$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: hK2rsGmtNqHZO42ZiTeOu7Cm7Oae2tT7nHBX4JYc5Rw= Subject key identifier: 7F:04:93:05:CF:3C:2D:56:19:1A:F7:06:C9:0D:79:63:4C:6E:FA:75 Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 71D866CF038E5C3985160E6F8D0B3CCB918DDFE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 02B3 Signing time: Sun 26 May 2024 22:40:37 +0000 Manifest this update: Sun 26 May 2024 22:35:37 +0000 Manifest next update: Thu 30 May 2024 06:42:37 +0000 Files and hashes: 1: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: c3utuI2CLkkw3BaE/1tvYgBMap1lWhlLuLsEo7UFfSM=) 2: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: ZV0HiEoSVoxNVz9leop66Bo2muIPDF95iIX+7KWYXA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 22:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d8:66:cf:03:8e:5c:39:85:16:0e:6f:8d:0b:3c:cb:91:8d:df:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: May 26 22:35:37 2024 GMT Not After : May 30 06:42:37 2024 GMT Subject: CN=7F049305CF3C2D56191AF706C90D79634C6EFA75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:ad:38:a6:ad:c4:fc:e9:1f:2d:98:b5:7d: 49:a6:b2:fa:c5:7c:0b:7f:60:1b:d9:7c:07:fd:1b: ed:f9:27:4f:24:a5:d7:2b:d2:17:72:2c:34:c9:ef: 13:2d:36:53:14:86:2c:27:f3:bf:bb:b8:f3:ac:bd: 71:fb:63:8b:4e:47:a7:35:53:9f:06:9a:82:3f:90: d3:94:3a:e4:0a:ce:ad:40:b2:05:af:e9:45:b1:87: d1:c8:26:cd:45:c9:4f:ee:fb:6e:e5:60:39:56:25: b0:fb:71:39:ad:27:08:43:cc:42:3c:ad:2d:d9:60: 46:ab:6d:4f:47:25:40:3f:82:db:8d:9e:5d:67:9d: b7:0d:7b:e3:45:1f:6a:78:df:28:04:5b:98:26:fc: c4:b7:2e:2d:c0:8b:1a:c9:c3:0d:51:27:9c:52:5b: a0:a3:81:72:13:af:33:e7:2e:71:0b:c4:d9:8a:0c: 12:b7:f0:82:66:1c:f5:a9:00:d0:f5:f1:6e:81:1e: c5:c0:09:2f:8b:36:eb:a6:6c:8b:72:40:de:de:b8: a2:32:8e:04:db:c2:30:a8:02:4b:46:cb:45:58:23: 23:05:e6:8d:8a:9e:e2:ce:28:ce:77:bc:c4:d6:34: 12:6d:70:b5:c3:fe:2c:0e:66:93:fe:32:b6:3c:62: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:04:93:05:CF:3C:2D:56:19:1A:F7:06:C9:0D:79:63:4C:6E:FA:75 X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ab:ee:6d:bc:84:1c:75:c2:be:c4:86:32:47:98:d5:03:6b: da:da:25:f2:f3:c5:34:78:8b:c6:fe:6a:52:a9:4c:85:68:35: f7:95:bd:c6:62:5f:cc:22:88:bd:ac:02:a4:4f:e7:91:d8:70: 38:07:66:54:a3:52:7c:a2:9e:bb:f5:79:04:c6:a8:6b:a5:5a: 35:88:a5:95:65:ba:e1:e3:73:fd:c7:ec:8f:a2:1c:ed:b8:3f: 4c:e3:ac:ea:d9:74:a7:db:e0:b7:f8:66:c3:f8:84:0a:83:1f: f8:be:98:f3:0e:08:99:7a:fe:af:e5:fa:df:7d:06:4e:76:ae: 62:0d:d3:e3:fa:4a:bb:72:e3:35:48:65:97:57:af:7e:e5:24: 9c:df:61:84:84:da:e6:74:1a:34:d5:3f:05:e5:e6:3f:99:1b: f5:cc:23:77:6a:94:91:25:a1:21:d9:ef:8d:ec:9c:7a:74:f4: 20:7e:df:6e:28:73:ad:a2:5b:76:f6:6d:71:f1:6b:15:87:65: a5:6c:74:67:d2:47:d5:ae:3e:8b:1f:66:63:98:c6:d0:00:a6: fc:fb:04:c7:77:d2:d0:e2:94:e6:82:76:dd:cc:0d:76:0d:49: 77:5c:85:f7:e5:b3:5c:48:8a:ba:e1:ec:99:f7:19:4a:ef:1b: 1d:43:31:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcdhmzwOOXDmFFg5vjQs8y5GN3+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNDA1MjYyMjM1MzdaFw0yNDA1MzAwNjQyMzdaMDMxMTAvBgNV BAMTKDdGMDQ5MzA1Q0YzQzJENTYxOTFBRjcwNkM5MEQ3OTYzNEM2RUZBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEa04pq3E/OkfLZi1fUmmsvrF fAt/YBvZfAf9G+35J08kpdcr0hdyLDTJ7xMtNlMUhiwn87+7uPOsvXH7Y4tOR6c1 U58GmoI/kNOUOuQKzq1AsgWv6UWxh9HIJs1FyU/u+27lYDlWJbD7cTmtJwhDzEI8 rS3ZYEarbU9HJUA/gtuNnl1nnbcNe+NFH2p43ygEW5gm/MS3Li3AixrJww1RJ5xS W6CjgXITrzPnLnELxNmKDBK38IJmHPWpAND18W6BHsXACS+LNuumbItyQN7euKIy jgTbwjCoAktGy0VYIyMF5o2KnuLOKM53vMTWNBJtcLXD/iwOZpP+MrY8Yu4bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfwSTBc88LVYZGvcGyQ15Y0xu+nUwHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKr7m28hBx1wr7EhjJHmNUDa9raJfLzxTR4 i8b+alKpTIVoNfeVvcZiX8wiiL2sAqRP55HYcDgHZlSjUnyinrv1eQTGqGulWjWI pZVluuHjc/3H7I+iHO24P0zjrOrZdKfb4Lf4ZsP4hAqDH/i+mPMOCJl6/q/l+t99 Bk52rmIN0+P6Srty4zVIZZdXr37lJJzfYYSE2uZ0GjTVPwXl5j+ZG/XMI3dqlJEl oSHZ743snHp09CB+324oc62iW3b2bXHxaxWHZaVsdGfSR9WuPosfZmOYxtAApvz7 BMd30tDilOaCdt3MDXYNSXdchffls1xIirrh7Jn3GUrvGx1DMbY= -----END CERTIFICATE-----Generated at Sun May 26 23:22:10 2024 by rpki-client on console-fra.rpki-client.org