$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: odCeFxWlCHYLbbcskzNMXkyKios4WKpFMkfJpoZ3EaU= Subject key identifier: 14:2E:1B:D2:E4:0C:7A:7C:AA:8E:F5:39:65:F1:95:EE:34:A3:FB:76 Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 58AB861EDC8D8C34CA570D85DD5691B5B6B56A6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 0117 Signing time: Sun 19 May 2024 00:51:00 +0000 Manifest this update: Sun 19 May 2024 00:46:00 +0000 Manifest next update: Wed 22 May 2024 04:17:00 +0000 Files and hashes: 1: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: S+iZ2vFMm+caBelJBGh3qclR+XaMzURLzk5zl/dIZ3E=) 2: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: DRkXKmiFuRO+mSuPZtquYt0e42Bcc2QyicFu8zLmXN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ab:86:1e:dc:8d:8c:34:ca:57:0d:85:dd:56:91:b5:b6:b5:6a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: May 19 00:46:00 2024 GMT Not After : May 22 04:17:00 2024 GMT Subject: CN=142E1BD2E40C7A7CAA8EF53965F195EE34A3FB76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:a9:cc:6c:cc:dc:e3:c2:6a:52:c1:74:64: a6:c6:b8:94:24:b1:5e:6a:25:c7:ed:2e:2e:61:c5: 32:5e:1c:e8:16:81:5b:48:76:2e:91:98:4b:5c:ba: 8f:6f:59:2f:cf:4c:ee:f5:80:8c:8c:4d:bf:6d:da: 17:19:af:48:3c:32:6f:2f:08:06:43:d9:c7:40:98: a5:f3:19:7e:e5:ff:9c:da:22:d2:47:1a:2a:ad:7b: 59:e3:84:5d:48:95:3a:02:e3:ec:45:e4:69:96:a4: 63:f5:75:3b:4d:59:90:71:dd:46:10:f7:6f:09:00: ae:87:76:97:0c:66:17:3e:59:1e:e6:dd:3d:5d:22: 8b:b5:ef:88:74:45:09:ef:e9:ea:56:25:e8:0f:46: 55:e1:ef:26:e6:28:ec:12:05:d1:22:ee:26:28:1c: 43:98:e8:69:e4:e6:17:32:99:1c:93:8e:ff:0a:0f: 44:6f:f1:ea:e7:7e:14:08:04:88:21:b3:c9:ec:e6: 4e:93:07:1f:d7:b6:54:67:c0:c6:1f:4f:f4:c9:8d: 11:c0:1c:ad:6c:ed:73:5e:2e:0f:16:c5:85:e4:f7: 72:a6:39:0d:b0:db:b0:81:d1:cf:85:2d:ad:e1:cd: 9a:d4:20:58:be:e9:6e:7a:99:0c:b6:4b:27:00:08: fd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2E:1B:D2:E4:0C:7A:7C:AA:8E:F5:39:65:F1:95:EE:34:A3:FB:76 X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:41:97:8c:a2:e2:c5:78:61:32:7a:d8:06:83:13:72:8b:d1: 8d:1a:29:13:9f:0e:45:c0:ba:a1:b5:4f:f0:d2:ad:a0:e1:e7: ac:cc:db:eb:9c:07:e9:3a:f3:8e:44:31:b7:c4:92:20:c3:a8: f0:ea:7a:3d:98:be:07:4a:57:15:fa:2b:57:4a:52:0a:d4:87: 70:8c:0c:40:2a:78:a9:0f:71:32:9d:e7:49:81:24:16:fd:58: 78:56:8e:b5:10:b3:bb:ed:6c:f6:2b:94:0f:28:88:69:f7:a2: e8:b1:23:ec:c4:07:ae:9b:b4:3a:c7:37:b8:eb:76:ed:32:19: 66:15:88:9b:b4:36:47:eb:78:00:78:b9:8d:c1:d7:8d:b8:79: bd:77:cc:8c:70:2f:9b:7e:79:94:3b:7e:1b:e4:e5:d2:07:c7: eb:fa:c9:c3:4c:ef:4d:74:28:dc:aa:22:cf:ee:95:bf:b1:04: c8:44:86:6a:a8:e3:4c:ec:c6:2e:fd:a7:5e:31:2d:3f:eb:59: 8b:ec:8b:fe:c6:0a:71:a6:0a:ae:76:7f:45:7a:f3:c5:70:a2: 05:f1:aa:fe:47:8b:0c:10:3c:ba:28:74:aa:96:60:22:3e:f4: 5f:4d:9a:4f:e4:03:d9:c9:4f:3a:1f:ee:2b:a5:95:63:43:03: 55:91:b5:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKuGHtyNjDTKVw2F3VaRtba1amwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNDA1MTkwMDQ2MDBaFw0yNDA1MjIwNDE3MDBaMDMxMTAvBgNV BAMTKDE0MkUxQkQyRTQwQzdBN0NBQThFRjUzOTY1RjE5NUVFMzRBM0ZCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIeanMbMzc48JqUsF0ZKbGuJQk sV5qJcftLi5hxTJeHOgWgVtIdi6RmEtcuo9vWS/PTO71gIyMTb9t2hcZr0g8Mm8v CAZD2cdAmKXzGX7l/5zaItJHGiqte1njhF1IlToC4+xF5GmWpGP1dTtNWZBx3UYQ 928JAK6HdpcMZhc+WR7m3T1dIou174h0RQnv6epWJegPRlXh7ybmKOwSBdEi7iYo HEOY6Gnk5hcymRyTjv8KD0Rv8ernfhQIBIghs8ns5k6TBx/XtlRnwMYfT/TJjRHA HK1s7XNeLg8WxYXk93KmOQ2w27CB0c+FLa3hzZrUIFi+6W56mQy2SycACP15AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFC4b0uQMenyqjvU5ZfGV7jSj+3YwHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhBl4yi4sV4YTJ62AaDE3KL0Y0aKROfDkXA uqG1T/DSraDh56zM2+ucB+k6845EMbfEkiDDqPDqej2YvgdKVxX6K1dKUgrUh3CM DEAqeKkPcTKd50mBJBb9WHhWjrUQs7vtbPYrlA8oiGn3ouixI+zEB66btDrHN7jr du0yGWYViJu0NkfreAB4uY3B1424eb13zIxwL5t+eZQ7fhvk5dIHx+v6ycNM7010 KNyqIs/ulb+xBMhEhmqo40zsxi79p14xLT/rWYvsi/7GCnGmCq52f0V688VwogXx qv5HiwwQPLoodKqWYCI+9F9Nmk/kA9nJTzof7iullWNDA1WRtdk= -----END CERTIFICATE-----Generated at Sun May 19 01:45:33 2024 by rpki-client on console-fra.rpki-client.org