$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: Hce54gpyJwmWHTyhZIliCTcgGQUaMnTgnptbCfhXT6Q= Subject key identifier: 3F:F4:E5:AE:16:88:DC:F8:6D:AE:87:D8:FD:25:E2:D3:4E:9C:B2:AC Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 48E12FBCA1A4912F697D01CCD40BB9F692AD6B93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 042F Signing time: Sat 18 May 2024 13:01:51 +0000 Manifest this update: Sat 18 May 2024 12:56:51 +0000 Manifest next update: Tue 21 May 2024 13:56:51 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: OMySImfpgyCIMlwLth368LnTxjS5g3j3UZAHGZWt0KA=) 2: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: cSdngTV94O65yDIZ0g4l51QfCkFo9al7+56w1pvMiBg=) 3: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: rWco2WC4QLmF1ai4sCCQFFt6DHmi/XW8at0kv+Q3Eog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 13:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e1:2f:bc:a1:a4:91:2f:69:7d:01:cc:d4:0b:b9:f6:92:ad:6b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: May 18 12:56:51 2024 GMT Not After : May 21 13:56:51 2024 GMT Subject: CN=3FF4E5AE1688DCF86DAE87D8FD25E2D34E9CB2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:8c:3b:9a:80:3e:ba:62:16:89:85:cb:98: bb:46:54:89:ee:c8:21:8d:79:9b:d9:4e:b8:57:4b: 5b:9d:54:62:6c:33:d6:7b:50:5a:76:16:4f:51:72: a7:d7:69:61:18:4b:f3:35:4f:35:d6:30:a3:be:56: cf:99:8a:c2:59:ab:e1:46:0b:9e:d6:11:c9:8b:42: 90:b3:f5:02:3f:48:e3:61:ac:e0:5d:5e:6b:c3:1a: de:05:e2:3d:b7:40:d8:5c:d0:0e:af:84:7b:ec:e5: 9f:aa:7a:97:82:94:b1:bd:ce:53:ed:e1:ba:85:8d: 4c:d2:c4:9e:e8:dc:eb:2b:c1:46:2f:44:36:2b:29: cb:ee:5a:51:9b:0c:23:11:b5:fc:c6:58:ab:a6:2d: 34:c8:f8:6a:f4:30:06:41:05:17:ec:f7:78:4f:76: ba:a5:f6:5c:38:ba:b4:3c:5c:54:00:b9:59:78:77: 54:ee:ce:cc:72:68:25:b8:cd:07:64:01:f4:e8:cc: 35:3e:28:39:52:28:c4:62:3f:eb:3e:57:0c:b5:bf: be:db:fb:89:c6:31:d7:ae:81:dd:7a:67:d7:dc:62: 0b:14:51:b8:2d:8d:7b:df:db:04:b1:7f:3b:76:a3: b0:e4:62:80:2e:2a:ac:c1:de:51:0d:66:7d:ef:a0: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F4:E5:AE:16:88:DC:F8:6D:AE:87:D8:FD:25:E2:D3:4E:9C:B2:AC X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f2:91:cc:d4:c4:59:f4:4a:d8:db:99:66:5a:aa:7b:a4:d1: 92:ff:5e:07:40:28:64:c8:37:f8:13:14:cf:05:31:b5:4a:c3: cf:03:d6:20:aa:0c:07:90:ba:7a:9d:1a:b2:f2:2e:cc:c5:32: 1d:15:eb:4e:c0:d1:d5:1b:4e:1d:81:92:ac:71:dc:8a:a0:0d: 38:65:dd:60:5e:e0:60:76:12:38:21:7e:34:84:03:1b:d6:64: b0:9a:47:87:83:69:68:29:6d:f8:30:c0:1c:52:db:2c:92:de: 59:b6:09:b5:7c:07:19:97:5b:d0:0b:e0:b5:5e:87:f8:00:c9: cf:15:29:aa:12:38:54:5a:9f:39:f0:11:cd:e6:4f:16:10:e5: a5:d3:3c:64:39:f9:c9:48:cc:67:47:f2:6c:e0:aa:c6:bf:e9: a4:21:9b:58:f6:af:33:d8:55:44:ca:99:83:b4:f0:60:e0:70: 74:4d:d1:52:df:27:90:df:a7:b5:8d:56:a5:36:13:b6:f8:de: 4b:36:a2:98:e8:73:68:b2:c0:b7:e1:e8:c1:2b:c5:37:1c:13: 1d:13:25:10:ac:11:da:91:bc:89:1b:e6:49:15:dc:5e:76:cd: 39:de:d7:c1:6d:62:3a:1e:67:07:62:14:b1:78:81:c5:29:25: 12:d3:5f:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSOEvvKGkkS9pfQHM1Au59pKta5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNDA1MTgxMjU2NTFaFw0yNDA1MjExMzU2NTFaMDMxMTAvBgNV BAMTKDNGRjRFNUFFMTY4OERDRjg2REFFODdEOEZEMjVFMkQzNEU5Q0IyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMow7moA+umIWiYXLmLtGVInu yCGNeZvZTrhXS1udVGJsM9Z7UFp2Fk9RcqfXaWEYS/M1TzXWMKO+Vs+ZisJZq+FG C57WEcmLQpCz9QI/SONhrOBdXmvDGt4F4j23QNhc0A6vhHvs5Z+qepeClLG9zlPt 4bqFjUzSxJ7o3OsrwUYvRDYrKcvuWlGbDCMRtfzGWKumLTTI+Gr0MAZBBRfs93hP drql9lw4urQ8XFQAuVl4d1TuzsxyaCW4zQdkAfTozDU+KDlSKMRiP+s+Vwy1v77b +4nGMdeugd16Z9fcYgsUUbgtjXvf2wSxfzt2o7DkYoAuKqzB3lENZn3voK8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP/TlrhaI3PhtrofY/SXi006csqwwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHykczUxFn0StjbmWZaqnuk0ZL/XgdAKGTI N/gTFM8FMbVKw88D1iCqDAeQunqdGrLyLszFMh0V607A0dUbTh2Bkqxx3IqgDThl 3WBe4GB2EjghfjSEAxvWZLCaR4eDaWgpbfgwwBxS2yyS3lm2CbV8BxmXW9AL4LVe h/gAyc8VKaoSOFRanznwEc3mTxYQ5aXTPGQ5+clIzGdH8mzgqsa/6aQhm1j2rzPY VUTKmYO08GDgcHRN0VLfJ5Dfp7WNVqU2E7b43ks2opjoc2iywLfh6MErxTccEx0T JRCsEdqRvIkb5kkV3F52zTne18FtYjoeZwdiFLF4gcUpJRLTX0A= -----END CERTIFICATE-----Generated at Sat May 18 13:30:07 2024 by rpki-client on console-fra.rpki-client.org