$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft File: 651790FFFC1688AFA384D136FC4792AD18879019.mft (raw, json) Hash identifier: jwav6Zp9OinVwUIp9nw3/vaPIHp5PGVEJxex/88QPaQ= Subject key identifier: 76:AC:A5:6D:8F:97:5A:B3:83:AD:95:17:A3:AB:E7:63:09:E7:89:57 Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 Certificate issuer: /CN=651790FFFC1688AFA384D136FC4792AD18879019 Certificate serial: 2A991928892C9F32836C6070D2A34461B944340C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft Manifest number: 0427 Signing time: Wed 01 May 2024 09:41:54 +0000 Manifest this update: Wed 01 May 2024 09:36:54 +0000 Manifest next update: Sat 04 May 2024 21:12:54 +0000 Files and hashes: 1: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: RqVG/+fevGlzeGifywjaerpBfQu8ZmqLalIOCMIkhYI=) 2: 651790FFFC1688AFA384D136FC4792AD18879019.crl (hash: MrvyZzpGkpO6GCNMqNDFY2FYdvRTbfeng74hkhC+6HI=) 3: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: JaoTKzjqoKCQAIT7iC/1JB+GYyX2yEStr1WhrRtgqIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 17:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:99:19:28:89:2c:9f:32:83:6c:60:70:d2:a3:44:61:b9:44:34:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019 Validity Not Before: May 1 09:36:54 2024 GMT Not After : May 4 21:12:54 2024 GMT Subject: CN=76ACA56D8F975AB383AD9517A3ABE76309E78957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f4:d4:ea:6d:25:af:e2:c2:84:12:b7:85:90: ef:da:df:f0:b4:b7:eb:50:97:1d:e2:e8:7a:cc:5a: d9:39:54:77:98:61:e7:eb:86:18:58:3b:a4:6a:4f: 1d:ee:7d:28:c1:a9:0c:32:a4:15:bb:0a:c9:4c:ce: 16:0b:61:70:80:39:45:d8:53:e6:4b:62:d5:7c:cd: 6a:03:6a:57:07:2f:95:49:e5:50:7d:77:7c:ba:b2: 52:d6:00:88:ec:29:d9:a4:ac:44:6b:1d:66:88:2e: a9:4f:ec:5d:6e:2b:44:8e:fd:29:0b:d1:15:a7:4f: 60:2d:f9:ef:7e:79:48:04:84:9d:2e:4f:ca:79:5d: b9:22:e3:0f:1e:24:e2:7b:2d:e0:0d:31:71:6e:6c: 16:7d:64:eb:a0:16:5c:84:71:06:dc:82:d8:03:f3: 7c:2c:b9:f2:13:47:13:be:2a:59:52:1c:4b:ae:c1: 14:91:c3:b6:c2:cf:4a:e0:da:67:fc:15:b7:25:ad: e4:98:de:ae:41:46:84:0c:d3:48:d7:6d:e0:7c:8e: 6d:65:6a:75:f7:76:42:c0:fe:86:ba:d7:61:cf:49: 15:ce:02:c7:79:65:a2:69:2e:3f:44:f5:68:f8:e8: 25:3a:8d:b9:d3:d4:ee:86:9c:97:14:f3:08:3d:01: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AC:A5:6D:8F:97:5A:B3:83:AD:95:17:A3:AB:E7:63:09:E7:89:57 X509v3 Authority Key Identifier: keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e1:ad:4f:c7:ad:8e:a6:54:29:af:63:0b:c5:72:84:f7:03: 7d:d7:bf:d0:ac:2d:2c:d8:6b:43:aa:9d:6e:6f:25:31:45:e2: da:ff:dc:97:6b:3b:a4:04:78:64:18:9a:95:f6:c2:b0:95:4c: f6:68:e8:ea:da:5b:30:ee:b8:09:f4:4f:97:70:8b:a1:70:ba: 80:70:c9:8c:3b:49:6a:b4:09:7a:69:fd:18:97:e6:5f:59:1a: 36:e7:bd:f9:8f:be:e9:0b:69:72:58:88:63:37:48:c7:2a:49: 86:61:cf:31:56:01:47:16:89:99:06:9b:c1:f8:de:de:4b:35: 4c:ea:46:c1:79:54:9b:2b:fb:21:e9:78:02:af:7f:43:b3:35: ad:33:26:71:c9:ba:eb:23:da:c4:fe:34:a8:b9:d5:44:99:f7: 4c:5b:29:da:4e:95:11:93:c0:a2:a6:c5:9a:08:34:34:ae:7e: 81:50:fa:36:c4:22:57:c1:d9:94:32:7a:67:b0:ae:2a:4a:e0: 26:3b:10:b1:3e:fe:68:88:4e:25:96:7b:b3:ad:f8:c7:6b:db: e3:f9:bd:86:a6:36:ff:6d:cb:a1:8e:a6:51:96:e0:a0:a5:1d: 16:cf:59:bf:4f:48:98:11:7e:ca:bf:87:18:52:ea:a5:af:37: fa:a0:9a:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpkZKIksnzKDbGBw0qNEYblENAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQx ODg3OTAxOTAeFw0yNDA1MDEwOTM2NTRaFw0yNDA1MDQyMTEyNTRaMDMxMTAvBgNV BAMTKDc2QUNBNTZEOEY5NzVBQjM4M0FEOTUxN0EzQUJFNzYzMDlFNzg5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09NTqbSWv4sKEEreFkO/a3/C0 t+tQlx3i6HrMWtk5VHeYYefrhhhYO6RqTx3ufSjBqQwypBW7CslMzhYLYXCAOUXY U+ZLYtV8zWoDalcHL5VJ5VB9d3y6slLWAIjsKdmkrERrHWaILqlP7F1uK0SO/SkL 0RWnT2At+e9+eUgEhJ0uT8p5Xbki4w8eJOJ7LeANMXFubBZ9ZOugFlyEcQbcgtgD 83wsufITRxO+KllSHEuuwRSRw7bCz0rg2mf8FbclreSY3q5BRoQM00jXbeB8jm1l anX3dkLA/oa612HPSRXOAsd5ZaJpLj9E9Wj46CU6jbnT1O6GnJcU8wg9AdEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdqylbY+XWrODrZUXo6vnYwnniVcwHwYDVR0j BBgwFoAUZReQ//wWiK+jhNE2/EeSrRiHkBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmY3ZWYzNC00OTkxLTRiYjEtOTZiNC1iZTQzZjFlY2FiYjQvMC82NTE3OTBGRkZD MTY4OEFGQTM4NEQxMzZGQzQ3OTJBRDE4ODc5MDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQxODg3 OTAxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0Nzky QUQxODg3OTAxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELhrU/HrY6mVCmvYwvFcoT3A33Xv9CsLSzY a0OqnW5vJTFF4tr/3JdrO6QEeGQYmpX2wrCVTPZo6OraWzDuuAn0T5dwi6FwuoBw yYw7SWq0CXpp/RiX5l9ZGjbnvfmPvukLaXJYiGM3SMcqSYZhzzFWAUcWiZkGm8H4 3t5LNUzqRsF5VJsr+yHpeAKvf0OzNa0zJnHJuusj2sT+NKi51USZ90xbKdpOlRGT wKKmxZoINDSufoFQ+jbEIlfB2ZQyemewripK4CY7ELE+/miITiWWe7Ot+Mdr2+P5 vYamNv9ty6GOplGW4KClHRbPWb9PSJgRfsq/hxhS6qWvN/qgmiA= -----END CERTIFICATE-----Generated at Wed May 1 10:31:58 2024 by rpki-client on console-fra.rpki-client.org