$ rpki-client -vvf repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft File: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft (raw, json) Hash identifier: FWRV3wu8a2cn911L3C+bdmtBbwf71eNAmdXa2C7gssY= Subject key identifier: 89:6C:12:5C:CA:3B:DC:9E:34:D3:25:A9:CE:B3:E6:BE:E6:AF:4E:34 Authority key identifier: 6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 Certificate issuer: /CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Certificate serial: 79F87269EE537319451295101697F14B5FDDE36D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject info access: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft Manifest number: 0427 Signing time: Thu 02 May 2024 20:10:57 +0000 Manifest this update: Thu 02 May 2024 20:05:57 +0000 Manifest next update: Mon 06 May 2024 00:38:57 +0000 Files and hashes: 1: 6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl (hash: zJ1TVL1sJr1OBvOVfO45dFlKX2j9j/BEpliXxR0MQi4=) 2: 3130332e3233332e3130302e302f32342d3234203d3e20313333333537.roa (hash: 0ug9HWfDxykVQYV8vcKhELjtHbUZ3CSnQ9TbFxZhWhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f8:72:69:ee:53:73:19:45:12:95:10:16:97:f1:4b:5f:dd:e3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640 Validity Not Before: May 2 20:05:57 2024 GMT Not After : May 6 00:38:57 2024 GMT Subject: CN=896C125CCA3BDC9E34D325A9CEB3E6BEE6AF4E34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:a8:c5:fc:0b:67:b5:cf:24:a5:41:89:98: 3f:d4:df:b0:38:37:d3:df:b4:ed:36:a5:ad:e5:11: bc:36:dc:30:06:62:05:81:29:b6:4d:f0:b3:73:c5: 63:a7:bf:7f:09:a1:85:61:a8:cf:30:52:a6:c4:bf: 7a:86:5c:c3:27:f1:4a:67:7a:80:55:28:d7:06:90: 22:11:c3:06:da:f3:a6:13:03:bb:8d:4a:11:e4:23: 38:ec:53:79:fc:23:73:04:38:a8:01:80:83:8c:26: 09:5b:e7:ec:65:6f:68:6b:66:23:ea:f0:1e:a0:50: 37:3d:f1:8e:f1:ad:f7:90:63:8d:6a:7d:76:d4:e5: 1b:82:82:ac:82:c9:9e:e4:73:13:ca:17:55:03:75: a4:47:06:33:66:b4:53:3f:28:cd:d2:93:c6:6f:d0: dd:6d:27:32:57:e6:59:14:8c:52:6c:08:2a:24:dc: 57:7b:d9:86:27:a8:31:54:b1:1e:9d:7e:e6:10:ef: 34:ef:0c:fc:eb:65:bd:78:4f:4b:9a:27:ae:71:e1: cc:d9:66:01:66:97:7e:b4:85:ba:7b:87:dd:b1:4a: df:e4:90:59:c4:b2:3c:f9:d0:ee:90:f4:eb:57:e3: 93:b5:4b:50:b6:c0:19:33:63:d7:e9:a2:b0:fb:ee: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6C:12:5C:CA:3B:DC:9E:34:D3:25:A9:CE:B3:E6:BE:E6:AF:4E:34 X509v3 Authority Key Identifier: keyid:6D:DA:5C:1E:72:FD:CA:12:9B:06:9E:D9:C4:4B:8A:AE:08:BA:E6:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/517c8c01-4af7-41b0-85a3-9d1fa4eb9fba/0/6DDA5C1E72FDCA129B069ED9C44B8AAE08BAE640.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:28:4b:f4:c3:1f:5e:61:49:24:08:af:af:0b:cb:9a:40:5f: 9e:68:27:f4:eb:12:34:08:b7:19:77:c3:07:a6:89:52:15:08: 48:91:1e:f0:59:2d:d0:db:42:a1:3a:24:a4:49:12:d9:47:e4: a8:f4:57:99:b9:b7:e6:44:18:d1:d1:ad:f7:2f:df:92:eb:42: 5f:ef:5e:50:a2:ed:05:92:3f:ed:ff:40:99:c5:79:aa:ab:da: af:f3:3b:25:d2:f4:6f:65:f6:2d:35:8d:bc:18:7a:b3:55:65: e2:02:97:32:6f:0c:c5:e3:fc:e7:cd:a3:9f:ef:29:9f:7f:6c: 6a:ea:2d:55:bf:a3:cf:32:87:da:f1:72:49:62:41:b7:96:03: 2f:67:c2:8d:ee:e7:f3:13:f0:ca:76:e9:c6:0a:62:7c:c7:00: 8b:de:cd:e2:49:14:2e:5b:3d:a9:21:6f:94:2f:d3:16:07:36: 79:17:9f:dd:7e:63:1e:e8:58:f8:c6:27:4e:5c:6e:72:21:7b: 56:70:74:64:e6:8d:54:4d:89:22:a8:2c:36:9f:2b:64:c7:d8: 07:8a:0d:e3:5a:e6:f6:6a:41:47:94:e4:bf:82:16:1e:1c:a9: e5:75:78:04:2f:c7:3b:7c:a8:04:b5:b7:da:5e:70:a3:6d:b5: c5:a0:b4:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUefhyae5TcxlFEpUQFpfxS1/d420wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUw OEJBRTY0MDAeFw0yNDA1MDIyMDA1NTdaFw0yNDA1MDYwMDM4NTdaMDMxMTAvBgNV BAMTKDg5NkMxMjVDQ0EzQkRDOUUzNEQzMjVBOUNFQjNFNkJFRTZBRjRFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCih6jF/Atntc8kpUGJmD/U37A4 N9PftO02pa3lEbw23DAGYgWBKbZN8LNzxWOnv38JoYVhqM8wUqbEv3qGXMMn8Upn eoBVKNcGkCIRwwba86YTA7uNShHkIzjsU3n8I3MEOKgBgIOMJglb5+xlb2hrZiPq 8B6gUDc98Y7xrfeQY41qfXbU5RuCgqyCyZ7kcxPKF1UDdaRHBjNmtFM/KM3Sk8Zv 0N1tJzJX5lkUjFJsCCok3Fd72YYnqDFUsR6dfuYQ7zTvDPzrZb14T0uaJ65x4czZ ZgFml360hbp7h92xSt/kkFnEsjz50O6Q9OtX45O1S1C2wBkzY9fporD77kHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiWwSXMo73J400yWpzrPmvuavTjQwHwYDVR0j BBgwFoAUbdpcHnL9yhKbBp7ZxEuKrgi65kAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTdjOGMwMS00YWY3LTQxYjAtODVhMy05ZDFmYTRlYjlmYmEvMC82RERBNUMxRTcy RkRDQTEyOUIwNjlFRDlDNDRCOEFBRTA4QkFFNjQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhBQUUwOEJB RTY0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE3YzhjMDEtNGFmNy00MWIwLTg1 YTMtOWQxZmE0ZWI5ZmJhLzAvNkREQTVDMUU3MkZEQ0ExMjlCMDY5RUQ5QzQ0QjhB QUUwOEJBRTY0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4oS/TDH15hSSQIr68Ly5pAX55oJ/TrEjQI txl3wwemiVIVCEiRHvBZLdDbQqE6JKRJEtlH5Kj0V5m5t+ZEGNHRrfcv35LrQl/v XlCi7QWSP+3/QJnFeaqr2q/zOyXS9G9l9i01jbwYerNVZeIClzJvDMXj/OfNo5/v KZ9/bGrqLVW/o88yh9rxckliQbeWAy9nwo3u5/MT8Mp26cYKYnzHAIvezeJJFC5b Pakhb5Qv0xYHNnkXn91+Yx7oWPjGJ05cbnIhe1ZwdGTmjVRNiSKoLDafK2TH2AeK DeNa5vZqQUeU5L+CFh4cqeV1eAQvxzt8qAS1t9pecKNttcWgtHw= -----END CERTIFICATE-----Generated at Thu May 2 22:27:16 2024 by rpki-client on console-ams.rpki-client.org