$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: zkDT8/qd0kI9S9GGt/252D4ILXtYNrA0DZvHioMWYdE= Subject key identifier: E9:B0:17:C3:9B:B3:FB:40:31:B7:CF:99:B4:24:51:47:6E:CC:16:85 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 09BFA0C5A215DB4CEAD5D9941A1A329596DB0D34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 0210 Signing time: Sat 18 May 2024 21:20:32 +0000 Manifest this update: Sat 18 May 2024 21:15:32 +0000 Manifest next update: Tue 21 May 2024 23:50:32 +0000 Files and hashes: 1: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: JXRgkkM+W0+zJQC+cY2H+psf6SgDMP62/NWsLbgyTCE=) 2: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: BFrdCib9rOiXwjibaSP2FE4aD1p+c1I/+GT0Dxhp0zk=) 3: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: B44NQ6I8ejkPPoK47iLj0L7jYtLvf1gMPzAxizMrh0U=) 4: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: WKmcvn8bAO9Eii6CFLm7I5z8vpQacNIDvmfF6K6iO9c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:bf:a0:c5:a2:15:db:4c:ea:d5:d9:94:1a:1a:32:95:96:db:0d:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: May 18 21:15:32 2024 GMT Not After : May 21 23:50:32 2024 GMT Subject: CN=E9B017C39BB3FB4031B7CF99B42451476ECC1685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:2f:67:6f:86:d9:5f:6a:17:1c:85:51:33: ab:7c:0e:ed:2d:eb:99:69:5e:74:fc:8a:2a:5c:a1: 2f:f3:bb:c3:9f:74:a8:b7:77:e6:48:37:4a:35:dc: 80:be:fc:c7:36:a5:28:00:41:d5:38:ca:e9:7a:4b: 50:74:1f:10:db:d5:08:4d:64:59:79:63:a8:41:35: 19:a5:a1:ce:6d:94:c9:f5:08:8d:9c:1d:43:88:b3: e7:67:d2:8b:55:1e:0e:e0:e5:d3:7a:65:4c:9b:e2: 80:1f:fe:8e:6a:7b:bf:97:c0:8b:63:a1:79:79:90: 48:12:9a:3b:9d:4b:20:16:4a:c6:b7:8f:29:e4:d2: bb:57:ac:83:da:2d:9d:ac:c7:96:07:5c:3b:0b:dc: b6:48:aa:0f:19:97:82:3d:cf:ed:c6:14:c0:cb:1f: 84:d0:08:10:6a:16:6f:5b:17:06:b7:4c:da:37:32: ea:5c:d0:a0:c9:ef:72:db:e3:be:40:ae:f2:66:e5: 24:fa:18:51:a7:79:24:40:db:5f:6e:01:5b:23:b1: 46:26:44:e0:02:66:68:65:e2:d8:55:97:aa:1d:38: 77:fd:e6:7f:8e:d3:f3:6b:d9:3b:67:6d:cc:f7:79: 2f:30:30:68:ad:e9:74:07:87:52:b0:56:22:5b:93: 3b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:17:C3:9B:B3:FB:40:31:B7:CF:99:B4:24:51:47:6E:CC:16:85 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:23:17:0f:d6:96:aa:ef:7e:ec:bc:7d:f9:27:25:31:b6:a7: 0b:86:27:02:aa:3e:6a:c2:ff:a5:bf:60:63:7e:9e:14:7f:d4: 76:be:19:cd:fb:38:ec:9e:ad:62:57:cb:fc:ce:56:6a:8b:d3: ce:e5:23:b7:04:35:f4:6a:7b:6e:24:6f:11:2a:39:c6:52:e6: b7:82:48:1c:94:00:b5:c1:48:9b:e2:96:2b:3d:a9:8a:5c:88: 83:47:4f:ae:72:17:70:e1:d1:f5:64:34:44:ca:dc:68:61:1b: 15:d5:64:5b:ef:50:a8:7e:d4:40:79:03:56:66:0d:78:89:b2: 61:e7:8e:b5:b1:77:96:6a:be:6a:e2:fb:ef:7c:a1:e3:1e:bb: 35:65:98:3f:98:4d:1b:4a:23:c2:4a:72:ee:5c:95:43:ac:ae: da:f6:4d:a5:74:6c:ae:84:96:b7:3d:f5:38:db:cb:af:06:4c: ea:9c:c4:01:75:27:e0:38:67:98:a0:40:5e:72:41:e1:d4:28: 80:eb:7b:ba:85:ed:3d:58:c8:8d:78:85:ea:d4:78:2c:d4:72: e5:b1:62:6d:a8:73:48:ec:d7:bb:f2:0c:0e:58:e0:a0:5a:bd: e9:d8:6b:e7:93:d7:b9:a6:fd:1b:67:f1:0f:98:8a:14:55:8e: 1a:fa:16:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCb+gxaIV20zq1dmUGhoylZbbDTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNDA1MTgyMTE1MzJaFw0yNDA1MjEyMzUwMzJaMDMxMTAvBgNV BAMTKEU5QjAxN0MzOUJCM0ZCNDAzMUI3Q0Y5OUI0MjQ1MTQ3NkVDQzE2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Yi9nb4bZX2oXHIVRM6t8Du0t 65lpXnT8iipcoS/zu8OfdKi3d+ZIN0o13IC+/Mc2pSgAQdU4yul6S1B0HxDb1QhN ZFl5Y6hBNRmloc5tlMn1CI2cHUOIs+dn0otVHg7g5dN6ZUyb4oAf/o5qe7+XwItj oXl5kEgSmjudSyAWSsa3jynk0rtXrIPaLZ2sx5YHXDsL3LZIqg8Zl4I9z+3GFMDL H4TQCBBqFm9bFwa3TNo3Mupc0KDJ73Lb475ArvJm5ST6GFGneSRA219uAVsjsUYm ROACZmhl4thVl6odOHf95n+O0/Nr2Ttnbcz3eS8wMGit6XQHh1KwViJbkztLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bAXw5uz+0Axt8+ZtCRRR27MFoUwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMjFw/Wlqrvfuy8ffknJTG2pwuGJwKqPmrC /6W/YGN+nhR/1Ha+Gc37OOyerWJXy/zOVmqL087lI7cENfRqe24kbxEqOcZS5reC SByUALXBSJvilis9qYpciINHT65yF3Dh0fVkNETK3GhhGxXVZFvvUKh+1EB5A1Zm DXiJsmHnjrWxd5Zqvmri++98oeMeuzVlmD+YTRtKI8JKcu5clUOsrtr2TaV0bK6E lrc99Tjby68GTOqcxAF1J+A4Z5igQF5yQeHUKIDre7qF7T1YyI14herUeCzUcuWx Ym2oc0js17vyDA5Y4KBavenYa+eT17mm/Rtn8Q+YihRVjhr6FnM= -----END CERTIFICATE-----Generated at Sat May 18 22:13:41 2024 by rpki-client on console-fra.rpki-client.org