$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft File: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft (raw, json) Hash identifier: cp26UxzJa9x4ac5h7uGF1Em6LrHQr+GpEIbIO+ExWPY= Subject key identifier: 45:77:89:9D:EA:8D:2B:61:4A:F6:DD:5E:57:1A:94:13:78:8F:5B:B9 Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Certificate serial: 3C2E650C7CFABDD9DC9FD69B6F14892C9D2717EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft Manifest number: 0128 Signing time: Thu 30 May 2024 09:42:06 +0000 Manifest this update: Thu 30 May 2024 09:37:06 +0000 Manifest next update: Sun 02 Jun 2024 10:40:06 +0000 Files and hashes: 1: 3130332e3138372e38382e302f32332d3233203d3e20313439393439.roa (hash: wgQvt1XGBqI5XIiINdCJ3GL1hgDCidqyF88MXteZLoI=) 2: 322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl (hash: w5F39YPMA4474PsSA7S4EvIASR/eNG2g2RIQb6+1tmA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 10:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2e:65:0c:7c:fa:bd:d9:dc:9f:d6:9b:6f:14:89:2c:9d:27:17:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA Validity Not Before: May 30 09:37:06 2024 GMT Not After : Jun 2 10:40:06 2024 GMT Subject: CN=4577899DEA8D2B614AF6DD5E571A9413788F5BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:38:9b:46:53:b0:f7:fe:d7:9e:7d:b0:8c: c6:d4:4f:87:2c:7a:06:36:0c:92:cd:a1:fd:ac:8f: 75:44:fc:66:39:d3:50:fc:44:b7:bf:1f:f7:4a:65: d4:0c:c5:33:2b:cc:d0:34:be:79:b1:e7:ad:f2:82: ea:77:36:a3:04:9b:51:92:9e:e8:56:13:d5:ce:d2: fb:25:1b:94:d7:a9:91:b4:6c:e7:51:ef:95:c0:f1: 2d:fc:6d:46:57:2a:75:19:32:e5:3a:c9:b4:69:98: 65:aa:d5:a9:bb:b0:62:cb:7a:0c:02:d1:aa:43:b3: b2:ba:70:e1:f3:14:e1:23:0d:b8:34:84:ab:2a:c3: 9a:34:b0:7b:14:e4:38:29:b5:c5:95:dd:6d:25:c4: 10:e4:af:3e:08:72:db:75:22:ef:f0:98:45:dd:30: 8c:c9:5a:5a:2c:54:e4:9d:65:fc:4a:56:3b:26:ee: cc:88:a4:2f:73:29:fa:29:66:5b:0b:15:29:09:d6: 19:79:03:90:7e:b2:a2:ab:74:fd:bd:88:d7:a4:8b: 83:0f:20:df:e3:3c:07:28:6f:da:53:d5:74:35:69: e3:2d:b2:22:e9:9f:fa:4a:41:38:1a:e5:85:92:39: 45:34:98:53:56:8c:a5:1d:1f:41:c4:2e:e1:58:ef: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:77:89:9D:EA:8D:2B:61:4A:F6:DD:5E:57:1A:94:13:78:8F:5B:B9 X509v3 Authority Key Identifier: keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a2:3b:1d:0a:9d:15:34:01:4b:27:b7:cb:6a:00:27:61:92: 37:ef:01:e6:0c:d8:c3:6c:bb:07:9e:47:f2:e4:47:93:9a:ac: d3:cf:7f:85:2f:bc:37:e0:72:73:6e:25:52:e4:4a:8f:b1:e7: cb:d8:61:ec:d7:41:a7:3e:e7:5e:ae:44:8b:52:c8:3e:d7:26: e4:43:5d:7e:80:bc:05:87:3a:49:0c:b2:81:b0:ff:48:30:73: 60:c5:7b:66:41:40:11:0d:2f:a9:ab:23:ba:31:9d:f1:32:31: e6:a2:8a:6f:29:f4:57:4d:06:71:01:09:12:c7:7d:00:55:ee: f4:e1:3f:50:f0:7c:32:36:e0:10:6f:27:79:e5:59:0d:71:cc: cf:9d:8e:6d:01:b7:85:86:8a:f8:5e:44:f5:3b:3c:d1:27:e0: 5d:7f:53:21:9e:14:47:aa:8f:e7:24:37:bd:3b:29:b9:d1:f0: 5f:4c:85:98:02:b1:6c:8b:78:1e:1d:42:f6:09:da:1b:29:8c: 9c:c2:d7:43:c1:d3:98:4f:16:ad:10:6d:fe:9f:02:cd:c8:03: 29:56:30:0d:b2:50:c2:47:f0:2a:40:0c:31:2d:f2:8b:98:08: 6e:d6:37:89:66:ee:34:54:ac:9c:95:a9:c3:eb:07:12:6f:8a: d8:6a:ab:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPC5lDHz6vdncn9abbxSJLJ0nF+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1 MTdDQUZGQTAeFw0yNDA1MzAwOTM3MDZaFw0yNDA2MDIxMDQwMDZaMDMxMTAvBgNV BAMTKDQ1Nzc4OTlERUE4RDJCNjE0QUY2REQ1RTU3MUE5NDEzNzg4RjVCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WjibRlOw9/7Xnn2wjMbUT4cs egY2DJLNof2sj3VE/GY501D8RLe/H/dKZdQMxTMrzNA0vnmx563ygup3NqMEm1GS nuhWE9XO0vslG5TXqZG0bOdR75XA8S38bUZXKnUZMuU6ybRpmGWq1am7sGLLegwC 0apDs7K6cOHzFOEjDbg0hKsqw5o0sHsU5DgptcWV3W0lxBDkrz4Ictt1Iu/wmEXd MIzJWlosVOSdZfxKVjsm7syIpC9zKfopZlsLFSkJ1hl5A5B+sqKrdP29iNeki4MP IN/jPAcob9pT1XQ1aeMtsiLpn/pKQTga5YWSOUU0mFNWjKUdH0HELuFY75QNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURXeJneqNK2FK9t1eVxqUE3iPW7kwHwYDVR0j BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD QUZGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1MGYwZjUtYjg4My00YjI0LTk3 OTItN2U5NTdhZjg4YmY4LzAvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5 NjM1MTdDQUZGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWiOx0KnRU0AUsnt8tqACdhkjfvAeYM2MNs uweeR/LkR5OarNPPf4UvvDfgcnNuJVLkSo+x58vYYezXQac+516uRItSyD7XJuRD XX6AvAWHOkkMsoGw/0gwc2DFe2ZBQBENL6mrI7oxnfEyMeaiim8p9FdNBnEBCRLH fQBV7vThP1DwfDI24BBvJ3nlWQ1xzM+djm0Bt4WGivheRPU7PNEn4F1/UyGeFEeq j+ckN707KbnR8F9MhZgCsWyLeB4dQvYJ2hspjJzC10PB05hPFq0Qbf6fAs3IAylW MA2yUMJH8CpADDEt8ouYCG7WN4lm7jRUrJyVqcPrBxJvithqq9E= -----END CERTIFICATE-----Generated at Thu May 30 11:27:39 2024 by rpki-client on console-ams.rpki-client.org