$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: k9da4eQ0VpsIbQXKGhwIiyw+9wAlrLLC6OvBDqBca0E= Subject key identifier: 52:92:7A:06:DD:CF:F2:67:56:FD:15:BB:5C:78:57:A7:02:72:A7:41 Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 7736173C93A6C1F7FEBB2447FEAD85395C17C4DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 0426 Signing time: Thu 25 Apr 2024 19:00:43 +0000 Manifest this update: Thu 25 Apr 2024 18:55:43 +0000 Manifest next update: Sun 28 Apr 2024 21:43:43 +0000 Files and hashes: 1: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: ByaV9VslblCt/OoPXpP4Z4kWi78vu6ioWk6eujU3ZiY=) 2: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: p4tDzD2T0yoz7/ONQuESSESQbl8p8sBEBC8Br2QZ4DU=) 3: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: YNTn9eQAdzuyNaRGguUGpAKSfcX1ncWv0cZdKHOq1T4=) 4: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: yfBvSBsqBaQ4kJsEdj+NnXLJ24n4nlb8D7N/PWzBCbk=) 5: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: l9Fv9gpvC0TGB/doSgo7J+lKvFWwkaNAZsE+Mpn/O50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:36:17:3c:93:a6:c1:f7:fe:bb:24:47:fe:ad:85:39:5c:17:c4:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Apr 25 18:55:43 2024 GMT Not After : Apr 28 21:43:43 2024 GMT Subject: CN=52927A06DDCFF26756FD15BB5C7857A70272A741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:e8:7e:e6:87:a4:7d:8b:b6:e1:37:93:ef: dc:63:20:3e:1a:70:8d:0c:cd:81:fd:2a:f1:e6:b4: df:98:45:08:86:f6:6f:7c:e5:71:a1:3c:69:f5:e6: e0:71:3f:68:f4:26:63:79:ec:80:d1:a9:b0:c1:b7: 3c:0b:56:0d:fb:d1:72:82:4a:49:fc:b8:22:84:78: 21:ef:08:b0:7e:16:2c:9e:75:db:c9:8d:c8:53:c1: 22:a2:05:41:62:4d:69:6a:2d:79:0e:4d:0c:36:8a: a8:dc:10:b9:5d:7a:5f:68:bb:5c:39:38:60:22:9b: 87:40:ec:0a:b4:8c:88:12:01:d4:c4:0b:e0:24:94: 09:3a:3b:58:d3:c0:be:43:ae:00:88:e4:2a:81:e1: f0:17:8b:12:14:05:1e:16:35:9a:25:38:8a:78:07: c4:04:37:68:4f:bc:50:88:69:db:e3:2d:3a:c8:d9: c6:75:b1:f0:b3:1e:ff:8b:9e:29:e4:36:ed:19:fe: f0:26:8e:9d:7a:80:29:f6:15:74:41:7b:e7:60:68: ce:40:07:e0:58:55:1e:e3:16:0d:4e:e6:0d:a6:71: c7:63:53:78:6f:d0:e2:dc:4c:d4:2c:f2:c9:e8:a0: 93:7f:a2:27:11:7d:39:ff:66:d7:0c:20:b7:4e:be: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:92:7A:06:DD:CF:F2:67:56:FD:15:BB:5C:78:57:A7:02:72:A7:41 X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8f:f7:21:75:94:a7:e3:2a:bf:5b:11:3d:e6:65:ad:2b:32: 3d:aa:e1:db:f3:82:9d:6e:f7:ef:c4:26:77:c2:78:03:b8:13: 62:93:de:2a:bc:0b:d8:1c:47:68:49:d3:5d:24:1d:1a:5f:0a: 8a:74:3c:74:48:61:35:02:d0:56:7a:29:e6:7f:1c:87:80:f1: 12:9f:95:9f:54:6a:02:26:7c:1a:64:09:f5:bf:84:e8:e1:6b: c3:37:3f:7d:7f:9e:dd:4e:10:b7:ba:be:0b:38:a9:95:f1:ab: 10:93:f1:73:6d:0d:c6:50:fc:0c:56:85:52:60:a5:07:c9:30: 43:03:52:9f:27:51:22:7e:0e:b3:9a:d6:5a:67:3e:34:fd:5a: 79:8f:6e:fb:96:49:12:cd:7d:c4:76:f9:30:6a:19:10:e0:40: 7f:42:7b:6f:7a:1c:46:f1:e9:9c:8f:dc:58:61:a9:e1:42:06: a1:bf:2f:a1:a3:05:89:17:4c:74:74:b6:87:bb:9c:02:39:3d: 4f:ee:36:1d:df:c3:ca:cf:60:72:65:05:c3:43:c6:03:08:6f: fc:4a:82:40:c6:ed:38:f2:9e:4c:6f:6c:b2:9a:94:27:48:96: 11:77:ba:f3:02:e5:a5:8a:0c:c0:66:17:29:84:ec:ef:cd:00: fc:cf:41:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdzYXPJOmwff+uyRH/q2FOVwXxN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNDA0MjUxODU1NDNaFw0yNDA0MjgyMTQzNDNaMDMxMTAvBgNV BAMTKDUyOTI3QTA2RERDRkYyNjc1NkZEMTVCQjVDNzg1N0E3MDI3MkE3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Leh+5oekfYu24TeT79xjID4a cI0MzYH9KvHmtN+YRQiG9m985XGhPGn15uBxP2j0JmN57IDRqbDBtzwLVg370XKC Skn8uCKEeCHvCLB+FiyeddvJjchTwSKiBUFiTWlqLXkOTQw2iqjcELldel9ou1w5 OGAim4dA7Aq0jIgSAdTEC+AklAk6O1jTwL5DrgCI5CqB4fAXixIUBR4WNZolOIp4 B8QEN2hPvFCIadvjLTrI2cZ1sfCzHv+LninkNu0Z/vAmjp16gCn2FXRBe+dgaM5A B+BYVR7jFg1O5g2mccdjU3hv0OLcTNQs8snooJN/oicRfTn/ZtcMILdOvmOBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUpJ6Bt3P8mdW/RW7XHhXpwJyp0EwHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqP9yF1lKfjKr9bET3mZa0rMj2q4dvzgp1u 9+/EJnfCeAO4E2KT3iq8C9gcR2hJ010kHRpfCop0PHRIYTUC0FZ6KeZ/HIeA8RKf lZ9UagImfBpkCfW/hOjha8M3P31/nt1OELe6vgs4qZXxqxCT8XNtDcZQ/AxWhVJg pQfJMEMDUp8nUSJ+DrOa1lpnPjT9WnmPbvuWSRLNfcR2+TBqGRDgQH9Ce296HEbx 6ZyP3FhhqeFCBqG/L6GjBYkXTHR0toe7nAI5PU/uNh3fw8rPYHJlBcNDxgMIb/xK gkDG7TjynkxvbLKalCdIlhF3uvMC5aWKDMBmFymE7O/NAPzPQVM= -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org