$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: ujlYHl/B9HRBKlJm20B0GHgk3NLwfxnH1ThcZ0oRoRY= Subject key identifier: F2:A9:5D:F8:EB:C9:B6:E9:0D:68:A1:DD:22:E8:9F:36:41:00:8B:9E Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 26BC7353E09EA989F5EC87B818F15D39B7AF1EC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 0428 Signing time: Sun 28 Apr 2024 12:20:31 +0000 Manifest this update: Sun 28 Apr 2024 12:15:31 +0000 Manifest next update: Wed 01 May 2024 20:52:31 +0000 Files and hashes: 1: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: dGC3Ba7gDg44WGmhoadcVrdZFepIk5RYXaxJNW0mdRo=) 2: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: merSN/e+Kd5g31QsduJ3cEOhbe//dksElo7kp5sWSWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 21:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:bc:73:53:e0:9e:a9:89:f5:ec:87:b8:18:f1:5d:39:b7:af:1e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: Apr 28 12:15:31 2024 GMT Not After : May 1 20:52:31 2024 GMT Subject: CN=F2A95DF8EBC9B6E90D68A1DD22E89F3641008B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:38:df:e0:60:07:2a:d5:1f:e3:24:ca:cb: e8:d2:7a:ec:16:6e:6d:91:31:2c:f5:ce:5c:94:85: 21:35:18:fe:7b:4a:2b:2f:f0:69:07:44:5a:e2:ae: e5:44:81:cf:16:d4:75:7a:76:23:25:3b:d9:2c:7e: bd:6f:9a:b0:07:8b:d1:ae:f5:42:18:e9:ee:07:ec: a3:b5:d3:5b:9a:fe:0b:70:c0:de:20:26:9d:64:e1: 2d:bf:3b:08:a3:27:ee:9c:e6:f5:dd:d3:97:19:e1: 5a:d1:f6:14:0a:f4:8e:01:ee:ec:1c:6e:cf:ce:8f: 56:71:e7:44:cd:bd:11:1f:81:a0:b5:ac:57:82:47: 57:84:04:ab:e3:16:8d:6f:6e:33:af:d4:49:1a:5e: c1:8f:0c:70:65:57:bf:f6:6b:41:08:8a:36:bf:06: d0:81:83:4e:33:4a:cf:b6:0a:77:55:09:ca:34:3f: d5:d3:65:6d:43:05:76:f7:6a:b9:ad:65:a4:d8:bd: 53:27:50:db:ea:8a:51:74:e6:66:46:7a:0d:a5:a8: 15:23:83:e4:68:3c:53:04:ef:a8:0c:9d:23:ff:3e: 9d:7f:1e:c5:f1:15:22:b2:69:a8:8b:59:f3:b1:69: 0b:42:9b:d9:08:bf:99:f0:fd:7e:48:ac:16:93:4d: 5d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A9:5D:F8:EB:C9:B6:E9:0D:68:A1:DD:22:E8:9F:36:41:00:8B:9E X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:de:a6:f9:e7:b1:9b:66:4d:5e:05:ae:17:31:65:cb:6f:e9: fe:9b:8f:8d:fc:4a:da:b3:79:ab:5b:7e:b7:65:a0:87:9f:c5: be:40:b3:fc:ce:03:83:2b:5a:4c:25:4c:6a:de:3f:b0:fd:24: 0b:9d:f8:e4:42:f7:06:9f:6c:58:cd:27:82:45:a7:01:eb:5d: 1b:be:29:b2:5b:0c:46:55:b6:3e:6a:df:ea:34:4a:f2:43:41: fd:29:8c:51:d0:2b:28:9e:c4:20:83:0c:18:f6:85:4d:72:b2: 43:c3:b8:63:29:76:9f:43:09:2e:01:bd:e8:64:1e:db:70:87: 7a:80:08:d7:b5:67:30:57:7e:7c:3e:72:be:4a:ce:28:d8:06: bc:0c:42:79:35:3e:91:d1:e2:fd:92:f5:4c:a2:d0:64:eb:47: be:d4:34:4d:72:70:b9:b3:9c:fd:74:c8:d9:a4:6a:18:bb:64: b1:18:7c:5d:71:8b:94:06:98:59:32:b0:d4:a3:22:55:f8:00: ec:d6:04:6d:74:6d:a6:d3:05:54:60:39:1c:ec:d4:9f:25:78: 45:0a:95:57:71:30:98:fc:f3:04:01:d5:73:ac:9e:df:2a:c2: 89:b5:e5:e1:c9:f3:74:cd:43:4c:63:31:bf:88:de:27:46:cc: f9:b7:17:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJrxzU+CeqYn17Ie4GPFdObevHsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNDA0MjgxMjE1MzFaFw0yNDA1MDEyMDUyMzFaMDMxMTAvBgNV BAMTKEYyQTk1REY4RUJDOUI2RTkwRDY4QTFERDIyRTg5RjM2NDEwMDhCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DTjf4GAHKtUf4yTKy+jSeuwW bm2RMSz1zlyUhSE1GP57Sisv8GkHRFriruVEgc8W1HV6diMlO9ksfr1vmrAHi9Gu 9UIY6e4H7KO101ua/gtwwN4gJp1k4S2/OwijJ+6c5vXd05cZ4VrR9hQK9I4B7uwc bs/Oj1Zx50TNvREfgaC1rFeCR1eEBKvjFo1vbjOv1EkaXsGPDHBlV7/2a0EIija/ BtCBg04zSs+2CndVCco0P9XTZW1DBXb3armtZaTYvVMnUNvqilF05mZGeg2lqBUj g+RoPFME76gMnSP/Pp1/HsXxFSKyaaiLWfOxaQtCm9kIv5nw/X5IrBaTTV1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8qld+OvJtukNaKHdIuifNkEAi54wHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDepvnnsZtmTV4FrhcxZctv6f6bj438Stqz eatbfrdloIefxb5As/zOA4MrWkwlTGreP7D9JAud+ORC9wafbFjNJ4JFpwHrXRu+ KbJbDEZVtj5q3+o0SvJDQf0pjFHQKyiexCCDDBj2hU1yskPDuGMpdp9DCS4Bvehk Httwh3qACNe1ZzBXfnw+cr5KzijYBrwMQnk1PpHR4v2S9Uyi0GTrR77UNE1ycLmz nP10yNmkahi7ZLEYfF1xi5QGmFkysNSjIlX4AOzWBG10babTBVRgORzs1J8leEUK lVdxMJj88wQB1XOsnt8qwom15eHJ83TNQ0xjMb+I3idGzPm3Fws= -----END CERTIFICATE-----Generated at Sun Apr 28 13:19:51 2024 by rpki-client on console-ams.rpki-client.org