$ rpki-client -vvf repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft File: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft (raw, json) Hash identifier: Hup0teHtf7sg/OpBKlq8Z2/rYxUK9UoEMwNYDwq4EzY= Subject key identifier: DD:4A:CD:65:E9:B6:1A:99:8D:3C:FC:AA:5B:09:3D:CF:C1:0C:3A:D4 Authority key identifier: FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 Certificate issuer: /CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Certificate serial: 476BBB15571B7387B835FEB341E9DB3DD8669146 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft Manifest number: 025C Signing time: Sun 26 May 2024 13:11:04 +0000 Manifest this update: Sun 26 May 2024 13:06:04 +0000 Manifest next update: Wed 29 May 2024 20:14:04 +0000 Files and hashes: 1: 3130332e3135312e3134302e302f32342d3234203d3e203435333235.roa (hash: 61hxf4XH14/xTN1dAaTn91xVQ0auHUjg116EWfY8DeA=) 2: 3130332e3135312e3134312e302f32342d3234203d3e203435333235.roa (hash: aLyobDR5Pw85zlwbOE9VbFfTEvGpMCEKEcsHbj2VKh4=) 3: FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl (hash: OJ+wlw9/1ayV0+RGwSxYZO+X5NBIrjr1M7gcmdjvxx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 17:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6b:bb:15:57:1b:73:87:b8:35:fe:b3:41:e9:db:3d:d8:66:91:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3 Validity Not Before: May 26 13:06:04 2024 GMT Not After : May 29 20:14:04 2024 GMT Subject: CN=DD4ACD65E9B61A998D3CFCAA5B093DCFC10C3AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:d7:81:c8:3a:e2:cd:b4:4c:8e:26:aa:c2: 44:e1:7a:a7:6d:81:93:01:17:c1:c6:4d:f4:13:2c: 7f:86:03:04:9e:c0:71:26:bb:7d:0f:5d:2a:86:ce: 55:9b:19:e2:36:ba:33:d1:8b:03:de:00:41:91:37: 81:97:b9:9a:9a:88:48:01:49:48:db:aa:01:88:28: ad:6f:fd:a2:af:74:18:8f:46:35:4a:26:52:74:40: 5d:09:3a:b5:2c:2f:18:1f:76:9e:ee:cc:63:84:97: 19:5f:c0:bf:4f:7d:d8:ff:fb:af:67:96:4b:ad:71: a9:13:94:49:24:74:e7:55:1f:dc:a6:35:ff:da:e0: c8:5d:3e:74:82:f9:66:be:9d:2c:cb:03:57:14:37: 40:b6:ef:b9:49:1e:bf:8b:67:cd:70:53:e3:29:f3: 78:fd:c7:b4:f4:72:88:7d:bb:3f:a1:37:1b:53:49: 8d:d8:c8:cb:ba:60:87:ee:ef:cd:83:ce:be:23:3a: fc:fa:bb:d8:b4:0a:6c:7d:e7:98:b4:9c:97:43:c7: f0:58:43:5d:7a:36:a7:1c:67:0d:21:dd:49:86:c2: 8c:8e:f8:b9:dd:88:48:0b:55:c0:c4:75:0f:40:75: 5e:a4:9a:4f:bc:b0:df:e8:c3:a3:87:48:ea:c1:51: a1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4A:CD:65:E9:B6:1A:99:8D:3C:FC:AA:5B:09:3D:CF:C1:0C:3A:D4 X509v3 Authority Key Identifier: keyid:FC:D5:B5:62:FA:ED:9B:9D:67:F9:DE:5D:B7:05:78:BF:DB:00:57:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d47026a9-0c9a-4d79-ad67-2c9dbd366d0b/0/FCD5B562FAED9B9D67F9DE5DB70578BFDB0057B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:41:87:95:bb:65:15:07:96:da:b9:d3:78:bc:a2:1d:03:09: 56:7d:72:76:fc:96:3f:f6:14:0e:40:63:9d:23:4b:80:3b:d8: 35:41:20:03:bf:a8:40:66:bd:0c:2c:dd:d3:e4:84:07:47:57: 46:c7:92:9d:22:ac:22:59:65:98:a6:53:9e:88:e4:02:78:e0: eb:e9:42:18:31:23:4e:ba:9a:65:23:ad:e9:cb:b3:eb:31:8f: 26:88:4d:0d:8d:45:a0:4c:8d:fc:49:7d:0e:a6:5a:2c:b9:a1: 39:2e:76:80:7d:4f:7d:e3:cb:ca:67:0b:0f:7f:85:df:e5:78: ef:cd:7a:d8:ef:23:15:75:d6:da:1c:a3:59:01:07:59:9b:ed: 37:3e:2c:75:98:b1:2d:62:14:58:08:09:40:72:f8:ee:61:60: fd:2d:bc:f1:e7:63:4a:2a:ef:95:f8:03:02:6b:ff:49:36:0b: c9:fa:2a:75:a0:87:38:aa:bf:f3:4a:77:c9:63:bd:0c:7b:58: 08:5f:1e:93:5b:0a:e0:4c:b9:44:17:15:71:2f:a7:a5:4d:8b: d8:45:aa:33:24:ed:a0:fd:a9:22:9c:d9:ee:83:4d:d8:9a:fa: a5:68:13:aa:c9:bc:6f:b7:cb:a8:43:0e:71:74:51:ce:a4:bf: 47:77:5f:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR2u7FVcbc4e4Nf6zQenbPdhmkUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZE QjAwNTdCMzAeFw0yNDA1MjYxMzA2MDRaFw0yNDA1MjkyMDE0MDRaMDMxMTAvBgNV BAMTKERENEFDRDY1RTlCNjFBOTk4RDNDRkNBQTVCMDkzRENGQzEwQzNBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjdeByDrizbRMjiaqwkTheqdt gZMBF8HGTfQTLH+GAwSewHEmu30PXSqGzlWbGeI2ujPRiwPeAEGRN4GXuZqaiEgB SUjbqgGIKK1v/aKvdBiPRjVKJlJ0QF0JOrUsLxgfdp7uzGOElxlfwL9Pfdj/+69n lkutcakTlEkkdOdVH9ymNf/a4MhdPnSC+Wa+nSzLA1cUN0C277lJHr+LZ81wU+Mp 83j9x7T0coh9uz+hNxtTSY3YyMu6YIfu782Dzr4jOvz6u9i0Cmx955i0nJdDx/BY Q116NqccZw0h3UmGwoyO+LndiEgLVcDEdQ9AdV6kmk+8sN/ow6OHSOrBUaHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3UrNZem2GpmNPPyqWwk9z8EMOtQwHwYDVR0j BBgwFoAU/NW1Yvrtm51n+d5dtwV4v9sAV7MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDcwMjZhOS0wYzlhLTRkNzktYWQ2Ny0yYzlkYmQzNjZkMGIvMC9GQ0Q1QjU2MkZB RUQ5QjlENjdGOURFNURCNzA1NzhCRkRCMDA1N0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4QkZEQjAw NTdCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ3MDI2YTktMGM5YS00ZDc5LWFk NjctMmM5ZGJkMzY2ZDBiLzAvRkNENUI1NjJGQUVEOUI5RDY3RjlERTVEQjcwNTc4 QkZEQjAwNTdCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARBh5W7ZRUHltq503i8oh0DCVZ9cnb8lj/2 FA5AY50jS4A72DVBIAO/qEBmvQws3dPkhAdHV0bHkp0irCJZZZimU56I5AJ44Ovp QhgxI066mmUjrenLs+sxjyaITQ2NRaBMjfxJfQ6mWiy5oTkudoB9T33jy8pnCw9/ hd/leO/NetjvIxV11toco1kBB1mb7Tc+LHWYsS1iFFgICUBy+O5hYP0tvPHnY0oq 75X4AwJr/0k2C8n6KnWghziqv/NKd8ljvQx7WAhfHpNbCuBMuUQXFXEvp6VNi9hF qjMk7aD9qSKc2e6DTdia+qVoE6rJvG+3y6hDDnF0Uc6kv0d3X30= -----END CERTIFICATE-----Generated at Sun May 26 14:47:24 2024 by rpki-client on console-ams.rpki-client.org