$ rpki-client -vvf repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft File: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft (raw, json) Hash identifier: Bqx6f4j52CAijLYTd62HvrpyYbp/w2HWtMIEngkfOLs= Subject key identifier: 40:53:2E:B3:6D:2B:61:DE:AA:17:72:E4:67:68:9F:0A:5F:66:BF:19 Authority key identifier: E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 Certificate issuer: /CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Certificate serial: 6EBF46B93CC1616BEACE5E5C716513C140036ADE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft Manifest number: 0427 Signing time: Wed 01 May 2024 00:41:28 +0000 Manifest this update: Wed 01 May 2024 00:36:28 +0000 Manifest next update: Sat 04 May 2024 05:06:28 +0000 Files and hashes: 1: 3230332e3136302e35362e302f32312d3234203d3e203234353237.roa (hash: exbNjM5qviES/eWn/DifRl5PkWLQOOG3fUgKHForS+s=) 2: 323430353a366334303a3a2f33322d3438203d3e203234353237.roa (hash: A+tvUCoIH9aP9wAu6tEqr3WVSzsSIv1BMMTpxNptNaA=) 3: 3130332e3134382e34362e302f32332d3234203d3e203234353237.roa (hash: sCbbiDuy5yAOX/LSxM8tSzSzHP4NFnauiV4k2MgFs44=) 4: 3138332e38312e3135322e302f32312d3234203d3e203234353237.roa (hash: aMMBK1ZzCuCSx366VauUaSPkKCtUtW4LSpq273qMkOY=) 5: E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl (hash: xoMEyP85/FwXMMhm4dKeReyldStADYK9eJJ90VK/UYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 05:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:bf:46:b9:3c:c1:61:6b:ea:ce:5e:5c:71:65:13:c1:40:03:6a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61 Validity Not Before: May 1 00:36:28 2024 GMT Not After : May 4 05:06:28 2024 GMT Subject: CN=40532EB36D2B61DEAA1772E467689F0A5F66BF19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:b1:70:22:e7:43:3c:63:bf:16:ba:bd:c3: 3a:fd:f5:e0:89:4e:45:a7:b8:e6:85:5e:26:61:3d: 0a:b7:9f:b5:1b:2d:0a:a5:7b:8e:ac:5f:28:e9:27: 21:02:c2:35:b4:11:b5:29:7c:34:ab:0b:1b:cc:29: f3:67:23:6c:af:ae:bd:03:33:c6:b3:05:a4:3e:42: a8:c3:1e:67:9f:d3:72:de:99:8c:b4:f7:a2:ed:88: 27:f2:d6:e8:d0:40:e4:96:e0:a0:c7:5b:d0:8a:46: 89:f0:be:78:bc:89:d6:1a:48:e6:c5:67:ca:d9:41: 72:80:ba:41:20:f4:9d:02:d4:a2:86:15:fe:24:f6: 30:9a:12:6b:f7:cc:c1:35:2b:10:74:84:39:d1:98: c6:af:07:b8:ad:6d:c1:fc:e1:f5:f0:fc:60:31:a3: fa:9c:23:1e:01:c0:09:b2:5a:7c:cc:74:30:4f:da: 30:fe:e0:cb:a3:50:fd:68:d0:60:c8:26:6b:aa:41: 54:da:af:d0:e2:e9:79:73:c2:0d:9c:d9:10:27:f7: 5d:ca:10:08:ec:67:69:35:6c:71:e6:be:d0:fe:f2: a7:59:21:48:f3:0f:f9:7b:66:7a:a1:e0:db:99:ec: 75:5a:26:81:de:06:3f:a2:99:b8:f9:93:68:0d:6b: 41:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:2E:B3:6D:2B:61:DE:AA:17:72:E4:67:68:9F:0A:5F:66:BF:19 X509v3 Authority Key Identifier: keyid:E9:F7:A0:AA:6D:CC:A1:FF:7D:3D:61:46:0D:55:34:A0:04:AB:2C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66b87feb-0fe2-418a-a37a-be3dd1f0e63c/0/E9F7A0AA6DCCA1FF7D3D61460D5534A004AB2C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:61:58:29:3b:8c:74:e6:48:ea:40:83:7e:b1:a2:74:fd:7e: ab:18:29:80:64:11:8e:b1:38:74:4c:7d:99:c1:8f:6e:db:01: 36:05:38:47:8c:ac:d5:01:db:39:2f:03:06:ec:64:1b:12:1e: 29:7c:94:7e:91:74:88:dc:bc:3f:38:93:0f:b4:59:a5:4b:e7: bd:8c:c0:68:3c:9f:94:5f:89:cd:68:42:f2:9f:34:52:cc:bd: 48:8d:44:3c:b1:9b:61:5c:c5:08:54:e4:bd:f9:b3:fe:db:12: 9b:eb:63:5a:54:a9:ea:fe:dc:9c:4e:2e:1f:d7:e9:3f:6a:b4: 6c:1c:4a:4b:f4:bb:62:86:de:18:0c:65:8f:92:0d:32:6a:ff: 30:1b:a7:0f:d3:55:09:cf:2b:98:96:c9:ba:c8:ed:ff:d3:5f: 3f:ee:33:ac:d1:38:43:f2:d1:d8:05:bd:cc:cc:b7:af:62:29: 9d:f1:c4:15:d1:62:f7:e5:ba:47:c5:ff:8e:bb:57:dc:7a:76: bf:d5:6f:46:36:f1:55:d2:0c:4e:60:c7:22:97:e6:4f:f1:12: dd:1f:cf:0b:17:b0:8d:e2:2c:fd:c8:4b:ea:d4:8a:ae:0a:ef: 2f:b8:ec:5b:2a:d0:7f:61:0d:6b:8a:9c:18:23:11:57:d1:70: 08:a6:e0:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbr9GuTzBYWvqzl5ccWUTwUADat4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAw NEFCMkM2MTAeFw0yNDA1MDEwMDM2MjhaFw0yNDA1MDQwNTA2MjhaMDMxMTAvBgNV BAMTKDQwNTMyRUIzNkQyQjYxREVBQTE3NzJFNDY3Njg5RjBBNUY2NkJGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpLFwIudDPGO/Frq9wzr99eCJ TkWnuOaFXiZhPQq3n7UbLQqle46sXyjpJyECwjW0EbUpfDSrCxvMKfNnI2yvrr0D M8azBaQ+QqjDHmef03LemYy096LtiCfy1ujQQOSW4KDHW9CKRonwvni8idYaSObF Z8rZQXKAukEg9J0C1KKGFf4k9jCaEmv3zME1KxB0hDnRmMavB7itbcH84fXw/GAx o/qcIx4BwAmyWnzMdDBP2jD+4MujUP1o0GDIJmuqQVTar9Di6Xlzwg2c2RAn913K EAjsZ2k1bHHmvtD+8qdZIUjzD/l7Znqh4NuZ7HVaJoHeBj+imbj5k2gNa0HfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQFMus20rYd6qF3LkZ2ifCl9mvxkwHwYDVR0j BBgwFoAU6fegqm3Mof99PWFGDVU0oASrLGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmI4N2ZlYi0wZmUyLTQxOGEtYTM3YS1iZTNkZDFmMGU2M2MvMC9FOUY3QTBBQTZE Q0NBMUZGN0QzRDYxNDYwRDU1MzRBMDA0QUIyQzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0QTAwNEFC MkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZiODdmZWItMGZlMi00MThhLWEz N2EtYmUzZGQxZjBlNjNjLzAvRTlGN0EwQUE2RENDQTFGRjdEM0Q2MTQ2MEQ1NTM0 QTAwNEFCMkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFhWCk7jHTmSOpAg36xonT9fqsYKYBkEY6x OHRMfZnBj27bATYFOEeMrNUB2zkvAwbsZBsSHil8lH6RdIjcvD84kw+0WaVL572M wGg8n5Rfic1oQvKfNFLMvUiNRDyxm2FcxQhU5L35s/7bEpvrY1pUqer+3JxOLh/X 6T9qtGwcSkv0u2KG3hgMZY+SDTJq/zAbpw/TVQnPK5iWybrI7f/TXz/uM6zROEPy 0dgFvczMt69iKZ3xxBXRYvflukfF/467V9x6dr/Vb0Y28VXSDE5gxyKX5k/xEt0f zwsXsI3iLP3IS+rUiq4K7y+47Fsq0H9hDWuKnBgjEVfRcAim4H0= -----END CERTIFICATE-----Generated at Wed May 1 01:02:19 2024 by rpki-client on console-fra.rpki-client.org