$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft File: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft (raw, json) Hash identifier: 9McXscNj8Fn/uOvK/0KuP7u8lPFX2OfpX8qXJ6yGMAk= Subject key identifier: 95:B6:21:33:EE:97:1B:38:15:65:6F:70:80:8A:43:8D:C1:1A:64:DE Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 67CF319CDF3E828A55D1380D3A068EF4D156F4AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft Manifest number: EB Signing time: Sat 18 May 2024 22:12:07 +0000 Manifest this update: Sat 18 May 2024 22:07:07 +0000 Manifest next update: Wed 22 May 2024 04:33:07 +0000 Files and hashes: 1: 3130332e35392e34342e302f32342d3234203d3e20313338383831.roa (hash: EGPVlPIcLKjEU8YJqtGrfCoS8d9O6Z6ovsBRAOjskXw=) 2: 9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl (hash: MY4jbg1HU74ftFwhd8Zmxw0SIqcSF0wCW+ETABN63aI=) 3: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (hash: CXip5HZWHq4Z06qt+SqUdhuk3DvcxlsyB9CHoztPl1k=) 4: 3130332e35392e34342e302f32332d3234203d3e20313338383831.roa (hash: Jn9KLaP/iXKotp33KugPV3FQeCL4lXPV9miMOHqJSj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cf:31:9c:df:3e:82:8a:55:d1:38:0d:3a:06:8e:f4:d1:56:f4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: May 18 22:07:07 2024 GMT Not After : May 22 04:33:07 2024 GMT Subject: CN=95B62133EE971B3815656F70808A438DC11A64DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7b:f6:7d:64:1a:0b:35:82:68:ff:ea:05:96: 4a:08:b1:03:84:bb:60:79:be:b8:ae:d2:ec:ed:2d: 5f:fe:71:f0:dc:ce:d1:a6:79:d7:f2:e1:51:1a:5c: f5:bd:7b:1a:71:3a:6c:2e:b0:ca:26:16:81:e1:10: a9:30:97:f0:56:66:1f:45:65:3d:6f:1f:06:31:f1: e9:61:fe:31:75:78:28:77:69:cf:e0:a3:eb:38:b1: c7:b3:a6:55:f0:c5:50:18:50:ac:26:04:0d:7b:2a: c1:ca:c9:5e:67:99:67:92:41:b1:29:a1:d8:68:04: 52:8e:b4:56:61:37:b2:4b:3f:fd:8c:53:1e:50:95: da:a6:2e:27:bf:07:8a:34:27:0d:5f:5a:ba:18:99: 89:01:4b:c7:fb:75:a5:4f:fb:28:3c:3e:6f:4c:0d: 3a:f7:ac:05:76:d4:50:32:1f:70:78:42:2d:00:1b: 66:56:c4:5e:7b:9e:fb:23:bd:1e:2a:c5:41:b1:66: 90:c7:ba:93:39:53:c6:2b:5f:49:93:ad:a2:51:2b: 3b:50:27:42:31:96:d7:cb:7f:b1:d2:fa:bc:44:4c: bc:38:9a:44:7c:d3:24:06:4c:f2:b9:b1:45:bb:da: 80:e1:8e:64:6d:e5:70:77:f7:ec:00:87:2a:34:4d: 52:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B6:21:33:EE:97:1B:38:15:65:6F:70:80:8A:43:8D:C1:1A:64:DE X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:47:63:97:07:be:dd:f1:05:d9:4c:5f:62:bb:3d:e2:72:84: 4c:0f:32:d9:a9:df:84:17:24:ab:ce:5f:f0:0e:ba:49:d6:8e: da:77:68:c2:ea:31:b4:fc:6a:92:0b:bb:bd:61:81:0b:dc:da: 93:eb:63:76:e8:c0:7c:ae:37:8f:2e:6e:91:ea:bf:49:69:77: 74:6f:db:be:0d:6a:35:a8:ce:a3:1a:f8:23:ee:b1:92:4a:e5: cc:da:7d:97:8e:7a:63:e5:7e:40:42:83:24:d5:94:1e:de:a0: 06:de:3c:5e:a2:b2:37:58:ef:40:2b:49:2b:ee:c2:7e:62:b3: 4c:be:a0:00:78:f3:b4:e0:45:76:ad:5d:43:41:69:37:fb:2d: 66:0f:ae:61:80:18:84:6a:14:ce:83:23:e2:53:06:2c:68:dc: 3d:97:53:b1:04:aa:ae:08:9f:42:2f:17:d1:85:aa:af:d1:2a: 4e:77:3f:94:b7:eb:49:37:cf:30:0d:14:be:fc:6c:ac:59:5b: 7d:de:98:6f:b0:eb:f5:9c:50:0d:b3:f2:15:fd:f7:79:4f:50: e5:9a:81:97:8a:1f:a8:db:a5:4d:96:17:28:61:e6:41:5a:e9: 13:f4:ee:01:82:c6:88:8d:b4:00:21:7e:04:02:e4:df:82:9d: b6:ed:38:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ88xnN8+gopV0TgNOgaO9NFW9KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNDA1MTgyMjA3MDdaFw0yNDA1MjIwNDMzMDdaMDMxMTAvBgNV BAMTKDk1QjYyMTMzRUU5NzFCMzgxNTY1NkY3MDgwOEE0MzhEQzExQTY0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqe/Z9ZBoLNYJo/+oFlkoIsQOE u2B5vriu0uztLV/+cfDcztGmedfy4VEaXPW9expxOmwusMomFoHhEKkwl/BWZh9F ZT1vHwYx8elh/jF1eCh3ac/go+s4scezplXwxVAYUKwmBA17KsHKyV5nmWeSQbEp odhoBFKOtFZhN7JLP/2MUx5QldqmLie/B4o0Jw1fWroYmYkBS8f7daVP+yg8Pm9M DTr3rAV21FAyH3B4Qi0AG2ZWxF57nvsjvR4qxUGxZpDHupM5U8YrX0mTraJRKztQ J0IxltfLf7HS+rxETLw4mkR80yQGTPK5sUW72oDhjmRt5XB39+wAhyo0TVLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlbYhM+6XGzgVZW9wgIpDjcEaZN4wHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE3NTk4ZTQtMjA2NC00ZWNiLTk4 ZjYtYjI1OWE3NDk5NmExLzAvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFD OTgyNzI4QUU5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVHY5cHvt3xBdlMX2K7PeJyhEwPMtmp34QX JKvOX/AOuknWjtp3aMLqMbT8apILu71hgQvc2pPrY3bowHyuN48ubpHqv0lpd3Rv 274NajWozqMa+CPusZJK5czafZeOemPlfkBCgyTVlB7eoAbePF6isjdY70ArSSvu wn5is0y+oAB487TgRXatXUNBaTf7LWYPrmGAGIRqFM6DI+JTBixo3D2XU7EEqq4I n0IvF9GFqq/RKk53P5S360k3zzANFL78bKxZW33emG+w6/WcUA2z8hX993lPUOWa gZeKH6jbpU2WFyhh5kFa6RP07gGCxoiNtAAhfgQC5N+CnbbtOBY= -----END CERTIFICATE-----Generated at Sun May 19 00:15:31 2024 by rpki-client on console-fra.rpki-client.org