$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft File: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft (raw, json) Hash identifier: PQJV6t6cDpLfNYQVkU2CEHwb6uvVeU1bccKFoWbZALM= Subject key identifier: 8C:9A:53:55:23:B6:7C:46:5F:2A:46:2C:85:8D:75:0D:CF:A6:A8:25 Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Certificate serial: 6BC3BC81DD5E6F2B52EDCE43D7EF5ECA8C1EACF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft Manifest number: 043E Signing time: Sun 19 May 2024 07:10:41 +0000 Manifest this update: Sun 19 May 2024 07:05:41 +0000 Manifest next update: Wed 22 May 2024 16:50:41 +0000 Files and hashes: 1: 3131382e3135312e3232322e302f32342d3234203d3e203436303332.roa (hash: wV3mzM6WktIyo2CqHVsIocOV5QSwXhq7wNjEzBZcMLk=) 2: F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl (hash: jWx+LJ8SxWfSDNJ8IlVTp7hoMZvugoJV+bIiLJZVhMo=) 3: 3131382e3135312e3232332e302f32342d3234203d3e203436303332.roa (hash: EPr1m1oc2Rzl9xcRxX22+vQEOjWBX+SbMde4cfWhYjU=) 4: 3131382e3135312e3232302e302f32342d3234203d3e203436303332.roa (hash: Qz3VPAtsQ5pmTU4QezJpic7NPbrD51VE+5rq5XP0n9w=) 5: 3131382e3135312e3232312e302f32342d3234203d3e203436303332.roa (hash: C7/RuHJP7EiV+AKZ1QqrFL2lGyUEOj4RDS+futbS3hc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:c3:bc:81:dd:5e:6f:2b:52:ed:ce:43:d7:ef:5e:ca:8c:1e:ac:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8 Validity Not Before: May 19 07:05:41 2024 GMT Not After : May 22 16:50:41 2024 GMT Subject: CN=8C9A535523B67C465F2A462C858D750DCFA6A825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:31:a1:19:ef:0a:2e:3f:af:25:1e:ea:23: 21:7e:e4:2e:ea:f7:30:2d:cc:aa:95:3f:6a:42:a9: a8:9d:09:b6:3b:93:1c:40:82:03:f1:50:7a:0f:8d: 5c:9c:da:73:b5:b3:43:41:62:bc:3b:42:05:b6:1e: 0e:69:05:f3:52:2a:9b:86:49:6d:ab:dc:26:c9:9b: 44:a7:9d:8f:10:b2:3a:8f:34:b4:0e:fd:a1:11:e0: d8:07:6c:48:ee:5c:fc:41:ca:b7:e4:78:35:ed:98: ab:44:8c:74:54:7c:db:6a:f2:76:ca:91:ea:df:bb: 40:bd:f8:ed:49:98:29:48:5b:e0:97:df:33:f5:69: fd:76:12:ff:20:77:d0:c0:05:f6:27:83:40:c9:77: ac:f9:e3:28:aa:80:08:0b:e9:f4:47:de:88:dc:a4: fe:84:6e:65:ff:1a:df:83:f5:3a:45:85:2b:cf:a2: 7a:6b:51:38:d8:1c:fd:86:25:6c:d4:76:13:24:86: a2:35:97:64:be:b4:dc:f9:e2:b5:52:7f:bb:93:b7: f9:c3:d6:f6:f7:04:ff:d4:07:b1:82:43:3e:84:83: 99:6e:48:2b:43:d5:2e:44:4a:e0:60:db:b3:7e:ec: 13:5d:d1:bc:c2:c1:2a:bd:96:96:4b:dc:37:22:4d: f8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9A:53:55:23:B6:7C:46:5F:2A:46:2C:85:8D:75:0D:CF:A6:A8:25 X509v3 Authority Key Identifier: keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cd:ff:e7:d4:f6:2c:26:3a:7c:b8:0d:98:d3:8f:7c:58:fd: 90:58:3c:8c:29:1f:70:61:42:fb:05:5c:6a:90:61:31:5c:06: f5:39:78:e4:04:10:cc:4b:2a:99:a0:af:7e:c0:60:bb:b9:24: 68:2e:8d:68:93:c2:2e:2d:58:d7:1a:97:b1:c8:54:9d:e5:49: b4:e3:09:4d:09:ef:e7:56:42:d1:8a:24:81:2e:07:18:20:95: 7a:77:be:34:af:43:d9:d9:f1:ff:6f:cf:60:dc:08:06:d4:de: ff:50:c9:e0:f2:72:6e:c9:4d:03:f4:85:2f:12:55:d1:97:1c: 58:26:28:d8:8e:57:b6:28:2a:86:08:df:56:9b:73:e2:e5:35: b8:83:30:92:14:49:8a:92:f9:57:b9:34:1b:5a:a7:25:f3:f1: 78:da:91:61:23:55:6f:e3:ac:1b:dc:f9:35:6d:82:7a:59:37: 45:36:bc:cb:28:b7:a0:54:4d:9f:bf:18:29:8a:20:c0:4c:3b: b8:81:7e:1f:6d:eb:02:1f:2c:03:48:d8:75:bf:d2:0e:44:c4: 1d:1d:32:81:d1:6e:0b:6e:a4:08:94:a2:7b:b7:a9:4a:6a:ad: a1:40:91:67:46:5e:df:e0:84:b5:8b:fd:59:4c:69:84:74:04: 1a:2f:72:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa8O8gd1ebytS7c5D1+9eyowerPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC RUIyM0ZFODAeFw0yNDA1MTkwNzA1NDFaFw0yNDA1MjIxNjUwNDFaMDMxMTAvBgNV BAMTKDhDOUE1MzU1MjNCNjdDNDY1RjJBNDYyQzg1OEQ3NTBEQ0ZBNkE4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6DGhGe8KLj+vJR7qIyF+5C7q 9zAtzKqVP2pCqaidCbY7kxxAggPxUHoPjVyc2nO1s0NBYrw7QgW2Hg5pBfNSKpuG SW2r3CbJm0SnnY8QsjqPNLQO/aER4NgHbEjuXPxByrfkeDXtmKtEjHRUfNtq8nbK kerfu0C9+O1JmClIW+CX3zP1af12Ev8gd9DABfYng0DJd6z54yiqgAgL6fRH3ojc pP6EbmX/Gt+D9TpFhSvPonprUTjYHP2GJWzUdhMkhqI1l2S+tNz54rVSf7uTt/nD 1vb3BP/UB7GCQz6Eg5luSCtD1S5ESuBg27N+7BNd0bzCwSq9lpZL3DciTfgZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjJpTVSO2fEZfKkYshY11Dc+mqCUwHwYDVR0j BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy M0ZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU3YjkwY2ItOGViZC00YzdiLThj MzEtMTMzYThiNGVkNjljLzAvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5 MDZCRUIyM0ZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzN/+fU9iwmOny4DZjTj3xY/ZBYPIwpH3Bh QvsFXGqQYTFcBvU5eOQEEMxLKpmgr37AYLu5JGgujWiTwi4tWNcal7HIVJ3lSbTj CU0J7+dWQtGKJIEuBxgglXp3vjSvQ9nZ8f9vz2DcCAbU3v9QyeDycm7JTQP0hS8S VdGXHFgmKNiOV7YoKoYI31abc+LlNbiDMJIUSYqS+Ve5NBtapyXz8XjakWEjVW/j rBvc+TVtgnpZN0U2vMsot6BUTZ+/GCmKIMBMO7iBfh9t6wIfLANI2HW/0g5ExB0d MoHRbgtupAiUonu3qUpqraFAkWdGXt/ghLWL/VlMaYR0BBovchQ= -----END CERTIFICATE-----Generated at Sun May 19 08:24:28 2024 by rpki-client on console-ams.rpki-client.org