$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: YcBkyJmHzyF2y8I1fYXG+VtKvW6MGtzqn38v6LMj3fo= Subject key identifier: E3:1E:15:7D:8E:CB:5F:F4:7D:5F:B0:CA:CB:3E:C2:ED:78:9A:F6:19 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 057151B643BA110C5B5F606C2B1F5E9C908995B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 0430 Signing time: Wed 08 May 2024 03:52:12 +0000 Manifest this update: Wed 08 May 2024 03:47:12 +0000 Manifest next update: Sat 11 May 2024 10:08:12 +0000 Files and hashes: 1: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Vg6vRv44QEMmcxMY7wG9DqNa3m6MXJFFYpsWtGwaPGA=) 2: 3130332e3132302e3230342e302f32342d3234203d3e2038313030.roa (hash: 7OyC9qSfvSSH08yl+vhmSgsgEo1qkHTXqS06syoluy8=) 3: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: fRqyngvw82Wsy10hqtugTymIlGohJtw4S4I3wxNz99Q=) 4: 3130332e3132302e3230372e302f32342d3234203d3e2036393339.roa (hash: ys+aNKQy1406fl/m5MqOCQ8h1kmHb1FDepWRkADpJcg=) 5: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: 5ryRP3quxaLnaWqV4JCggPG1hiz6CzjLAep9ATMsRxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:71:51:b6:43:ba:11:0c:5b:5f:60:6c:2b:1f:5e:9c:90:89:95:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: May 8 03:47:12 2024 GMT Not After : May 11 10:08:12 2024 GMT Subject: CN=E31E157D8ECB5FF47D5FB0CACB3EC2ED789AF619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:a8:ef:b1:fd:30:da:19:84:2a:94:2c:61: df:e7:af:9a:a6:1d:08:ce:d7:2c:a2:8e:d0:f8:ac: 18:16:6d:b2:a0:01:04:ec:54:69:cf:c2:d1:b5:eb: 1b:27:f7:7a:53:19:e9:5e:9a:cd:09:22:07:4e:b1: af:b6:43:ca:15:f2:18:9c:d8:a8:42:6d:4f:4e:a4: 55:97:38:ad:45:95:0c:d9:ea:3b:de:49:d7:90:64: a5:a0:6a:6c:84:42:69:1a:7a:e8:ca:6b:8d:5d:4c: cc:a2:b4:c2:42:78:83:5c:ca:56:d5:41:68:ba:68: 8d:ef:a3:c6:a4:0c:82:48:99:39:13:aa:e0:d8:64: 0f:9d:3e:1e:56:c9:c8:67:ce:cb:bf:12:b5:a4:70: 0c:18:bf:77:24:26:71:13:6f:88:f1:04:ce:98:cd: 10:3b:6d:2a:a2:a8:e0:44:d1:1c:2e:e2:96:bc:9b: 7e:7b:6e:da:64:23:92:7e:ff:3d:27:79:ab:37:c1: 54:73:b8:81:11:37:aa:94:4d:9c:e7:9c:b9:55:4e: 6b:89:f9:8f:f8:38:4e:7e:31:b1:d0:41:b2:e1:f5: f0:ab:74:de:aa:7a:76:a6:ff:83:c4:a8:4e:f2:87: d0:e8:08:2d:84:96:40:a3:e3:cc:1e:af:de:06:96: 99:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1E:15:7D:8E:CB:5F:F4:7D:5F:B0:CA:CB:3E:C2:ED:78:9A:F6:19 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:26:de:99:4a:d5:51:11:91:74:4f:81:07:14:64:bf:5b:07: f1:7a:b8:ca:1d:8d:fb:7e:17:69:6b:d4:60:20:7a:5f:31:0b: 50:53:9d:ab:fc:18:9f:99:76:29:6d:73:4f:59:2e:ec:b2:8b: 99:4d:c9:11:43:75:45:3d:62:53:8f:01:c6:16:a8:b4:9d:9f: 83:88:69:50:76:e6:25:68:60:7a:f3:e6:a8:2c:a3:8b:aa:eb: b7:a7:14:7c:e8:10:c3:5c:ce:ad:52:f5:f0:07:30:1f:1d:91: bd:72:97:20:7e:20:f7:c9:39:5c:52:23:b1:2a:2e:f5:42:bd: 52:4a:dd:1b:35:0b:99:1f:70:f6:68:ab:e0:3b:e7:a6:94:8e: 5a:92:a8:ff:0d:c1:ee:29:e4:84:64:ab:46:1c:2f:9d:6c:3a: fc:9a:41:4a:2b:69:0d:f8:9a:c0:a1:0b:85:af:c3:16:2d:67: f6:a8:b0:e5:a4:12:4f:e6:b5:c9:f2:20:56:55:1d:81:da:56: 1d:1e:dc:b0:75:6b:c0:d1:65:e3:c7:2a:ca:1c:0f:9d:0a:73: ed:56:ec:3f:fb:71:00:ba:fb:4d:13:44:8c:b5:2e:24:0c:61: 53:a5:c6:64:49:e6:80:ba:87:b2:63:b3:b2:1e:06:ee:72:ec: ca:b3:54:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBXFRtkO6EQxbX2BsKx9enJCJlbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNDA1MDgwMzQ3MTJaFw0yNDA1MTExMDA4MTJaMDMxMTAvBgNV BAMTKEUzMUUxNTdEOEVDQjVGRjQ3RDVGQjBDQUNCM0VDMkVENzg5QUY2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyjajvsf0w2hmEKpQsYd/nr5qm HQjO1yyijtD4rBgWbbKgAQTsVGnPwtG16xsn93pTGelems0JIgdOsa+2Q8oV8hic 2KhCbU9OpFWXOK1FlQzZ6jveSdeQZKWgamyEQmkaeujKa41dTMyitMJCeINcylbV QWi6aI3vo8akDIJImTkTquDYZA+dPh5Wychnzsu/ErWkcAwYv3ckJnETb4jxBM6Y zRA7bSqiqOBE0Rwu4pa8m357btpkI5J+/z0neas3wVRzuIERN6qUTZznnLlVTmuJ +Y/4OE5+MbHQQbLh9fCrdN6qenam/4PEqE7yh9DoCC2ElkCj48wer94GlpmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4x4VfY7LX/R9X7DKyz7C7Xia9hkwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEm3plK1VERkXRPgQcUZL9bB/F6uModjft+ F2lr1GAgel8xC1BTnav8GJ+Zdiltc09ZLuyyi5lNyRFDdUU9YlOPAcYWqLSdn4OI aVB25iVoYHrz5qgso4uq67enFHzoEMNczq1S9fAHMB8dkb1ylyB+IPfJOVxSI7Eq LvVCvVJK3Rs1C5kfcPZoq+A756aUjlqSqP8Nwe4p5IRkq0YcL51sOvyaQUoraQ34 msChC4WvwxYtZ/aosOWkEk/mtcnyIFZVHYHaVh0e3LB1a8DRZePHKsocD50Kc+1W 7D/7cQC6+00TRIy1LiQMYVOlxmRJ5oC6h7Jjs7IeBu5y7MqzVGw= -----END CERTIFICATE-----Generated at Wed May 8 04:27:29 2024 by rpki-client on console-ams.rpki-client.org