$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: vVcjOkyg+J8uyzv/px8FhJHMoat8tlxTgK8FXJb18wg= Subject key identifier: 46:01:A2:02:B2:C5:17:5A:BB:85:EE:A8:A0:93:46:8A:31:47:E6:9E Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 4799BDE79A0247366FAD2DA30D4283167F6AAC76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: A6 Signing time: Wed 29 May 2024 14:31:41 +0000 Manifest this update: Wed 29 May 2024 14:26:41 +0000 Manifest next update: Sat 01 Jun 2024 14:43:41 +0000 Files and hashes: 1: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: JK9K79TizKr0Mzpc6GsKln188Fhnc893fnWWFi5WKGk=) 2: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: yqFry/4LxGJrVDuxbVY2RcAPDTNylJF/fe+W8ljuItE=) 3: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: KNuzEtjQXTPqbO4WNny2KjokoOmzzEFCKrvvjyUWvLI=) 4: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: 0hFlZ7fplBnjhpvQ2rtjlp/hS8tlJFaTBMFE7R6GDgM=) 5: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: jacU4c2UenPX8vzT/l1Osf9mSgEop22wfa5VW6r4QpQ=) 6: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: iq4zdyWuYQ9zfhh7R084abIYQNuWQgzRr+n2plfHB7I=) 7: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: zH8FNdTr8HS154u8ZF4964q7w/fgefg0v2RxsiJx/NI=) 8: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: 7O+AvnULpeJy5aJ05kQrhljlfkV5ExWXqcP1gSPlqXU=) 9: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: 5D15jDxwoTM16wzauOrUEtRL0kfiyMbHWtAJqnbWWIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 14:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:99:bd:e7:9a:02:47:36:6f:ad:2d:a3:0d:42:83:16:7f:6a:ac:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: May 29 14:26:41 2024 GMT Not After : Jun 1 14:43:41 2024 GMT Subject: CN=4601A202B2C5175ABB85EEA8A093468A3147E69E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:c6:ed:2f:ba:5c:18:a4:fc:80:ac:9e:a2: 37:0d:ae:d8:e0:f3:9e:81:71:b3:cb:32:22:b7:d3: 92:10:60:fc:f5:82:bd:50:5d:64:e6:12:d8:f4:50: 96:b7:45:c0:7b:df:9c:bd:f0:41:99:5f:96:06:2a: 7b:cf:dd:0f:d8:a9:69:bb:5a:89:14:5f:ab:e7:6f: 4f:a6:7f:9c:77:cb:1d:6c:ab:de:20:18:12:5b:4c: 31:91:5a:4f:2b:8d:7b:0e:07:44:d0:8d:45:b5:19: dd:0b:5a:f6:ac:39:cd:4d:e2:18:58:d0:5d:a6:4d: 23:3d:e6:9d:76:3a:3a:f0:b5:a4:70:e6:80:56:3d: bd:b7:a3:58:ea:bd:29:61:e8:e3:56:dd:d0:e3:27: c4:4c:3f:d3:8b:22:74:e9:6d:b2:2b:32:11:fb:f5: bf:d6:82:df:de:af:f3:e8:d9:a6:fd:79:fc:99:f5: 99:66:d4:06:2e:12:6d:91:2c:1b:b2:a3:c1:8e:7e: 83:f8:e9:7c:01:96:8a:1b:9c:4b:71:a8:0d:4b:c8: 21:4c:88:bf:da:af:a9:00:48:fe:40:28:80:69:18: 22:ed:1f:44:55:a2:52:15:36:31:13:7d:25:c8:7a: fa:1b:be:4b:55:01:38:b5:c8:61:9f:bc:2f:e0:86: 32:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:01:A2:02:B2:C5:17:5A:BB:85:EE:A8:A0:93:46:8A:31:47:E6:9E X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:fb:5c:8b:e9:39:43:6c:68:61:c5:d6:25:6a:ba:8c:f1:da: bd:54:7a:c5:a7:c9:2e:af:12:9c:93:52:29:41:40:aa:3a:79: b7:30:84:e8:29:db:6d:20:3b:28:1e:b7:49:75:ed:4d:34:a4: 8c:93:4e:7a:dd:a5:a8:0b:40:4d:0e:f5:1b:41:ed:79:45:b2: da:be:47:2c:30:98:9a:cc:78:6b:6f:b8:fd:57:91:22:4b:af: 10:08:bd:d5:22:01:26:41:b6:a6:1d:c0:af:1a:26:3f:e6:9d: b9:b9:7e:2f:3d:c8:78:9a:af:49:0e:74:ae:5d:b3:23:7d:5b: d3:3c:31:24:31:8f:c0:81:82:ff:89:1f:d2:46:5d:d9:ca:2b: e5:c2:f1:86:26:a3:55:a7:11:59:93:d3:5f:da:56:74:e5:bc: e4:3f:75:8c:9f:42:ad:db:e3:b8:d2:90:c8:d8:21:9e:df:55: 98:55:1f:b0:a7:a1:52:65:4d:4c:82:cf:f8:a5:7f:d7:95:07: 5b:19:f1:c6:60:fa:7c:4d:6c:cc:ab:cb:27:20:9b:d7:a0:5d: d4:f7:21:50:2b:c3:71:38:d5:a6:47:04:47:03:4e:23:9f:5c: 89:0b:96:a1:73:d2:e1:08:c7:94:78:de:35:2c:bf:a8:40:00: 50:15:95:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5m955oCRzZvrS2jDUKDFn9qrHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNDA1MjkxNDI2NDFaFw0yNDA2MDExNDQzNDFaMDMxMTAvBgNV BAMTKDQ2MDFBMjAyQjJDNTE3NUFCQjg1RUVBOEEwOTM0NjhBMzE0N0U2OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDMbtL7pcGKT8gKyeojcNrtjg 856BcbPLMiK305IQYPz1gr1QXWTmEtj0UJa3RcB735y98EGZX5YGKnvP3Q/YqWm7 WokUX6vnb0+mf5x3yx1sq94gGBJbTDGRWk8rjXsOB0TQjUW1Gd0LWvasOc1N4hhY 0F2mTSM95p12OjrwtaRw5oBWPb23o1jqvSlh6ONW3dDjJ8RMP9OLInTpbbIrMhH7 9b/Wgt/er/Po2ab9efyZ9Zlm1AYuEm2RLBuyo8GOfoP46XwBloobnEtxqA1LyCFM iL/ar6kASP5AKIBpGCLtH0RVolIVNjETfSXIevobvktVATi1yGGfvC/ghjKlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURgGiArLFF1q7he6ooJNGijFH5p4wHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKL7XIvpOUNsaGHF1iVquozx2r1UesWnyS6v EpyTUilBQKo6ebcwhOgp220gOyget0l17U00pIyTTnrdpagLQE0O9RtB7XlFstq+ RywwmJrMeGtvuP1XkSJLrxAIvdUiASZBtqYdwK8aJj/mnbm5fi89yHiar0kOdK5d syN9W9M8MSQxj8CBgv+JH9JGXdnKK+XC8YYmo1WnEVmT01/aVnTlvOQ/dYyfQq3b 47jSkMjYIZ7fVZhVH7CnoVJlTUyCz/ilf9eVB1sZ8cZg+nxNbMyryycgm9egXdT3 IVArw3E41aZHBEcDTiOfXIkLlqFz0uEIx5R43jUsv6hAAFAVlRQ= -----END CERTIFICATE-----Generated at Wed May 29 16:03:31 2024 by rpki-client on console-fra.rpki-client.org