$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: MpH3p67ajuu+FyN1gnrm9A+gZvVquda4Xs6o3P2V+mo= Subject key identifier: 3D:CB:72:CF:C0:C1:52:80:EF:9F:9C:D4:D3:2C:82:8C:28:EC:CF:33 Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 475727042F933E4CC4E7DB6A0B7720A1EEF4D7E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 013C Signing time: Sat 18 May 2024 21:11:05 +0000 Manifest this update: Sat 18 May 2024 21:06:05 +0000 Manifest next update: Wed 22 May 2024 05:58:05 +0000 Files and hashes: 1: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: N8s8dFq4TNpWQyxUl9/UrWeAB+JY477G2vxj4+Vdmj4=) 2: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: elpZsHFUPni8NExlf7jvhA0Mz0EriSlS19uVnK8uSa4=) 3: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: Jl7Dc8Laf+24BdvNm9uRY6pi1lQJUNsOj86jpyfh2r4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:57:27:04:2f:93:3e:4c:c4:e7:db:6a:0b:77:20:a1:ee:f4:d7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: May 18 21:06:05 2024 GMT Not After : May 22 05:58:05 2024 GMT Subject: CN=3DCB72CFC0C15280EF9F9CD4D32C828C28ECCF33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a5:8f:1e:ca:d8:9c:07:bb:2e:a7:20:8f:fc: e6:2e:54:7b:1b:72:21:1f:c6:2d:b6:3b:4a:bb:a3: 29:d4:1a:5e:e8:3f:f5:05:74:32:62:e7:f1:1d:ab: 1a:4c:3b:0c:64:a1:d8:c8:e2:c3:03:c5:24:55:c8: f0:61:32:af:1c:a0:3a:41:42:78:7a:b4:03:2c:1a: 3c:7c:29:41:fa:aa:a6:ae:3c:8f:6b:a4:04:74:69: 36:4f:f9:07:de:62:6c:30:85:06:63:fd:49:41:b9: 20:61:64:64:ca:0d:c2:ea:ba:26:36:75:8f:04:d1: 54:2a:16:32:3a:fa:ca:b2:6e:38:c3:19:04:ca:68: 9c:06:f1:f5:a7:9d:79:a3:94:9b:8e:58:14:94:82: e7:19:15:7a:b1:20:ef:72:7b:a5:68:9b:11:5d:cc: 33:98:ff:38:97:52:58:ca:6d:82:34:40:69:ae:f7: 89:0f:8b:1f:d5:80:89:05:3a:ef:09:02:2c:81:96: 25:59:67:fe:a2:1f:12:08:72:98:1a:68:5b:43:cf: d6:fa:6d:26:af:9c:35:54:bd:be:64:75:42:b2:31: a1:68:40:4b:dd:54:6b:b5:81:70:1a:34:99:98:16: 99:0c:8f:39:31:70:c4:ac:20:b2:36:66:25:16:e5: 58:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CB:72:CF:C0:C1:52:80:EF:9F:9C:D4:D3:2C:82:8C:28:EC:CF:33 X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:5c:69:be:2d:57:69:77:47:1b:0e:de:66:66:0f:53:73:9e: 91:f0:91:2f:e6:e7:43:74:7b:39:75:49:d4:7a:df:5e:26:93: 86:70:d2:9b:4d:53:1a:44:b5:76:76:70:4b:20:ec:17:c2:9b: 1d:6b:8d:74:f4:06:01:16:7e:34:61:83:53:3b:40:34:5a:c4: a7:9b:70:0f:fd:3f:15:57:f7:3d:d3:25:3e:b8:5e:96:54:7b: 01:80:a8:2f:8c:60:9e:e1:aa:94:1a:48:22:3c:7a:a4:de:ea: 90:41:e1:94:a9:86:7b:a7:2c:28:4d:28:5c:e4:bf:3a:4a:62: 79:0f:11:c3:03:0c:ec:5b:a4:16:98:da:c4:ee:e5:a9:74:2c: 34:4d:95:29:29:8f:61:d6:c6:27:5f:9e:9c:25:4c:32:d5:a0: 6b:a0:bf:e2:d9:95:61:4f:46:26:a0:8d:4a:a5:14:0a:b6:48: 23:6e:c4:30:a1:31:0e:96:7c:77:11:ec:92:a4:f3:63:3d:8b: d2:e4:0e:fd:fc:ba:47:2f:29:bc:e4:29:90:4e:5d:37:cb:69: b6:76:f7:86:8e:b2:c7:92:41:f9:ae:a0:46:ac:cb:ae:9a:2c: bd:ca:e9:ae:ee:47:e2:ea:2a:ad:2b:92:ee:f1:48:b3:1d:6c: fa:12:52:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR1cnBC+TPkzE59tqC3cgoe701+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNDA1MTgyMTA2MDVaFw0yNDA1MjIwNTU4MDVaMDMxMTAvBgNV BAMTKDNEQ0I3MkNGQzBDMTUyODBFRjlGOUNENEQzMkM4MjhDMjhFQ0NGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCupY8eyticB7supyCP/OYuVHsb ciEfxi22O0q7oynUGl7oP/UFdDJi5/EdqxpMOwxkodjI4sMDxSRVyPBhMq8coDpB Qnh6tAMsGjx8KUH6qqauPI9rpAR0aTZP+QfeYmwwhQZj/UlBuSBhZGTKDcLquiY2 dY8E0VQqFjI6+sqybjjDGQTKaJwG8fWnnXmjlJuOWBSUgucZFXqxIO9ye6VomxFd zDOY/ziXUljKbYI0QGmu94kPix/VgIkFOu8JAiyBliVZZ/6iHxIIcpgaaFtDz9b6 bSavnDVUvb5kdUKyMaFoQEvdVGu1gXAaNJmYFpkMjzkxcMSsILI2ZiUW5VjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPctyz8DBUoDvn5zU0yyCjCjszzMwHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdcab4tV2l3RxsO3mZmD1NznpHwkS/m50N0 ezl1SdR6314mk4Zw0ptNUxpEtXZ2cEsg7BfCmx1rjXT0BgEWfjRhg1M7QDRaxKeb cA/9PxVX9z3TJT64XpZUewGAqC+MYJ7hqpQaSCI8eqTe6pBB4ZSphnunLChNKFzk vzpKYnkPEcMDDOxbpBaY2sTu5al0LDRNlSkpj2HWxidfnpwlTDLVoGugv+LZlWFP RiagjUqlFAq2SCNuxDChMQ6WfHcR7JKk82M9i9LkDv38ukcvKbzkKZBOXTfLabZ2 94aOsseSQfmuoEasy66aLL3K6a7uR+LqKq0rku7xSLMdbPoSUlA= -----END CERTIFICATE-----Generated at Sat May 18 22:13:41 2024 by rpki-client on console-fra.rpki-client.org