$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: v4bZkYlBSYgQzLbksJyerwi7yKTyfkAc/3Q6VDcc9Dk= Subject key identifier: FA:86:F8:31:E8:F4:55:F4:B6:1F:15:EB:E7:16:78:7E:FC:EA:7C:F7 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 44E67161F231CF2A4A28E6BF885E21A452A1C86C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 037B Signing time: Wed 22 May 2024 10:41:13 +0000 Manifest this update: Wed 22 May 2024 10:36:13 +0000 Manifest next update: Sat 25 May 2024 18:46:13 +0000 Files and hashes: 1: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: 5JSgIrfyKlfPF99bCHPuTDtPr15+3N5LYVysP3keUmI=) 2: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: EKn5uM+MkBaqtjDpMQRe7GQThv+kPugl1u46fwmpTmM=) 3: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: r2OV/IMeEuQOi+gUChIzG4dkwQvLiEgmfiNHmbLm+Fw=) 4: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: BIuKYX9yS3ZNuu9HdSrS/DNsR8dy6XlSmacfPV4Mg0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 17:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e6:71:61:f2:31:cf:2a:4a:28:e6:bf:88:5e:21:a4:52:a1:c8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: May 22 10:36:13 2024 GMT Not After : May 25 18:46:13 2024 GMT Subject: CN=FA86F831E8F455F4B61F15EBE716787EFCEA7CF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:bd:4e:2e:f1:d4:dc:22:d6:6d:ac:6e:ed: e4:29:67:5f:76:44:31:8e:29:bf:50:a6:b5:6c:ba: ee:1c:ca:11:68:b9:14:3e:b1:83:60:46:bd:bf:41: bd:88:fd:71:d5:bf:3f:8b:e5:59:53:c8:e1:f5:35: 22:23:f5:5a:e8:42:d1:ff:4a:c4:dd:2b:6f:e8:c4: 22:5a:5a:ab:4b:fa:d3:3c:47:2c:f1:31:d6:b0:94: 59:52:ce:3e:ef:89:8c:30:08:21:56:b4:84:6a:70: 91:8a:b1:b6:db:ba:d6:0b:48:b9:15:02:86:cd:66: c5:0f:f6:4d:df:2d:ee:94:9a:55:c1:59:dd:f9:e6: fe:c6:be:ee:20:46:aa:ba:5d:01:00:bb:c0:6d:ac: 4a:3e:6b:7f:5a:fe:94:d0:68:dc:4c:8b:4b:88:f5: 83:d7:78:9e:cd:fb:17:44:99:09:3e:01:35:40:13: d3:56:f4:ec:18:37:52:41:fb:09:e1:a1:d0:57:69: e0:82:85:72:d6:48:37:c4:5b:01:dc:84:38:d5:7e: 31:7c:6d:2d:e8:30:c5:f8:07:dd:c6:83:68:2d:1a: 38:0f:d3:dc:06:7e:ee:18:a7:9c:e1:22:18:5e:54: 22:29:6e:d5:ca:c4:af:df:f0:90:2c:2c:f3:85:41: 1f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:86:F8:31:E8:F4:55:F4:B6:1F:15:EB:E7:16:78:7E:FC:EA:7C:F7 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:cc:d6:54:5c:d6:fb:66:01:e8:3e:50:90:8f:a9:26:33:eb: 10:3b:1a:42:d0:2d:e5:c0:c3:e6:2a:cb:87:9b:60:37:f4:b8: 88:42:d5:71:5d:46:bb:46:aa:42:d7:f3:c4:a8:08:c5:92:c8: 15:04:7a:15:68:b8:c9:2b:c9:27:98:10:d2:da:e4:7a:9b:b0: b1:32:7c:3a:a8:07:7b:22:80:5a:99:b4:2a:ca:bc:bf:27:98: 36:fc:cf:dc:5a:dd:61:9d:e7:0f:55:d7:e2:46:f3:bf:56:64: a2:62:82:b9:6e:2c:90:50:61:02:86:45:27:dd:03:c0:f6:52: 60:3f:87:ee:67:7d:1c:08:1d:25:92:e4:ad:9e:54:77:af:15: 50:1b:51:76:cf:06:b8:2b:18:4e:d2:c5:f2:0c:a9:1a:49:8f: dc:ea:72:52:5b:ae:be:12:c6:3a:1f:b4:f1:26:f3:37:f0:c2: 30:a3:6e:21:9e:f8:6a:ea:2c:a0:69:60:76:c4:af:4b:33:b3: 5d:9d:fc:9e:af:dd:6c:13:48:c3:6e:19:d7:2d:c7:8d:37:94: b0:a3:06:cc:64:5d:ae:83:99:ba:d7:36:c0:bd:82:c6:20:02: 71:4b:5b:c6:1b:ee:99:11:28:41:1c:5a:a6:cf:7a:1e:90:d6: 0c:76:60:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROZxYfIxzypKKOa/iF4hpFKhyGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNDA1MjIxMDM2MTNaFw0yNDA1MjUxODQ2MTNaMDMxMTAvBgNV BAMTKEZBODZGODMxRThGNDU1RjRCNjFGMTVFQkU3MTY3ODdFRkNFQTdDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEL1OLvHU3CLWbaxu7eQpZ192 RDGOKb9QprVsuu4cyhFouRQ+sYNgRr2/Qb2I/XHVvz+L5VlTyOH1NSIj9VroQtH/ SsTdK2/oxCJaWqtL+tM8RyzxMdawlFlSzj7viYwwCCFWtIRqcJGKsbbbutYLSLkV AobNZsUP9k3fLe6UmlXBWd355v7Gvu4gRqq6XQEAu8BtrEo+a39a/pTQaNxMi0uI 9YPXeJ7N+xdEmQk+ATVAE9NW9OwYN1JB+wnhodBXaeCChXLWSDfEWwHchDjVfjF8 bS3oMMX4B93Gg2gtGjgP09wGfu4Yp5zhIhheVCIpbtXKxK/f8JAsLPOFQR9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ob4Mej0VfS2HxXr5xZ4fvzqfPcwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfM1lRc1vtmAeg+UJCPqSYz6xA7GkLQLeXA w+Yqy4ebYDf0uIhC1XFdRrtGqkLX88SoCMWSyBUEehVouMkrySeYENLa5HqbsLEy fDqoB3sigFqZtCrKvL8nmDb8z9xa3WGd5w9V1+JG879WZKJigrluLJBQYQKGRSfd A8D2UmA/h+5nfRwIHSWS5K2eVHevFVAbUXbPBrgrGE7SxfIMqRpJj9zqclJbrr4S xjoftPEm8zfwwjCjbiGe+GrqLKBpYHbEr0szs12d/J6v3WwTSMNuGdctx403lLCj BsxkXa6DmbrXNsC9gsYgAnFLW8Yb7pkRKEEcWqbPeh6Q1gx2YCs= -----END CERTIFICATE-----Generated at Wed May 22 12:40:17 2024 by rpki-client on console-fra.rpki-client.org