$ rpki-client -vvf repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft File: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft (raw, json) Hash identifier: 5fgDeCt5/icL5rbeGMeH2qWWBDlnMIv3IMYQNNcsSCA= Subject key identifier: 08:7B:55:06:53:78:23:E1:23:A8:D0:2A:55:B9:14:4E:DB:4A:D6:1F Authority key identifier: 9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE Certificate issuer: /CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Certificate serial: 7AA84598FD6E8EEEA8B7645C26141335F691CDB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft Manifest number: 0125 Signing time: Fri 31 May 2024 04:01:25 +0000 Manifest this update: Fri 31 May 2024 03:56:25 +0000 Manifest next update: Mon 03 Jun 2024 05:08:25 +0000 Files and hashes: 1: 3130332e3134372e3131382e302f32332d3234203d3e20313339393632.roa (hash: 6EVTU+mLW/oDflOFdkjXycnwQg1s9wcTlQqXAOXOB9s=) 2: 9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl (hash: A7AJDwIFeVt+YBRk/JTZ1msw3ZHn2iP4H40z9SgVBGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 05:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a8:45:98:fd:6e:8e:ee:a8:b7:64:5c:26:14:13:35:f6:91:cd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE Validity Not Before: May 31 03:56:25 2024 GMT Not After : Jun 3 05:08:25 2024 GMT Subject: CN=087B5506537823E123A8D02A55B9144EDB4AD61F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:58:77:19:3f:6c:3f:68:55:2c:f8:72:5e:17: aa:59:7c:75:04:c9:a0:6e:90:1d:78:98:c6:cc:b8: a5:7e:27:74:48:ec:f1:ed:b4:4f:56:d7:0d:95:e7: 78:68:05:a1:f0:a0:eb:d7:00:c8:06:8c:12:a6:4c: aa:dc:1c:e6:47:5d:4e:ac:f3:f6:75:2d:71:a6:0d: f8:8a:86:7c:bd:32:73:6b:10:2f:d0:b9:48:56:34: 4a:78:09:ba:3e:5e:8c:e8:30:f8:7c:db:d2:8e:62: 5c:30:78:3c:56:76:ec:eb:f4:eb:dc:0a:8b:3a:f9: 2f:d4:a9:87:c4:a0:08:9d:c7:c4:b2:3f:f3:c8:69: 47:c8:3b:48:1b:da:be:ce:fe:68:21:9b:41:57:91: f3:0b:37:74:dd:09:3a:ed:0b:a1:28:ed:49:e0:68: d7:e8:01:f1:c8:ec:7f:c1:47:c3:39:1e:df:b3:3f: 16:7a:1b:ba:a3:91:68:83:0d:b2:68:0b:f2:a5:3c: ac:a5:00:52:15:fe:a0:ba:3e:d2:fc:51:5b:cf:8c: 5f:89:18:ac:5d:54:f3:24:aa:16:6c:34:23:32:c9: 80:50:b6:71:a2:59:3e:63:ca:ed:44:2f:85:26:e7: 66:ae:13:87:c1:f6:8d:38:96:66:78:4e:ae:ba:42: 0c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7B:55:06:53:78:23:E1:23:A8:D0:2A:55:B9:14:4E:DB:4A:D6:1F X509v3 Authority Key Identifier: keyid:9F:FC:21:66:77:7F:81:F6:6D:F4:A4:EB:5B:29:FF:A5:B1:B5:25:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5e9131-3abc-4abd-bd92-a755fab91305/0/9FFC2166777F81F66DF4A4EB5B29FFA5B1B525DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:fd:84:43:db:95:e6:31:6d:17:0c:15:47:09:4d:47:00:7f: 47:5a:07:36:28:51:1c:ae:03:d1:13:b5:a7:4a:62:15:26:b1: 2b:af:04:a5:d8:2a:96:62:1a:c9:c4:43:17:c1:1d:73:9a:77: 11:24:c2:17:4b:6d:56:2c:92:47:da:5f:0b:66:54:d5:6d:12: b2:41:75:e2:1d:c2:30:20:31:21:65:b4:2a:13:08:4a:44:8f: a5:5d:41:3f:60:6b:e1:63:e9:6d:77:bd:17:f7:96:6a:3d:01: 68:55:29:9c:e3:b4:51:92:e4:0f:1f:d4:d2:8e:81:8c:7c:2e: 60:9a:77:6c:5a:80:d4:f2:20:24:aa:ae:b5:44:2f:2b:3f:61: 8a:8f:2a:7d:d2:54:f9:06:46:0d:aa:66:66:5f:35:e3:b0:8e: 7a:ae:df:6d:1b:19:2c:77:c4:07:1c:38:20:03:26:fa:52:00: 43:b0:77:5a:4c:c3:f5:6b:1f:38:37:6d:a8:d2:34:ba:da:78: 88:ce:43:62:9c:c1:46:af:98:9a:59:f9:01:cb:42:85:0d:ea: 3d:5d:d1:2e:24:cd:63:03:3c:af:62:26:5a:8b:d1:2e:f2:cb: a5:56:ac:13:36:db:67:07:2b:52:15:e6:7b:0a:86:c0:36:5c: 36:32:db:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeqhFmP1uju6ot2RcJhQTNfaRzbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVC MUI1MjVERTAeFw0yNDA1MzEwMzU2MjVaFw0yNDA2MDMwNTA4MjVaMDMxMTAvBgNV BAMTKDA4N0I1NTA2NTM3ODIzRTEyM0E4RDAyQTU1QjkxNDRFREI0QUQ2MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjWHcZP2w/aFUs+HJeF6pZfHUE yaBukB14mMbMuKV+J3RI7PHttE9W1w2V53hoBaHwoOvXAMgGjBKmTKrcHOZHXU6s 8/Z1LXGmDfiKhny9MnNrEC/QuUhWNEp4Cbo+XozoMPh829KOYlwweDxWduzr9Ovc Cos6+S/UqYfEoAidx8SyP/PIaUfIO0gb2r7O/mghm0FXkfMLN3TdCTrtC6Eo7Ung aNfoAfHI7H/BR8M5Ht+zPxZ6G7qjkWiDDbJoC/KlPKylAFIV/qC6PtL8UVvPjF+J GKxdVPMkqhZsNCMyyYBQtnGiWT5jyu1EL4Um52auE4fB9o04lmZ4Tq66QgxDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCHtVBlN4I+EjqNAqVbkUTttK1h8wHwYDVR0j BBgwFoAUn/whZnd/gfZt9KTrWyn/pbG1Jd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVlOTEzMS0zYWJjLTRhYmQtYmQ5Mi1hNzU1ZmFiOTEzMDUvMC85RkZDMjE2Njc3 N0Y4MUY2NkRGNEE0RUI1QjI5RkZBNUIxQjUyNURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZGQTVCMUI1 MjVERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1ZTkxMzEtM2FiYy00YWJkLWJk OTItYTc1NWZhYjkxMzA1LzAvOUZGQzIxNjY3NzdGODFGNjZERjRBNEVCNUIyOUZG QTVCMUI1MjVERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABb9hEPbleYxbRcMFUcJTUcAf0daBzYoURyu A9ETtadKYhUmsSuvBKXYKpZiGsnEQxfBHXOadxEkwhdLbVYskkfaXwtmVNVtErJB deIdwjAgMSFltCoTCEpEj6VdQT9ga+Fj6W13vRf3lmo9AWhVKZzjtFGS5A8f1NKO gYx8LmCad2xagNTyICSqrrVELys/YYqPKn3SVPkGRg2qZmZfNeOwjnqu320bGSx3 xAccOCADJvpSAEOwd1pMw/VrHzg3bajSNLraeIjOQ2KcwUavmJpZ+QHLQoUN6j1d 0S4kzWMDPK9iJlqL0S7yy6VWrBM222cHK1IV5nsKhsA2XDYy2x8= -----END CERTIFICATE-----Generated at Fri May 31 04:52:42 2024 by rpki-client on console-fra.rpki-client.org