$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: cAk8oNg38OWGxrkLx2tIhxuzJ7G6YUmtnL4CxqBtb0k= Subject key identifier: DB:F7:48:05:1C:B7:F8:A7:75:36:2F:95:6D:B1:C3:60:D6:25:01:B8 Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 3B9D8E93B0123FC3D7BADC0EBBA125FDA8B4DB13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: A8 Signing time: Mon 20 May 2024 18:31:47 +0000 Manifest this update: Mon 20 May 2024 18:26:47 +0000 Manifest next update: Fri 24 May 2024 02:15:47 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: UY6qWdPxznQdw1UQm9yf5GU3dWuf7sMTmmJrD5PQUfQ=) 2: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: p/PG7M6bvmcXfVdmsw48vkWAa7JqlT1k7HjqxXEwBA8=) 3: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: U5as8Jr/2OD1E9nOkQHyDWu1lx76PguPLuEZwjo9RTI=) 4: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: I8C1s7AwytoZeFwVAIfV9U4FINxgteczcHOALBPtd1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:15:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9d:8e:93:b0:12:3f:c3:d7:ba:dc:0e:bb:a1:25:fd:a8:b4:db:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: May 20 18:26:47 2024 GMT Not After : May 24 02:15:47 2024 GMT Subject: CN=DBF748051CB7F8A775362F956DB1C360D62501B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:64:66:f9:66:24:64:f7:93:10:4a:95:20:8e: 9b:c9:7a:d9:9a:ff:13:65:bc:6c:23:7b:14:81:41: 1d:83:9d:e7:e8:f4:47:7e:b8:03:93:ad:04:88:5b: ff:25:4b:5c:d4:85:20:59:8d:83:69:80:c2:2a:10: b6:e3:2f:3b:4f:3e:7e:66:d9:97:14:8a:4d:05:13: db:ab:38:e2:f5:b0:e9:60:01:56:53:f0:bb:0d:b5: 66:69:4a:0f:8d:da:b9:a8:32:13:93:24:c4:72:31: f4:32:8c:cc:18:2e:b0:2b:44:5e:b0:5d:03:16:67: bd:f8:8c:dc:6d:2c:d6:83:d7:f5:c0:2b:5c:91:8f: e9:b2:d2:7f:c6:e6:0e:fb:d6:b1:ac:41:b3:60:26: eb:26:87:18:2b:68:32:06:58:74:ba:e9:39:d2:a2: e3:30:6f:58:61:bc:5d:00:55:15:62:89:99:94:9b: 39:9f:31:ed:5e:ea:f2:90:8f:60:e2:48:4f:56:ef: 11:05:c1:97:90:93:ab:44:65:28:ce:e7:d2:7f:1f: da:fa:69:01:5b:fb:64:0d:f8:c2:f1:1f:96:b5:2b: d8:62:8f:f2:b7:37:20:26:b4:82:d4:05:51:59:e9: 6f:01:2a:e3:e0:9b:e1:66:14:27:f6:35:41:39:60: 04:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F7:48:05:1C:B7:F8:A7:75:36:2F:95:6D:B1:C3:60:D6:25:01:B8 X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:45:11:9b:e2:74:8b:5a:73:f9:6d:99:6c:55:d4:ff:a6:fb: f3:d6:0b:f9:de:a6:02:47:19:ac:70:1b:9d:ca:5c:b7:4c:ce: 9b:c5:9b:ba:b2:8e:c7:c6:c0:64:04:f2:34:58:59:18:a5:54: fa:c6:94:18:03:34:a5:fa:d3:19:5e:33:55:0f:db:61:f1:1c: 7e:df:4d:95:1d:df:7d:2d:bc:43:bf:94:d0:ef:cf:7a:bd:75: 0e:54:c7:42:01:b9:ad:a0:40:2b:1a:5d:8e:90:14:79:55:49: 69:58:0a:62:ab:39:54:12:4b:21:89:7a:5e:7a:28:56:89:55: e1:a5:ff:20:d9:cb:02:a0:8d:30:e2:4f:c4:4b:7a:19:cd:ec: d5:4c:fe:9a:d7:4e:c9:4c:5e:de:d5:10:b5:62:2d:a8:81:40: 3a:7f:62:e3:17:51:93:ce:24:ff:b1:54:44:ff:73:3f:ff:0e: ec:9c:4c:66:96:f3:84:7e:d4:6c:50:a2:4b:30:51:59:43:fd: 75:ce:94:d9:7e:f6:88:a5:f8:0b:d5:7f:54:ec:25:0d:66:2e: ae:07:4e:11:87:bf:57:67:3f:71:97:ec:11:8f:88:b0:1e:d4: 6c:ed:df:7e:4d:b2:97:e8:8e:29:ab:48:e9:9f:56:0b:ee:d8: ed:4b:a9:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO52Ok7ASP8PXutwOu6El/ai02xMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNDA1MjAxODI2NDdaFw0yNDA1MjQwMjE1NDdaMDMxMTAvBgNV BAMTKERCRjc0ODA1MUNCN0Y4QTc3NTM2MkY5NTZEQjFDMzYwRDYyNTAxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbZGb5ZiRk95MQSpUgjpvJetma /xNlvGwjexSBQR2Dnefo9Ed+uAOTrQSIW/8lS1zUhSBZjYNpgMIqELbjLztPPn5m 2ZcUik0FE9urOOL1sOlgAVZT8LsNtWZpSg+N2rmoMhOTJMRyMfQyjMwYLrArRF6w XQMWZ734jNxtLNaD1/XAK1yRj+my0n/G5g771rGsQbNgJusmhxgraDIGWHS66TnS ouMwb1hhvF0AVRViiZmUmzmfMe1e6vKQj2DiSE9W7xEFwZeQk6tEZSjO59J/H9r6 aQFb+2QN+MLxH5a1K9hij/K3NyAmtILUBVFZ6W8BKuPgm+FmFCf2NUE5YAQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2/dIBRy3+Kd1Ni+VbbHDYNYlAbgwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApFEZvidItac/ltmWxV1P+m+/PWC/nepgJH GaxwG53KXLdMzpvFm7qyjsfGwGQE8jRYWRilVPrGlBgDNKX60xleM1UP22HxHH7f TZUd330tvEO/lNDvz3q9dQ5Ux0IBua2gQCsaXY6QFHlVSWlYCmKrOVQSSyGJel56 KFaJVeGl/yDZywKgjTDiT8RLehnN7NVM/prXTslMXt7VELViLaiBQDp/YuMXUZPO JP+xVET/cz//DuycTGaW84R+1GxQokswUVlD/XXOlNl+9oil+AvVf1TsJQ1mLq4H ThGHv1dnP3GX7BGPiLAe1Gzt335NspfojimrSOmfVgvu2O1LqXQ= -----END CERTIFICATE-----Generated at Mon May 20 19:56:25 2024 by rpki-client on console-ams.rpki-client.org