$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: KR6WEpWOLoaYeYBBUJ3V6Kc8dh7+acICGmNvettaQa0= Subject key identifier: E4:4C:BA:18:CD:DF:1E:8D:D0:38:CF:22:AB:58:A1:13:42:0E:65:CF Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 7A84B1F651CBA7C905AF1B3C54836DD679C5569E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 0430 Signing time: Sat 18 May 2024 18:11:10 +0000 Manifest this update: Sat 18 May 2024 18:06:10 +0000 Manifest next update: Tue 21 May 2024 23:41:10 +0000 Files and hashes: 1: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: C7HEF+JAbklij8V6MylLACRM8E9wKPeS4d3Ihe1QTVI=) 2: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 6ZwFMr1lCyan5tjyLWx6yOp6cT7nD7aksMDt4hlpdrU=) 3: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: TMNFzpXPlotO6pYFBzJ/OSfWMPP6SAx4dFGBVVo9KWE=) 4: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: wmJ1WhCIzMdvKB4BFiKTpnA/vwNchHna3r4Aks6PoMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:84:b1:f6:51:cb:a7:c9:05:af:1b:3c:54:83:6d:d6:79:c5:56:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: May 18 18:06:10 2024 GMT Not After : May 21 23:41:10 2024 GMT Subject: CN=E44CBA18CDDF1E8DD038CF22AB58A113420E65CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:28:92:57:6f:7f:4d:1f:a2:02:a8:ea:18:88: 2e:e7:f5:20:c7:63:7f:70:4d:9e:38:b9:e2:36:18: 24:0d:1f:4e:9e:94:f2:c2:08:58:8c:76:b8:95:ba: 0d:4a:2a:6e:40:4d:02:7d:a1:14:37:27:d7:c3:6e: 1b:6a:6e:39:84:fd:51:61:63:a0:5d:fe:54:1a:b9: b1:e6:7c:96:29:69:cc:3c:82:a4:c8:e5:c2:f7:1f: 2a:d4:4c:89:25:44:27:cb:89:6b:63:f0:f9:9f:94: 28:d5:ba:da:53:29:9a:25:bc:3b:5b:61:cc:9d:bb: 14:ae:d9:1e:a7:d0:ee:25:39:3e:30:58:77:9a:12: b0:6a:ca:85:5b:e4:80:18:52:3d:2a:dc:51:3d:56: 5f:09:b9:d3:6f:ea:a0:b0:43:1e:17:55:24:89:43: f2:65:46:35:62:4a:97:9c:9c:9e:eb:ff:d2:e8:a4: 2b:b2:1f:a0:b5:af:d4:c7:68:77:f2:ad:6f:2d:30: c8:27:a9:1e:a2:69:e4:35:17:8a:97:94:1f:7e:d9: e1:c5:c6:fa:5f:c3:60:7a:ba:5b:50:5a:8e:c3:1a: f2:e1:a1:fb:76:2c:30:15:a4:77:3d:16:58:ad:c0: 57:5e:a9:14:f6:a5:57:f4:af:6e:1a:20:ed:98:f3: e0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4C:BA:18:CD:DF:1E:8D:D0:38:CF:22:AB:58:A1:13:42:0E:65:CF X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:57:d6:db:f5:8c:ef:ca:8b:7b:aa:79:9e:8e:3c:45:8b:7c: 7c:fa:0b:3d:f5:cf:63:ea:bc:51:c2:5f:21:14:62:8b:47:0e: d5:40:16:e8:7d:15:7f:70:8a:e6:01:1f:be:b1:64:bb:4d:d9: 15:64:24:2d:66:ff:47:5d:d2:51:a6:d0:13:49:6a:1e:e9:c3: e9:75:ae:5b:84:a6:c3:c8:81:88:c7:d7:b0:e0:e9:fa:b5:45: 74:f3:00:89:f0:23:22:a8:f1:c0:cc:8a:48:3d:5f:14:65:53: c2:15:dd:45:01:c7:c7:3b:7d:82:ab:d1:d5:d9:03:24:5e:96: 19:63:81:b2:c9:5d:90:e6:fd:9d:29:44:b5:5b:5e:6b:0b:94: 35:b9:21:b9:b5:c3:2c:c6:a4:e1:56:6c:20:ef:74:ae:30:7d: a4:72:e8:55:7d:eb:b4:1c:34:47:5b:9f:85:76:32:ab:57:53: 88:53:1e:8b:29:17:79:2f:c6:28:22:74:10:bb:ef:9c:ef:78: 01:9e:d7:2c:3a:70:c4:d4:f3:0a:9e:a1:12:1b:f8:3c:e7:6a: 8d:20:df:0e:2c:19:8b:45:9e:4e:ac:43:fc:e1:bd:f3:55:56: e7:6f:db:6f:0f:95:1a:74:87:66:aa:97:bb:77:19:c9:19:e7: 54:1a:d0:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoSx9lHLp8kFrxs8VINt1nnFVp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNDA1MTgxODA2MTBaFw0yNDA1MjEyMzQxMTBaMDMxMTAvBgNV BAMTKEU0NENCQTE4Q0RERjFFOEREMDM4Q0YyMkFCNThBMTEzNDIwRTY1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKJJXb39NH6ICqOoYiC7n9SDH Y39wTZ44ueI2GCQNH06elPLCCFiMdriVug1KKm5ATQJ9oRQ3J9fDbhtqbjmE/VFh Y6Bd/lQaubHmfJYpacw8gqTI5cL3HyrUTIklRCfLiWtj8PmflCjVutpTKZolvDtb YcyduxSu2R6n0O4lOT4wWHeaErBqyoVb5IAYUj0q3FE9Vl8JudNv6qCwQx4XVSSJ Q/JlRjViSpecnJ7r/9LopCuyH6C1r9THaHfyrW8tMMgnqR6iaeQ1F4qXlB9+2eHF xvpfw2B6ultQWo7DGvLhoft2LDAVpHc9FlitwFdeqRT2pVf0r24aIO2Y8+BdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Ey6GM3fHo3QOM8iq1ihE0IOZc8wHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBX1tv1jO/Ki3uqeZ6OPEWLfHz6Cz31z2Pq vFHCXyEUYotHDtVAFuh9FX9wiuYBH76xZLtN2RVkJC1m/0dd0lGm0BNJah7pw+l1 rluEpsPIgYjH17Dg6fq1RXTzAInwIyKo8cDMikg9XxRlU8IV3UUBx8c7fYKr0dXZ AyRelhljgbLJXZDm/Z0pRLVbXmsLlDW5Ibm1wyzGpOFWbCDvdK4wfaRy6FV967Qc NEdbn4V2MqtXU4hTHospF3kvxigidBC775zveAGe1yw6cMTU8wqeoRIb+Dznao0g 3w4sGYtFnk6sQ/zhvfNVVudv228PlRp0h2aql7t3GckZ51Qa0Kk= -----END CERTIFICATE-----Generated at Sat May 18 18:46:23 2024 by rpki-client on console-fra.rpki-client.org