$ rpki-client -vvf repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft File: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft (raw, json) Hash identifier: Gooudp3lkXEv8q0YUr1gJhya3gnVcBOyYI9070spEds= Subject key identifier: 62:AA:5E:54:77:8E:3F:B4:D9:76:C5:BB:A7:FE:D2:7D:CD:00:D5:80 Authority key identifier: F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 Certificate issuer: /CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Certificate serial: 514D80BD524778117B7AC276F4F4FA1DB821665E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft Manifest number: 02B0 Signing time: Fri 17 May 2024 22:31:09 +0000 Manifest this update: Fri 17 May 2024 22:26:09 +0000 Manifest next update: Tue 21 May 2024 10:28:09 +0000 Files and hashes: 1: F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl (hash: pDofVz3EeSbLp2EjMHzAvJ0/fJ1CPh+qyo/TrKyqwRc=) 2: 3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (hash: 4fxeQutAHCIlBP4cv0mvnjFbleyvOk9Tizufv+tSvQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:4d:80:bd:52:47:78:11:7b:7a:c2:76:f4:f4:fa:1d:b8:21:66:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9D638DDA6C754F5CF82A174AE82F94D51E5E326 Validity Not Before: May 17 22:26:09 2024 GMT Not After : May 21 10:28:09 2024 GMT Subject: CN=62AA5E54778E3FB4D976C5BBA7FED27DCD00D580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:e5:f1:c4:c8:df:86:8f:1f:76:09:21:ea: be:15:0e:7a:52:ad:61:e8:a4:08:56:ce:56:08:a9: 3c:2c:f1:fd:2e:99:98:e6:83:c5:a7:85:42:b8:c5: 3f:01:13:37:8b:cb:26:34:9e:28:fe:da:6e:0b:e9: e2:35:b7:5d:da:b9:91:67:4c:46:7f:00:41:df:52: ab:46:fe:7d:e5:d2:52:ba:de:00:1b:53:8a:06:03: 18:e8:fb:9a:c9:d4:0c:d6:8a:99:7f:93:4a:bb:10: 3d:19:48:9d:54:0d:3d:de:a7:79:6d:f0:68:78:91: ec:78:82:6e:1d:c2:d9:48:8f:16:66:11:cd:b7:0f: 75:48:9a:34:8a:c9:73:cd:fd:8c:a1:12:34:17:49: 28:de:ba:ca:c3:48:20:05:ef:8f:f0:ba:46:17:7f: b0:a7:b3:b9:07:66:8b:fe:be:e5:6e:d7:ab:89:58: 81:a8:df:d3:ad:51:1c:78:ef:91:16:d0:ce:1d:b9: dc:bd:b1:11:67:29:19:86:56:65:9f:34:05:ab:78: ec:84:05:95:4b:36:a4:a7:a7:e0:f0:02:08:d6:bf: 87:79:94:3d:aa:c7:b0:9f:db:64:ae:a8:2c:9e:d3: a4:0d:d3:dd:9a:9f:27:b0:82:5b:80:f4:55:fb:cf: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AA:5E:54:77:8E:3F:B4:D9:76:C5:BB:A7:FE:D2:7D:CD:00:D5:80 X509v3 Authority Key Identifier: keyid:F9:D6:38:DD:A6:C7:54:F5:CF:82:A1:74:AE:82:F9:4D:51:E5:E3:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/F9D638DDA6C754F5CF82A174AE82F94D51E5E326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:1e:ca:96:68:27:90:d2:33:59:e2:41:e7:ae:e8:11:41:68: 20:f4:2a:78:b9:2c:f8:ec:07:fc:ee:5a:04:c7:00:5e:e3:52: d8:06:9c:58:ce:55:0d:9f:82:07:fe:42:b6:f6:f5:8e:94:7b: 69:4e:b7:da:1f:93:9a:76:47:d5:ab:c8:27:8d:23:69:b6:02: e7:93:e8:07:6b:ba:11:04:c7:c3:9f:32:30:b2:fb:45:49:ca: 44:85:33:60:a1:26:ac:cc:3d:46:ce:66:b4:ea:91:2e:e2:7f: 2e:8c:46:07:0e:9f:c5:18:49:bb:46:bc:bc:41:10:ff:ab:15: f8:55:87:1f:98:2d:f9:3b:ba:08:32:8d:ff:ce:72:d9:65:6a: 17:51:e3:7f:5b:c6:41:70:e3:ca:95:f4:23:37:95:48:f1:87: 73:1f:a3:50:98:81:ab:5c:15:73:f0:13:6f:05:e5:ab:d4:e9: 40:19:f3:59:0f:e2:9c:44:a3:33:10:36:99:12:db:61:9a:5a: 42:87:d7:3f:fe:36:34:b5:15:48:2c:b1:18:9f:f4:a5:6a:0a: 40:e8:59:46:48:50:e0:de:44:32:5d:40:03:c6:98:9e:86:4c: f2:74:95:e8:06:a7:9f:ba:99:26:9f:bf:82:58:e3:dd:42:fe: a7:15:e6:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUU2AvVJHeBF7esJ29PT6HbghZl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1 MUU1RTMyNjAeFw0yNDA1MTcyMjI2MDlaFw0yNDA1MjExMDI4MDlaMDMxMTAvBgNV BAMTKDYyQUE1RTU0Nzc4RTNGQjREOTc2QzVCQkE3RkVEMjdEQ0QwMEQ1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNeXxxMjfho8fdgkh6r4VDnpS rWHopAhWzlYIqTws8f0umZjmg8WnhUK4xT8BEzeLyyY0nij+2m4L6eI1t13auZFn TEZ/AEHfUqtG/n3l0lK63gAbU4oGAxjo+5rJ1AzWipl/k0q7ED0ZSJ1UDT3ep3lt 8Gh4kex4gm4dwtlIjxZmEc23D3VImjSKyXPN/YyhEjQXSSjeusrDSCAF74/wukYX f7Cns7kHZov+vuVu16uJWIGo39OtURx475EW0M4dudy9sRFnKRmGVmWfNAWreOyE BZVLNqSnp+DwAgjWv4d5lD2qx7Cf22SuqCye06QN092anyewgluA9FX7z+TLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYqpeVHeOP7TZdsW7p/7Sfc0A1YAwHwYDVR0j BBgwFoAU+dY43abHVPXPgqF0roL5TVHl4yYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWE3M2QwNC0yMTRmLTQ2YjgtOTc0Ni02MmNkZTg1NTg4ZmEvMC9GOUQ2MzhEREE2 Qzc1NEY1Q0Y4MkExNzRBRTgyRjk0RDUxRTVFMzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5NEQ1MUU1 RTMyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVhNzNkMDQtMjE0Zi00NmI4LTk3 NDYtNjJjZGU4NTU4OGZhLzAvRjlENjM4RERBNkM3NTRGNUNGODJBMTc0QUU4MkY5 NEQ1MUU1RTMyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8eypZoJ5DSM1niQeeu6BFBaCD0Kni5LPjs B/zuWgTHAF7jUtgGnFjOVQ2fggf+Qrb29Y6Ue2lOt9ofk5p2R9WryCeNI2m2AueT 6AdruhEEx8OfMjCy+0VJykSFM2ChJqzMPUbOZrTqkS7ify6MRgcOn8UYSbtGvLxB EP+rFfhVhx+YLfk7uggyjf/OctllahdR439bxkFw48qV9CM3lUjxh3Mfo1CYgatc FXPwE28F5avU6UAZ81kP4pxEozMQNpkS22GaWkKH1z/+NjS1FUgssRif9KVqCkDo WUZIUODeRDJdQAPGmJ6GTPJ0legGp5+6mSafv4JY491C/qcV5l8= -----END CERTIFICATE-----Generated at Fri May 17 23:37:26 2024 by rpki-client on console-ams.rpki-client.org