$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft File: 645C9D445B2796662EE98A03E50C124F3E962CAB.mft (raw, json) Hash identifier: ahFMTfp/S+jY6AftbvBqE35+uZKsg73LEb1jHZH1OtQ= Subject key identifier: 00:42:32:08:F0:D3:37:91:07:E7:65:8A:27:D0:17:73:30:88:53:06 Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB Certificate serial: 7B581909DD1B6B2A7D5D90CA1F68C5D3AA2E8990 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft Manifest number: 02D3 Signing time: Fri 17 May 2024 17:30:57 +0000 Manifest this update: Fri 17 May 2024 17:25:57 +0000 Manifest next update: Tue 21 May 2024 01:05:57 +0000 Files and hashes: 1: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: P4apv1GzK7+cT56iwQ6hCEXom/pspFjbfeX0y7AzWbs=) 2: 323430313a626534303a3a2f33322d3332203d3e20313336383431.roa (hash: IVe+nVmQ/Pcf5nuTm9wxRBP9gRRfonisIPEkiSlemf0=) 3: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: EzFwwzPtLE941p35EQwK0qp4+Jvp9Rp/q0S9G37v0GI=) 4: 645C9D445B2796662EE98A03E50C124F3E962CAB.crl (hash: QNF7+PRR9Dk12sRO5//2aD1X10oLF1vUV33EcsgxZSw=) 5: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: ie2OSlltMh5IJuYjihFiK2xtHfUGtJskTHH3BlF6dQ8=) 6: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: t+xcDX1AjrMapWJZg9Tc6zs8yCxctmN+ze1FFJ7YEmY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 23:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:58:19:09:dd:1b:6b:2a:7d:5d:90:ca:1f:68:c5:d3:aa:2e:89:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB Validity Not Before: May 17 17:25:57 2024 GMT Not After : May 21 01:05:57 2024 GMT Subject: CN=00423208F0D3379107E7658A27D0177330885306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:e9:9b:92:84:6c:a8:65:58:03:9f:22:bd: 87:3d:c9:54:c9:29:23:09:d7:24:ca:ec:1c:a9:6d: c0:c7:b8:a9:3e:b8:31:c8:2a:d3:a5:98:d5:20:fb: 37:c2:1a:84:9b:f4:f0:6e:85:2d:6b:23:76:0f:5e: 60:3a:2a:02:2e:77:49:d8:54:22:a4:8b:30:c3:d4: 84:13:21:db:16:ab:ef:a6:20:73:6a:ce:0c:21:39: 77:89:91:13:f5:cf:e9:dc:c0:ca:7e:de:c5:15:7e: 6d:e5:92:e8:0b:0b:8d:bc:5c:42:5c:55:08:3d:7c: 58:c7:03:7f:23:6a:5d:6b:d8:88:3e:98:2b:53:98: 21:75:74:cd:aa:c5:dd:39:fb:ac:13:e3:4d:94:af: 97:3a:6d:74:a0:ad:20:2c:34:87:09:13:9e:ab:20: 62:c9:77:06:12:d0:33:b4:81:3a:52:47:5f:c5:ec: 6d:32:c8:3f:b5:bf:88:6c:06:15:3b:22:fd:23:32: 6c:74:47:b6:f6:00:b5:36:58:27:67:86:35:73:9a: 50:14:fb:5c:a7:63:2f:e2:c4:aa:a2:86:bb:55:fb: c6:a1:00:c5:07:f7:9b:30:01:be:a2:03:7f:78:a2: c4:87:1f:65:6c:3d:23:5c:14:f9:4e:2b:f8:39:04: af:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:42:32:08:F0:D3:37:91:07:E7:65:8A:27:D0:17:73:30:88:53:06 X509v3 Authority Key Identifier: keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a2:a8:bb:a0:c9:31:b5:53:5b:86:fb:de:f5:9c:7f:5d:6b: 90:30:90:6c:33:bd:72:0f:98:82:f6:72:a6:0d:18:c1:fa:70: 8a:c5:9e:b4:a3:17:d6:74:87:46:92:5f:c7:01:03:4d:f1:e3: f9:1a:76:be:c4:b8:30:92:2d:4d:f5:ed:0a:45:7f:a1:b6:77: 1a:b0:b6:53:3e:28:11:f5:df:62:f2:12:e8:76:cb:c3:40:91: 88:6a:17:06:c8:2f:f0:a9:4d:7b:53:41:f6:05:dd:7d:f3:fe: 72:56:56:63:d0:0f:68:5b:12:ad:81:39:ab:e0:c7:bd:82:01: 96:a5:0a:39:a2:a3:5f:06:05:9e:7d:f6:42:05:78:d0:25:2f: db:08:15:72:69:85:5d:9b:bb:6e:9c:45:05:71:d2:97:29:a7: ec:37:5f:5b:c7:d6:ff:20:8c:be:74:e8:2e:ab:56:1b:66:11: 6b:cf:5c:83:4e:69:21:09:4e:ce:d6:b5:3c:0b:51:fd:54:e3: 90:15:be:d1:d0:74:7e:0a:43:bb:78:b6:b1:0e:7f:85:8b:f5: 71:d5:aa:54:63:79:ba:39:8c:a2:9c:3c:0c:05:d6:56:ff:3f: 3c:6a:29:0b:49:49:26:76:ae:06:38:80:6f:26:15:df:8e:71: 8e:a5:db:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe1gZCd0bayp9XZDKH2jF06ouiZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYz RTk2MkNBQjAeFw0yNDA1MTcxNzI1NTdaFw0yNDA1MjEwMTA1NTdaMDMxMTAvBgNV BAMTKDAwNDIzMjA4RjBEMzM3OTEwN0U3NjU4QTI3RDAxNzczMzA4ODUzMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJsOmbkoRsqGVYA58ivYc9yVTJ KSMJ1yTK7BypbcDHuKk+uDHIKtOlmNUg+zfCGoSb9PBuhS1rI3YPXmA6KgIud0nY VCKkizDD1IQTIdsWq++mIHNqzgwhOXeJkRP1z+ncwMp+3sUVfm3lkugLC428XEJc VQg9fFjHA38jal1r2Ig+mCtTmCF1dM2qxd05+6wT402Ur5c6bXSgrSAsNIcJE56r IGLJdwYS0DO0gTpSR1/F7G0yyD+1v4hsBhU7Iv0jMmx0R7b2ALU2WCdnhjVzmlAU +1ynYy/ixKqihrtV+8ahAMUH95swAb6iA394osSHH2VsPSNcFPlOK/g5BK9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAEIyCPDTN5EH52WKJ9AXczCIUwYwHwYDVR0j BBgwFoAUZFydRFsnlmYu6YoD5QwSTz6WLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC82NDVDOUQ0NDVC Mjc5NjY2MkVFOThBMDNFNTBDMTI0RjNFOTYyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYzRTk2 MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEy NEYzRTk2MkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKiqLugyTG1U1uG+971nH9da5AwkGwzvXIP mIL2cqYNGMH6cIrFnrSjF9Z0h0aSX8cBA03x4/kadr7EuDCSLU317QpFf6G2dxqw tlM+KBH132LyEuh2y8NAkYhqFwbIL/CpTXtTQfYF3X3z/nJWVmPQD2hbEq2BOavg x72CAZalCjmio18GBZ599kIFeNAlL9sIFXJphV2bu26cRQVx0pcpp+w3X1vH1v8g jL506C6rVhtmEWvPXINOaSEJTs7WtTwLUf1U45AVvtHQdH4KQ7t4trEOf4WL9XHV qlRjebo5jKKcPAwF1lb/PzxqKQtJSSZ2rgY4gG8mFd+OcY6l22I= -----END CERTIFICATE-----Generated at Fri May 17 18:13:30 2024 by rpki-client on console-fra.rpki-client.org