$ rpki-client -vvf repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft File: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft (raw, json) Hash identifier: 5ryLUtBTkM6ti60UCSDuBu+WhR/3J5IZOSyTmlxPYoo= Subject key identifier: A1:EE:7F:13:A0:12:D5:C8:AD:FE:D8:27:E1:50:A1:F7:FB:64:55:64 Authority key identifier: 74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C Certificate issuer: /CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Certificate serial: 152BB90B31399EA877AFF3041AE257D01E499435 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft Manifest number: 0130 Signing time: Thu 16 May 2024 20:21:45 +0000 Manifest this update: Thu 16 May 2024 20:16:45 +0000 Manifest next update: Mon 20 May 2024 00:56:45 +0000 Files and hashes: 1: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: fb+okzQ7qGPnzBSxJ3zc2jhEpsI5V6JR+F4uUwyQPyM=) 2: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl (hash: FCynleC3f0OjpLVZrazYJkYycJaLJlK4Ss8HK7RaLUM=) 3: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: F0bZlP/oSco55m1wo347cTLMEMzy7RGB8NEP8HsDDZU=) 4: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: fy3iTjjNQwVnyN2Bj0UkXPJzFCJ1zT3jYAkJDC01WKk=) 5: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: 29nfvaYlNHUlkZzbrVb43CDPs5FCxo7Jn5kNAZNN33o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 00:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:2b:b9:0b:31:39:9e:a8:77:af:f3:04:1a:e2:57:d0:1e:49:94:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Validity Not Before: May 16 20:16:45 2024 GMT Not After : May 20 00:56:45 2024 GMT Subject: CN=A1EE7F13A012D5C8ADFED827E150A1F7FB645564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:80:22:29:26:df:ac:6c:ce:4c:18:63:b5: 3b:55:4e:d7:81:52:2f:38:c5:d2:5a:df:2d:fb:d2: 41:85:24:26:a5:4e:2a:e6:3b:ec:91:25:1c:1d:9b: 76:dc:94:b0:28:46:64:6b:e2:71:f7:af:7a:a9:31: f5:6e:da:d2:e9:6d:c5:73:3f:43:af:5c:37:66:a3: 0a:5d:a8:12:87:60:9d:23:32:d8:59:bc:97:fa:16: 18:a5:59:e1:9a:ec:f2:f1:da:cb:53:12:65:c3:95: 62:36:d1:fb:58:f4:8d:a0:4f:b9:b7:1b:38:44:9f: 3a:15:9b:ef:5d:88:35:60:87:03:f7:3c:d7:8d:6d: 08:e4:ba:2c:86:08:b8:e6:6c:79:9a:37:cc:7e:af: d1:c7:41:ce:06:ae:a5:07:4f:13:0b:12:36:5b:f2: a9:85:6d:51:d9:ff:b3:63:d4:4b:a2:a5:b7:c3:a6: 22:c0:9d:93:f7:af:d1:68:d1:ab:e1:28:bf:a8:fa: f3:41:37:87:16:5d:21:07:0d:80:83:92:e9:42:17: c0:f2:bf:a0:79:94:07:29:63:52:4a:16:39:db:3e: b6:3f:2b:27:03:1e:01:e0:4f:01:d0:2e:58:99:b0: cb:45:3b:f4:7e:9c:7e:32:25:da:4d:ca:d8:bc:9a: be:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EE:7F:13:A0:12:D5:C8:AD:FE:D8:27:E1:50:A1:F7:FB:64:55:64 X509v3 Authority Key Identifier: keyid:74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:bf:d5:97:e0:89:f2:7b:f9:7f:8f:fe:36:29:82:f9:d3:e6: bd:21:5f:ef:4f:27:7c:3d:9a:51:35:8c:0c:cf:83:f9:64:18: 8b:9b:2a:6a:4d:13:62:ff:18:2e:a6:46:ae:ba:88:88:f1:b0: d2:6b:64:92:a7:36:da:7e:2d:6c:7e:24:1a:5e:66:f5:ff:9f: ac:82:26:71:12:74:19:a9:b8:1b:df:78:42:6d:c1:70:bb:92: 88:f6:3b:cc:e8:5f:5d:24:ae:a5:62:8b:c5:98:fd:e0:62:42: c2:f4:c8:c0:3c:97:14:9d:ec:24:93:ee:1d:2d:98:d6:22:f1: 51:af:1c:03:fa:da:01:3c:31:71:48:9d:63:40:3c:45:32:04: b5:1a:fc:09:c1:1a:9c:23:9a:9a:9c:77:5f:a9:26:83:f6:b8: b2:ba:64:c7:91:72:74:33:cb:6c:eb:e1:13:9e:8c:69:68:24: 35:64:dc:53:ca:e5:cc:79:b5:cb:3a:b8:f4:62:8f:0f:cd:a9: 93:1b:96:85:49:91:b6:b6:d2:8e:2c:65:7e:86:ec:1d:8f:f8: a3:78:a9:06:99:1d:fb:7e:b8:ba:43:91:fd:27:7e:9c:6c:ef: 4e:6e:11:03:e6:0a:b1:22:0a:0a:f1:58:89:b8:37:b5:95:7b: 29:e1:a1:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSu5CzE5nqh3r/MEGuJX0B5JlDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNF QTI3NjM1QzAeFw0yNDA1MTYyMDE2NDVaFw0yNDA1MjAwMDU2NDVaMDMxMTAvBgNV BAMTKEExRUU3RjEzQTAxMkQ1QzhBREZFRDgyN0UxNTBBMUY3RkI2NDU1NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEn4AiKSbfrGzOTBhjtTtVTteB Ui84xdJa3y370kGFJCalTirmO+yRJRwdm3bclLAoRmRr4nH3r3qpMfVu2tLpbcVz P0OvXDdmowpdqBKHYJ0jMthZvJf6FhilWeGa7PLx2stTEmXDlWI20ftY9I2gT7m3 GzhEnzoVm+9diDVghwP3PNeNbQjkuiyGCLjmbHmaN8x+r9HHQc4GrqUHTxMLEjZb 8qmFbVHZ/7Nj1EuipbfDpiLAnZP3r9Fo0avhKL+o+vNBN4cWXSEHDYCDkulCF8Dy v6B5lAcpY1JKFjnbPrY/KycDHgHgTwHQLliZsMtFO/R+nH4yJdpNyti8mr4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoe5/E6AS1cit/tgn4VCh9/tkVWQwHwYDVR0j BBgwFoAUdJ6PbF8i0YpwtoL4bGXs0+onY1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWU4ZGIzOC02M2E4LTQxM2MtYTlmNi1jYzIyM2FmYTRhNzUvMC83NDlFOEY2QzVG MjJEMThBNzBCNjgyRjg2QzY1RUNEM0VBMjc2MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNFQTI3 NjM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVD RDNFQTI3NjM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAm/1ZfgifJ7+X+P/jYpgvnT5r0hX+9PJ3w9 mlE1jAzPg/lkGIubKmpNE2L/GC6mRq66iIjxsNJrZJKnNtp+LWx+JBpeZvX/n6yC JnESdBmpuBvfeEJtwXC7koj2O8zoX10krqVii8WY/eBiQsL0yMA8lxSd7CST7h0t mNYi8VGvHAP62gE8MXFInWNAPEUyBLUa/AnBGpwjmpqcd1+pJoP2uLK6ZMeRcnQz y2zr4ROejGloJDVk3FPK5cx5tcs6uPRijw/NqZMbloVJkba20o4sZX6G7B2P+KN4 qQaZHft+uLpDkf0nfpxs705uEQPmCrEiCgrxWIm4N7WVeynhoQM= -----END CERTIFICATE-----Generated at Thu May 16 21:44:26 2024 by rpki-client on console-fra.rpki-client.org