$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: a9ITd7niVTUoZpAD+DhAQljV5kHiSxd0Iepe/c7QKUs= Subject key identifier: 36:05:1D:89:8B:51:B2:85:C5:20:E1:7D:FD:B5:FC:3F:7A:1F:ED:21 Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 7E02FD8D3228D05C574DB77934BFE894F7621196 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 012E Signing time: Sat 18 May 2024 12:57:24 +0000 Manifest this update: Sat 18 May 2024 12:52:24 +0000 Manifest next update: Tue 21 May 2024 13:55:24 +0000 Files and hashes: 1: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: Ojd95OzLw0aiY2RynkTw6W2b3gHO3C8EacS+32nu+oA=) 2: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: i5T8WB4Hv50pm8ju6QFr95DSr8KFOuoOEK97Up6nz28=) 3: 3130332e37332e3139322e302f32342d3234203d3e20313432333534.roa (hash: XfDTL+nG+BxRc5Y8PPIEwytHq3eKKPFTGypA99crl7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 13:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:02:fd:8d:32:28:d0:5c:57:4d:b7:79:34:bf:e8:94:f7:62:11:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: May 18 12:52:24 2024 GMT Not After : May 21 13:55:24 2024 GMT Subject: CN=36051D898B51B285C520E17DFDB5FC3F7A1FED21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:fd:d3:6d:cb:cf:0a:b3:90:2a:ef:d6:c9: f5:fd:be:03:7e:dc:8f:b4:f1:0b:1e:4b:b6:45:f2: e3:89:81:6b:bf:4c:8c:2f:18:00:fa:25:92:02:dc: 58:2b:fb:eb:91:f4:55:92:20:af:b6:11:5c:4b:65: cf:81:b5:48:52:a9:31:d7:de:a0:c0:2a:db:ce:f2: 3f:b1:46:a3:bf:06:2e:4d:68:d1:a6:0d:a7:ac:47: 7e:cf:8f:69:73:fa:db:54:cc:2f:bf:7c:78:38:fb: 4c:8e:9e:93:e6:dd:52:f7:11:61:7e:c0:07:fc:11: 0e:7e:20:6d:0b:44:26:c4:63:43:d6:be:a4:82:d0: cd:e7:ab:2b:d4:ea:fa:3a:55:b4:65:b3:11:17:d5: d0:0c:2f:4f:ce:c9:43:6e:6c:8d:72:a6:ee:66:17: 00:f0:7f:52:c8:88:20:5e:10:1c:63:66:11:1c:51: 66:d9:99:ab:90:6b:d4:be:cc:62:41:2a:dc:41:7c: 3a:5c:da:dc:aa:a0:71:40:79:8b:1f:ae:97:f7:06: dc:b0:49:ca:cc:03:12:ae:97:27:ef:41:29:2e:ea: d4:1d:3d:51:ca:97:61:7b:30:ce:2d:a2:32:0b:c2: f9:4e:b4:6b:d6:b0:9c:6f:e9:1e:6f:63:00:f8:8b: dc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:05:1D:89:8B:51:B2:85:C5:20:E1:7D:FD:B5:FC:3F:7A:1F:ED:21 X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7d:05:74:8f:1d:71:a0:93:46:76:74:03:34:2e:2c:09:7c: 83:37:28:0b:58:9e:a4:91:22:cd:34:8d:36:5e:ef:f9:4f:06: 91:33:3f:e6:f7:9e:ad:6c:ac:34:22:a4:ae:f1:02:19:b4:08: 88:ae:ef:9d:72:5b:91:d6:53:68:6a:c2:13:d5:64:0c:1e:ef: d1:13:77:0d:16:02:6e:57:f7:ab:5f:7c:d8:a9:0d:1e:72:c2: b5:ee:93:a2:51:a0:bb:eb:34:62:93:10:85:af:ce:4e:52:95: 34:35:0c:b3:37:b6:f5:69:15:b1:6b:75:f3:90:85:4d:11:48: 9b:d8:29:3e:01:56:83:50:68:ec:27:8f:74:39:08:39:21:aa: 22:f4:10:80:27:ab:61:c5:2a:d2:e1:f1:f9:4a:f5:23:bb:ae: 00:5d:93:6e:fb:4f:f7:ce:cc:41:ab:10:8b:6a:58:bc:a0:ef: 0c:28:9e:17:5b:f1:4a:c8:ee:b6:20:05:3d:0d:f6:7e:1c:9e: b7:46:b1:fd:10:df:da:4a:e6:97:5b:92:4e:61:9c:f3:51:36: a1:15:e4:91:af:f0:16:90:ba:3e:03:e7:8f:a9:f8:01:f8:70: cd:7e:36:40:5a:cc:72:95:25:eb:88:0e:e3:f5:3c:6b:d5:a3: 9b:8c:62:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfgL9jTIo0FxXTbd5NL/olPdiEZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNDA1MTgxMjUyMjRaFw0yNDA1MjExMzU1MjRaMDMxMTAvBgNV BAMTKDM2MDUxRDg5OEI1MUIyODVDNTIwRTE3REZEQjVGQzNGN0ExRkVEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJf3TbcvPCrOQKu/WyfX9vgN+ 3I+08QseS7ZF8uOJgWu/TIwvGAD6JZIC3Fgr++uR9FWSIK+2EVxLZc+BtUhSqTHX 3qDAKtvO8j+xRqO/Bi5NaNGmDaesR37Pj2lz+ttUzC+/fHg4+0yOnpPm3VL3EWF+ wAf8EQ5+IG0LRCbEY0PWvqSC0M3nqyvU6vo6VbRlsxEX1dAML0/OyUNubI1ypu5m FwDwf1LIiCBeEBxjZhEcUWbZmauQa9S+zGJBKtxBfDpc2tyqoHFAeYsfrpf3Btyw ScrMAxKulyfvQSku6tQdPVHKl2F7MM4tojILwvlOtGvWsJxv6R5vYwD4i9xtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNgUdiYtRsoXFIOF9/bX8P3of7SEwHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKx9BXSPHXGgk0Z2dAM0LiwJfIM3KAtYnqSR Is00jTZe7/lPBpEzP+b3nq1srDQipK7xAhm0CIiu751yW5HWU2hqwhPVZAwe79ET dw0WAm5X96tffNipDR5ywrXuk6JRoLvrNGKTEIWvzk5SlTQ1DLM3tvVpFbFrdfOQ hU0RSJvYKT4BVoNQaOwnj3Q5CDkhqiL0EIAnq2HFKtLh8flK9SO7rgBdk277T/fO zEGrEItqWLyg7wwonhdb8UrI7rYgBT0N9n4cnrdGsf0Q39pK5pdbkk5hnPNRNqEV 5JGv8BaQuj4D54+p+AH4cM1+NkBazHKVJeuIDuP1PGvVo5uMYmA= -----END CERTIFICATE-----Generated at Sat May 18 13:30:07 2024 by rpki-client on console-fra.rpki-client.org