$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft File: 8659BE8500DEBB314448F1412FA1E264025A4148.mft (raw, json) Hash identifier: Urs8Mosx5385L8MYFoyCINBUp6cWmQnNy75GPUkIiTI= Subject key identifier: CE:DC:8F:1E:F3:65:92:94:A0:35:0C:BC:B6:40:AE:B7:B3:0F:7F:C1 Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 4DBFC2DEB8AA68C61C061E156B7DD523E5628D93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft Manifest number: FF Signing time: Tue 28 May 2024 06:50:53 +0000 Manifest this update: Tue 28 May 2024 06:45:53 +0000 Manifest next update: Fri 31 May 2024 17:14:53 +0000 Files and hashes: 1: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: QRsQlBQ5YMD91UW5K0Kty6d4jlRsDPtLeRAooWysou8=) 2: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: VCFnfKiFwZ/lAAxkqSjbsPgknSJmNdTZDVEaQna32Uo=) 3: 8659BE8500DEBB314448F1412FA1E264025A4148.crl (hash: L+1w6UlDRH5Nqqg4fn3jzfBJdGGNtrckdvCnBBeF5A4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 16:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bf:c2:de:b8:aa:68:c6:1c:06:1e:15:6b:7d:d5:23:e5:62:8d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: May 28 06:45:53 2024 GMT Not After : May 31 17:14:53 2024 GMT Subject: CN=CEDC8F1EF3659294A0350CBCB640AEB7B30F7FC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8a:ae:53:2b:a9:1a:21:f2:02:99:e8:86:0e: 91:55:94:a9:80:62:12:8c:f3:80:25:a2:cd:81:52: c3:5f:3a:3b:80:53:6b:ac:80:08:ea:04:90:46:6b: 24:8c:e7:89:be:63:64:8f:e7:a1:eb:99:23:4c:d9: fd:63:0f:90:cd:00:8c:54:a2:36:ce:d5:39:6b:bf: bb:d2:3c:db:3f:62:d7:f2:f8:9e:01:64:17:f0:11: b0:71:13:e5:d4:da:cb:f5:ae:0b:79:86:4c:67:6b: 11:98:a3:a2:03:ea:d2:ec:9c:16:2e:93:bf:73:cd: 46:3f:32:c6:34:f2:79:be:f1:f1:aa:1e:86:22:34: 36:60:d3:d2:42:64:0e:f1:04:48:3b:b3:81:5c:29: dd:7b:31:98:ce:36:41:a6:54:e7:f6:bc:18:4a:e4: f3:62:a7:9c:07:0d:d5:f7:b5:3d:8d:b2:03:a1:b4: 88:50:f9:52:48:c4:81:48:f8:8b:6e:23:b8:4f:a6: da:08:ef:40:38:ae:f1:dc:02:6f:be:63:ae:87:92: 1f:86:06:63:c5:6d:0a:cf:b4:15:a5:ed:6d:1a:d8: db:d6:1e:99:88:68:33:38:bc:02:f0:4d:32:06:fb: 3a:17:10:95:d6:6f:ff:9c:b6:9c:cc:e5:b0:10:19: e9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DC:8F:1E:F3:65:92:94:A0:35:0C:BC:B6:40:AE:B7:B3:0F:7F:C1 X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e3:47:0e:75:40:13:c5:81:f7:06:a6:93:8c:dd:87:be:1e: dc:45:0b:89:6b:a5:9f:dd:11:2f:c3:32:ed:1b:5d:ca:20:9a: 69:82:ff:03:46:ae:9e:42:f8:6f:16:bf:71:cd:03:35:c2:11: 35:7e:c9:6d:94:0b:ba:db:d8:33:35:f7:02:6c:63:7b:1d:f6: c7:70:42:77:a5:9c:1f:97:27:99:85:26:89:81:f6:7c:41:bf: b4:fe:eb:63:dc:d7:ba:e6:94:7d:d3:05:df:ab:7b:05:c8:3f: 45:43:bb:44:6c:ad:01:98:26:06:df:c5:89:6d:65:79:73:19: ca:40:2e:b4:8b:7c:e9:d2:55:76:24:b8:2f:46:fb:37:bb:c0: 1e:8e:da:30:0f:46:3e:5e:75:61:35:c5:04:ff:3c:9c:86:56: c2:1e:ba:1c:cd:c8:4a:b6:81:42:e9:04:b4:cf:f9:8e:f7:0e: 00:c4:9d:5a:be:f9:16:3e:3c:08:01:22:6f:9a:10:ff:cc:50: 49:a6:43:7a:ed:30:b0:d8:d0:e8:7c:b8:61:e1:57:8f:fa:f9: 9e:a3:61:19:ad:43:04:19:9e:3c:f5:ec:5d:77:a2:cb:48:bc: 14:8b:83:1f:46:35:c7:c4:a8:44:fe:ec:2b:cc:d1:b1:4c:50: 98:23:33:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTb/C3riqaMYcBh4Va33VI+VijZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNDA1MjgwNjQ1NTNaFw0yNDA1MzExNzE0NTNaMDMxMTAvBgNV BAMTKENFREM4RjFFRjM2NTkyOTRBMDM1MENCQ0I2NDBBRUI3QjMwRjdGQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmiq5TK6kaIfICmeiGDpFVlKmA YhKM84Alos2BUsNfOjuAU2usgAjqBJBGaySM54m+Y2SP56HrmSNM2f1jD5DNAIxU ojbO1Tlrv7vSPNs/Ytfy+J4BZBfwEbBxE+XU2sv1rgt5hkxnaxGYo6ID6tLsnBYu k79zzUY/MsY08nm+8fGqHoYiNDZg09JCZA7xBEg7s4FcKd17MZjONkGmVOf2vBhK 5PNip5wHDdX3tT2NsgOhtIhQ+VJIxIFI+ItuI7hPptoI70A4rvHcAm++Y66Hkh+G BmPFbQrPtBWl7W0a2NvWHpmIaDM4vALwTTIG+zoXEJXWb/+ctpzM5bAQGemHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUztyPHvNlkpSgNQy8tkCut7MPf8EwHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUy NjQwMjVBNDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3jRw51QBPFgfcGppOM3Ye+HtxFC4lrpZ/d ES/DMu0bXcogmmmC/wNGrp5C+G8Wv3HNAzXCETV+yW2UC7rb2DM19wJsY3sd9sdw QnelnB+XJ5mFJomB9nxBv7T+62Pc17rmlH3TBd+rewXIP0VDu0RsrQGYJgbfxYlt ZXlzGcpALrSLfOnSVXYkuC9G+ze7wB6O2jAPRj5edWE1xQT/PJyGVsIeuhzNyEq2 gULpBLTP+Y73DgDEnVq++RY+PAgBIm+aEP/MUEmmQ3rtMLDY0Oh8uGHhV4/6+Z6j YRmtQwQZnjz17F13ostIvBSLgx9GNcfEqET+7CvM0bFMUJgjMxk= -----END CERTIFICATE-----Generated at Tue May 28 09:05:21 2024 by rpki-client on console-fra.rpki-client.org