$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: R/8KMT9MwCApKs4GV02N+Iewsdrh2c/Dy++VB0Dz5O4= Subject key identifier: A0:2F:29:3B:38:32:17:8C:E9:F9:26:9A:18:62:EA:DF:DD:2F:8E:32 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 39082C17911B751F57C0C1A675128161C36000DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 0428 Signing time: Wed 01 May 2024 02:52:02 +0000 Manifest this update: Wed 01 May 2024 02:47:02 +0000 Manifest next update: Sat 04 May 2024 05:29:02 +0000 Files and hashes: 1: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: q4O/r1KiAbmP482lRS+NK6OiE1nY2arjpOUTx4drT6A=) 2: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: DOR2UWTNvl+qND1ih+wCVmGN2HcEobKZ7YVgzpbDI2A=) 3: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: paBxLJ1vnsKLTRPrzOfqpRffSI9YdxnAU4navYzZHhk=) 4: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: texOhEQUWXFwZ44bCxPcXWqjlXjNCjfDPfcDED/k8io=) 5: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: Cu5ZQjfp/Qgts+0EYcpVJ5nsNj7PrxuEEJbWX2GmcIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 05:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:08:2c:17:91:1b:75:1f:57:c0:c1:a6:75:12:81:61:c3:60:00:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: May 1 02:47:02 2024 GMT Not After : May 4 05:29:02 2024 GMT Subject: CN=A02F293B3832178CE9F9269A1862EADFDD2F8E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:d5:4d:db:c6:3f:37:8f:e4:a8:86:5e:ab: cb:31:ac:39:56:71:ca:46:09:d3:72:84:b9:75:bd: 1e:1f:01:f7:a2:ad:cb:a9:2d:2d:8f:10:b5:3f:30: 70:28:d1:48:67:e8:95:33:b7:2a:b1:8a:5d:de:d6: d5:6f:00:65:18:de:53:b5:1a:26:c6:d7:be:b9:20: 16:63:1e:07:f3:5f:ba:6d:d9:f2:d9:1c:e2:82:88: e0:86:02:52:89:34:08:54:8f:d8:4b:56:6b:9c:d1: 48:08:5c:56:ee:27:1c:58:69:15:1d:a8:ec:fb:33: cb:fa:a5:fc:a4:a0:11:96:f2:45:ab:9a:e0:42:02: 17:05:61:28:a3:0b:ae:f1:af:48:bc:3a:af:2b:e5: af:37:52:48:83:db:65:9c:90:f6:e9:4c:aa:a5:d8: 18:ab:8b:90:c7:4f:61:b6:68:dc:21:84:b8:47:0e: 94:f9:3b:75:02:0a:ce:b6:bc:84:5f:9f:27:47:2d: c6:a6:bb:bd:86:38:45:f1:70:f4:4c:f6:16:45:91: 99:a7:d5:f0:8f:da:ee:fb:7c:94:16:d0:5e:be:26: a0:6e:fc:c9:4d:36:a4:71:35:84:7d:19:10:db:dd: 30:b9:26:3e:a8:66:2b:29:d1:ad:ff:11:a6:63:f9: 9d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2F:29:3B:38:32:17:8C:E9:F9:26:9A:18:62:EA:DF:DD:2F:8E:32 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:6c:e8:3c:bd:b4:54:d5:59:45:3d:31:d2:07:b6:61:0f:84: e8:ad:da:f2:bf:99:a4:97:1b:bf:e4:5d:60:8f:ac:11:43:84: 54:60:0f:f8:37:4c:53:56:b9:a0:2b:da:37:64:d8:bd:d4:9c: cf:d7:8e:7e:8b:06:cd:d7:57:bd:ec:40:22:3b:54:2d:07:3d: b7:20:96:8e:11:75:c9:9b:17:4b:65:de:31:6c:23:f1:36:ee: a7:a2:ba:d3:84:18:23:52:ea:1a:93:17:a7:06:6e:b6:bd:1b: 49:eb:57:8c:3c:8d:7d:7d:55:c9:35:16:81:ae:8e:6c:9a:4c: f2:00:44:b6:7f:8b:fc:10:5c:5d:65:45:17:e5:c2:b5:51:c5: 53:70:ab:fe:00:06:f3:9c:83:ce:e1:5a:23:1f:e8:6f:06:bc: 2d:d7:1d:69:94:14:92:d9:11:8d:2d:fe:4a:53:21:77:a1:93: 52:d7:8e:c3:6a:c1:f5:d8:f0:33:20:12:0a:49:e9:7c:0f:58: cf:32:50:cd:9a:ea:ef:d5:ec:1b:bb:30:24:b2:4c:1d:f2:a2: ea:ab:8a:75:1e:cb:b8:f0:c2:0c:41:06:20:17:20:e6:70:c7: 79:44:00:e4:d0:f0:55:76:1b:0f:c5:5e:e9:63:70:ad:3d:e8: fe:d4:0d:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQgsF5EbdR9XwMGmdRKBYcNgAN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNDA1MDEwMjQ3MDJaFw0yNDA1MDQwNTI5MDJaMDMxMTAvBgNV BAMTKEEwMkYyOTNCMzgzMjE3OENFOUY5MjY5QTE4NjJFQURGREQyRjhFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCji9VN28Y/N4/kqIZeq8sxrDlW ccpGCdNyhLl1vR4fAfeircupLS2PELU/MHAo0Uhn6JUztyqxil3e1tVvAGUY3lO1 GibG1765IBZjHgfzX7pt2fLZHOKCiOCGAlKJNAhUj9hLVmuc0UgIXFbuJxxYaRUd qOz7M8v6pfykoBGW8kWrmuBCAhcFYSijC67xr0i8Oq8r5a83UkiD22WckPbpTKql 2Biri5DHT2G2aNwhhLhHDpT5O3UCCs62vIRfnydHLcamu72GOEXxcPRM9hZFkZmn 1fCP2u77fJQW0F6+JqBu/MlNNqRxNYR9GRDb3TC5Jj6oZisp0a3/EaZj+Z2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoC8pOzgyF4zp+SaaGGLq390vjjIwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZs6Dy9tFTVWUU9MdIHtmEPhOit2vK/maSX G7/kXWCPrBFDhFRgD/g3TFNWuaAr2jdk2L3UnM/Xjn6LBs3XV73sQCI7VC0HPbcg lo4RdcmbF0tl3jFsI/E27qeiutOEGCNS6hqTF6cGbra9G0nrV4w8jX19Vck1FoGu jmyaTPIARLZ/i/wQXF1lRRflwrVRxVNwq/4ABvOcg87hWiMf6G8GvC3XHWmUFJLZ EY0t/kpTIXehk1LXjsNqwfXY8DMgEgpJ6XwPWM8yUM2a6u/V7Bu7MCSyTB3youqr inUey7jwwgxBBiAXIOZwx3lEAOTQ8FV2Gw/FXuljcK096P7UDcw= -----END CERTIFICATE-----Generated at Wed May 1 04:48:04 2024 by rpki-client on console-ams.rpki-client.org