$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft File: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft (raw, json) Hash identifier: /+2q+DuLg55+yuaqGjJtVlwGQ37mILjwGerAo+RHkos= Subject key identifier: 8F:DD:AB:76:48:D0:31:36:EF:0D:B9:1E:49:65:5C:B7:39:BE:B1:0D Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 Certificate issuer: /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Certificate serial: 616C6709259BAF588B5A13796DBB1F30AE5AA18D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft Manifest number: 68 Signing time: Mon 27 May 2024 14:31:32 +0000 Manifest this update: Mon 27 May 2024 14:26:32 +0000 Manifest next update: Thu 30 May 2024 16:50:32 +0000 Files and hashes: 1: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (hash: NwOCdDEwU+lfRzvRTjyFDEHr2OOgvg/IeOTrwJ/bAHQ=) 2: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (hash: iDYpSOfozIgb/OpJ8A8n0rebz9BaHCM0DtqJs5+ners=) 3: 323030313a6466323a666534303a3a2f34382d3438203d3e20313531353836.roa (hash: Eo7Wpkba0BbwxInICJgffTluSoygmGDbF7R5uRDlTHQ=) 4: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl (hash: N9ghw2HlQTEJQTEdhijBB9irR+mNlpJRfNBsqZracG8=) 5: 3130332e3131392e3233372e302f32342d3234203d3e20313531353836.roa (hash: pHonvqlzTtS/DQLW6ht5YPRWeSoZNmJo6/KsT+vQKhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 16:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6c:67:09:25:9b:af:58:8b:5a:13:79:6d:bb:1f:30:ae:5a:a1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Validity Not Before: May 27 14:26:32 2024 GMT Not After : May 30 16:50:32 2024 GMT Subject: CN=8FDDAB7648D03136EF0DB91E49655CB739BEB10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:ce:47:4e:8a:9f:ea:ea:92:b7:98:0b:63: bc:53:33:34:89:4c:c5:c9:82:ea:56:75:8f:d2:bc: 2d:85:75:21:4d:23:da:84:52:3e:f5:ed:67:7d:40: f4:62:36:cd:c5:ee:46:36:41:8d:98:c7:39:98:b8: ea:d4:51:6c:48:4b:cd:b6:00:20:7a:8b:27:7b:d5: 6c:f1:80:b4:91:ac:13:f2:c0:65:b8:31:9b:84:f2: e2:bf:54:5f:94:7b:50:b0:61:4d:29:dc:9f:a0:ca: 39:d6:9f:aa:bd:d9:93:78:4d:e9:7c:ec:05:84:91: f6:56:5e:9c:a6:e3:e3:44:b4:25:4f:04:5f:76:dd: 13:9f:9c:fc:58:44:b4:c0:ca:cd:7a:77:61:5a:7c: 84:13:97:46:93:b1:5b:c6:c3:6d:10:ef:9d:fe:72: 8b:26:81:ea:42:ef:3c:ce:be:f1:c7:59:ed:1c:ee: 3a:20:52:cb:c0:9f:ea:11:53:a2:3e:1c:ac:2c:99: ef:d1:6c:00:e1:c9:10:38:71:5a:69:08:85:17:b8: ab:36:09:29:f3:fc:b6:ce:7b:42:48:68:11:06:b2: f7:4d:4d:fc:73:8d:f3:23:b4:78:53:af:3b:99:20: 60:89:95:88:7d:12:59:bb:33:7d:2e:ff:90:37:ca: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DD:AB:76:48:D0:31:36:EF:0D:B9:1E:49:65:5C:B7:39:BE:B1:0D X509v3 Authority Key Identifier: keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:98:2c:2c:cf:5d:1e:f1:67:39:2f:3d:84:65:f2:de:05:20: 61:01:c5:3f:5d:c6:ab:3c:fb:8a:66:c3:25:8e:7b:6b:3a:94: 5b:ab:15:78:a4:1c:94:dc:30:2a:86:3d:40:32:a7:84:a6:fd: a7:0a:76:7b:2a:d3:60:34:f2:b1:1c:da:d7:ae:4b:b7:fa:1b: a8:d8:88:01:d4:41:bf:35:ca:48:93:e4:b2:58:df:cc:3e:28: 66:09:bc:18:8c:82:7d:65:2a:80:68:57:c2:50:19:82:11:42: 6e:be:b7:38:bd:91:b4:f0:95:25:03:40:e1:0e:32:d1:05:72: ef:60:85:50:cc:89:a6:2b:c6:14:c7:05:02:7f:32:79:91:2a: b5:4d:8b:dc:30:de:66:66:2a:ad:80:d8:ed:fd:e2:35:25:7d: ad:0b:2c:1e:0c:2d:01:7b:20:28:de:ea:a4:cd:22:2a:dc:af: b7:3e:84:58:e1:8b:8c:8d:17:a7:5e:53:24:e6:76:2c:d8:eb: 05:11:0c:ca:c0:c3:b9:9c:ae:a7:a3:09:9c:c4:33:c1:50:5e: 56:7d:ef:d6:a4:2a:70:96:82:74:5e:fd:8c:96:9a:7b:38:b4: d4:68:18:44:46:92:b9:da:eb:2b:dc:c1:ff:52:fe:74:cc:67: b2:77:f9:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYWxnCSWbr1iLWhN5bbsfMK5aoY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2 MEU3MzQ5OTAeFw0yNDA1MjcxNDI2MzJaFw0yNDA1MzAxNjUwMzJaMDMxMTAvBgNV BAMTKDhGRERBQjc2NDhEMDMxMzZFRjBEQjkxRTQ5NjU1Q0I3MzlCRUIxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLuM5HToqf6uqSt5gLY7xTMzSJ TMXJgupWdY/SvC2FdSFNI9qEUj717Wd9QPRiNs3F7kY2QY2YxzmYuOrUUWxIS822 ACB6iyd71WzxgLSRrBPywGW4MZuE8uK/VF+Ue1CwYU0p3J+gyjnWn6q92ZN4Tel8 7AWEkfZWXpym4+NEtCVPBF923ROfnPxYRLTAys16d2FafIQTl0aTsVvGw20Q753+ cosmgepC7zzOvvHHWe0c7jogUsvAn+oRU6I+HKwsme/RbADhyRA4cVppCIUXuKs2 CSnz/LbOe0JIaBEGsvdNTfxzjfMjtHhTrzuZIGCJlYh9Elm7M30u/5A3yqBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj92rdkjQMTbvDbkeSWVctzm+sQ0wHwYDVR0j BBgwFoAUeCWpww1a6kFEdA6bEqPAvGDnNJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDAwYjBjMi03ZWZkLTQyNzgtOThlNC1kNGY3YzI3M2VlYzIvMC83ODI1QTlDMzBE NUFFQTQxNDQ3NDBFOUIxMkEzQzBCQzYwRTczNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2MEU3 MzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0Mw QkM2MEU3MzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOYLCzPXR7xZzkvPYRl8t4FIGEBxT9dxqs8 +4pmwyWOe2s6lFurFXikHJTcMCqGPUAyp4Sm/acKdnsq02A08rEc2teuS7f6G6jY iAHUQb81ykiT5LJY38w+KGYJvBiMgn1lKoBoV8JQGYIRQm6+tzi9kbTwlSUDQOEO MtEFcu9ghVDMiaYrxhTHBQJ/MnmRKrVNi9ww3mZmKq2A2O394jUlfa0LLB4MLQF7 ICje6qTNIircr7c+hFjhi4yNF6deUyTmdizY6wURDMrAw7mcrqejCZzEM8FQXlZ9 79akKnCWgnRe/YyWmns4tNRoGERGkrna6yvcwf9S/nTMZ7J3+Vs= -----END CERTIFICATE-----Generated at Mon May 27 17:11:02 2024 by rpki-client on console-fra.rpki-client.org