$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: z3P6beGDyGFPmjmz7QVwvC3rhbpqTqfl5sZlfgXJTCE= Subject key identifier: F6:78:DF:70:B6:F0:73:47:E9:37:65:CF:0C:01:63:86:C9:E7:31:2D Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 5E2845D41A0712C6581B0A5216B82DDA9148317B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 0296 Signing time: Tue 28 May 2024 06:31:35 +0000 Manifest this update: Tue 28 May 2024 06:26:35 +0000 Manifest next update: Fri 31 May 2024 17:25:35 +0000 Files and hashes: 1: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: 35f+sauVdlg6p9peCMEzZB/uQJdGBMvVpyhkd1PfYm0=) 2: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: x2KnNs20e2P/gWXVltkdzSrnxajZNaZQrxNA/6UVN4M=) 3: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: oKlrEOJj9KlrkKMOtF3PLyK4t1GFYgSEQOYgzjIIDbI=) 4: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: WHK6Zz1i6Hc2LLq8L96O4VJFpX02HYc2gUchhiH6Le4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 16:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:28:45:d4:1a:07:12:c6:58:1b:0a:52:16:b8:2d:da:91:48:31:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: May 28 06:26:35 2024 GMT Not After : May 31 17:25:35 2024 GMT Subject: CN=F678DF70B6F07347E93765CF0C016386C9E7312D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:58:7c:19:cd:fa:7f:5c:41:47:c8:33:b6:34: 8f:1a:da:e2:26:b2:3c:da:6a:56:a7:86:9d:40:9c: d8:5c:36:c2:67:b4:77:3d:bd:cb:83:45:fd:e0:b2: b0:7b:de:d4:a7:12:81:d2:aa:01:31:11:97:63:1d: 9e:5a:7c:7c:23:dc:59:4e:b7:ca:cd:95:c2:fd:e5: 93:be:f6:08:e1:13:ca:81:13:96:cc:2a:5d:21:9b: a3:3c:16:31:29:fe:fe:26:b8:85:e1:51:fd:30:a0: 7b:9f:39:b0:94:81:38:83:cc:0f:ff:be:71:26:52: 54:fb:34:bb:77:b7:35:84:b1:63:9a:8f:b4:1b:5a: bb:c4:4f:e4:19:b4:51:a3:fd:da:9f:4d:c1:84:2f: f1:e1:b9:12:f8:90:6a:24:48:9c:b3:10:9a:24:14: 99:a9:98:c2:27:90:e3:32:86:aa:5e:37:a7:a7:65: 07:2d:52:10:87:8d:9f:f2:cd:3f:c4:14:b1:33:44: 46:e8:19:84:ba:70:48:fe:88:d1:a3:8c:b4:5d:93: f2:bd:6c:4a:1d:e2:a3:bd:bd:06:91:c8:36:e6:2b: b5:0c:47:cb:4b:11:a7:df:b9:b5:f0:ae:80:06:95: 2c:fa:a5:c1:97:8a:bf:86:3f:c4:c8:bd:ee:7e:61: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:78:DF:70:B6:F0:73:47:E9:37:65:CF:0C:01:63:86:C9:E7:31:2D X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a7:d0:a5:c8:9d:0e:e6:04:58:a6:33:ca:f5:b3:c1:5f:02: a0:79:c3:19:ca:a5:f7:b0:c9:fb:3b:98:8a:3a:fd:54:3f:49: fa:95:01:f8:f1:eb:d2:df:17:8b:e7:2f:2e:d5:62:32:53:1e: 3f:11:10:e4:5b:19:ee:88:9e:31:06:94:10:46:68:09:62:1d: 33:6c:5c:76:12:40:29:cb:92:42:90:b6:d2:7c:dc:21:7e:14: 82:1a:b7:0a:77:1e:16:c7:64:1f:fb:d6:78:12:59:20:51:96: 6b:75:60:1b:6a:92:45:74:d9:ec:a9:7c:71:e3:38:21:8e:fc: 33:82:2e:f9:61:40:dc:69:c9:9a:81:35:64:17:58:cf:27:99: 55:e0:47:35:b1:80:d9:d7:95:49:74:d7:64:0a:97:fe:b4:27: ec:cc:c7:86:d7:9b:1c:3d:1d:20:62:7b:80:9c:05:10:b0:fd: 03:f9:dc:ac:db:14:11:6f:b7:e6:04:d3:47:7c:5f:32:dd:6c: a4:72:09:61:4e:13:75:8e:f9:bb:0f:4e:96:9d:dc:e6:35:13: 0e:e2:8b:0e:29:0b:26:42:02:ff:3a:25:63:28:6e:e1:f3:b8: 6f:ca:90:42:79:e1:2f:b7:a2:81:05:76:af:84:f1:bb:21:d7: ba:f4:ef:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXihF1BoHEsZYGwpSFrgt2pFIMXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNDA1MjgwNjI2MzVaFw0yNDA1MzExNzI1MzVaMDMxMTAvBgNV BAMTKEY2NzhERjcwQjZGMDczNDdFOTM3NjVDRjBDMDE2Mzg2QzlFNzMxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlWHwZzfp/XEFHyDO2NI8a2uIm sjzaalanhp1AnNhcNsJntHc9vcuDRf3gsrB73tSnEoHSqgExEZdjHZ5afHwj3FlO t8rNlcL95ZO+9gjhE8qBE5bMKl0hm6M8FjEp/v4muIXhUf0woHufObCUgTiDzA// vnEmUlT7NLt3tzWEsWOaj7QbWrvET+QZtFGj/dqfTcGEL/HhuRL4kGokSJyzEJok FJmpmMInkOMyhqpeN6enZQctUhCHjZ/yzT/EFLEzREboGYS6cEj+iNGjjLRdk/K9 bEod4qO9vQaRyDbmK7UMR8tLEaffubXwroAGlSz6pcGXir+GP8TIve5+YSWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9njfcLbwc0fpN2XPDAFjhsnnMS0wHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCn0KXInQ7mBFimM8r1s8FfAqB5wxnKpfew yfs7mIo6/VQ/SfqVAfjx69LfF4vnLy7VYjJTHj8REORbGe6InjEGlBBGaAliHTNs XHYSQCnLkkKQttJ83CF+FIIatwp3HhbHZB/71ngSWSBRlmt1YBtqkkV02eypfHHj OCGO/DOCLvlhQNxpyZqBNWQXWM8nmVXgRzWxgNnXlUl012QKl/60J+zMx4bXmxw9 HSBie4CcBRCw/QP53KzbFBFvt+YE00d8XzLdbKRyCWFOE3WO+bsPTpad3OY1Ew7i iw4pCyZCAv86JWMobuHzuG/KkEJ54S+3ooEFdq+E8bsh17r076Y= -----END CERTIFICATE-----Generated at Tue May 28 08:39:16 2024 by rpki-client on console-ams.rpki-client.org