$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft File: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft (raw, json) Hash identifier: 0dSPU7kMjLTf6RftkpawblT8Mno8zkzkvvE+XtSCnEk= Subject key identifier: A3:2F:40:0D:68:26:F9:45:A6:AA:7B:D5:B8:F2:EF:A6:47:C3:78:AD Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC Certificate issuer: /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Certificate serial: 59AA40B461B0F7A8FB2BC3469F0C659290CD7E9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft Manifest number: 042F Signing time: Mon 06 May 2024 18:21:30 +0000 Manifest this update: Mon 06 May 2024 18:16:30 +0000 Manifest next update: Thu 09 May 2024 21:21:30 +0000 Files and hashes: 1: 3130332e362e3131372e302f32342d3234203d3e20313332313634.roa (hash: lp/AqM1o/aCLX402AJRwyd6abo+mEFIUaHfPvjt5AgY=) 2: 3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (hash: hC3cEPEd+vqbgTSHjEw80z+YW/5EKB5mmRVqVzQA7Oo=) 3: 323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (hash: 1Qt8qwh2i4MUTtsEtJwYMVCZJ1mTgJP3oDU6QNeWNqw=) 4: 3130332e35302e3231372e302f32342d3234203d3e20313332313634.roa (hash: pp6eJWM9IAd1evvhu8IEUVdnwjKeJpRQ3lUtbh9s/rI=) 5: 63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl (hash: 3XX6wd81z5EDTtHhRbnTn/Jhxi0G+PbtdnMoRCWaOII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 21:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:aa:40:b4:61:b0:f7:a8:fb:2b:c3:46:9f:0c:65:92:90:cd:7e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC Validity Not Before: May 6 18:16:30 2024 GMT Not After : May 9 21:21:30 2024 GMT Subject: CN=A32F400D6826F945A6AA7BD5B8F2EFA647C378AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:05:7c:c0:1e:39:e2:fc:94:eb:c9:9f:62:bc: 2f:2c:e3:43:38:d0:34:39:8e:81:6c:52:15:0e:55: ea:cf:6a:ed:4a:b6:ad:4e:a9:c8:2a:3b:fd:16:73: c4:ed:67:5e:ba:45:6c:82:a3:55:2e:f7:36:b9:37: a5:73:e3:b6:a6:0b:4e:b9:d4:7c:80:a2:55:c2:5d: 7e:4c:4f:84:5c:d0:93:41:e9:41:ad:53:8c:d3:ab: 18:5b:f8:62:7f:85:a6:a8:bc:8c:5b:be:1d:5c:f0: a2:c6:d1:66:7d:c5:0e:a0:1b:1f:1c:98:a9:58:7a: 7b:15:41:9c:d6:39:da:44:cc:5e:2f:da:5c:40:7b: 71:7f:73:dd:12:d5:59:3d:d4:88:80:5e:5d:33:c5: 24:d0:14:07:fd:ba:63:66:b6:ab:ad:59:e2:7e:8b: d8:0c:1f:bd:72:40:01:41:86:aa:ab:c8:0c:b8:c4: 9f:2f:9e:00:dd:c3:5d:1e:90:3d:b0:60:93:e1:e7: fb:11:73:62:17:49:b6:22:54:64:03:b8:0e:21:eb: 00:1d:d4:ba:e0:7e:40:98:41:66:91:c5:60:c7:63: ea:f8:e1:b5:34:42:14:28:eb:33:09:b9:78:d3:be: 6a:f3:82:03:07:37:da:a0:5d:94:2a:de:a8:de:53: e1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:2F:40:0D:68:26:F9:45:A6:AA:7B:D5:B8:F2:EF:A6:47:C3:78:AD X509v3 Authority Key Identifier: keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:21:26:79:df:bc:54:00:72:c3:59:d3:07:a9:91:1a:39:a3: 0d:cb:d4:ae:1f:04:f6:df:f5:4a:e5:f9:9a:14:14:ef:3c:65: 67:6d:4a:c4:a6:39:25:14:1d:27:20:c4:0e:c8:6f:74:56:66: 43:5a:4b:81:4f:dd:c6:50:8b:ab:59:0b:96:59:9a:74:f6:b3: 26:4c:4f:80:ef:2a:7f:d7:43:f1:b1:05:07:fa:b2:4a:15:f2: ec:36:12:58:c6:23:01:83:03:93:a7:2c:6b:d1:f4:da:05:df: 28:96:96:51:fa:93:08:33:a4:8d:94:05:bc:32:25:14:3c:71: 90:8d:a4:79:d6:a7:59:9f:be:2d:39:cd:79:1f:9f:c1:aa:d3: 7b:73:48:73:79:13:09:13:56:23:92:61:8d:be:f1:a0:81:19: e2:6e:f5:df:ac:27:ea:8d:58:b9:a1:f3:91:47:4f:8b:fa:b6: 3f:e8:8a:4c:1a:3d:eb:16:54:e8:1d:61:1e:72:77:de:9a:67: 3f:be:cf:3e:45:f4:20:89:19:5f:bd:c0:bf:49:66:9e:4e:fd: 50:5f:79:7a:2a:ae:a2:72:08:26:07:01:8c:f9:7e:ea:76:f1: 20:a6:90:16:46:8c:ac:95:dd:5d:7c:28:51:a3:26:3f:ab:3d: 37:fa:d8:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWapAtGGw96j7K8NGnwxlkpDNfp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1 M0YzNDhEQzAeFw0yNDA1MDYxODE2MzBaFw0yNDA1MDkyMTIxMzBaMDMxMTAvBgNV BAMTKEEzMkY0MDBENjgyNkY5NDVBNkFBN0JENUI4RjJFRkE2NDdDMzc4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOBXzAHjni/JTryZ9ivC8s40M4 0DQ5joFsUhUOVerPau1Ktq1OqcgqO/0Wc8TtZ166RWyCo1Uu9za5N6Vz47amC065 1HyAolXCXX5MT4Rc0JNB6UGtU4zTqxhb+GJ/haaovIxbvh1c8KLG0WZ9xQ6gGx8c mKlYensVQZzWOdpEzF4v2lxAe3F/c90S1Vk91IiAXl0zxSTQFAf9umNmtqutWeJ+ i9gMH71yQAFBhqqryAy4xJ8vngDdw10ekD2wYJPh5/sRc2IXSbYiVGQDuA4h6wAd 1LrgfkCYQWaRxWDHY+r44bU0QhQo6zMJuXjTvmrzggMHN9qgXZQq3qjeU+FRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoy9ADWgm+UWmqnvVuPLvpkfDeK0wHwYDVR0j BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE0MWY4ODQtZDVjOS00MzM2LTlh NWMtNzc3NDE5ZTU2ZGNlLzAvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZB M0Y1M0YzNDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0hJnnfvFQAcsNZ0wepkRo5ow3L1K4fBPbf 9Url+ZoUFO88ZWdtSsSmOSUUHScgxA7Ib3RWZkNaS4FP3cZQi6tZC5ZZmnT2syZM T4DvKn/XQ/GxBQf6skoV8uw2EljGIwGDA5OnLGvR9NoF3yiWllH6kwgzpI2UBbwy JRQ8cZCNpHnWp1mfvi05zXkfn8Gq03tzSHN5EwkTViOSYY2+8aCBGeJu9d+sJ+qN WLmh85FHT4v6tj/oikwaPesWVOgdYR5yd96aZz++zz5F9CCJGV+9wL9JZp5O/VBf eXoqrqJyCCYHAYz5fup28SCmkBZGjKyV3V18KFGjJj+rPTf62NU= -----END CERTIFICATE-----Generated at Mon May 6 20:16:38 2024 by rpki-client on console-ams.rpki-client.org