc:de:32:66:4c:de: 83:c3:6d:af:20:7c:0b:07:b1:53:76:5a:43:e6:b9: 4c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D1:CA:68:E7:11:02:39:66:86:BD:1D:1C:85:F4:91:96:3A:44:C0 X509v3 Authority Key Identifier: keyid:88:BD:1A:AE:A1:6D:8A:24:55:04:16:CD:B9:5E:23:21:52:24:9B:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88BD1AAEA16D8A24550416CDB95E232152249B3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b20c6d69-6290-402f-a84e-d289c6e93a73/0/88BD1AAEA16D8A24550416CDB95E232152249B3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:6a:9b:00:3a:20:ef:4e:f0:4e:a2:bd:d1:16:44:81:b4:2f: 5e:ee:07:4b:2b:64:10:35:ed:ba:e7:d6:6f:fe:d7:32:e6:66: b1:d7:0d:14:29:22:9d:4f:84:1a:00:75:e3:81:78:10:8b:48: d8:8c:28:67:c9:84:36:c6:38:d0:4c:84:3f:9c:23:a9:f3:5f: b9:76:82:a5:44:50:c7:be:9d:9c:c6:a2:b1:64:2c:d3:b6:4f: ce:e7:c1:e4:70:e0:a0:e5:8d:07:ef:4f:84:02:a5:26:7a:aa: 03:57:74:4e:64:01:a5:b5:7f:38:c6:3f:74:db:54:24:5a:21: 0e:98:7c:a1:4d:75:f4:e8:59:df:c6:2f:5e:49:21:c1:99:ec: 2d:b9:8d:88:48:e2:25:c6:94:ff:a1:9b:96:b5:a5:2b:23:ff: 3d:77:9e:92:0f:dd:3a:63:af:47:c5:89:49:ee:19:8a:a9:22: 9e:bd:35:fa:1e:82:33:11:95:bc:55:85:7f:ad:ed:9f:4e:71: 93:fa:1a:b0:c7:9b:23:a8:b5:af:d9:54:bb:24:06:a4:d2:4b: 96:a1:35:2c:07:3c:45:7f:a3:25:0b:a6:ee:f4:b6:af:51:83: 7b:27:15:1f:f2:42:71:ef:8a:43:a2:d2:64:cf:06:69:39:83: af:57:86:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYaIbARQarWK354P9MgNqMjiIq64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1 MjI0OUIzRTAeFw0yNDA1MTgxODM3MDNaFw0yNDA1MjEyMzI5MDNaMDMxMTAvBgNV BAMTKDhCRDFDQTY4RTcxMTAyMzk2Njg2QkQxRDFDODVGNDkxOTYzQTQ0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWOu3kbm2BHL8DS2iGCls+rbE I+wlZ0qlKafVwl9QdF9gOBIto1BWEa4pyM/yAwl9sQ73MPpn7pCCseyX9Sjbzk5N 6hhMUaX+hssxtGJKCi8iGHB90oba6chm+j08u21XRattmrxYhq4l+VbqqzvmxAvO TyjlDO3iSR7VgR0z4xH44vYrc2miZ4spJ6N7A2FnEBh2FrwyfmAXMheG8tCGhLgY CNtXwQBinqwEaF9UiPdOP9EMYlXIhU/if4hm5YeYnFt7P/w+nO4XjHlRvbbqEpZb +Yta6J2ZYuEhwUIcpTMex9imDyXfXtzeMmZM3oPDba8gfAsHsVN2WkPmuUyBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9HKaOcRAjlmhr0dHIX0kZY6RMAwHwYDVR0j BBgwFoAUiL0arqFtiiRVBBbNuV4jIVIkmz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjBjNmQ2OS02MjkwLTQwMmYtYTg0ZS1kMjg5YzZlOTNhNzMvMC84OEJEMUFBRUEx NkQ4QTI0NTUwNDE2Q0RCOTVFMjMyMTUyMjQ5QjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIzMjE1MjI0 OUIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIwYzZkNjktNjI5MC00MDJmLWE4 NGUtZDI4OWM2ZTkzYTczLzAvODhCRDFBQUVBMTZEOEEyNDU1MDQxNkNEQjk1RTIz MjE1MjI0OUIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVqmwA6IO9O8E6ivdEWRIG0L17uB0srZBA1 7brn1m/+1zLmZrHXDRQpIp1PhBoAdeOBeBCLSNiMKGfJhDbGONBMhD+cI6nzX7l2 gqVEUMe+nZzGorFkLNO2T87nweRw4KDljQfvT4QCpSZ6qgNXdE5kAaW1fzjGP3Tb VCRaIQ6YfKFNdfToWd/GL15JIcGZ7C25jYhI4iXGlP+hm5a1pSsj/z13npIP3Tpj r0fFiUnuGYqpIp69NfoegjMRlbxVhX+t7Z9OcZP6GrDHmyOota/ZVLskBqTSS5ah NSwHPEV/oyULpu70tq9Rg3snFR/yQnHvikOi0mTPBmk5g69Xhlw= -----END CERTIFICATE-----Generated at Sat May 18 19:20:39 2024 by rpki-client on console-fra.rpki-client.org