$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: 81NZF/zVUmLXPM4TePRxp74G0KvH0N60uKIS9MYjmwM= Subject key identifier: 41:49:5B:03:F1:5B:F8:94:28:68:CF:86:33:4F:75:B8:53:69:AA:48 Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 5E92DA2C0563A537449F45444295CE5DCAFC430F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 022F Signing time: Tue 28 May 2024 12:31:36 +0000 Manifest this update: Tue 28 May 2024 12:26:36 +0000 Manifest next update: Fri 31 May 2024 23:41:36 +0000 Files and hashes: 1: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: DsyI3OUZwTWSpnHWbOjylaGMfFkm/opB+S+8Y+2zp4U=) 2: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: SbWAGyoCkKEWerX4eQZd8Tw+xd0dFCyCpJj4CXikOcg=) 3: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: AABVv5whB83H0xhSKPHgv1eEMSpvN7sPciuLVOvlaH4=) 4: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: CbltJcl2WVZrY2IpPyg8hs7HdQaTfD90TQBm5a0B5F8=) 5: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: +L63pbKyeAodqT7ParhojnO+yA9RKNXZhPdfSXR3100=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:92:da:2c:05:63:a5:37:44:9f:45:44:42:95:ce:5d:ca:fc:43:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: May 28 12:26:36 2024 GMT Not After : May 31 23:41:36 2024 GMT Subject: CN=41495B03F15BF8942868CF86334F75B85369AA48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:db:9d:b9:45:c6:48:2d:1a:27:1a:76:93:d4: f9:28:cd:80:0e:a5:37:b5:65:6b:23:7c:83:83:a8: e6:57:a1:36:2b:fa:0f:7b:5d:d7:31:45:31:f8:96: 85:5d:b5:6a:55:90:d2:84:49:d6:3a:7d:e2:2f:2c: 97:5e:11:dd:fa:42:6e:ed:83:72:ae:9b:a6:e3:f6: 1f:25:45:b7:06:73:ef:a3:83:de:57:b9:84:07:2d: e1:1b:e7:af:48:8b:ee:0c:e6:b8:3b:7d:52:5a:a7: 64:ba:21:86:8b:39:10:46:c8:b1:1c:c7:57:a8:89: 87:0c:b6:4b:02:00:23:c3:2b:18:b4:32:e5:81:d1: 29:02:fc:39:9d:fd:ce:ab:b4:7d:37:f5:b3:a6:39: 55:9d:45:d2:1b:75:4b:e2:1a:44:1a:0f:c5:55:68: ab:b6:e6:b0:3a:3a:0c:d7:e0:f1:b4:4a:87:4b:4c: 94:e8:eb:f0:5e:d9:d0:f0:f7:d1:f8:48:a1:1d:be: 88:c6:6c:51:40:d7:fd:db:a1:49:dc:78:e2:40:8d: 3b:0c:cf:13:bd:e5:30:22:bd:08:90:92:37:b7:8e: 41:ee:09:df:be:54:e1:6b:ad:80:0a:c7:90:39:c4: e6:dc:86:90:38:8c:fa:cd:a1:5f:0b:d5:f8:fb:fb: fb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:49:5B:03:F1:5B:F8:94:28:68:CF:86:33:4F:75:B8:53:69:AA:48 X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:49:25:d3:a9:16:c4:dd:cb:55:08:1f:eb:b5:f0:69:5a:7d: e0:68:60:fb:aa:03:bc:33:84:f5:ef:90:23:c9:41:cf:30:3e: 74:90:81:f3:a8:2d:d5:2a:b9:77:30:0a:1c:d3:e1:9d:6d:a4: d4:a0:a6:6f:0c:65:ea:64:60:76:ac:60:46:58:45:28:b6:d1: d4:47:42:a7:29:23:76:99:22:bb:8f:0a:5b:51:b5:91:f7:65: 6b:ce:e4:16:54:9c:c5:77:2e:63:8a:eb:b0:1c:06:b8:c1:6d: 48:d5:7e:2e:aa:e7:32:c6:77:5c:9f:43:91:0b:c1:4d:fa:47: 43:86:0a:42:2c:44:49:4a:df:1b:f3:b8:5f:02:43:5c:12:5e: b4:2d:a9:6e:65:19:c8:2c:0d:88:30:52:c3:5f:4c:94:9e:e9: e0:4c:cd:38:7b:23:8e:b5:34:2c:b7:26:f7:e7:b5:9c:64:83: da:d6:1d:84:b1:2f:81:b3:f2:db:d3:fd:76:3d:2e:c6:f6:81: 71:9c:f3:55:c4:34:93:79:8c:6d:c1:1c:ad:74:bb:83:43:4e: 35:fe:5d:87:6c:b2:ea:db:90:39:3a:f6:70:64:9a:b7:ce:88: df:15:f9:64:a3:53:7e:e0:22:d3:c7:71:89:b0:97:54:69:2f: 5e:06:b0:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpLaLAVjpTdEn0VEQpXOXcr8Qw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNDA1MjgxMjI2MzZaFw0yNDA1MzEyMzQxMzZaMDMxMTAvBgNV BAMTKDQxNDk1QjAzRjE1QkY4OTQyODY4Q0Y4NjMzNEY3NUI4NTM2OUFBNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2525RcZILRonGnaT1PkozYAO pTe1ZWsjfIODqOZXoTYr+g97XdcxRTH4loVdtWpVkNKESdY6feIvLJdeEd36Qm7t g3Kum6bj9h8lRbcGc++jg95XuYQHLeEb569Ii+4M5rg7fVJap2S6IYaLORBGyLEc x1eoiYcMtksCACPDKxi0MuWB0SkC/Dmd/c6rtH039bOmOVWdRdIbdUviGkQaD8VV aKu25rA6OgzX4PG0SodLTJTo6/Be2dDw99H4SKEdvojGbFFA1/3boUnceOJAjTsM zxO95TAivQiQkje3jkHuCd++VOFrrYAKx5A5xObchpA4jPrNoV8L1fj7+/sXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQUlbA/Fb+JQoaM+GM091uFNpqkgwHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRJJdOpFsTdy1UIH+u18GlafeBoYPuqA7wz hPXvkCPJQc8wPnSQgfOoLdUquXcwChzT4Z1tpNSgpm8MZepkYHasYEZYRSi20dRH QqcpI3aZIruPCltRtZH3ZWvO5BZUnMV3LmOK67AcBrjBbUjVfi6q5zLGd1yfQ5EL wU36R0OGCkIsRElK3xvzuF8CQ1wSXrQtqW5lGcgsDYgwUsNfTJSe6eBMzTh7I461 NCy3JvfntZxkg9rWHYSxL4Gz8tvT/XY9Lsb2gXGc81XENJN5jG3BHK10u4NDTjX+ XYdssurbkDk69nBkmrfOiN8V+WSjU37gItPHcYmwl1RpL14GsIA= -----END CERTIFICATE-----Generated at Tue May 28 13:23:27 2024 by rpki-client on console-fra.rpki-client.org