$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft File: 764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft (raw, json) Hash identifier: FQsaPAIS7QHedYsHEs0uBhK6WFZQ/9kjRTp66Vkw3vs= Subject key identifier: 2E:0A:E0:0B:6D:6F:52:93:9C:44:3A:96:A6:E7:90:FE:DE:09:A8:8B Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Certificate issuer: /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Certificate serial: 1D112E1F0F9A20885D6213D8EEA81BACE327E446 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft Manifest number: 0427 Signing time: Fri 26 Apr 2024 05:01:45 +0000 Manifest this update: Fri 26 Apr 2024 04:56:45 +0000 Manifest next update: Mon 29 Apr 2024 16:50:45 +0000 Files and hashes: 1: 323430313a663938303a3a2f33322d3332203d3e203633383632.roa (hash: Fm9ZrZ7HMNLGeHeNHKLJD92e42WmoiS+NfFvtiBt/5I=) 2: 764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl (hash: 6LeuwpgkH3tMF3ZWbTobYROuFq4g+ZO/yaQXAxUu3Pw=) 3: 3130332e34392e32392e302f32342d3234203d3e203633383632.roa (hash: PpgndnZpAzdDc2UDkV4VvsCyGTBCJcBIPiwK8bhunj4=) 4: 3130332e34392e33312e302f32342d3234203d3e203633383632.roa (hash: B4uSrijALF83ZvKw3VCQPocGPLascdKfhLRE/oAuho0=) 5: 3130332e34392e32382e302f32332d3233203d3e203633383632.roa (hash: C+isCwCteEo9lt7gOENsAGbL/viihv1omXABNCcRCYs=) 6: 3130332e34392e33302e302f32342d3234203d3e203633383632.roa (hash: mHr7ZOR/UV4GsODMFfObi3OuJQt+2kkh2gnOIQwbamw=) 7: 3130332e34392e32382e302f32342d3234203d3e203633383632.roa (hash: bCmqhd20NCN1m0jA0/u8aEfDLqnS/vSvT5SZLMhaiVQ=) 8: 3130332e34392e33302e302f32332d3233203d3e203633383632.roa (hash: x9ie0gdVt6kqpJpvl8P8pC6xGTnAL3Dd9dPjO5yasC8=) 9: 3130332e34392e32382e302f32322d3232203d3e203633383632.roa (hash: xD5J1KsdNWTxj0ipfnq65tJY2HWNY+8NxRmlKPSGFtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 16:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:11:2e:1f:0f:9a:20:88:5d:62:13:d8:ee:a8:1b:ac:e3:27:e4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Validity Not Before: Apr 26 04:56:45 2024 GMT Not After : Apr 29 16:50:45 2024 GMT Subject: CN=2E0AE00B6D6F52939C443A96A6E790FEDE09A88B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1d:85:3e:f7:6d:f7:3b:cb:81:6f:41:51:4f: d0:39:c2:49:3f:56:3a:2f:7c:a6:2f:e9:01:72:1e: 08:af:17:39:cd:b8:c1:1a:fc:30:a5:c5:73:ce:11: 34:1b:00:9d:2d:e1:6a:d8:e8:f6:6a:90:a5:61:87: a7:5d:0e:ed:f3:79:c0:cc:c8:a7:f9:2d:f6:5b:b0: 4a:3d:14:2b:60:fa:a0:cd:89:f9:00:96:30:ae:37: 14:d6:84:80:49:10:94:2e:5e:c6:c6:35:1a:44:7e: da:6e:23:ef:8e:a4:33:a3:39:75:31:4c:72:64:cc: 6c:87:49:48:eb:18:ea:56:e2:df:6f:7c:b6:22:a8: f8:db:00:bf:b0:7b:87:21:7a:dc:2a:75:15:ec:50: a7:ff:af:d6:58:0d:00:73:f6:6d:9f:94:6f:bc:a4: 09:44:a5:05:f1:3d:ec:08:00:bc:e7:a4:4f:e7:7e: 5b:31:ea:ac:f2:75:a3:0a:c2:59:51:6f:80:9f:08: 78:e4:67:3c:28:3e:a3:96:ec:e0:4b:ed:d5:aa:9f: 16:b1:fa:4a:1c:df:87:d8:21:17:04:34:a4:b0:10: 33:91:78:a7:56:15:66:ed:b8:2b:b3:2e:2f:82:5c: 66:39:b7:8b:dd:a4:2d:9c:a0:e2:1c:29:ec:18:71: c2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0A:E0:0B:6D:6F:52:93:9C:44:3A:96:A6:E7:90:FE:DE:09:A8:8B X509v3 Authority Key Identifier: keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:09:f6:34:f0:fc:3d:fb:09:6c:a3:41:13:77:b9:2c:30:dd: d1:98:c4:bb:c1:b9:d4:b7:85:33:ed:71:de:d3:0e:8e:99:75: 2e:93:e9:ea:ac:73:ec:61:a6:03:f7:36:11:49:9b:ac:f2:1e: e5:0d:2e:f8:4c:68:0d:45:77:73:08:07:aa:02:ce:77:5a:2d: a6:46:46:7f:64:d7:9e:ee:f2:5d:45:e3:00:b6:ff:36:84:f4: 82:e3:ff:28:3a:29:bf:21:8d:cb:9c:45:12:c3:4d:7b:1e:02: 22:be:aa:59:c7:7a:c1:15:9d:5c:68:32:bf:8e:19:2c:7e:6a: 5b:d1:f2:7d:93:e2:94:df:72:fa:f5:43:49:46:9b:e8:2e:95: 17:aa:f8:e3:85:60:4d:aa:43:8a:44:20:33:1a:95:82:4e:b6: b9:45:55:5c:9f:64:16:1c:ed:65:c7:b4:10:a8:2b:cc:60:32: 44:a8:08:30:3f:67:33:41:0b:08:b9:61:5d:8d:cc:4c:99:10: 2e:b9:41:ac:d1:fc:36:58:7a:24:5e:62:3c:48:23:ed:0d:4d: 69:cf:60:14:ee:a9:2b:50:2f:9b:3e:ba:29:12:5b:e7:86:36: b2:d5:42:bf:6c:b7:8d:6c:47:b7:4f:b4:8c:17:95:0d:5c:de: 4b:a7:84:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHREuHw+aIIhdYhPY7qgbrOMn5EYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFF MDFENjBDOTAeFw0yNDA0MjYwNDU2NDVaFw0yNDA0MjkxNjUwNDVaMDMxMTAvBgNV BAMTKDJFMEFFMDBCNkQ2RjUyOTM5QzQ0M0E5NkE2RTc5MEZFREUwOUE4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwHYU+9233O8uBb0FRT9A5wkk/ VjovfKYv6QFyHgivFznNuMEa/DClxXPOETQbAJ0t4WrY6PZqkKVhh6ddDu3zecDM yKf5LfZbsEo9FCtg+qDNifkAljCuNxTWhIBJEJQuXsbGNRpEftpuI++OpDOjOXUx THJkzGyHSUjrGOpW4t9vfLYiqPjbAL+we4chetwqdRXsUKf/r9ZYDQBz9m2flG+8 pAlEpQXxPewIALznpE/nflsx6qzydaMKwllRb4CfCHjkZzwoPqOW7OBL7dWqnxax +koc34fYIRcENKSwEDOReKdWFWbtuCuzLi+CXGY5t4vdpC2coOIcKewYccJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgrgC21vUpOcRDqWpueQ/t4JqIswHwYDVR0j BBgwFoAUdksj62xj/8qjBfN9vpuQSuAdYMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMC83NjRCMjNFQjZD NjNGRkNBQTMwNUYzN0RCRTlCOTA0QUUwMUQ2MEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFFMDFE NjBDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdlODMwYzgtZDU1OS00NTZhLTg4 MzUtNGY2ZWI1NTI3YWEyLzAvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5Qjkw NEFFMDFENjBDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsJ9jTw/D37CWyjQRN3uSww3dGYxLvBudS3 hTPtcd7TDo6ZdS6T6eqsc+xhpgP3NhFJm6zyHuUNLvhMaA1Fd3MIB6oCzndaLaZG Rn9k157u8l1F4wC2/zaE9ILj/yg6Kb8hjcucRRLDTXseAiK+qlnHesEVnVxoMr+O GSx+alvR8n2T4pTfcvr1Q0lGm+gulReq+OOFYE2qQ4pEIDMalYJOtrlFVVyfZBYc 7WXHtBCoK8xgMkSoCDA/ZzNBCwi5YV2NzEyZEC65QazR/DZYeiReYjxII+0NTWnP YBTuqStQL5s+uikSW+eGNrLVQr9st41sR7dPtIwXlQ1c3kunhDM= -----END CERTIFICATE-----Generated at Sat Apr 27 10:12:53 2024 by rpki-client on console-ams.rpki-client.org