$ rpki-client -vvf repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft File: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft (raw, json) Hash identifier: 8cUW3XFob3Yr+KR60fBQFS2uNicsR38sejjkV5gTNgc= Subject key identifier: C9:73:2A:8E:E9:C2:E6:DE:07:E5:C3:CF:68:66:2E:59:20:D8:93:39 Authority key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD Certificate issuer: /CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Certificate serial: 0E0191CA6F60EFABC241A6B3E7B9CB4FDDB25D43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft Manifest number: 0428 Signing time: Fri 03 May 2024 06:21:17 +0000 Manifest this update: Fri 03 May 2024 06:16:17 +0000 Manifest next update: Mon 06 May 2024 15:54:17 +0000 Files and hashes: 1: 3130332e3132392e3232312e302f32342d3234203d3e20313338303632.roa (hash: hMsgf9q/uIjTDRD8PK98e/jP4AA8U2DAeNSNdHq+j1s=) 2: 3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (hash: kQjPKnI9R+jgBF1sfNS29vQP9jWYx/dNRROafTWsNK4=) 3: 3130332e3132392e3232302e302f32342d3234203d3e20313338303632.roa (hash: xT78sjyKZmCyoHQ8sht/n+Zy+GgxqYtl5x4LSZHU11g=) 4: E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl (hash: ieE2tszuGlObp9AOsWJFvtsVP3q52HXlVr/B4XlFN08=) 5: 3130332e3132392e3232322e302f32342d3234203d3e20313338303632.roa (hash: TUuGCBFCfCLOBBY6/JpLLPF4w0LMXgjhU5tIqEsuEbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:01:91:ca:6f:60:ef:ab:c2:41:a6:b3:e7:b9:cb:4f:dd:b2:5d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD Validity Not Before: May 3 06:16:17 2024 GMT Not After : May 6 15:54:17 2024 GMT Subject: CN=C9732A8EE9C2E6DE07E5C3CF68662E5920D89339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:ea:36:39:8c:32:f6:5f:10:fb:d8:af:0d: 5d:bd:af:da:c1:68:04:e9:43:f9:e2:93:8c:68:33: 5f:b9:13:ca:e3:b4:0a:8e:0d:5a:ba:b1:5e:38:8e: d1:62:82:c7:3c:fd:54:c2:b1:e4:bd:05:10:9d:f9: 21:6e:68:5d:98:a7:a9:c7:29:81:6f:93:bb:2d:17: d5:94:5e:92:45:6a:b5:8d:05:31:b1:1a:c2:45:ec: 80:b4:20:15:99:4d:9c:bf:f2:73:76:50:97:e8:f0: 28:b3:17:b0:b2:7a:19:cb:d5:52:39:ef:2f:02:73: 91:fe:9a:e5:8c:9a:b9:87:f7:43:c3:7f:4f:a4:be: f2:2a:3c:b0:0b:83:c6:7e:ba:bf:9b:9e:c6:c9:13: e3:a2:05:7a:16:80:2c:7f:40:60:22:89:af:c6:33: c0:1a:cb:4b:05:0b:ce:a3:a2:d1:f7:63:a9:59:51: 86:76:8f:50:6b:26:42:2d:44:be:d6:f1:98:79:26: bd:73:14:b9:73:93:18:f1:1c:70:8f:d9:1a:15:cd: 4d:01:c0:d2:9a:d8:23:99:c2:61:e0:e6:ef:f7:53: de:8a:90:23:78:81:d8:33:51:75:2e:45:63:af:bd: df:9d:54:ef:b4:3f:78:f4:19:27:31:f5:7e:46:b0: 1b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:73:2A:8E:E9:C2:E6:DE:07:E5:C3:CF:68:66:2E:59:20:D8:93:39 X509v3 Authority Key Identifier: keyid:E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a3:cc:76:6a:64:5f:da:06:97:65:8a:c7:77:d3:2e:74:8a: ac:2f:b5:b5:70:1a:5a:d3:4d:f9:3d:03:18:3e:a5:42:bf:af: 0c:f5:d4:6e:dc:32:75:79:a3:f2:ed:04:7b:af:72:96:75:6b: 9d:c1:5a:b4:ff:b0:dd:9c:b9:ac:e7:d4:1e:c2:ed:be:e1:06: 51:36:2d:22:5c:af:a4:ef:03:cd:66:86:25:71:f8:5a:f3:5c: 63:d8:04:42:6b:ae:cc:b9:98:69:c1:10:4e:91:c9:74:08:61: 2e:ea:67:82:6b:ba:f6:f0:1a:3a:4b:11:92:13:aa:72:a4:a8: e8:1a:55:92:4c:39:ed:16:da:84:b6:d4:4c:f6:bb:c1:5f:71: fe:97:4a:54:37:f9:22:2b:23:77:5a:06:d2:ca:93:b3:ed:54: ed:21:bc:df:cd:8e:cd:ee:05:eb:67:7f:6b:33:10:f4:d4:c2: eb:ba:d6:1f:c4:d2:ee:3a:18:f6:41:30:c6:66:d3:f0:eb:c9: 93:37:72:5f:14:c3:81:02:b6:2f:01:6d:3d:d8:55:a2:c4:34: 1b:1f:68:58:0a:3f:ac:74:36:a6:a4:ec:b8:bf:c8:06:61:c5: e4:c8:56:fe:51:46:cf:28:8d:09:21:74:7e:14:e3:18:9a:dc: cd:6c:87:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDgGRym9g76vCQaaz57nLT92yXUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0Qw MThEMEFERDAeFw0yNDA1MDMwNjE2MTdaFw0yNDA1MDYxNTU0MTdaMDMxMTAvBgNV BAMTKEM5NzMyQThFRTlDMkU2REUwN0U1QzNDRjY4NjYyRTU5MjBEODkzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyb+o2OYwy9l8Q+9ivDV29r9rB aATpQ/nik4xoM1+5E8rjtAqODVq6sV44jtFigsc8/VTCseS9BRCd+SFuaF2Yp6nH KYFvk7stF9WUXpJFarWNBTGxGsJF7IC0IBWZTZy/8nN2UJfo8CizF7CyehnL1VI5 7y8Cc5H+muWMmrmH90PDf0+kvvIqPLALg8Z+ur+bnsbJE+OiBXoWgCx/QGAiia/G M8Aay0sFC86jotH3Y6lZUYZ2j1BrJkItRL7W8Zh5Jr1zFLlzkxjxHHCP2RoVzU0B wNKa2COZwmHg5u/3U96KkCN4gdgzUXUuRWOvvd+dVO+0P3j0GScx9X5GsBvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyXMqjunC5t4H5cPPaGYuWSDYkzkwHwYDVR0j BBgwFoAU4n8HCyfqsJbis1I/GhrNfQGNCt0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmEwMDJkZS0wY2RlLTQ2MmUtOTQwNC00NmJjNjI3MGUwNGYvMC9FMjdGMDcwQjI3 RUFCMDk2RTJCMzUyM0YxQTFBQ0Q3RDAxOEQwQURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNEN0QwMThE MEFERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZhMDAyZGUtMGNkZS00NjJlLTk0 MDQtNDZiYzYyNzBlMDRmLzAvRTI3RjA3MEIyN0VBQjA5NkUyQjM1MjNGMUExQUNE N0QwMThEMEFERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAujzHZqZF/aBpdlisd30y50iqwvtbVwGlrT Tfk9Axg+pUK/rwz11G7cMnV5o/LtBHuvcpZ1a53BWrT/sN2cuazn1B7C7b7hBlE2 LSJcr6TvA81mhiVx+FrzXGPYBEJrrsy5mGnBEE6RyXQIYS7qZ4JruvbwGjpLEZIT qnKkqOgaVZJMOe0W2oS21Ez2u8Ffcf6XSlQ3+SIrI3daBtLKk7PtVO0hvN/Njs3u Betnf2szEPTUwuu61h/E0u46GPZBMMZm0/DryZM3cl8Uw4ECti8BbT3YVaLENBsf aFgKP6x0Nqak7Li/yAZhxeTIVv5RRs8ojQkhdH4U4xia3M1sh0E= -----END CERTIFICATE-----Generated at Fri May 3 08:20:24 2024 by rpki-client on console-ams.rpki-client.org