$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft (raw, json) Hash identifier: Ij0UIFtrK7T/GBkkXA8nCD0nHEDNU5Htdbo6CE1x1tI= Subject key identifier: F9:12:14:1F:5F:98:FF:B3:A9:3E:1C:C3:FB:AD:49:F6:DA:A9:A3:17 Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 Certificate issuer: /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Certificate serial: 3F8482644271F88B9604215EB2E531067F416DA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft Manifest number: 0427 Signing time: Wed 01 May 2024 13:00:46 +0000 Manifest this update: Wed 01 May 2024 12:55:46 +0000 Manifest next update: Sat 04 May 2024 17:39:46 +0000 Files and hashes: 1: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: fC2bvvgG5U8l9Q1vc64tvgrtZi8gDm8M2g3GDgMJRHU=) 2: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: vxAbE3Z4RNfH5L/gObLVt0SzUBLfgfnlTBMQ/1us3yQ=) 3: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: GcMxg6xZkPR1IE7FNUxD1NSvXsbtKpnO0cHQMV5lHhk=) 4: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl (hash: 0T0YDq+uZgC1kw/1zhdFSs5SSvGQIrFf5m55PKILkzs=) 5: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: rzzkjrzBOgPLCUMIXG1jRO3g85W7N9wigfnt0HhwNa4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 15:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:84:82:64:42:71:f8:8b:96:04:21:5e:b2:e5:31:06:7f:41:6d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Validity Not Before: May 1 12:55:46 2024 GMT Not After : May 4 17:39:46 2024 GMT Subject: CN=F912141F5F98FFB3A93E1CC3FBAD49F6DAA9A317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:24:78:a2:fa:31:c5:6b:3d:48:8e:8f:53:66: 87:18:12:36:bd:c7:d7:81:98:09:76:4b:31:d1:4b: 6c:ac:f3:7e:fb:28:7d:5c:c4:1a:10:5e:41:c4:a7: bc:81:de:ff:63:de:e9:12:ed:b8:75:a3:2d:11:8e: 3d:1c:80:2b:73:6b:1b:2f:4e:a4:0d:64:ce:bd:16: 2d:a1:35:8d:bb:a3:93:e1:15:5e:ee:2d:bf:00:89: 53:0b:47:3c:e4:fa:0b:a5:a8:57:b6:4c:ef:a0:6d: 70:bf:65:dd:46:33:ce:fc:31:ce:c6:48:a7:35:02: 3f:2c:06:1e:3b:6d:19:ad:1f:8d:d6:e8:15:0f:7d: 9a:27:88:05:89:6d:15:03:43:12:1e:1b:14:54:2a: bf:cc:a1:71:4b:3d:fa:92:ea:45:71:ad:cf:f5:7a: 61:53:c6:09:38:4e:29:e6:22:9b:38:d7:7c:d0:d7: f1:bd:69:1e:61:70:97:b9:ac:34:f1:87:e5:f5:87: 9e:d8:40:8c:e3:45:8e:07:45:ff:f0:51:87:a6:b4: 7c:07:67:7c:eb:96:0c:c8:32:aa:b2:ee:a9:f3:29: 3f:73:a6:7b:9d:7a:99:c5:15:2b:3a:26:d2:4b:87: 4a:14:cb:59:76:51:34:df:6d:74:a6:6a:d9:88:ca: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:12:14:1F:5F:98:FF:B3:A9:3E:1C:C3:FB:AD:49:F6:DA:A9:A3:17 X509v3 Authority Key Identifier: keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:34:3a:be:0d:52:79:3b:56:3a:37:37:5e:6b:91:5e:ff:15: b9:05:07:1a:2d:96:7a:cb:d2:09:8e:b0:25:ed:a7:37:15:e5: 64:e5:3d:d9:43:ad:67:7c:68:0a:f1:b2:e2:b1:62:db:bd:ea: 65:57:1b:67:ad:99:3e:08:65:44:0d:8f:f5:a5:31:46:76:71: ab:d6:f1:13:eb:52:4b:49:ce:60:a1:99:8f:c9:2c:f8:01:64: e1:5b:6a:99:de:e0:6b:06:b2:04:63:1a:34:9c:68:46:f5:92: ea:44:4b:85:8b:e2:72:d9:9f:57:62:d5:ba:3e:28:e6:61:c5: ec:fb:c0:cc:de:a8:e8:64:ef:d0:1a:e9:4b:e0:02:b7:51:d0: e0:4b:4e:a1:00:01:4c:56:34:ae:0f:2b:d9:36:76:c1:5a:15: 81:6d:4d:b5:84:f8:0b:fe:79:c1:f5:22:57:c3:8c:ff:48:e8: 01:1c:3b:a1:71:4d:ef:bc:a8:64:bb:8c:54:7f:c8:1d:4d:76: ac:df:28:8a:cf:af:38:64:35:aa:7c:1d:21:42:e1:33:97:43: 5d:45:fd:3b:0b:2b:67:00:b5:f8:10:93:b6:3c:5c:28:1c:88: c7:f9:65:1e:1e:4c:dc:b7:92:ba:db:e0:e7:cd:f5:2b:02:ae: f4:9d:ec:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP4SCZEJx+IuWBCFesuUxBn9BbaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVD NkU2MThFMjAeFw0yNDA1MDExMjU1NDZaFw0yNDA1MDQxNzM5NDZaMDMxMTAvBgNV BAMTKEY5MTIxNDFGNUY5OEZGQjNBOTNFMUNDM0ZCQUQ0OUY2REFBOUEzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgJHii+jHFaz1Ijo9TZocYEja9 x9eBmAl2SzHRS2ys8377KH1cxBoQXkHEp7yB3v9j3ukS7bh1oy0Rjj0cgCtzaxsv TqQNZM69Fi2hNY27o5PhFV7uLb8AiVMLRzzk+gulqFe2TO+gbXC/Zd1GM878Mc7G SKc1Aj8sBh47bRmtH43W6BUPfZoniAWJbRUDQxIeGxRUKr/MoXFLPfqS6kVxrc/1 emFTxgk4TinmIps413zQ1/G9aR5hcJe5rDTxh+X1h57YQIzjRY4HRf/wUYemtHwH Z3zrlgzIMqqy7qnzKT9zpnudepnFFSs6JtJLh0oUy1l2UTTfbXSmatmIyrmbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+RIUH1+Y/7OpPhzD+61J9tqpoxcwHwYDVR0j BBgwFoAUZirVkw7FSkhJJUCfwunI1cbmGOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDgzMzA3NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMC82NjJBRDU5MzBF QzU0QTQ4NDkyNTQwOUZDMkU5QzhENUM2RTYxOEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVDNkU2 MThFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4 RDVDNkU2MThFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFc0Or4NUnk7Vjo3N15rkV7/FbkFBxotlnrL 0gmOsCXtpzcV5WTlPdlDrWd8aArxsuKxYtu96mVXG2etmT4IZUQNj/WlMUZ2cavW 8RPrUktJzmChmY/JLPgBZOFbapne4GsGsgRjGjScaEb1kupES4WL4nLZn1di1bo+ KOZhxez7wMzeqOhk79Aa6UvgArdR0OBLTqEAAUxWNK4PK9k2dsFaFYFtTbWE+Av+ ecH1IlfDjP9I6AEcO6FxTe+8qGS7jFR/yB1NdqzfKIrPrzhkNap8HSFC4TOXQ11F /TsLK2cAtfgQk7Y8XCgciMf5ZR4eTNy3krrb4OfN9SsCrvSd7LQ= -----END CERTIFICATE-----Generated at Wed May 1 13:28:04 2024 by rpki-client on console-fra.rpki-client.org