$ rpki-client -vvf rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.mft File: 70610026C7F2A04E163D4FE5531D7BC46E7547C9.mft (raw, json) Hash identifier: AIDJFxr7FWrS/rJFR2SObx6QklELIJD50wHPaUNWXRU= Subject key identifier: 25:DB:74:42:E5:5E:35:27:B7:4D:8F:8D:C6:9E:57:C5:AD:70:79:4B Authority key identifier: 70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9 Certificate issuer: /CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9 Certificate serial: 0CD93D248E75B4A048AF6E00BAB212256468BA20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer Subject info access: rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.mft Manifest number: 0136 Signing time: Sun 19 May 2024 12:01:02 +0000 Manifest this update: Sun 19 May 2024 11:56:02 +0000 Manifest next update: Mon 20 May 2024 15:46:02 +0000 Files and hashes: 1: 323030313a6466323a343563303a3a2f34382d3438203d3e20393435.roa (hash: MFJe6AyQAlx0EfC/swwmCPEgsDDvmlFs7mt8AHpZVXE=) 2: 3130332e3232342e39322e302f32342d3234203d3e20313531313838.roa (hash: zwFCTLybZwhrsXM/Yb6mRAVIgC0s+vzRsR1BAWkf1IY=) 3: 0F4E901309D0140275A3FCBE4BE4BADB7B262E7F.cer (hash: LOg3JcFAJJ5u6H7occnVjvKiNTyYdhkfCV8LoRcAWKY=) 4: 3130332e3234342e3136332e302f32342d3234203d3e20323135333130.roa (hash: 22rYHPLc4BciYdKLJCiC1TsHUy+pVrpapDvHeYqxUr4=) 5: 3130332e3232342e39322e302f32342d3234203d3e20323135333130.roa (hash: mK2/fl2wRWDPa+gVC6vrCk7+XxrJDEqbrKoDVJ/U7L4=) 6: 3130332e3234342e3136332e302f32342d3234203d3e20313531313838.roa (hash: HuCfQjJNbpugIelrMpmJ1tNl7Uys4Bc9xilmaLOvcjE=) 7: 70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl (hash: b94OfYhKm4DnC0jGYTOVLNIXpox7WlrZNikVapGXn+U=) 8: 323030313a6466323a343563303a3a2f34372d3438203d3e203332353935.roa (hash: QU5WvRWUdaLX1V7Nz2kZE7cb2+mCjg3K98yHwPB/BSc=) Validation: OK Signature path: rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 15:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d9:3d:24:8e:75:b4:a0:48:af:6e:00:ba:b2:12:25:64:68:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9 Validity Not Before: May 19 11:56:02 2024 GMT Not After : May 20 15:46:02 2024 GMT Subject: CN=25DB7442E55E3527B74D8F8DC69E57C5AD70794B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ef:ac:58:c4:93:1a:56:21:4f:46:2f:f6:55: 8a:15:e8:50:f6:27:fb:9c:b8:95:23:4c:2f:7a:8a: dd:95:8d:19:59:aa:c1:5a:b0:1c:fa:16:c1:22:5d: 14:2a:ec:91:1d:e2:1c:12:e5:a0:fb:c2:44:6d:44: 97:51:f9:62:33:5c:f5:b9:d8:41:23:58:93:a5:ba: b3:8a:b7:37:df:65:b0:c4:6e:a2:8d:88:16:e1:fe: 68:cb:fd:00:f3:00:8d:c7:77:b5:06:ca:38:4e:7d: 48:d8:64:84:80:ad:07:71:79:ab:53:a3:4e:30:d2: 5f:6e:91:a8:f2:43:e7:dd:26:8c:72:23:65:51:5b: 48:da:18:f9:c1:4a:3f:98:14:55:ba:d5:de:54:93: 3e:c0:3e:01:2a:9f:f6:0c:b3:ea:0e:ee:76:ed:68: c4:3b:86:9e:23:71:9c:0f:43:00:0a:86:4d:6a:aa: 0e:3c:d4:ac:5a:6a:6d:8e:1c:8b:fd:ef:e2:b8:43: a7:88:7e:57:57:41:7c:6a:19:72:56:12:dc:cd:c1: 9f:85:68:d6:7a:7b:9b:e3:b8:84:6f:57:b9:99:2b: 27:ae:11:58:2e:8e:07:74:bc:3a:10:fd:33:1f:4e: 64:4d:f2:40:30:49:e3:79:7e:a3:f2:72:63:5d:74: fa:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DB:74:42:E5:5E:35:27:B7:4D:8F:8D:C6:9E:57:C5:AD:70:79:4B X509v3 Authority Key Identifier: keyid:70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:25:e8:8b:2b:80:33:c2:b3:22:cc:ea:b9:da:13:53:70:83: e8:d6:be:86:8b:d6:61:36:7b:83:72:94:a8:6c:42:51:59:5a: 18:af:9d:69:63:bf:38:d6:a8:61:71:be:a1:b3:2b:60:87:0b: 64:17:f9:af:e5:2f:fd:42:a2:bc:52:de:a1:dc:3d:44:a8:2c: f6:9b:cb:cc:89:a8:f4:fe:93:d4:dd:b9:ed:b6:48:a8:d5:d3: 02:1b:4b:7b:a5:d0:d2:04:c2:06:29:66:2c:20:11:6f:c1:92: 67:a6:5b:c3:5a:21:2e:03:17:2f:39:d8:a5:b4:b4:f9:e9:e5: 16:33:47:8f:a0:b6:ae:1d:79:07:7c:0a:f7:4a:f1:62:49:b6: a1:55:57:1f:1b:d2:66:9c:40:be:78:31:d9:f9:e6:22:7e:6d: 95:b2:09:8a:25:fa:a1:82:d2:eb:56:4f:fe:4d:c9:bf:01:0a: 2f:a1:d0:05:e4:e6:ad:73:bb:ea:4b:38:76:8f:1d:3d:31:ec: 20:a4:d2:cc:d8:98:73:84:d0:73:75:bb:ff:67:40:fd:66:8f: 36:cd:bf:ae:12:bb:c4:5b:df:8d:30:dd:7a:01:59:53:20:42: 7f:f4:d3:15:b3:57:02:b1:40:fd:5d:e6:7a:83:ed:9f:ae:04: 99:74:33:32 -----BEGIN CERTIFICATE----- MIIE+jCCA+KgAwIBAgIUDNk9JI51tKBIr24AurISJWRouiAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRThERjUwMDAwMTEwLwYDVQQFEyg3MDYxMDAyNkM3 RjJBMDRFMTYzRDRGRTU1MzFEN0JDNDZFNzU0N0M5MB4XDTI0MDUxOTExNTYwMloX DTI0MDUyMDE1NDYwMlowMzExMC8GA1UEAxMoMjVEQjc0NDJFNTVFMzUyN0I3NEQ4 RjhEQzY5RTU3QzVBRDcwNzk0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7vrFjEkxpWIU9GL/ZVihXoUPYn+5y4lSNML3qK3ZWNGVmqwVqwHPoWwSJd FCrskR3iHBLloPvCRG1El1H5YjNc9bnYQSNYk6W6s4q3N99lsMRuoo2IFuH+aMv9 APMAjcd3tQbKOE59SNhkhICtB3F5q1OjTjDSX26RqPJD590mjHIjZVFbSNoY+cFK P5gUVbrV3lSTPsA+ASqf9gyz6g7udu1oxDuGniNxnA9DAAqGTWqqDjzUrFpqbY4c i/3v4rhDp4h+V1dBfGoZclYS3M3Bn4Vo1np7m+O4hG9XuZkrJ64RWC6OB3S8OhD9 Mx9OZE3yQDBJ43l+o/JyY110+qUCAwEAAaOCAe0wggHpMB0GA1UdDgQWBBQl23RC 5V41J7dNj43GnlfFrXB5SzAfBgNVHSMEGDAWgBRwYQAmx/KgThY9T+VTHXvEbnVH yTAOBgNVHQ8BAf8EBAMCB4AwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6Ly9ycGtp LmNvL3JlcG8vU2ltcGxlLzIvNzA2MTAwMjZDN0YyQTA0RTE2M0Q0RkU1NTMxRDdC QzQ2RTc1NDdDOS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJC NDY4RjdDNzJGRDFGRjIvY0dFQUpzZnlvRTRXUFVfbFV4MTd4RzUxUjhrLmNlcjBm BggrBgEFBQcBCwRaMFgwVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraS5jby9yZXBv L1NpbXBsZS8yLzcwNjEwMDI2QzdGMkEwNEUxNjNENEZFNTUzMUQ3QkM0NkU3NTQ3 QzkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCtJeiLK4AzwrMizOq52hNTcIPo1r6Gi9ZhNnuDcpSobEJR WVoYr51pY7841qhhcb6hsytghwtkF/mv5S/9QqK8Ut6h3D1EqCz2m8vMiaj0/pPU 3bnttkio1dMCG0t7pdDSBMIGKWYsIBFvwZJnplvDWiEuAxcvOdiltLT56eUWM0eP oLauHXkHfAr3SvFiSbahVVcfG9JmnEC+eDHZ+eYifm2VsgmKJfqhgtLrVk/+Tcm/ AQovodAF5Oatc7vqSzh2jx09MewgpNLM2JhzhNBzdbv/Z0D9Zo82zb+uErvEW9+N MN16AVlTIEJ/9NMVs1cCsUD9XeZ6g+2frgSZdDMy -----END CERTIFICATE-----Generated at Sun May 19 12:38:32 2024 by rpki-client on console-fra.rpki-client.org