$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: aiLIRgv56iS3H1ybp0D/B2sZrGOH1Ctdy5xjR+NAOSs= Subject key identifier: CA:92:B8:66:68:B8:AA:67:F0:A4:DC:4F:E2:B8:F5:50:7B:3C:FE:C2 Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 392E0B3A23A3ECA12844682D83228921C92A37F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 010B Signing time: Sun 19 May 2024 12:21:13 +0000 Manifest this update: Sun 19 May 2024 12:16:13 +0000 Manifest next update: Wed 22 May 2024 13:01:13 +0000 Files and hashes: 1: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: cm8rn1Dad9pT2qj/y63FQS/OK4fe/6OxXSYcTVcvLLg=) 2: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 283YGT3AVYzy+p0Ofgvris1gpEJYj8VlOigQuJmqnnQ=) 3: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: qsDpE7WMbzoUmFx4NdDRdHXOUybBgMrXNQh4J09gjOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2e:0b:3a:23:a3:ec:a1:28:44:68:2d:83:22:89:21:c9:2a:37:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: May 19 12:16:13 2024 GMT Not After : May 22 13:01:13 2024 GMT Subject: CN=CA92B86668B8AA67F0A4DC4FE2B8F5507B3CFEC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:9a:81:83:ea:9b:47:88:e2:a4:19:4b:23: 15:4e:70:05:04:c5:43:f7:3f:44:27:79:26:ba:51: 6f:85:db:25:24:e9:91:05:02:32:cd:a5:44:2d:be: 6d:aa:a9:43:ee:aa:c6:07:c5:ff:7f:b6:7f:55:ae: ac:03:09:6f:a3:12:a9:b5:fd:2e:54:ad:32:2e:9f: f2:f1:8d:03:1f:46:d6:c9:1d:9e:b1:a1:df:b9:1b: 56:bf:bb:d0:8a:af:d5:d8:79:e4:0f:c6:92:fc:63: 22:40:bd:28:f6:90:8f:4b:e5:7a:26:1d:c1:e6:cd: 41:fc:72:90:0e:9a:5c:a2:5e:d5:30:ec:e6:46:90: 4a:b4:a8:9d:6e:3c:c8:b1:b9:e4:0b:39:bc:67:c2: 93:ba:d8:a3:c8:7b:e9:b3:23:df:e1:52:6f:a3:fe: 32:11:d6:67:ac:08:4f:b5:60:72:d4:38:89:00:a4: 5e:8f:9d:52:4b:22:af:d1:fa:3b:4f:1f:4b:df:2d: 56:2b:cc:f4:7f:2d:80:4d:09:ab:a3:a0:91:45:e3: 09:af:bd:d9:4e:0e:7e:a9:9f:77:c0:57:85:bf:e1: b6:44:cf:9d:5b:8e:1e:5e:68:80:65:a7:c3:f5:fa: 59:4e:d3:47:13:77:72:a6:9e:2d:46:72:95:33:a3: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:92:B8:66:68:B8:AA:67:F0:A4:DC:4F:E2:B8:F5:50:7B:3C:FE:C2 X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b9:57:e8:f0:f8:46:3f:47:d8:fe:11:f2:3f:09:9c:f4:dc: dc:83:df:09:ba:eb:ea:b9:bc:e0:c9:6a:c8:7a:12:01:d0:11: 63:98:61:14:01:eb:80:35:ac:61:36:cd:d8:b6:35:d5:44:f5: 3b:2c:77:b9:9e:35:1e:e1:51:9c:2f:8f:8e:00:6f:dc:9b:b8: 45:3f:a1:33:3f:ab:fd:e0:c1:23:9b:c3:42:bc:db:62:3b:5a: 54:40:ab:f3:11:53:17:ee:8f:3d:9e:99:96:5f:3f:f9:92:29: 65:cc:8f:75:07:2b:5a:d7:86:7a:2e:14:96:b5:0d:b6:74:4d: ac:a3:41:30:42:55:58:79:0e:37:9c:8c:24:e7:2c:94:a7:82: 39:7c:15:f4:fa:9f:53:14:6f:f0:08:37:2f:9c:d4:dc:73:cf: cf:93:4c:93:4a:0e:93:75:05:b9:04:e4:5c:4a:8a:27:1d:30: ca:3a:db:53:52:2b:07:46:b6:52:b7:e9:b2:e8:d9:d6:ec:fa: 33:34:8b:71:eb:ec:b5:fa:72:b5:f0:bd:c4:7a:dc:e8:b0:ce: a7:d3:00:a4:e4:e6:db:54:11:22:c6:bb:54:3c:eb:da:bd:8f: 9f:7f:5b:72:f6:96:f2:9b:bf:83:39:31:25:53:af:a5:09:19: 27:88:4b:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOS4LOiOj7KEoRGgtgyKJIckqN/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNDA1MTkxMjE2MTNaFw0yNDA1MjIxMzAxMTNaMDMxMTAvBgNV BAMTKENBOTJCODY2NjhCOEFBNjdGMEE0REM0RkUyQjhGNTUwN0IzQ0ZFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyj5qBg+qbR4jipBlLIxVOcAUE xUP3P0QneSa6UW+F2yUk6ZEFAjLNpUQtvm2qqUPuqsYHxf9/tn9VrqwDCW+jEqm1 /S5UrTIun/LxjQMfRtbJHZ6xod+5G1a/u9CKr9XYeeQPxpL8YyJAvSj2kI9L5Xom HcHmzUH8cpAOmlyiXtUw7OZGkEq0qJ1uPMixueQLObxnwpO62KPIe+mzI9/hUm+j /jIR1mesCE+1YHLUOIkApF6PnVJLIq/R+jtPH0vfLVYrzPR/LYBNCaujoJFF4wmv vdlODn6pn3fAV4W/4bZEz51bjh5eaIBlp8P1+llO00cTd3Kmni1GcpUzo5NxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUypK4Zmi4qmfwpNxP4rj1UHs8/sIwHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE65V+jw+EY/R9j+EfI/CZz03NyD3wm66+q5 vODJash6EgHQEWOYYRQB64A1rGE2zdi2NdVE9Tssd7meNR7hUZwvj44Ab9ybuEU/ oTM/q/3gwSObw0K822I7WlRAq/MRUxfujz2emZZfP/mSKWXMj3UHK1rXhnouFJa1 DbZ0TayjQTBCVVh5DjecjCTnLJSngjl8FfT6n1MUb/AINy+c1Nxzz8+TTJNKDpN1 BbkE5FxKiicdMMo621NSKwdGtlK36bLo2dbs+jM0i3Hr7LX6crXwvcR63OiwzqfT AKTk5ttUESLGu1Q869q9j59/W3L2lvKbv4M5MSVTr6UJGSeIS+o= -----END CERTIFICATE-----Generated at Sun May 19 13:35:05 2024 by rpki-client on console-ams.rpki-client.org