$ rpki-client -vvf repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft File: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft (raw, json) Hash identifier: eHPRx5IQEtQvwhcqtOGEHDdYlb2svxBUQQmSHrnoXuk= Subject key identifier: C4:40:3F:1F:6C:6A:38:01:2C:B3:7D:17:01:18:17:A0:87:F8:18:DC Authority key identifier: 6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 Certificate issuer: /CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Certificate serial: 5588375FE5AF25BCCF80EC287DCD13CBD5D698E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft Manifest number: 0128 Signing time: Fri 17 May 2024 15:42:43 +0000 Manifest this update: Fri 17 May 2024 15:37:43 +0000 Manifest next update: Mon 20 May 2024 19:49:43 +0000 Files and hashes: 1: 3130332e3139312e3134382e302f32332d3234203d3e2034383030.roa (hash: S07h0jToTq1uEy6OH0z3dOHhCYjSPHSR65N52uEQo+E=) 2: 6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl (hash: XaupXKeWL8L/RUAwTfMtPwNUWoVb09ReS2VmKfdL7zQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 19:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:88:37:5f:e5:af:25:bc:cf:80:ec:28:7d:cd:13:cb:d5:d6:98:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8 Validity Not Before: May 17 15:37:43 2024 GMT Not After : May 20 19:49:43 2024 GMT Subject: CN=C4403F1F6C6A38012CB37D17011817A087F818DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:0d:ba:2f:59:01:44:50:d0:83:23:1e:86: 4b:9a:70:06:94:47:64:7f:55:5e:39:e3:18:a6:4b: 10:67:c3:83:ca:28:0e:b1:bf:43:f1:93:67:f1:b8: ca:7c:d8:0d:7c:8d:a8:df:4e:a5:8f:8d:f9:da:55: df:32:93:b2:9f:44:72:96:47:f5:b0:b5:a5:cd:43: 5b:64:a2:62:75:4e:c0:7d:92:33:d1:2e:3e:b2:d2: 0e:66:58:aa:43:a2:ff:f2:0f:9c:80:7a:f5:8d:52: 68:82:53:9b:cb:a3:75:e1:4c:a9:2b:7e:8e:57:af: d0:b9:31:84:21:01:ff:f2:d4:77:e9:64:12:3c:ac: 81:4e:5e:9e:d7:69:74:fe:4c:e6:48:1e:92:97:20: 61:b3:0f:2b:a7:ec:5a:dd:b4:1d:0d:ad:76:8d:ed: 17:6a:1c:95:9a:07:55:3f:40:83:6d:97:39:c7:e4: 63:5d:14:47:ee:82:3f:43:7f:6c:66:a1:06:a4:17: fe:10:4d:b7:69:45:85:03:50:1d:b4:42:e1:51:e2: 66:10:43:4d:2a:f0:3f:c2:d2:84:be:ef:22:29:e1: 05:bd:08:1c:a7:3f:4a:6f:24:3f:bc:56:f2:1b:c7: 93:e1:c8:e5:a6:0c:24:35:ce:17:37:10:f6:05:b5: e7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:40:3F:1F:6C:6A:38:01:2C:B3:7D:17:01:18:17:A0:87:F8:18:DC X509v3 Authority Key Identifier: keyid:6C:F6:DF:7E:65:16:A6:AB:F5:39:F0:39:6C:B6:C0:D4:DB:50:F4:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd906fc0-4363-4f46-9b14-5c1ab825a335/0/6CF6DF7E6516A6ABF539F0396CB6C0D4DB50F4D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1c:a8:d0:74:e2:4e:75:19:cd:77:fc:85:4e:2a:22:3f:12: 1e:9e:49:3e:a5:97:27:a5:b5:f6:14:a3:38:13:d7:8c:0c:20: 74:7c:ee:31:8b:e2:b2:b5:f1:51:7e:32:86:36:32:16:d5:e3: 6b:4c:57:97:49:a0:bb:8e:64:92:b7:9a:9b:4c:76:2d:cb:c1: d3:d8:ee:57:e0:70:26:8d:f3:ab:d6:d9:5c:25:97:f5:da:1f: 1a:e1:ae:43:99:be:61:9a:e7:7f:30:73:32:26:a2:50:25:49: 08:95:18:6b:c0:39:08:3f:2f:76:40:39:c0:9c:9d:44:94:d1: 33:78:ab:db:64:a0:37:37:4e:c4:7a:b4:99:f0:90:e5:01:c2: 64:dc:f7:c2:a6:c8:c6:8d:1a:5b:e0:6e:ff:6f:8f:dd:a2:13: e7:39:c2:5d:2f:f0:4a:fe:70:05:9d:1e:53:ea:48:d4:92:21: 8b:b0:be:fa:d0:4b:30:0d:c7:7c:20:b9:2b:64:f5:f1:7d:55: 95:55:12:82:2f:68:82:3a:8c:ef:07:fc:20:69:86:55:45:d8: d8:8c:ef:80:d2:13:63:15:25:63:f3:f0:cc:1b:c6:bf:5c:c7: 0e:dc:26:4f:c0:a1:e3:85:c9:70:24:61:c4:2f:4b:0f:56:6f: 97:ce:f8:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYg3X+WvJbzPgOwofc0Ty9XWmOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDRE QjUwRjREODAeFw0yNDA1MTcxNTM3NDNaFw0yNDA1MjAxOTQ5NDNaMDMxMTAvBgNV BAMTKEM0NDAzRjFGNkM2QTM4MDEyQ0IzN0QxNzAxMTgxN0EwODdGODE4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1IQ26L1kBRFDQgyMehkuacAaU R2R/VV454ximSxBnw4PKKA6xv0Pxk2fxuMp82A18jajfTqWPjfnaVd8yk7KfRHKW R/WwtaXNQ1tkomJ1TsB9kjPRLj6y0g5mWKpDov/yD5yAevWNUmiCU5vLo3XhTKkr fo5Xr9C5MYQhAf/y1HfpZBI8rIFOXp7XaXT+TOZIHpKXIGGzDyun7FrdtB0NrXaN 7RdqHJWaB1U/QINtlznH5GNdFEfugj9Df2xmoQakF/4QTbdpRYUDUB20QuFR4mYQ Q00q8D/C0oS+7yIp4QW9CBynP0pvJD+8VvIbx5PhyOWmDCQ1zhc3EPYFtecFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxEA/H2xqOAEss30XARgXoIf4GNwwHwYDVR0j BBgwFoAUbPbffmUWpqv1OfA5bLbA1NtQ9NgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDkwNmZjMC00MzYzLTRmNDYtOWIxNC01YzFhYjgyNWEzMzUvMC82Q0Y2REY3RTY1 MTZBNkFCRjUzOUYwMzk2Q0I2QzBENERCNTBGNEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMwRDREQjUw RjREOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ5MDZmYzAtNDM2My00ZjQ2LTli MTQtNWMxYWI4MjVhMzM1LzAvNkNGNkRGN0U2NTE2QTZBQkY1MzlGMDM5NkNCNkMw RDREQjUwRjREOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0cqNB04k51Gc13/IVOKiI/Eh6eST6llyel tfYUozgT14wMIHR87jGL4rK18VF+MoY2MhbV42tMV5dJoLuOZJK3mptMdi3LwdPY 7lfgcCaN86vW2Vwll/XaHxrhrkOZvmGa538wczImolAlSQiVGGvAOQg/L3ZAOcCc nUSU0TN4q9tkoDc3TsR6tJnwkOUBwmTc98KmyMaNGlvgbv9vj92iE+c5wl0v8Er+ cAWdHlPqSNSSIYuwvvrQSzANx3wguStk9fF9VZVVEoIvaII6jO8H/CBphlVF2NiM 74DSE2MVJWPz8Mwbxr9cxw7cJk/AoeOFyXAkYcQvSw9Wb5fO+HA= -----END CERTIFICATE-----Generated at Fri May 17 17:47:16 2024 by rpki-client on console-ams.rpki-client.org