$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft File: FA86E23853549D2EF1D9F9C9222147A550E36A38.mft (raw, json) Hash identifier: wS7dq/qSHdZJYnrGYaDIXTRyZ/MwML/GWVHKFYUHoO0= Subject key identifier: 7B:FD:C0:6D:2D:4D:42:CF:20:78:AA:3C:9C:AA:4B:D1:17:73:3C:AD Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 Certificate issuer: /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Certificate serial: 3C6BD656D7348EC9328F2E032DCA125AB416DECD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft Manifest number: F5 Signing time: Tue 28 May 2024 19:00:37 +0000 Manifest this update: Tue 28 May 2024 18:55:37 +0000 Manifest next update: Sat 01 Jun 2024 01:28:37 +0000 Files and hashes: 1: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (hash: wAGGklCk4B1PY/Yk97FdUVDq0X8tOoPh5XLBtQglwEI=) 2: 3130332e35352e32382e302f32342d3234203d3e20313530343837.roa (hash: OWN6QS4tvhLLIWetZNv4iqkNCXq5fPQXYFc1C2JdOlM=) 3: FA86E23853549D2EF1D9F9C9222147A550E36A38.crl (hash: 9hPKV6qDTpHuLX7M3cLaNucy0/FegnA4CEEU/o36VsU=) 4: 3130332e35352e32392e302f32342d3234203d3e20313530343837.roa (hash: Fnb9mHwnPNsfDMZ6cjv7vOerbkwh7TH6rJKXU74qPqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 01:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6b:d6:56:d7:34:8e:c9:32:8f:2e:03:2d:ca:12:5a:b4:16:de:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38 Validity Not Before: May 28 18:55:37 2024 GMT Not After : Jun 1 01:28:37 2024 GMT Subject: CN=7BFDC06D2D4D42CF2078AA3C9CAA4BD117733CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:cc:7a:e9:f4:fd:e7:08:d6:77:5e:cc:a2: 61:1d:67:7d:49:a3:e0:f0:18:65:81:cd:db:64:1e: 6c:3e:d8:ac:28:96:13:32:3a:15:cd:b6:7f:e7:bc: a6:b0:24:4a:14:8a:0d:f4:03:bf:b3:3b:a6:5a:65: 6b:c0:bb:65:84:a9:a3:80:6c:73:85:0c:3b:dd:5e: 13:b8:61:39:68:bf:11:f4:0e:c3:52:c9:ec:c6:32: e0:af:1f:56:fb:4c:48:16:d1:97:e6:8c:9f:30:a9: 0b:c2:db:6c:33:22:9c:39:2b:d2:1c:34:eb:3c:f3: 85:cc:4c:d3:f0:36:16:4b:9c:67:b7:2c:87:3e:d7: 56:21:7c:a4:4a:17:a1:fb:f6:73:57:bb:f1:65:7a: cd:37:6e:91:89:f3:28:eb:50:d1:5b:3c:f9:b3:25: ac:92:fb:61:9c:37:b9:aa:a9:36:39:b3:6e:63:7f: 66:b3:43:91:00:a2:71:bf:02:91:d6:a8:3e:82:7f: 10:74:8c:17:f6:f3:df:1f:32:ff:a7:ae:51:2f:1b: ee:7e:b2:b7:a0:88:58:a5:a7:cd:d9:ce:c0:ba:cc: 82:5c:cc:0a:22:b1:e8:ac:9e:2d:8d:42:70:99:41: 5a:d8:8f:d2:45:5e:58:18:8d:5e:28:39:d2:0d:90: cb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:C0:6D:2D:4D:42:CF:20:78:AA:3C:9C:AA:4B:D1:17:73:3C:AD X509v3 Authority Key Identifier: keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:19:80:af:b4:e5:cc:cc:ff:a7:06:c6:74:61:aa:13:31:4e: 7d:fe:05:5b:66:81:ff:91:a0:cf:bf:5e:e8:9d:8e:af:6b:d8: c9:53:32:2a:5a:88:2f:a5:b0:15:08:df:e7:30:56:4d:b0:03: a2:6a:e1:cd:3a:4f:2c:03:cd:d2:a2:c7:d6:35:5c:3a:7c:58: 5c:6a:2d:cd:24:67:7f:f3:62:fc:e4:7b:0a:f8:9b:c9:13:e3: cb:e0:5d:dd:11:cb:06:aa:af:52:c5:70:3f:5f:71:ec:14:f1: a4:ad:a2:81:71:c9:40:29:17:ae:86:ea:25:94:3b:d7:e7:b4: 1f:22:c1:f3:38:4a:7a:fd:4b:4c:e1:6e:85:cd:ed:ab:98:ff: bb:28:49:98:3c:23:f4:66:49:1e:4d:c3:ac:9f:c4:f2:5c:d0: d8:8f:9c:50:1b:fc:b5:e1:60:1e:99:bb:5d:f9:c7:3f:c2:4a: 99:b5:90:36:d5:81:df:d5:c9:81:40:86:25:e6:b6:50:84:b1: 68:1f:23:d7:1a:c9:ce:a6:a5:4f:1b:1d:00:d6:cc:7c:23:1a: 49:63:db:21:e1:46:8a:e4:d5:d0:ca:73:e5:13:39:b9:85:92: 59:56:de:f2:11:47:2f:ff:f2:40:f8:1c:53:8a:60:27:1d:34: dc:0f:8b:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGvWVtc0jskyjy4DLcoSWrQW3s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1 MEUzNkEzODAeFw0yNDA1MjgxODU1MzdaFw0yNDA2MDEwMTI4MzdaMDMxMTAvBgNV BAMTKDdCRkRDMDZEMkQ0RDQyQ0YyMDc4QUEzQzlDQUE0QkQxMTc3MzNDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCresx66fT95wjWd17MomEdZ31J o+DwGGWBzdtkHmw+2KwolhMyOhXNtn/nvKawJEoUig30A7+zO6ZaZWvAu2WEqaOA bHOFDDvdXhO4YTlovxH0DsNSyezGMuCvH1b7TEgW0ZfmjJ8wqQvC22wzIpw5K9Ic NOs884XMTNPwNhZLnGe3LIc+11YhfKRKF6H79nNXu/Fles03bpGJ8yjrUNFbPPmz JayS+2GcN7mqqTY5s25jf2azQ5EAonG/ApHWqD6CfxB0jBf2898fMv+nrlEvG+5+ sregiFilp83ZzsC6zIJczAoiseisni2NQnCZQVrYj9JFXlgYjV4oOdINkMuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe/3AbS1NQs8geKo8nKpL0RdzPK0wHwYDVR0j BBgwFoAU+obiOFNUnS7x2fnJIiFHpVDjajgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTA0NzkzYy1jMjA5LTQ2OWEtOGUzYy1lYjNmNWE4Mzg2M2YvMC9GQTg2RTIzODUz NTQ5RDJFRjFEOUY5QzkyMjIxNDdBNTUwRTM2QTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1MEUz NkEzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwNDc5M2MtYzIwOS00NjlhLThl M2MtZWIzZjVhODM4NjNmLzAvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3 QTU1MEUzNkEzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAZgK+05czM/6cGxnRhqhMxTn3+BVtmgf+R oM+/Xuidjq9r2MlTMipaiC+lsBUI3+cwVk2wA6Jq4c06TywDzdKix9Y1XDp8WFxq Lc0kZ3/zYvzkewr4m8kT48vgXd0Rywaqr1LFcD9fcewU8aStooFxyUApF66G6iWU O9fntB8iwfM4Snr9S0zhboXN7auY/7soSZg8I/RmSR5Nw6yfxPJc0NiPnFAb/LXh YB6Zu135xz/CSpm1kDbVgd/VyYFAhiXmtlCEsWgfI9cayc6mpU8bHQDWzHwjGklj 2yHhRork1dDKc+UTObmFkllW3vIRRy//8kD4HFOKYCcdNNwPiyU= -----END CERTIFICATE-----Generated at Tue May 28 19:49:56 2024 by rpki-client on console-fra.rpki-client.org