$ rpki-client -vvf repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft File: EFCC7BEA840185763FF7624CF3DDE00563137A27.mft (raw, json) Hash identifier: QK5I3nHb+TFXrZvo5YDLjHiEH0p1fCNBn47PN3gO2Cc= Subject key identifier: 45:A9:CD:DA:4D:99:D1:7A:50:C0:E9:51:81:82:AC:06:98:29:17:D2 Authority key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27 Certificate issuer: /CN=EFCC7BEA840185763FF7624CF3DDE00563137A27 Certificate serial: 46E8036C89B30A5D770A863877AB32EAB28867DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft Manifest number: 02BF Signing time: Sun 19 May 2024 15:40:59 +0000 Manifest this update: Sun 19 May 2024 15:35:59 +0000 Manifest next update: Wed 22 May 2024 16:26:59 +0000 Files and hashes: 1: 323430373a613163303a3a2f33322d3332203d3e20313432333135.roa (hash: xHxphXXH6E2aSKS1oJs1B9cVA6gHRIrr9KouWG/qckk=) 2: 3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (hash: EujBjxRJYNH/sI1Xc4HHljSrMpppuOLQjoCrFaHP+ps=) 3: EFCC7BEA840185763FF7624CF3DDE00563137A27.crl (hash: Ufi3XN7kpG7QuTl1e9UIJgSVfRu4pAWX+QNHhU9oDr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 16:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e8:03:6c:89:b3:0a:5d:77:0a:86:38:77:ab:32:ea:b2:88:67:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27 Validity Not Before: May 19 15:35:59 2024 GMT Not After : May 22 16:26:59 2024 GMT Subject: CN=45A9CDDA4D99D17A50C0E9518182AC06982917D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:c7:fb:ca:d1:33:59:3b:e0:94:44:93:92: 01:3a:6e:61:a2:79:04:74:2a:1f:f1:e9:48:5b:4d: c1:38:a5:34:98:4d:a7:4c:cc:76:43:76:d4:cc:9a: 41:58:8d:ad:6e:db:3e:3e:7d:f6:3e:b1:71:bc:a9: ef:d6:cf:d8:8b:2e:8c:99:08:f2:19:de:71:e5:7b: 30:5f:61:4b:05:31:13:4b:23:6f:b2:af:16:27:65: 0c:f5:6a:73:16:56:b4:a3:17:b4:2f:d3:5c:03:5e: 5d:61:d9:90:ec:e1:59:67:53:ad:e6:6c:6c:d3:fe: ed:68:ee:38:e8:5c:8c:0d:00:93:79:a8:ff:6d:1c: df:dd:b8:9e:23:e6:f2:41:e6:2f:bf:22:2f:3f:8b: b9:38:97:31:02:66:b5:61:f8:24:f5:05:da:31:57: b3:ab:c4:3c:8d:86:4a:c4:93:de:f0:d2:89:82:90: fc:ee:af:63:f3:52:4b:75:8a:74:0c:40:a9:03:4c: fc:f5:36:76:53:1d:52:eb:ce:c2:ae:f9:04:91:32: 2f:25:ff:5a:d0:61:e9:a6:cf:1e:50:42:83:4a:30: 4e:4b:04:24:c7:9d:7d:4e:b6:ec:b3:fe:b1:bd:fd: f8:ab:13:d2:2f:f2:a4:88:5a:15:58:7d:6f:c8:b4: f1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A9:CD:DA:4D:99:D1:7A:50:C0:E9:51:81:82:AC:06:98:29:17:D2 X509v3 Authority Key Identifier: keyid:EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f4:e4:b3:81:4d:71:7d:d3:51:9f:52:72:e3:7a:f4:5a:4b: d8:81:75:e1:b0:de:44:5e:13:1e:80:f4:ff:0a:70:3b:49:9d: e0:f9:28:17:1e:40:19:af:29:40:78:65:5d:fe:b0:a3:b3:1b: ef:8b:f5:1d:66:55:bd:10:2d:8c:4b:db:10:c2:24:cd:19:7d: ab:25:dd:5f:e7:e8:95:3b:cd:12:85:1e:f3:11:ff:ea:f2:33: b6:2a:64:70:3f:d7:5a:4c:ec:fd:a6:27:0a:ef:98:5d:b7:62: 7f:df:6e:c2:49:60:f0:1b:d4:2a:7c:64:9e:c5:46:7a:dd:ed: f2:91:bc:81:2c:e6:d0:4d:73:61:f9:de:df:4e:26:50:61:26: 8f:88:f0:c6:af:5b:47:75:9a:a5:c6:5c:7d:71:a7:84:77:15: 8a:2d:78:b4:43:b6:33:ef:41:7d:fc:2a:6d:c7:e8:a8:f5:d4: e0:32:06:67:95:5b:a9:e3:e5:27:e1:6d:43:0d:d4:12:e2:c4: 27:04:f6:a1:6e:8a:df:c3:d9:e7:e5:69:3a:b0:84:45:91:cc: b1:9e:5a:c8:09:12:24:15:83:97:42:91:90:d3:96:bb:55:65: 8e:4b:8e:c8:74:05:82:cf:8b:e2:76:7a:18:25:27:ea:1b:83: 98:eb:e5:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURugDbImzCl13CoY4d6sy6rKIZ9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDQzdCRUE4NDAxODU3NjNGRjc2MjRDRjNEREUwMDU2 MzEzN0EyNzAeFw0yNDA1MTkxNTM1NTlaFw0yNDA1MjIxNjI2NTlaMDMxMTAvBgNV BAMTKDQ1QTlDRERBNEQ5OUQxN0E1MEMwRTk1MTgxODJBQzA2OTgyOTE3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Mcf7ytEzWTvglESTkgE6bmGi eQR0Kh/x6UhbTcE4pTSYTadMzHZDdtTMmkFYja1u2z4+ffY+sXG8qe/Wz9iLLoyZ CPIZ3nHlezBfYUsFMRNLI2+yrxYnZQz1anMWVrSjF7Qv01wDXl1h2ZDs4VlnU63m bGzT/u1o7jjoXIwNAJN5qP9tHN/duJ4j5vJB5i+/Ii8/i7k4lzECZrVh+CT1Bdox V7OrxDyNhkrEk97w0omCkPzur2PzUkt1inQMQKkDTPz1NnZTHVLrzsKu+QSRMi8l /1rQYemmzx5QQoNKME5LBCTHnX1Otuyz/rG9/firE9Iv8qSIWhVYfW/ItPHrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURanN2k2Z0XpQwOlRgYKsBpgpF9IwHwYDVR0j BBgwFoAU78x76oQBhXY/92JM893gBWMTeicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGQwNzhmZS0wOTMwLTQ1ZGMtYjQwMy0zY2U0ZTg2M2Y4YjUvMC9FRkNDN0JFQTg0 MDE4NTc2M0ZGNzYyNENGM0RERTAwNTYzMTM3QTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDQzdCRUE4NDAxODU3NjNGRjc2MjRDRjNEREUwMDU2MzEz N0EyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGRkMDc4ZmUtMDkzMC00NWRjLWI0 MDMtM2NlNGU4NjNmOGI1LzAvRUZDQzdCRUE4NDAxODU3NjNGRjc2MjRDRjNEREUw MDU2MzEzN0EyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/05LOBTXF901GfUnLjevRaS9iBdeGw3kRe Ex6A9P8KcDtJneD5KBceQBmvKUB4ZV3+sKOzG++L9R1mVb0QLYxL2xDCJM0Zfasl 3V/n6JU7zRKFHvMR/+ryM7YqZHA/11pM7P2mJwrvmF23Yn/fbsJJYPAb1Cp8ZJ7F Rnrd7fKRvIEs5tBNc2H53t9OJlBhJo+I8MavW0d1mqXGXH1xp4R3FYoteLRDtjPv QX38Km3H6Kj11OAyBmeVW6nj5SfhbUMN1BLixCcE9qFuit/D2eflaTqwhEWRzLGe WsgJEiQVg5dCkZDTlrtVZY5Ljsh0BYLPi+J2ehglJ+obg5jr5dI= -----END CERTIFICATE-----Generated at Sun May 19 16:36:51 2024 by rpki-client on console-fra.rpki-client.org