$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: aoHrack/hhMhzYdDuBCKyLhpLzS3P5/w9MUuNoVNjHw= Subject key identifier: E0:AF:0E:CD:56:D4:C4:BF:4B:95:A6:7B:EF:7D:FE:BC:4B:89:EA:A2 Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 72AF2A2C448C3DFB791012C224BBFC47D913CB0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 0142 Signing time: Sat 18 May 2024 07:21:54 +0000 Manifest this update: Sat 18 May 2024 07:16:54 +0000 Manifest next update: Tue 21 May 2024 09:41:54 +0000 Files and hashes: 1: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: mCA35em8QwjDYY6wvmOMHi2TcOQlYzFRj5E93q9j6sk=) 2: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: ItQln5TNr77cpCKNka4JczJ1ZdQmdTc4Ya4R27T4EMU=) 3: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: MwccS/MrnPIJG22pmaz2ISiy75OQDJtZmuHVjIzPIt8=) 4: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: OUil6WnbVmxSp/wKOwTHmbINb5+2p01TSJ/796KHkZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 09:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:af:2a:2c:44:8c:3d:fb:79:10:12:c2:24:bb:fc:47:d9:13:cb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: May 18 07:16:54 2024 GMT Not After : May 21 09:41:54 2024 GMT Subject: CN=E0AF0ECD56D4C4BF4B95A67BEF7DFEBC4B89EAA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:cb:8d:3e:05:04:60:42:fa:b9:27:98:ae: fd:5d:57:ee:26:e1:74:5d:c7:1f:34:cf:f3:ae:05: f6:a4:97:35:2a:17:19:f9:7f:62:27:8d:52:e3:89: 66:91:2c:2f:ea:c2:b6:eb:f1:9f:c1:f3:54:85:f4: a4:56:b8:86:5c:2d:44:7e:d2:90:78:4a:6b:80:1b: 46:d3:d7:40:bb:af:74:54:50:34:9d:03:4e:4e:b7: bc:df:83:59:fa:81:15:60:57:4f:44:2e:27:94:ee: c2:86:04:88:97:6e:a0:45:37:13:33:bf:1a:4c:1b: 3b:59:bb:80:43:f6:e2:6a:02:ff:14:18:a1:ce:b8: 62:e6:63:8d:eb:f2:d0:97:d1:cf:16:70:c9:78:45: 68:7d:9a:83:91:65:d3:bd:4a:19:43:71:76:fa:06: d1:8a:7b:a1:31:2e:97:fd:6a:56:49:12:9b:16:90: a9:25:e2:c1:01:38:8d:6e:0d:d2:ca:4c:46:cf:86: 97:98:68:20:b2:24:3c:db:4a:cc:e3:f4:0b:15:c4: 9b:c3:8f:4b:9b:4f:3d:40:7c:23:95:47:0d:87:19: 9f:e0:14:96:e3:08:1f:b4:8d:e9:49:91:64:db:d6: c3:5f:02:a4:3f:ef:db:fb:6c:c6:c4:26:96:fe:08: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AF:0E:CD:56:D4:C4:BF:4B:95:A6:7B:EF:7D:FE:BC:4B:89:EA:A2 X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:46:de:e2:ec:44:44:ef:a1:e4:d9:8b:9b:00:6d:9b:1c:ff: 0d:17:75:f2:71:99:d3:2f:88:5f:f6:63:d3:d6:5d:58:bc:e0: 59:ba:a4:64:dc:69:e8:e6:c1:ec:d2:ec:47:99:d0:b8:55:75: df:f3:05:50:89:c0:88:c2:e4:8d:15:68:19:97:ad:fe:c9:1f: 51:de:95:4d:af:1e:63:b6:52:ef:af:51:44:24:c7:71:1d:bd: b4:66:30:98:d3:dd:dd:44:84:b5:9a:7d:af:07:3f:46:ec:70: 83:8e:d9:40:25:e9:bd:3f:1c:f4:85:ff:e1:71:f8:29:bc:40: 9f:41:7f:e1:e0:99:72:53:42:1a:79:de:2d:30:23:b9:d7:f5: f5:8f:a5:a5:79:bf:29:7b:14:ac:a8:5a:e0:97:3e:62:24:9b: 31:9b:51:a2:e2:0e:97:d2:14:fd:19:80:95:7a:e1:01:54:62: 6a:85:67:3c:29:d4:bc:d4:ad:b3:26:2a:43:1e:23:ef:3e:ee: 19:b0:4e:f4:52:2c:b2:92:7e:69:79:31:ef:8d:55:a7:19:b4: c3:8d:91:9c:2b:2e:9e:3e:92:99:e5:b1:b5:7f:e9:18:15:44: b0:ef:2a:09:3f:c2:55:ad:05:fd:d5:d7:19:6d:7a:3d:14:18: 75:3e:7b:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcq8qLESMPft5EBLCJLv8R9kTywwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNDA1MTgwNzE2NTRaFw0yNDA1MjEwOTQxNTRaMDMxMTAvBgNV BAMTKEUwQUYwRUNENTZENEM0QkY0Qjk1QTY3QkVGN0RGRUJDNEI4OUVBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qsuNPgUEYEL6uSeYrv1dV+4m 4XRdxx80z/OuBfaklzUqFxn5f2InjVLjiWaRLC/qwrbr8Z/B81SF9KRWuIZcLUR+ 0pB4SmuAG0bT10C7r3RUUDSdA05Ot7zfg1n6gRVgV09ELieU7sKGBIiXbqBFNxMz vxpMGztZu4BD9uJqAv8UGKHOuGLmY43r8tCX0c8WcMl4RWh9moORZdO9ShlDcXb6 BtGKe6ExLpf9alZJEpsWkKkl4sEBOI1uDdLKTEbPhpeYaCCyJDzbSszj9AsVxJvD j0ubTz1AfCOVRw2HGZ/gFJbjCB+0jelJkWTb1sNfAqQ/79v7bMbEJpb+CCJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4K8OzVbUxL9LlaZ7733+vEuJ6qIwHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxG3uLsRETvoeTZi5sAbZsc/w0XdfJxmdMv iF/2Y9PWXVi84Fm6pGTcaejmwezS7EeZ0LhVdd/zBVCJwIjC5I0VaBmXrf7JH1He lU2vHmO2Uu+vUUQkx3EdvbRmMJjT3d1EhLWafa8HP0bscIOO2UAl6b0/HPSF/+Fx +Cm8QJ9Bf+HgmXJTQhp53i0wI7nX9fWPpaV5vyl7FKyoWuCXPmIkmzGbUaLiDpfS FP0ZgJV64QFUYmqFZzwp1LzUrbMmKkMeI+8+7hmwTvRSLLKSfml5Me+NVacZtMON kZwrLp4+kpnlsbV/6RgVRLDvKgk/wlWtBf3V1xltej0UGHU+ezQ= -----END CERTIFICATE-----Generated at Sat May 18 08:05:07 2024 by rpki-client on console-fra.rpki-client.org