$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json) Hash identifier: wc1kUvVXF7vaN40De145RMO3pO3nhVndcuuveE13pGc= Subject key identifier: FF:D3:EF:08:2C:B2:5C:35:B7:9F:F7:B0:09:E1:55:D9:B6:DB:3A:A4 Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 Certificate issuer: /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Certificate serial: 14ABA94E7C5513ADC07CC8FAB3B8851A899C0E19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft Manifest number: 0419 Signing time: Wed 22 May 2024 13:21:58 +0000 Manifest this update: Wed 22 May 2024 13:16:58 +0000 Manifest next update: Sat 25 May 2024 19:21:58 +0000 Files and hashes: 1: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: jEU4FHaabo7WN+MMZhn1CW1R/HJH/kGSv3G2UGlj5gA=) 2: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: H+Bnj3WCDcDY2Bh8Ip/ASYkLSA4cgQtT0fWvHiWcuq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ab:a9:4e:7c:55:13:ad:c0:7c:c8:fa:b3:b8:85:1a:89:9c:0e:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Validity Not Before: May 22 13:16:58 2024 GMT Not After : May 25 19:21:58 2024 GMT Subject: CN=FFD3EF082CB25C35B79FF7B009E155D9B6DB3AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:f2:79:4d:2b:5c:0b:90:b2:b2:0f:e4:e7: bb:b6:aa:2b:40:b8:22:13:fc:f9:42:02:22:13:f9: d1:c4:c4:cf:da:38:17:6d:22:e8:25:6b:05:df:6c: ed:ca:9e:4f:40:ed:65:61:92:e5:af:c9:aa:98:ee: 44:3c:bf:f6:f7:e4:1c:a5:d1:06:fb:65:92:10:5a: 92:59:cf:c2:f8:79:38:f9:66:c3:45:2e:e5:b8:09: 8c:96:74:b9:fc:cb:82:f8:83:71:84:b1:ba:c5:78: ec:81:b7:41:31:ba:d4:f6:d8:5b:67:9e:61:f7:2f: 66:7f:73:aa:aa:6e:8f:2f:89:7f:22:c1:b9:60:0a: ca:c3:e1:49:84:07:e2:9d:4d:0a:8d:50:46:11:49: 41:f0:2f:4a:11:a5:1d:c7:44:f5:07:f3:2d:ad:0c: af:7d:89:b4:51:05:2e:39:61:97:da:8e:2b:40:45: 25:d0:cf:b0:a8:84:ff:47:02:0f:7b:93:76:9f:cb: dd:9e:6e:47:39:ad:a1:12:18:1d:a3:6c:37:03:67: 17:9f:38:d8:c5:85:1e:eb:9c:25:97:48:95:f4:23: aa:98:ca:91:24:f8:a5:4d:bf:2c:db:63:7e:a8:fd: 54:27:4e:31:7e:1e:a2:3e:04:79:27:09:9f:1b:51: ea:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D3:EF:08:2C:B2:5C:35:B7:9F:F7:B0:09:E1:55:D9:B6:DB:3A:A4 X509v3 Authority Key Identifier: keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:09:8e:6a:74:d7:ac:6b:7d:6d:7f:dc:aa:35:10:13:2d:96: 12:29:64:9d:b4:e5:dc:0f:df:4e:9c:2f:ed:86:81:5c:c0:73: 1e:d1:1d:15:5d:0e:29:4a:af:06:6e:c3:11:eb:ec:16:01:19: 92:37:07:ec:97:4e:95:c5:54:bb:bc:9e:f6:54:16:58:e0:ea: 40:0e:d5:cc:51:47:09:e6:39:7f:f9:67:50:42:77:1f:a7:48: 22:fa:87:92:a9:18:b8:0e:bc:c2:f7:45:6b:59:37:21:82:95: 75:9c:0e:4b:3a:0c:c9:3c:db:c8:0e:d4:4a:0e:d3:6a:fb:4c: de:fd:9d:c8:48:85:49:a8:27:88:f0:1b:11:41:83:6a:94:71: 47:4c:fc:34:35:a6:b8:4a:ae:0c:68:b6:41:db:62:7e:72:c7: 06:08:0e:5f:57:b0:d8:42:23:8c:d7:d0:6d:f1:1a:cd:a4:b2: ab:7d:96:31:e4:59:56:e4:76:1a:f5:a7:99:79:ed:4a:c6:8a: 7a:a4:4d:3c:ff:e8:3d:3f:eb:07:4a:b1:77:67:ec:2e:e7:a6: 5d:7b:e0:a1:98:05:7c:df:20:04:b7:f6:eb:8a:d5:21:a5:30: 34:f3:be:16:0f:75:e9:05:82:37:18:82:52:cb:cb:04:0f:e0: b2:4b:90:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKupTnxVE63AfMj6s7iFGomcDhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMy NEIxRDk4MTAeFw0yNDA1MjIxMzE2NThaFw0yNDA1MjUxOTIxNThaMDMxMTAvBgNV BAMTKEZGRDNFRjA4MkNCMjVDMzVCNzlGRjdCMDA5RTE1NUQ5QjZEQjNBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cfJ5TStcC5Cysg/k57u2qitA uCIT/PlCAiIT+dHExM/aOBdtIuglawXfbO3Knk9A7WVhkuWvyaqY7kQ8v/b35Byl 0Qb7ZZIQWpJZz8L4eTj5ZsNFLuW4CYyWdLn8y4L4g3GEsbrFeOyBt0ExutT22Ftn nmH3L2Z/c6qqbo8viX8iwblgCsrD4UmEB+KdTQqNUEYRSUHwL0oRpR3HRPUH8y2t DK99ibRRBS45YZfajitARSXQz7CohP9HAg97k3afy92ebkc5raESGB2jbDcDZxef ONjFhR7rnCWXSJX0I6qYypEk+KVNvyzbY36o/VQnTjF+HqI+BHknCZ8bUeorAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/9PvCCyyXDW3n/ewCeFV2bbbOqQwHwYDVR0j BBgwFoAUu2nxPSztxfNIzqHBu/bh3CSx2YEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMC9CQjY5RjEzRDJD RURDNUYzNDhDRUExQzFCQkY2RTFEQzI0QjFEOTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMyNEIx RDk4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh ZTYtOGM3Nzc2OWM1ZGVlLzAvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUx REMyNEIxRDk4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcJjmp016xrfW1/3Ko1EBMtlhIpZJ205dwP 306cL+2GgVzAcx7RHRVdDilKrwZuwxHr7BYBGZI3B+yXTpXFVLu8nvZUFljg6kAO 1cxRRwnmOX/5Z1BCdx+nSCL6h5KpGLgOvML3RWtZNyGClXWcDks6DMk828gO1EoO 02r7TN79nchIhUmoJ4jwGxFBg2qUcUdM/DQ1prhKrgxotkHbYn5yxwYIDl9XsNhC I4zX0G3xGs2ksqt9ljHkWVbkdhr1p5l57UrGinqkTTz/6D0/6wdKsXdn7C7npl17 4KGYBXzfIAS39uuK1SGlMDTzvhYPdekFgjcYglLLywQP4LJLkCI= -----END CERTIFICATE-----Generated at Wed May 22 20:05:59 2024 by rpki-client on console-ams.rpki-client.org