$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft File: 74D4F2785CA261D018C909BA622D8244292BCB3E.mft (raw, json) Hash identifier: 0xS87PZA2agi/9x+VY8GssO5lU60u96RGIf9IJpR2ME= Subject key identifier: D4:B3:A4:F4:0C:6E:AE:67:D1:BA:11:BE:28:9E:0D:21:AF:F7:B4:4B Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E Certificate issuer: /CN=74D4F2785CA261D018C909BA622D8244292BCB3E Certificate serial: 35CA4428FA2946DE4635D181E8F509B29F79A8C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft Manifest number: 026B Signing time: Sun 19 May 2024 06:11:26 +0000 Manifest this update: Sun 19 May 2024 06:06:26 +0000 Manifest next update: Wed 22 May 2024 10:39:26 +0000 Files and hashes: 1: 3130332e3130332e3134342e302f32322d3234203d3e20313336383631.roa (hash: sanjJTJwqUJuimqsCxOlDprA3LTcMGdiA6AhWMrTbUQ=) 2: 74D4F2785CA261D018C909BA622D8244292BCB3E.crl (hash: jyvZ5rt9xHZvjrveLe8o5cvE1xq/gY5/bHI9HvFP5hs=) 3: 323430313a663563303a3a2f33322d3438203d3e20313336383631.roa (hash: SbrRY+qJx0m8quolv0WHfsH/oFs4xrY7kr+D6U+knqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ca:44:28:fa:29:46:de:46:35:d1:81:e8:f5:09:b2:9f:79:a8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E Validity Not Before: May 19 06:06:26 2024 GMT Not After : May 22 10:39:26 2024 GMT Subject: CN=D4B3A4F40C6EAE67D1BA11BE289E0D21AFF7B44B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:dd:28:f9:95:01:6e:a3:07:47:89:f1:1e: f9:c0:76:cd:43:00:b7:59:2e:da:72:8c:ec:1a:bf: ca:bb:cc:a8:b1:34:ce:af:36:f4:23:9a:14:f7:b2: 96:9f:b5:95:0b:e5:84:d4:9c:6c:90:76:46:02:bc: b6:c6:17:0b:59:fe:2b:2a:f5:1d:10:40:a0:42:89: f2:83:fa:c3:87:84:48:4c:55:6c:5f:9a:63:b9:56: 02:b1:ab:c3:5f:d9:8c:f3:76:91:a7:43:f1:eb:0c: c5:b4:05:6e:59:ba:4e:6a:e6:5f:86:b8:0f:22:c8: fd:cb:6d:28:8e:61:98:e5:71:0f:8a:54:d1:a8:2b: e6:a8:d3:77:bf:fd:4f:b2:40:2c:31:14:af:18:4a: e1:4f:5a:01:d1:1d:68:99:d4:e2:b6:4d:e3:fe:a5: 31:c4:45:2e:c5:e5:1c:b2:e2:42:63:e8:67:f7:c7: f8:ab:0a:d3:6e:74:38:84:7d:a0:50:82:6c:e6:23: 69:ac:1a:8d:c3:a0:8c:28:f8:a0:ae:49:56:e2:63: 0f:39:a5:22:5e:b5:6d:aa:14:ef:2c:ef:2b:f1:e2: 2e:c7:50:08:fa:17:05:bb:68:9c:68:43:bd:2b:af: 22:96:c8:6d:a3:0c:14:22:73:01:77:1e:87:86:a4: fd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B3:A4:F4:0C:6E:AE:67:D1:BA:11:BE:28:9E:0D:21:AF:F7:B4:4B X509v3 Authority Key Identifier: keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:10:5e:d1:c0:82:b0:d1:8b:4e:78:a8:0d:02:1b:85:61:7b: 30:0a:27:3a:48:bb:d5:98:d4:0b:1f:0d:25:11:ec:a5:c3:3c: 9a:44:3e:c1:b6:d4:58:b6:aa:81:79:2b:27:7d:6d:1c:ae:4a: 82:9f:c2:de:ac:2e:ae:9a:80:57:60:6d:46:d6:ac:dd:e3:73: 98:c7:3b:37:11:01:b4:c3:f4:cc:36:a7:05:41:2d:2f:2a:d8: 27:9b:44:ff:db:af:c3:72:e5:8b:88:5f:c8:b9:b5:f8:77:f0: 9f:7e:15:24:82:4e:23:0f:20:51:dc:83:7f:fd:82:99:3a:53: 0b:53:f2:5c:7a:03:77:4b:a8:40:e1:b9:67:b7:4a:bb:9f:f4: 79:70:8c:cc:dd:8d:bc:13:cc:7d:72:70:6b:54:c3:30:22:ea: 2d:10:9e:aa:b0:ed:6e:d1:7d:77:8c:f7:b1:84:d4:e0:9d:d2: aa:fe:23:ef:91:63:1a:e9:35:61:17:18:0e:a1:89:96:b7:78: 99:a7:3e:47:a8:59:cf:a9:83:33:f8:b2:ae:bb:4a:f1:5e:f3: 52:7a:fc:4a:6b:80:66:9e:41:76:e1:e2:69:f9:46:c8:db:c9: 2d:3c:d5:e8:f7:d2:46:47:34:4d:01:f7:0b:a7:cf:5e:26:da: b8:d7:34:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcpEKPopRt5GNdGB6PUJsp95qMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQy OTJCQ0IzRTAeFw0yNDA1MTkwNjA2MjZaFw0yNDA1MjIxMDM5MjZaMDMxMTAvBgNV BAMTKEQ0QjNBNEY0MEM2RUFFNjdEMUJBMTFCRTI4OUUwRDIxQUZGN0I0NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT190o+ZUBbqMHR4nxHvnAds1D ALdZLtpyjOwav8q7zKixNM6vNvQjmhT3spaftZUL5YTUnGyQdkYCvLbGFwtZ/isq 9R0QQKBCifKD+sOHhEhMVWxfmmO5VgKxq8Nf2YzzdpGnQ/HrDMW0BW5Zuk5q5l+G uA8iyP3LbSiOYZjlcQ+KVNGoK+ao03e//U+yQCwxFK8YSuFPWgHRHWiZ1OK2TeP+ pTHERS7F5Ryy4kJj6Gf3x/irCtNudDiEfaBQgmzmI2msGo3DoIwo+KCuSVbiYw85 pSJetW2qFO8s7yvx4i7HUAj6FwW7aJxoQ70rryKWyG2jDBQicwF3HoeGpP1bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1LOk9AxurmfRuhG+KJ4NIa/3tEswHwYDVR0j BBgwFoAUdNTyeFyiYdAYyQm6Yi2CRCkryz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmVhNzdiNS04OGY3LTQwODUtYjMzMS05NzUwMjRjZDA0NmQvMC83NEQ0RjI3ODVD QTI2MUQwMThDOTA5QkE2MjJEODI0NDI5MkJDQjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQyOTJC Q0IzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJlYTc3YjUtODhmNy00MDg1LWIz MzEtOTc1MDI0Y2QwNDZkLzAvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgy NDQyOTJCQ0IzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgQXtHAgrDRi054qA0CG4VhezAKJzpIu9WY 1AsfDSUR7KXDPJpEPsG21Fi2qoF5Kyd9bRyuSoKfwt6sLq6agFdgbUbWrN3jc5jH OzcRAbTD9Mw2pwVBLS8q2CebRP/br8Ny5YuIX8i5tfh38J9+FSSCTiMPIFHcg3/9 gpk6UwtT8lx6A3dLqEDhuWe3Sruf9HlwjMzdjbwTzH1ycGtUwzAi6i0Qnqqw7W7R fXeM97GE1OCd0qr+I++RYxrpNWEXGA6hiZa3eJmnPkeoWc+pgzP4sq67SvFe81J6 /EprgGaeQXbh4mn5RsjbyS081ej30kZHNE0B9wunz14m2rjXNOE= -----END CERTIFICATE-----Generated at Sun May 19 07:40:09 2024 by rpki-client on console-fra.rpki-client.org