$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: qKqGCDM0h/Vn1m8Xm9SRmsPPifZWDkS5aMo3uhgqarg= Subject key identifier: 23:57:5E:62:E2:F5:31:3C:D1:C4:4A:EE:FA:A6:27:7D:C1:28:0C:26 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 3FB66557B8D8ED3CDC323F1ED93F1D86A3065967 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 042D Signing time: Wed 01 May 2024 16:11:31 +0000 Manifest this update: Wed 01 May 2024 16:06:31 +0000 Manifest next update: Sat 04 May 2024 18:29:31 +0000 Files and hashes: 1: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: zgmY09/AlHHZgeubR/lF9wCIubstcsFkRDuUf6Oc2W8=) 2: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Vg6vRv44QEMmcxMY7wG9DqNa3m6MXJFFYpsWtGwaPGA=) 3: 3130332e3132302e3230342e302f32342d3234203d3e2038313030.roa (hash: 7OyC9qSfvSSH08yl+vhmSgsgEo1qkHTXqS06syoluy8=) 4: 3130332e3132302e3230372e302f32342d3234203d3e2036393339.roa (hash: ys+aNKQy1406fl/m5MqOCQ8h1kmHb1FDepWRkADpJcg=) 5: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: fRqyngvw82Wsy10hqtugTymIlGohJtw4S4I3wxNz99Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 18:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b6:65:57:b8:d8:ed:3c:dc:32:3f:1e:d9:3f:1d:86:a3:06:59:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: May 1 16:06:31 2024 GMT Not After : May 4 18:29:31 2024 GMT Subject: CN=23575E62E2F5313CD1C44AEEFAA6277DC1280C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:03:20:6f:3a:16:5a:71:f1:34:a7:f6:e0: 9b:91:3f:a9:b6:79:e9:a5:48:c4:a0:28:96:8f:8a: c1:c7:77:b7:5e:5c:62:bf:b7:2b:96:ab:8f:80:3d: 84:26:03:48:35:37:2d:f5:4d:44:ac:ed:e9:f4:99: 98:95:e6:80:62:3f:a3:59:0e:bf:7d:bf:49:a1:df: b5:cd:9a:26:43:8d:bf:01:6f:74:30:d0:58:f2:e5: 18:ed:76:10:06:be:c1:b5:6e:17:9d:f4:07:7a:0a: 05:7b:6b:16:6e:c2:10:81:bf:eb:6f:ee:88:d9:02: c7:b9:29:ab:58:fe:33:74:36:41:c0:7d:b4:71:ce: ac:57:ed:4c:db:1c:37:ef:33:da:1a:8a:f1:1c:36: 90:1d:f7:24:c4:ed:22:fa:ad:37:47:7e:43:05:4c: ec:d1:b9:59:9b:b7:07:ca:71:95:b7:1d:20:0d:31: 75:29:14:28:3c:8c:9b:37:8b:4c:6b:b2:cd:ae:e6: 32:81:f7:4f:e5:54:56:8e:07:25:b3:8d:c1:8c:b7: 68:d5:dd:6f:67:06:3e:f4:4f:31:56:ad:98:af:a4: e0:af:02:aa:85:2e:96:3b:b0:ad:e2:e2:3a:14:27: cd:2d:e5:d8:f8:74:66:d2:c1:7a:d8:dc:94:80:c4: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:57:5E:62:E2:F5:31:3C:D1:C4:4A:EE:FA:A6:27:7D:C1:28:0C:26 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:14:f2:74:ec:89:de:c6:3c:e3:23:fa:b3:e8:a3:69:ba:9a: e5:73:80:34:77:f5:67:ae:01:40:a4:18:d3:e6:28:98:e5:fe: 3f:72:b2:38:07:06:e3:49:c0:28:37:c1:14:cd:eb:bc:51:7d: 65:0d:ac:5c:9f:21:02:e8:aa:01:7d:4e:68:43:11:5c:e0:e5: 1b:bf:51:8e:99:0d:0e:c6:45:4a:80:03:bb:10:9b:3a:d3:d3: e6:19:1f:c4:47:00:36:1c:ef:61:06:71:fa:d6:21:09:53:78: d8:ab:4d:0c:95:32:35:87:a2:09:2a:25:b2:90:55:16:b9:bd: bb:f1:02:4a:e1:ae:2f:2a:a2:d2:25:f6:f1:5f:cd:52:f9:c7: ca:8a:ee:f9:7d:94:37:3a:05:9b:d6:1d:29:3b:ee:8a:b5:18: 0c:0a:14:d7:4c:94:72:b8:9c:6b:53:fa:3f:b5:dd:37:28:b8: 8f:e8:3f:e1:95:92:9c:d2:6b:26:53:92:5c:4d:84:44:49:db: ce:2c:e2:5a:d3:06:02:e3:2d:ae:07:9d:19:68:54:2c:c3:e4: 6d:6e:23:62:ef:9a:b4:eb:aa:5d:ef:b3:bc:31:7a:67:3b:ef: cc:be:2e:50:ae:67:69:b5:0b:48:21:42:87:f3:e1:78:23:74: f2:46:bb:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7ZlV7jY7TzcMj8e2T8dhqMGWWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNDA1MDExNjA2MzFaFw0yNDA1MDQxODI5MzFaMDMxMTAvBgNV BAMTKDIzNTc1RTYyRTJGNTMxM0NEMUM0NEFFRUZBQTYyNzdEQzEyODBDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxUQMgbzoWWnHxNKf24JuRP6m2 eemlSMSgKJaPisHHd7deXGK/tyuWq4+APYQmA0g1Ny31TUSs7en0mZiV5oBiP6NZ Dr99v0mh37XNmiZDjb8Bb3Qw0Fjy5RjtdhAGvsG1bhed9Ad6CgV7axZuwhCBv+tv 7ojZAse5KatY/jN0NkHAfbRxzqxX7UzbHDfvM9oaivEcNpAd9yTE7SL6rTdHfkMF TOzRuVmbtwfKcZW3HSANMXUpFCg8jJs3i0xrss2u5jKB90/lVFaOByWzjcGMt2jV 3W9nBj70TzFWrZivpOCvAqqFLpY7sK3i4joUJ80t5dj4dGbSwXrY3JSAxBTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI1deYuL1MTzRxEru+qYnfcEoDCYwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMU8nTsid7GPOMj+rPoo2m6muVzgDR39Weu AUCkGNPmKJjl/j9ysjgHBuNJwCg3wRTN67xRfWUNrFyfIQLoqgF9TmhDEVzg5Ru/ UY6ZDQ7GRUqAA7sQmzrT0+YZH8RHADYc72EGcfrWIQlTeNirTQyVMjWHogkqJbKQ VRa5vbvxAkrhri8qotIl9vFfzVL5x8qK7vl9lDc6BZvWHSk77oq1GAwKFNdMlHK4 nGtT+j+13TcouI/oP+GVkpzSayZTklxNhERJ284s4lrTBgLjLa4HnRloVCzD5G1u I2LvmrTrql3vs7wxemc778y+LlCuZ2m1C0ghQofz4XgjdPJGu6M= -----END CERTIFICATE-----Generated at Wed May 1 18:10:55 2024 by rpki-client on console-ams.rpki-client.org