$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: E2qyWvGDtX7Er+i/fLToxN5QBU2aJf87CRgZtNEyg8Q= Subject key identifier: BB:92:0E:3F:DA:55:A5:BA:B5:D8:5C:AF:F3:CE:97:10:91:D7:0E:62 Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 4313AD8B344FEDB2B7325E3B1569DA7AF72C0DF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: 0C Signing time: Thu 27 Jun 2024 16:40:01 +0000 Manifest this update: Thu 27 Jun 2024 16:35:01 +0000 Manifest next update: Sun 30 Jun 2024 18:33:01 +0000 Files and hashes: 1: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: tRLVfcKBmiUIv9ZGpnjVjMqzI/6yVP6tuteSu4rx8Uw=) 2: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: b5T7KDTyQxOtHOnHGimyGcNwK8H98lErKyMf5O6yHdE=) 3: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: QR99bpkNi6RTuao/nP6wZnGnAu8oh/o8GpHp0qj3Yxs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 14:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:13:ad:8b:34:4f:ed:b2:b7:32:5e:3b:15:69:da:7a:f7:2c:0d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Jun 27 16:35:01 2024 GMT Not After : Jun 30 18:33:01 2024 GMT Subject: CN=BB920E3FDA55A5BAB5D85CAFF3CE971091D70E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:22:c8:5c:01:2f:68:ec:56:11:0c:c3:fb: 88:3d:58:9c:a9:e8:6b:bf:2d:50:a9:ec:ca:f0:12: cf:32:28:9e:08:70:b5:83:25:6d:f0:ff:49:9d:01: e5:d7:9d:83:59:37:1b:db:01:0d:b7:2b:8c:9a:d3: ae:89:76:0e:e5:7c:94:ab:65:3d:a5:29:db:21:2d: fb:40:b5:01:57:82:5a:92:d0:53:ff:75:7a:15:0b: 02:db:d5:14:0e:99:4c:4e:bd:0a:81:2f:5c:17:56: 04:e9:b5:a1:0c:0a:ca:c6:0c:87:20:cd:2d:ad:28: f3:94:0a:e8:66:f5:82:87:1b:b7:f1:22:9f:4b:6e: 5f:92:7c:9b:08:9b:65:69:1e:6a:a0:0e:5d:0d:99: 21:e5:be:dd:fa:5c:ae:4a:1d:44:36:b9:2c:b6:5d: 6c:96:15:f2:52:8f:5d:00:e3:fd:be:10:aa:28:6c: 55:d7:e2:0d:39:0f:7a:4e:b0:d1:85:fa:62:3e:ed: fa:fa:77:f5:31:a6:9a:4f:aa:50:e5:cc:68:51:ea: 79:ca:be:d3:52:b8:20:51:c1:42:46:1c:82:fa:6f: fc:83:54:d6:6d:c5:52:f3:4e:9f:bb:3a:7e:37:f7: 27:40:1b:72:66:37:a3:1a:e5:f8:77:98:9d:0a:cd: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:92:0E:3F:DA:55:A5:BA:B5:D8:5C:AF:F3:CE:97:10:91:D7:0E:62 X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1a:16:0e:dc:30:9f:cd:75:cc:ee:dd:ed:4f:98:f2:27:b5: 54:91:6e:09:aa:9a:c0:a1:37:79:66:65:43:27:85:95:0c:23: cb:1d:00:e5:b0:54:2f:64:bb:88:40:89:6c:fd:c7:f8:b3:da: e2:80:62:a8:05:f0:a5:b8:96:58:84:21:73:c9:cd:05:1b:f4: 08:6f:66:5a:a4:88:ff:85:db:7b:ad:6c:a8:87:ee:44:17:50: 22:ed:07:d5:25:ce:b4:b3:fc:0e:c2:b7:43:95:a7:f7:30:6e: 42:57:fe:7c:7a:c5:b1:4e:dd:19:e9:76:01:88:e9:9e:61:a6: 6f:50:90:47:9c:fa:1f:17:d2:9f:d9:51:81:6b:60:09:8f:c2: 7a:41:ce:4d:de:d0:4b:b7:88:f1:88:71:e0:1f:64:df:17:5e: 3e:30:47:a5:77:3d:9b:70:a6:f1:e6:47:aa:c6:95:c6:ab:82: c6:98:05:cb:7f:6c:d4:0b:21:dd:c5:90:40:5a:c1:2a:fe:7c: 4a:d3:e0:d0:40:ad:e2:e3:91:66:b2:87:72:8d:e7:16:80:4a: db:f5:f0:63:64:f0:e9:31:b0:de:26:04:e5:bc:fc:81:e5:2f: 8b:bc:62:2f:62:71:d9:be:b4:f1:75:aa:c1:01:56:61:27:24: 2a:b3:99:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQxOtizRP7bK3Ml47FWnaevcsDfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNDA2MjcxNjM1MDFaFw0yNDA2MzAxODMzMDFaMDMxMTAvBgNV BAMTKEJCOTIwRTNGREE1NUE1QkFCNUQ4NUNBRkYzQ0U5NzEwOTFENzBFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+oSLIXAEvaOxWEQzD+4g9WJyp 6Gu/LVCp7MrwEs8yKJ4IcLWDJW3w/0mdAeXXnYNZNxvbAQ23K4ya066Jdg7lfJSr ZT2lKdshLftAtQFXglqS0FP/dXoVCwLb1RQOmUxOvQqBL1wXVgTptaEMCsrGDIcg zS2tKPOUCuhm9YKHG7fxIp9Lbl+SfJsIm2VpHmqgDl0NmSHlvt36XK5KHUQ2uSy2 XWyWFfJSj10A4/2+EKoobFXX4g05D3pOsNGF+mI+7fr6d/UxpppPqlDlzGhR6nnK vtNSuCBRwUJGHIL6b/yDVNZtxVLzTp+7On439ydAG3JmN6Ma5fh3mJ0KzRYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu5IOP9pVpbq12Fyv886XEJHXDmIwHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwaFg7cMJ/Ndczu3e1PmPIntVSRbgmqmsCh N3lmZUMnhZUMI8sdAOWwVC9ku4hAiWz9x/iz2uKAYqgF8KW4lliEIXPJzQUb9Ahv ZlqkiP+F23utbKiH7kQXUCLtB9UlzrSz/A7Ct0OVp/cwbkJX/nx6xbFO3RnpdgGI 6Z5hpm9QkEec+h8X0p/ZUYFrYAmPwnpBzk3e0Eu3iPGIceAfZN8XXj4wR6V3PZtw pvHmR6rGlcargsaYBct/bNQLId3FkEBawSr+fErT4NBAreLjkWayh3KN5xaAStv1 8GNk8OkxsN4mBOW8/IHlL4u8Yi9icdm+tPF1qsEBVmEnJCqzmbE= -----END CERTIFICATE-----Generated at Thu Jun 27 18:23:26 2024 by rpki-client on console-fra.rpki-client.org