$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: +MTLom5pDa70230kkejaZ2YOkV7YvR94zQFQo6qNa9s= Subject key identifier: E3:2D:E5:91:83:5B:CB:54:AE:CC:D1:68:5E:56:89:4C:CC:E6:20:B5 Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 174FE6B1DE87DC8F71668A4A73770089475DA97E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: 0F Signing time: Thu 27 Jun 2024 20:20:31 +0000 Manifest this update: Thu 27 Jun 2024 20:15:31 +0000 Manifest next update: Mon 01 Jul 2024 04:16:31 +0000 Files and hashes: 1: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: SCqKZWrRiy8nw8cakY/jAbd2qy6+t2kss9DaTtS0TyA=) 2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: K5oquwrLK66NgAAxhssyU9cE1S+99n3MDQtPouQSzd0=) 3: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: BLfLnzsxFTreE9m7xrxS+MD1+botyjf+8AgOiJMBCOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 01:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4f:e6:b1:de:87:dc:8f:71:66:8a:4a:73:77:00:89:47:5d:a9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Jun 27 20:15:31 2024 GMT Not After : Jul 1 04:16:31 2024 GMT Subject: CN=E32DE591835BCB54AECCD1685E56894CCCE620B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:38:c2:e8:50:b8:ad:b1:83:19:e8:7c:f3:7a: b5:e6:fe:82:c7:8c:ee:82:36:f7:37:a0:79:29:fe: 24:0e:ce:b6:a9:f7:95:9d:a8:2d:1f:8b:97:8d:d7: c0:0d:f5:17:45:40:37:c4:7f:00:8d:1c:ca:de:e1: f9:3c:98:67:77:cd:18:6f:20:c7:83:94:fa:9c:4f: 8c:da:73:9f:b5:45:39:b5:f8:af:67:a5:9e:4b:c1: b5:f1:76:21:46:eb:20:b0:7e:3b:2e:84:0e:b7:0d: 1b:cd:4b:c0:08:0d:ef:58:bb:9c:54:fe:2e:d3:ae: 5e:e6:a7:bd:e0:0c:a8:27:1f:1f:1d:46:f4:69:8c: 72:aa:bb:d4:7f:59:c5:c3:ac:9f:1c:e3:85:bd:ec: 9a:17:b4:ca:34:63:1e:54:c2:c7:39:6e:e4:6d:0e: 5d:c8:d5:94:2f:80:fa:bf:46:f4:14:c0:64:27:e4: 3d:31:54:ea:25:f0:73:f2:e5:05:85:d1:ba:79:21: d3:04:f3:a7:ca:ca:3e:5b:f6:65:c9:19:3f:66:e2: c5:4a:d1:e1:3f:0c:63:8b:a9:47:e5:94:be:76:52: d8:32:17:00:03:e4:d5:5a:98:2e:19:c6:98:ee:4b: 29:83:0b:7b:99:a9:61:67:57:f4:73:71:b6:28:31: 8b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:E5:91:83:5B:CB:54:AE:CC:D1:68:5E:56:89:4C:CC:E6:20:B5 X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:27:ad:eb:8c:63:9c:b2:e7:ef:5a:29:04:38:71:9d:e9:d4: b5:48:8c:ac:44:4f:60:fc:f3:a0:16:c5:30:a2:32:29:8a:40: ae:ab:75:e5:6f:f9:cb:9d:1c:42:4f:67:15:5b:c4:09:ea:b0: bb:bb:c1:9b:51:b2:f4:a1:5b:05:f4:7e:97:2f:c5:bf:99:6f: 67:2c:94:6a:a4:e5:4e:f2:5c:80:25:23:ef:ee:c2:af:ac:c5: 41:8c:df:a5:12:3a:1e:b2:37:88:5e:b9:21:0a:79:0b:cb:18: e6:5e:5a:55:c0:df:61:26:03:75:8a:f0:1e:59:e7:62:81:4f: a0:a5:5f:03:e9:bf:61:58:13:9a:d6:91:af:84:63:0a:5e:66: 33:8a:b3:59:a9:b4:13:82:f6:85:56:3c:f3:b2:49:cf:17:72: 88:39:5e:b4:6e:1a:52:43:14:58:bb:b3:f6:86:ac:d7:ec:cd: cc:d3:4c:dd:1f:c5:2b:8a:92:bd:1e:f7:22:7d:96:14:34:e8: b0:7e:4d:17:16:0b:20:32:3f:75:10:c0:ae:5a:c3:9a:07:68: 3e:41:6f:df:90:72:96:3a:f1:43:ac:da:f0:3f:57:72:95:d6: 56:d5:60:e7:f8:58:f4:06:f0:56:24:7e:72:46:db:6d:03:11: 73:81:40:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF0/msd6H3I9xZopKc3cAiUddqX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNDA2MjcyMDE1MzFaFw0yNDA3MDEwNDE2MzFaMDMxMTAvBgNV BAMTKEUzMkRFNTkxODM1QkNCNTRBRUNDRDE2ODVFNTY4OTRDQ0NFNjIwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0OMLoULitsYMZ6HzzerXm/oLH jO6CNvc3oHkp/iQOzrap95WdqC0fi5eN18AN9RdFQDfEfwCNHMre4fk8mGd3zRhv IMeDlPqcT4zac5+1RTm1+K9npZ5LwbXxdiFG6yCwfjsuhA63DRvNS8AIDe9Yu5xU /i7Trl7mp73gDKgnHx8dRvRpjHKqu9R/WcXDrJ8c44W97JoXtMo0Yx5Uwsc5buRt Dl3I1ZQvgPq/RvQUwGQn5D0xVOol8HPy5QWF0bp5IdME86fKyj5b9mXJGT9m4sVK 0eE/DGOLqUfllL52UtgyFwAD5NVamC4ZxpjuSymDC3uZqWFnV/RzcbYoMYu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4y3lkYNby1SuzNFoXlaJTMzmILUwHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACknreuMY5yy5+9aKQQ4cZ3p1LVIjKxET2D8 86AWxTCiMimKQK6rdeVv+cudHEJPZxVbxAnqsLu7wZtRsvShWwX0fpcvxb+Zb2cs lGqk5U7yXIAlI+/uwq+sxUGM36USOh6yN4heuSEKeQvLGOZeWlXA32EmA3WK8B5Z 52KBT6ClXwPpv2FYE5rWka+EYwpeZjOKs1mptBOC9oVWPPOySc8Xcog5XrRuGlJD FFi7s/aGrNfszczTTN0fxSuKkr0e9yJ9lhQ06LB+TRcWCyAyP3UQwK5aw5oHaD5B b9+QcpY68UOs2vA/V3KV1lbVYOf4WPQG8FYkfnJG220DEXOBQNE= -----END CERTIFICATE-----Generated at Thu Jun 27 21:49:44 2024 by rpki-client on console-ams.rpki-client.org