$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft File: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json) Hash identifier: U/PvbCvhIKYFaeWr+F4i7zYUAfYyAFuCH16u6GfoXVM= Subject key identifier: 33:6D:51:6D:09:54:A7:3E:EC:0B:AC:0B:39:7E:FC:CB:00:5E:85:52 Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Certificate serial: 6501797B89FDA8765D700C2E73DA74695C1C14DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft Manifest number: D7 Signing time: Wed 22 May 2024 00:10:04 +0000 Manifest this update: Wed 22 May 2024 00:05:04 +0000 Manifest next update: Sat 25 May 2024 07:07:04 +0000 Files and hashes: 1: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: 3FEYylsArtybYmuKvmsTFkOsn9fblf9BIIKjbmscbPA=) 2: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: ICHLru3ttqJrvtUB0G3jXEoAZOgThf6FI+tEOSoxM28=) 3: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: VhPkgJgRuRIvFBfp5KrcbqFqQDCxgmuJXLYmVyfVrlY=) 4: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: 1sCdYqliqmouQr9aO3moY0v3zqzk2NgBsVyNMs0i8Xo=) 5: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: ZGKVuFj7T5aaVSU8VpgBF2DIJjZ5gskuohbO2L3axCo=) 6: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: M4G3+2ND4JNQkzKKiPu/TTGwUpDm4YJaaeAdjCfIIk4=) 7: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: ltH5xnCskoS1Or603mmRx68ZM/Y4nFtvCENpOq1SJoM=) 8: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: hp55s1aaqtg0/53MqP8UsZKmOzBqmgyF+uAtnUwRJl0=) 9: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: M1XX69YA4h/dY2a6lbkkrJT2oZb1KyNMzJp9mQ1WMso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 00:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:01:79:7b:89:fd:a8:76:5d:70:0c:2e:73:da:74:69:5c:1c:14:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Validity Not Before: May 22 00:05:04 2024 GMT Not After : May 25 07:07:04 2024 GMT Subject: CN=336D516D0954A73EEC0BAC0B397EFCCB005E8552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:4a:a9:6f:9b:7e:d7:3c:18:39:8e:02:e9: 89:eb:71:95:d1:97:f6:8d:09:25:2b:79:13:ac:a4: a4:a8:4f:50:89:ea:d5:23:c7:8e:f3:9d:b2:b3:f9: 0e:a1:bc:cf:17:17:39:45:31:ea:46:29:f6:02:3d: 62:06:6a:7c:f4:8f:8c:af:02:c1:ac:f8:dd:95:69: 36:70:ed:8a:3b:ae:1d:f1:61:fb:43:a6:91:38:b0: c3:f0:8d:76:66:3b:53:8a:89:c9:99:ab:8d:77:0b: 6c:29:eb:eb:2d:53:fd:14:6c:5b:66:85:ae:cf:f7: ed:53:03:fd:16:64:0b:8a:db:88:76:3a:65:69:4e: 35:f3:74:68:0b:d4:f4:33:80:2b:2b:d1:57:95:e1: 0f:d8:2e:5a:dc:53:d8:8f:16:0d:8f:5a:cc:1e:a6: bd:3c:b4:4b:55:61:6e:0a:df:4b:af:99:ae:68:5c: 0d:1f:17:b0:a7:7b:f6:fb:85:da:04:b7:71:66:ed: 83:33:8b:b2:b5:a9:8c:e5:09:54:ba:f4:22:2d:42: fe:55:2d:bd:88:79:36:ed:ba:22:4a:4c:47:06:44: 47:db:0d:af:b6:54:b4:54:cb:3e:a8:d8:78:c1:3d: 79:52:eb:70:6e:be:a9:18:6e:3d:e9:05:2b:31:71: d6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6D:51:6D:09:54:A7:3E:EC:0B:AC:0B:39:7E:FC:CB:00:5E:85:52 X509v3 Authority Key Identifier: keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:09:9e:3b:68:bb:d8:0d:79:a2:24:ed:eb:a7:81:ba:32:ec: d7:73:db:64:69:fe:7a:fb:ea:4f:c4:55:a7:c4:df:6f:af:2a: 1b:06:6d:5b:84:a3:c4:c9:f0:6a:d0:a9:fa:3e:89:f8:bf:10: dd:70:27:7d:4b:4c:29:47:c6:80:b7:48:8d:2f:f1:0d:1f:8e: 11:d6:20:16:10:a6:f4:14:cc:12:8d:28:c9:4e:15:03:85:e7: 33:f6:55:ad:e8:e1:ef:b4:ef:b8:97:f4:3e:dd:6e:9f:d3:0c: f6:95:6d:23:02:4f:b0:3e:18:58:77:87:a0:5f:67:fe:d3:03: 0b:10:99:cc:b1:56:30:9a:0a:60:2b:9d:38:74:67:80:25:0a: 4d:a7:07:58:24:50:ec:df:82:03:ff:23:e0:c2:f4:47:b7:35: 98:ba:a1:a1:52:74:b0:d6:24:cd:04:95:20:c8:29:16:35:71: a6:d2:68:f1:5f:38:0b:9c:8f:83:f5:d8:40:44:aa:10:e3:04: 94:1b:38:99:04:04:b5:39:fe:62:05:e1:84:14:16:82:9d:c8: bf:f8:7d:72:8c:bd:c1:7a:c6:da:e5:82:31:39:a3:93:79:6a: b3:f4:81:7f:fb:2a:e5:18:a8:34:33:68:07:be:94:c0:27:4f: 7a:cc:bc:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQF5e4n9qHZdcAwuc9p0aVwcFN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw REMxNDY0RjAeFw0yNDA1MjIwMDA1MDRaFw0yNDA1MjUwNzA3MDRaMDMxMTAvBgNV BAMTKDMzNkQ1MTZEMDk1NEE3M0VFQzBCQUMwQjM5N0VGQ0NCMDA1RTg1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmkqpb5t+1zwYOY4C6YnrcZXR l/aNCSUreROspKSoT1CJ6tUjx47znbKz+Q6hvM8XFzlFMepGKfYCPWIGanz0j4yv AsGs+N2VaTZw7Yo7rh3xYftDppE4sMPwjXZmO1OKicmZq413C2wp6+stU/0UbFtm ha7P9+1TA/0WZAuK24h2OmVpTjXzdGgL1PQzgCsr0VeV4Q/YLlrcU9iPFg2PWswe pr08tEtVYW4K30uvma5oXA0fF7Cne/b7hdoEt3Fm7YMzi7K1qYzlCVS69CItQv5V Lb2IeTbtuiJKTEcGREfbDa+2VLRUyz6o2HjBPXlS63BuvqkYbj3pBSsxcdb5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM21RbQlUpz7sC6wLOX78ywBehVIwHwYDVR0j BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx NDY0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURE RDcwREMxNDY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQJnjtou9gNeaIk7eungboy7Ndz22Rp/nr7 6k/EVafE32+vKhsGbVuEo8TJ8GrQqfo+ifi/EN1wJ31LTClHxoC3SI0v8Q0fjhHW IBYQpvQUzBKNKMlOFQOF5zP2Va3o4e+077iX9D7dbp/TDPaVbSMCT7A+GFh3h6Bf Z/7TAwsQmcyxVjCaCmArnTh0Z4AlCk2nB1gkUOzfggP/I+DC9Ee3NZi6oaFSdLDW JM0ElSDIKRY1cabSaPFfOAucj4P12EBEqhDjBJQbOJkEBLU5/mIF4YQUFoKdyL/4 fXKMvcF6xtrlgjE5o5N5arP0gX/7KuUYqDQzaAe+lMAnT3rMvAY= -----END CERTIFICATE-----Generated at Wed May 22 01:28:12 2024 by rpki-client on console-ams.rpki-client.org