$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft File: C710954C7B301C60B82BA6372CACEB81DA08F190.mft (raw, json) Hash identifier: aHuarL2LuTFy+zBQz+/2/v2/qmk6QrXkPIwRJOg7zog= Subject key identifier: 17:CE:BB:06:84:B9:B6:B8:DE:A2:40:B3:88:62:86:9F:CC:A0:B5:FD Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Certificate issuer: /CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Certificate serial: 4052E561229EFE63FE42984A27B0CE6F22D9007C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft Manifest number: 03F8 Signing time: Wed 22 May 2024 03:50:03 +0000 Manifest this update: Wed 22 May 2024 03:45:03 +0000 Manifest next update: Sat 25 May 2024 15:15:03 +0000 Files and hashes: 1: C710954C7B301C60B82BA6372CACEB81DA08F190.crl (hash: Cd6LNa7z5sd/VlFF73oW9dO3vvKxZZdWhgMM0SJmwoY=) 2: 3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (hash: SJM68Diowj8hC0pS0Wq7dK7Td5tPfALIDaCNsswgRaE=) 3: 323030313a6466343a343430303a3a2f34382d3438203d3e20313333383332.roa (hash: xqs+NfxujPzEcQ6NVLuzyIzyAAHSC2ZUwMQB12wFVi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 15:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:52:e5:61:22:9e:fe:63:fe:42:98:4a:27:b0:ce:6f:22:d9:00:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Validity Not Before: May 22 03:45:03 2024 GMT Not After : May 25 15:15:03 2024 GMT Subject: CN=17CEBB0684B9B6B8DEA240B38862869FCCA0B5FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e5:72:50:a5:e7:14:63:36:5a:29:62:82:55: af:10:4c:d9:18:6d:8e:75:ca:77:db:d6:57:57:56: 75:ff:c6:b6:ca:c3:ee:06:80:80:69:a9:cf:01:ef: bd:8d:50:ad:f8:e0:2f:72:40:64:1c:d0:60:f9:c0: 05:30:26:94:f1:b3:c7:a7:ca:33:30:6c:b2:00:28: 22:38:65:ca:1f:3a:f0:a0:17:92:85:25:e2:5d:ef: c4:58:54:95:a7:32:b5:01:8d:4a:67:72:e8:72:bf: 3b:3c:0b:ab:e2:d5:d6:91:f6:93:ef:5e:b2:60:67: 52:b8:d2:d7:e1:56:f7:ce:76:f1:27:bf:02:8f:44: 7a:f8:f9:14:99:7f:58:d0:fa:fd:5d:c6:bc:19:f6: cc:45:43:8a:c8:46:5d:f8:0d:63:eb:49:b8:82:e0: 95:91:33:f6:cb:ab:60:9b:7d:11:a5:c6:84:2b:59: 94:21:c1:b0:e0:cb:a7:58:b6:28:04:9f:3e:f0:24: a6:e2:42:da:2a:1a:59:85:ce:60:8b:6e:c8:7c:f5: af:92:d6:31:bf:0a:cd:03:4a:27:91:79:62:22:8b: ee:36:bd:55:2f:c6:ec:40:a8:92:90:79:42:fa:c4: 3d:1e:f6:ad:5a:25:bb:7c:59:a9:61:f9:45:a5:f6: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CE:BB:06:84:B9:B6:B8:DE:A2:40:B3:88:62:86:9F:CC:A0:B5:FD X509v3 Authority Key Identifier: keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e7:0d:3a:e7:f5:b0:02:3e:c7:c7:b2:4d:17:f7:11:c1:53: ef:ea:88:b4:7b:f6:de:b1:85:37:f0:8a:f6:b3:01:c0:a6:7b: 11:ba:30:20:af:3e:b5:fe:7b:05:32:a5:92:28:72:62:1f:b7: 96:f9:04:2f:2d:18:09:b9:4d:af:31:a8:6b:55:12:bc:2a:21: 69:6d:57:9c:6a:5b:d9:88:19:85:94:7e:5b:89:4b:b0:ba:d7: 6a:4c:4f:25:7a:ed:5c:ee:a0:23:2d:86:28:08:75:d8:a2:40: 5d:88:8b:44:10:89:dc:ae:cf:2f:bf:f6:2a:35:e0:b1:8b:47: 70:b7:d1:78:48:ea:2c:7b:be:9b:27:63:03:97:69:b3:ca:c1: 76:81:bd:a3:20:42:1d:33:f6:94:bf:94:0d:a0:58:a8:1b:a2: 68:a0:1e:73:0f:25:cf:f8:60:8e:17:de:29:cb:c9:52:74:08: 45:8d:4b:45:01:1f:b9:18:a9:0d:87:d9:c3:7e:c1:f1:85:49: 4c:f7:1f:7e:97:64:5c:ee:b3:54:5f:22:ab:f0:90:f0:a7:6a: 0f:4c:c5:ae:ca:1d:ba:7f:a8:a9:7b:23:c6:d4:c5:3d:7e:75: fb:02:4c:29:61:e0:c3:92:99:4f:5d:f7:e4:c0:32:6d:a3:96: e5:a4:db:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFLlYSKe/mP+QphKJ7DObyLZAHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFE QTA4RjE5MDAeFw0yNDA1MjIwMzQ1MDNaFw0yNDA1MjUxNTE1MDNaMDMxMTAvBgNV BAMTKDE3Q0VCQjA2ODRCOUI2QjhERUEyNDBCMzg4NjI4NjlGQ0NBMEI1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5XJQpecUYzZaKWKCVa8QTNkY bY51ynfb1ldXVnX/xrbKw+4GgIBpqc8B772NUK344C9yQGQc0GD5wAUwJpTxs8en yjMwbLIAKCI4ZcofOvCgF5KFJeJd78RYVJWnMrUBjUpncuhyvzs8C6vi1daR9pPv XrJgZ1K40tfhVvfOdvEnvwKPRHr4+RSZf1jQ+v1dxrwZ9sxFQ4rIRl34DWPrSbiC 4JWRM/bLq2CbfRGlxoQrWZQhwbDgy6dYtigEnz7wJKbiQtoqGlmFzmCLbsh89a+S 1jG/Cs0DSieReWIii+42vVUvxuxAqJKQeUL6xD0e9q1aJbt8Walh+UWl9pBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF867BoS5trjeokCziGKGn8ygtf0wHwYDVR0j BBgwFoAUxxCVTHswHGC4K6Y3LKzrgdoI8ZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMC9DNzEwOTU0QzdC MzAxQzYwQjgyQkE2MzcyQ0FDRUI4MURBMDhGMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VCODFEQTA4 RjE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNlNDE3N2QtODA5My00NDdjLTg3 YjUtYzc5YzhjYjRjNzMzLzAvQzcxMDk1NEM3QjMwMUM2MEI4MkJBNjM3MkNBQ0VC ODFEQTA4RjE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXnDTrn9bACPsfHsk0X9xHBU+/qiLR79t6x hTfwivazAcCmexG6MCCvPrX+ewUypZIocmIft5b5BC8tGAm5Ta8xqGtVErwqIWlt V5xqW9mIGYWUfluJS7C612pMTyV67VzuoCMthigIddiiQF2Ii0QQidyuzy+/9io1 4LGLR3C30XhI6ix7vpsnYwOXabPKwXaBvaMgQh0z9pS/lA2gWKgbomigHnMPJc/4 YI4X3inLyVJ0CEWNS0UBH7kYqQ2H2cN+wfGFSUz3H36XZFzus1RfIqvwkPCnag9M xa7KHbp/qKl7I8bUxT1+dfsCTClh4MOSmU9d9+TAMm2jluWk2/s= -----END CERTIFICATE-----Generated at Wed May 22 04:34:57 2024 by rpki-client on console-fra.rpki-client.org