$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: xse3nkrL3noJJecF0uKj4Dbj7JAgTmU3HuCTPchojzs= Subject key identifier: BC:0F:CF:3A:22:B0:61:D2:F3:82:ED:6B:93:88:9D:41:43:8A:E8:81 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 0177D220F1A19419B01FFD46F499E9049BC1A294 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 042D Signing time: Sat 27 Apr 2024 00:11:02 +0000 Manifest this update: Sat 27 Apr 2024 00:06:02 +0000 Manifest next update: Tue 30 Apr 2024 00:59:02 +0000 Files and hashes: 1: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: swJNtrC8e2vJ1wpVNAIyoYYEmbeES9DsvBl+ACa1hyk=) 2: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Wg3rwLssx46aTqk+/Xtfr/fCRWeLjKbHMnBPIfvqa84=) 3: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: NVesbbOD22yr85OIW9to3+ZIQBEe5B2Lgye3l9cFRN4=) 4: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: OiBKVKO/YMDUlk53r07NnYkFiIc/wGbNU90Z1DWqqbE=) 5: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: 2AJHwWgdpuXScTgYm/DeoeVMKJvtVcDa6vejlN+srWY=) 6: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: 4fEOii8ZVkphitq3keztse3/jk9FCrDte0vKSiG2cac=) 7: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: 07ReJGyIK53JeV+YbLu8rBqyx9+F8Oi7yrJ4HQHFxiY=) 8: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: i+2ZZzfHCUXCCwROoAhUyzPTUuhD1uyOksffOp6JYQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 00:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:77:d2:20:f1:a1:94:19:b0:1f:fd:46:f4:99:e9:04:9b:c1:a2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Apr 27 00:06:02 2024 GMT Not After : Apr 30 00:59:02 2024 GMT Subject: CN=BC0FCF3A22B061D2F382ED6B93889D41438AE881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:7b:b7:60:06:04:e5:5a:99:25:d4:d0:e5: 9a:14:ab:63:53:90:d4:f7:b6:1f:71:18:cf:f3:25: af:40:b8:f4:cf:e8:b9:97:f0:42:8a:8f:b8:ea:83: dd:11:f8:24:5f:d4:d9:7a:1d:de:4f:4a:2c:75:4d: 8a:ae:d0:a7:23:d2:b8:20:82:38:83:a3:d8:30:45: a5:77:10:73:3c:61:98:36:13:de:79:31:8b:dd:41: 17:da:86:97:dc:72:f7:8a:a3:74:29:18:82:90:ac: a9:c1:d5:cf:ba:92:90:29:74:f8:2a:2a:a0:f0:50: a5:c5:68:5f:38:0a:4d:6b:21:08:76:25:75:17:3d: 08:ac:b0:e4:a4:7e:d8:3e:84:56:2a:24:37:30:5a: 8d:05:19:f8:4c:fe:59:aa:07:77:2c:43:14:f4:81: 58:65:0a:78:6d:30:e0:01:bb:bd:56:5c:3e:da:c1: 05:3f:12:43:0d:cf:88:6a:d7:cd:6b:4e:c6:e8:28: a4:7f:4e:16:cd:84:ea:b6:60:ef:ac:5c:79:23:d0: 49:4a:ef:00:6a:a1:f1:ce:7d:d7:5f:b6:64:c2:86: 82:1c:08:18:f7:18:f1:c7:36:e4:dc:1f:fa:27:e6: b9:76:b8:85:72:d4:22:7e:77:dd:2f:4c:09:59:ae: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0F:CF:3A:22:B0:61:D2:F3:82:ED:6B:93:88:9D:41:43:8A:E8:81 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ba:86:43:e2:ed:74:ec:25:36:1f:93:25:09:19:42:b0:04: c6:eb:14:69:66:37:66:cc:86:74:18:12:a7:e5:6a:24:c5:81: 02:f9:02:0d:ab:92:e6:41:b5:ae:c0:fa:0c:b1:d0:42:6a:64: e5:56:a3:3f:be:c0:63:6f:33:b1:c8:50:7e:60:bd:36:e5:96: e4:09:6b:f2:c0:be:42:b1:4f:1d:e2:54:5d:e5:95:5d:4f:8f: 58:51:76:2e:14:13:3c:8e:48:cf:12:d8:ab:b5:a7:84:85:17: c1:ae:ef:30:77:b0:cb:0b:57:29:4c:41:19:78:61:16:b1:06: f6:14:ed:c9:b8:85:74:dd:fd:0b:ab:69:11:84:28:71:2a:43: 40:c0:4c:d5:f1:5c:ec:64:3b:6c:f6:9a:ea:68:56:7d:8f:1d: 18:bb:f8:79:f6:f7:1e:67:c9:77:a1:04:66:19:2e:ac:45:3a: f1:af:57:33:c5:2c:14:43:4c:4b:83:7c:a4:2e:7b:fd:58:3a: 16:f7:0e:22:01:7d:b7:c8:74:ed:7b:d8:b9:10:f0:ec:23:2f: c8:82:05:97:a4:e7:09:e5:70:a1:d4:97:64:b3:d7:dc:9d:46: 38:a5:1b:18:92:90:67:ca:b8:73:e1:11:ab:16:de:da:78:44: 14:d2:8a:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXfSIPGhlBmwH/1G9JnpBJvBopQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNDA0MjcwMDA2MDJaFw0yNDA0MzAwMDU5MDJaMDMxMTAvBgNV BAMTKEJDMEZDRjNBMjJCMDYxRDJGMzgyRUQ2QjkzODg5RDQxNDM4QUU4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOonu3YAYE5VqZJdTQ5ZoUq2NT kNT3th9xGM/zJa9AuPTP6LmX8EKKj7jqg90R+CRf1Nl6Hd5PSix1TYqu0Kcj0rgg gjiDo9gwRaV3EHM8YZg2E955MYvdQRfahpfccveKo3QpGIKQrKnB1c+6kpApdPgq KqDwUKXFaF84Ck1rIQh2JXUXPQissOSkftg+hFYqJDcwWo0FGfhM/lmqB3csQxT0 gVhlCnhtMOABu71WXD7awQU/EkMNz4hq181rTsboKKR/ThbNhOq2YO+sXHkj0ElK 7wBqofHOfddftmTChoIcCBj3GPHHNuTcH/on5rl2uIVy1CJ+d90vTAlZrkzHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvA/POiKwYdLzgu1rk4idQUOK6IEwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH66hkPi7XTsJTYfkyUJGUKwBMbrFGlmN2bM hnQYEqflaiTFgQL5Ag2rkuZBta7A+gyx0EJqZOVWoz++wGNvM7HIUH5gvTblluQJ a/LAvkKxTx3iVF3llV1Pj1hRdi4UEzyOSM8S2Ku1p4SFF8Gu7zB3sMsLVylMQRl4 YRaxBvYU7cm4hXTd/QuraRGEKHEqQ0DATNXxXOxkO2z2mupoVn2PHRi7+Hn29x5n yXehBGYZLqxFOvGvVzPFLBRDTEuDfKQue/1YOhb3DiIBfbfIdO172LkQ8OwjL8iC BZek5wnlcKHUl2Sz19ydRjilGxiSkGfKuHPhEasW3tp4RBTSipk= -----END CERTIFICATE-----Generated at Sat Apr 27 10:13:17 2024 by rpki-client on console-ams.rpki-client.org