$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft File: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft (raw, json) Hash identifier: 3o8M81AZ8M/uh58U4EaOG74htC8R47CyToqvbsTcHSw= Subject key identifier: 70:33:79:6D:3D:66:7B:4A:59:82:EF:03:48:E5:00:FE:04:EF:7F:A0 Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 6155E2B83201E9D6E9263D63CADF30E0DDB4C3E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft Manifest number: 0127 Signing time: Wed 29 May 2024 01:41:12 +0000 Manifest this update: Wed 29 May 2024 01:36:12 +0000 Manifest next update: Sat 01 Jun 2024 05:25:12 +0000 Files and hashes: 1: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl (hash: lsg4Y0JVihTm07dLOZNqm/3ud662bgDOYAtgpEts6rU=) 2: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: ZaAqzjIn+7AR8bskzbLvrGraqYejdkRoFVEnOo9XFX0=) 3: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: eIiJeyHMeANdCdBV+wGAB74HFgoWpkkCWOX1g31903I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:55:e2:b8:32:01:e9:d6:e9:26:3d:63:ca:df:30:e0:dd:b4:c3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: May 29 01:36:12 2024 GMT Not After : Jun 1 05:25:12 2024 GMT Subject: CN=7033796D3D667B4A5982EF0348E500FE04EF7FA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:0f:21:08:d9:f1:1e:62:19:bf:c1:89:af: 5d:1b:2f:84:80:cd:0f:ef:c7:5b:61:ed:0f:29:ba: 02:e7:f0:e7:33:74:7e:91:a9:f0:67:bf:75:49:ad: a2:43:77:c1:da:8e:6c:65:cb:cd:c2:8b:88:88:dc: c2:69:fd:03:e7:23:9b:82:f5:dd:43:f8:0e:cd:91: 73:92:c9:3f:ab:17:b0:9b:f8:72:87:f7:b6:57:d5: 98:68:8e:a0:8c:3d:e4:52:b6:0a:1f:11:dd:d5:41: 32:65:35:27:ce:5a:a1:22:05:75:2f:91:4d:62:b9: 92:c1:3c:3b:ff:1e:89:82:8d:d7:64:98:ea:e9:e1: a3:6d:04:5d:39:69:a7:6c:0d:12:2e:20:4f:77:cc: 29:cb:d7:22:bd:e4:f0:12:d0:15:6e:b9:31:64:47: 69:a0:72:e1:a0:4a:72:77:4f:bf:b5:26:d0:2b:94: 4c:84:e1:6d:7b:72:1a:95:bb:7f:e8:62:c7:e5:2a: 75:a9:2b:28:47:b0:04:03:a4:18:a1:f6:c6:bc:e3: e2:82:4c:72:16:ff:9a:7b:61:b8:4e:c6:cf:9e:4a: 81:e3:84:cd:b0:c9:e3:76:e9:b9:73:be:fc:02:3f: cc:f3:e2:b6:c8:c7:c3:33:b1:d4:77:e8:66:a2:ca: af:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:33:79:6D:3D:66:7B:4A:59:82:EF:03:48:E5:00:FE:04:EF:7F:A0 X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:3f:9b:1c:8a:68:c7:7b:da:b7:dd:89:5b:fc:18:1b:5f:71: ec:53:3c:3f:32:40:35:2a:2e:20:8a:eb:28:80:3a:21:4a:fc: 86:ab:91:17:c8:05:20:ab:0d:00:eb:17:71:ea:c3:bd:92:37: 24:85:ed:b0:b9:cf:f5:95:e1:c0:e3:2d:fa:4e:30:d7:ae:c0: 22:23:6b:55:57:40:a5:c7:d1:3e:09:a5:59:e0:8a:12:4c:71: 7f:f9:58:d3:90:90:a3:ce:c3:a0:1b:a0:d5:d2:ac:78:44:26: 64:d1:35:b3:63:97:e4:79:34:e9:93:2b:d0:32:64:4c:6e:aa: 62:df:fd:4d:43:fa:74:40:ba:f8:47:f0:ee:88:00:06:9a:24: 89:c4:26:46:80:ec:2f:37:6d:7a:d5:c3:5e:3d:fb:92:43:28: de:e9:a6:95:13:34:9a:98:fc:c5:61:d7:c0:bc:70:03:95:5d: 43:05:ab:bb:d9:c7:9d:4a:1c:41:32:96:b4:ee:f3:0e:f2:c9: 92:9e:7f:be:f4:e9:5b:54:06:78:9f:94:a6:4b:91:fb:90:fb: 52:88:fd:ec:04:46:2d:15:ee:17:c0:96:4e:55:d7:ae:7e:b9: 2c:df:d2:f4:d1:bd:f8:6a:e9:f2:8f:f2:4c:c0:81:59:d2:1a: 3d:50:c5:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYVXiuDIB6dbpJj1jyt8w4N20w+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNDA1MjkwMTM2MTJaFw0yNDA2MDEwNTI1MTJaMDMxMTAvBgNV BAMTKDcwMzM3OTZEM0Q2NjdCNEE1OTgyRUYwMzQ4RTUwMEZFMDRFRjdGQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12w8hCNnxHmIZv8GJr10bL4SA zQ/vx1th7Q8pugLn8OczdH6RqfBnv3VJraJDd8Hajmxly83Ci4iI3MJp/QPnI5uC 9d1D+A7NkXOSyT+rF7Cb+HKH97ZX1ZhojqCMPeRStgofEd3VQTJlNSfOWqEiBXUv kU1iuZLBPDv/HomCjddkmOrp4aNtBF05aadsDRIuIE93zCnL1yK95PAS0BVuuTFk R2mgcuGgSnJ3T7+1JtArlEyE4W17chqVu3/oYsflKnWpKyhHsAQDpBih9sa84+KC THIW/5p7YbhOxs+eSoHjhM2wyeN26blzvvwCP8zz4rbIx8MzsdR36Gaiyq/fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcDN5bT1me0pZgu8DSOUA/gTvf6AwHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJE NzNDQUQyNkRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALU/mxyKaMd72rfdiVv8GBtfcexTPD8yQDUq LiCK6yiAOiFK/IarkRfIBSCrDQDrF3Hqw72SNySF7bC5z/WV4cDjLfpOMNeuwCIj a1VXQKXH0T4JpVngihJMcX/5WNOQkKPOw6AboNXSrHhEJmTRNbNjl+R5NOmTK9Ay ZExuqmLf/U1D+nRAuvhH8O6IAAaaJInEJkaA7C83bXrVw149+5JDKN7pppUTNJqY /MVh18C8cAOVXUMFq7vZx51KHEEylrTu8w7yyZKef7706VtUBniflKZLkfuQ+1KI /ewERi0V7hfAlk5V165+uSzf0vTRvfhq6fKP8kzAgVnSGj1QxcM= -----END CERTIFICATE-----Generated at Wed May 29 02:24:42 2024 by rpki-client on console-ams.rpki-client.org