$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: 7fSi6OcOS97y85y24/f+WQCUkYse/yy+I2zz6qYkcZA= Subject key identifier: DF:51:38:E5:D9:45:0E:F4:2A:CE:7D:26:4A:18:5A:1C:32:2C:84:B4 Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 2F958456A879EE1663B53F149E8E3963FF7A1E2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 012D Signing time: Sat 18 May 2024 13:30:02 +0000 Manifest this update: Sat 18 May 2024 13:25:02 +0000 Manifest next update: Tue 21 May 2024 17:39:02 +0000 Files and hashes: 1: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: Ky6y1D6dX+zUhBJIw2BxzWfO4ugwOxjGw4oIu9m73Zw=) 2: 3130332e3137342e37382e302f32332d3234203d3e203338333230.roa (hash: 9bvKPViZNSecau1PnjKy8wth8i44VbL0Ld2aSxlZZ5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:95:84:56:a8:79:ee:16:63:b5:3f:14:9e:8e:39:63:ff:7a:1e:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: May 18 13:25:02 2024 GMT Not After : May 21 17:39:02 2024 GMT Subject: CN=DF5138E5D9450EF42ACE7D264A185A1C322C84B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:ef:4c:98:b8:0d:57:50:ad:21:aa:ed:8d: ed:9d:e6:8f:05:01:d9:fb:88:7d:94:c2:d8:81:dd: 34:34:6e:2c:2e:d6:4e:e0:79:82:5f:44:c0:38:ce: a1:91:a1:91:ca:78:7d:b5:95:b6:d4:74:b7:97:6b: 50:48:9c:e4:1f:32:1b:64:a4:63:3e:f9:3d:45:f0: 73:77:39:ba:98:a3:bc:ef:e6:47:e2:f2:5a:32:19: 7d:a8:58:bd:3c:9c:92:7c:e7:0c:cc:9c:a2:24:d8: b5:d5:c0:f5:8b:3f:12:4b:07:47:b0:c5:fb:b1:bf: 1d:f0:e5:c9:8a:da:fc:67:73:a9:bd:ff:03:39:0d: 34:c2:50:ad:f6:34:90:69:a8:a9:ec:fd:45:a8:21: 19:57:e8:ab:fb:53:fd:2d:a5:0f:67:a3:a0:cf:0a: 0f:c3:05:36:ba:45:92:29:8d:4c:79:56:43:fd:e2: 73:6e:a6:86:96:c7:44:30:21:b2:fb:92:ef:dd:4a: 46:56:c7:63:1e:e3:d2:92:ee:4d:f6:f5:fb:11:99: 0a:70:3f:17:ca:54:ad:d5:f5:0b:62:24:f0:74:b3: ff:88:72:09:d0:6d:f6:78:ee:23:ba:91:25:57:0a: 5a:1f:5f:80:ef:18:a6:b5:f9:d4:0f:73:19:5d:07: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:51:38:E5:D9:45:0E:F4:2A:CE:7D:26:4A:18:5A:1C:32:2C:84:B4 X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ec:6d:66:68:eb:d4:f0:9c:2b:5e:c7:b6:e4:7f:a0:94:2c: a8:f4:46:f4:5c:3c:b6:a9:0b:eb:e5:b5:eb:f3:21:b5:3e:cd: 73:ff:57:7e:49:2e:c7:03:1b:59:bb:06:7e:76:37:67:26:e0: fb:73:cb:ba:04:e6:be:a7:2e:e7:72:dd:bd:ab:7a:04:25:85: c0:02:95:03:f9:22:2a:b5:17:23:47:b8:ca:0b:91:78:32:81: 9d:44:71:aa:ac:29:99:53:db:96:3d:e5:e7:9b:41:26:15:44: 27:85:58:d5:62:65:84:56:e6:f9:28:f1:c9:a2:bd:9e:4d:4b: 93:9e:85:02:8d:01:8a:90:9c:b5:aa:e9:4c:da:ad:23:8c:9f: 27:64:a3:7c:f6:29:81:11:e9:5a:7f:e8:b5:a1:e8:3b:f7:89: 2b:4b:7f:a3:92:48:48:b9:d3:44:2d:7e:25:6b:4b:eb:5d:41: c4:b6:14:44:5f:8f:bd:41:a5:c8:24:70:14:35:86:ad:67:76: ac:29:16:4c:6e:68:54:3d:2a:f3:cf:eb:fb:de:20:2b:da:e4: 25:9f:66:e1:73:02:9c:d8:eb:d4:3a:1f:51:65:50:a9:7f:f0: e5:8b:4b:52:1d:9c:f5:aa:3f:b1:40:a0:45:d7:57:be:3f:20: f1:1f:fb:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5WEVqh57hZjtT8Uno45Y/96Hi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNDA1MTgxMzI1MDJaFw0yNDA1MjExNzM5MDJaMDMxMTAvBgNV BAMTKERGNTEzOEU1RDk0NTBFRjQyQUNFN0QyNjRBMTg1QTFDMzIyQzg0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Se9MmLgNV1CtIartje2d5o8F Adn7iH2UwtiB3TQ0biwu1k7geYJfRMA4zqGRoZHKeH21lbbUdLeXa1BInOQfMhtk pGM++T1F8HN3ObqYo7zv5kfi8loyGX2oWL08nJJ85wzMnKIk2LXVwPWLPxJLB0ew xfuxvx3w5cmK2vxnc6m9/wM5DTTCUK32NJBpqKns/UWoIRlX6Kv7U/0tpQ9no6DP Cg/DBTa6RZIpjUx5VkP94nNupoaWx0QwIbL7ku/dSkZWx2Me49KS7k329fsRmQpw PxfKVK3V9QtiJPB0s/+IcgnQbfZ47iO6kSVXClofX4DvGKa1+dQPcxldB5ADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU31E45dlFDvQqzn0mShhaHDIshLQwHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETsbWZo69TwnCtex7bkf6CULKj0RvRcPLap C+vltevzIbU+zXP/V35JLscDG1m7Bn52N2cm4Ptzy7oE5r6nLudy3b2regQlhcAC lQP5Iiq1FyNHuMoLkXgygZ1EcaqsKZlT25Y95eebQSYVRCeFWNViZYRW5vko8cmi vZ5NS5OehQKNAYqQnLWq6UzarSOMnydko3z2KYER6Vp/6LWh6Dv3iStLf6OSSEi5 00QtfiVrS+tdQcS2FERfj71BpcgkcBQ1hq1ndqwpFkxuaFQ9KvPP6/veICva5CWf ZuFzApzY69Q6H1FlUKl/8OWLS1IdnPWqP7FAoEXXV74/IPEf+0I= -----END CERTIFICATE-----Generated at Sat May 18 15:57:29 2024 by rpki-client on console-ams.rpki-client.org