$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: cQW4smskakZrux7QWFWs0LVFenBBCxh8m4LH9lis96M= Subject key identifier: BE:1A:B6:47:9D:88:61:85:3F:8F:7A:9F:43:DA:6F:DA:FD:7E:8C:6B Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 13CC264E54813F88EA80022214935690525A620F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 0432 Signing time: Thu 23 May 2024 15:02:09 +0000 Manifest this update: Thu 23 May 2024 14:57:09 +0000 Manifest next update: Mon 27 May 2024 01:42:09 +0000 Files and hashes: 1: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: paBxLJ1vnsKLTRPrzOfqpRffSI9YdxnAU4navYzZHhk=) 2: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: texOhEQUWXFwZ44bCxPcXWqjlXjNCjfDPfcDED/k8io=) 3: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: 2K8csXWLxwLw5S8s7jlWXNOBQRdHqPQnLqWJMzuh84Y=) 4: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: DOR2UWTNvl+qND1ih+wCVmGN2HcEobKZ7YVgzpbDI2A=) 5: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: q4O/r1KiAbmP482lRS+NK6OiE1nY2arjpOUTx4drT6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 23:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:cc:26:4e:54:81:3f:88:ea:80:02:22:14:93:56:90:52:5a:62:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: May 23 14:57:09 2024 GMT Not After : May 27 01:42:09 2024 GMT Subject: CN=BE1AB6479D8861853F8F7A9F43DA6FDAFD7E8C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:ad:dc:38:a5:2d:bc:9e:97:ad:ff:fb:a5: 06:2b:fe:08:d5:f8:53:b8:68:5d:f2:da:ab:d9:50: ac:dc:6d:a4:ad:ea:25:4c:5a:ee:bc:5f:7c:80:19: bf:9d:ab:79:29:62:dc:7b:0e:72:34:ae:b7:8f:76: cd:ce:1f:e4:08:41:73:16:87:1c:91:8d:b8:7b:f0: dc:b8:26:45:56:a0:a9:c9:5e:d2:99:3b:56:cf:4c: e5:60:dd:6c:48:29:70:46:c3:40:99:93:7d:45:18: 05:2f:44:23:54:6d:16:99:57:3b:7b:0e:6c:ef:49: f5:78:eb:8f:52:56:26:52:4a:e3:fc:4b:e3:e8:58: 8d:66:b6:54:f3:39:58:d1:49:7d:69:d3:b4:15:5e: 04:5c:39:37:2c:fc:91:be:00:d0:9f:1a:7c:e5:a8: 4f:b6:43:af:a6:93:56:9d:ad:b6:c2:c0:e2:c6:c8: f8:89:12:19:ab:8f:6f:cd:cf:7b:6a:55:00:d7:0f: 12:15:60:ee:e6:77:ae:a5:13:fe:cc:63:35:51:9d: 8e:56:30:a9:7b:2d:47:1c:d9:a7:b6:51:66:77:49: 71:f1:01:e6:8c:01:aa:69:ab:5a:a8:59:ef:c3:9e: 10:21:ab:b2:f0:36:32:bd:85:ee:a5:7a:52:26:f0: b4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1A:B6:47:9D:88:61:85:3F:8F:7A:9F:43:DA:6F:DA:FD:7E:8C:6B X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3f:2d:bf:93:d6:0d:54:64:38:28:7a:6d:21:dc:4e:bf:be: 62:18:de:e1:86:56:ad:9a:5f:7f:0f:71:11:96:72:0f:06:fd: 21:74:1d:bc:ee:71:2f:5f:2d:8e:96:62:98:b3:4b:21:fc:79: e7:ba:13:85:5b:65:46:d4:00:52:57:7b:55:23:6e:e1:20:c4: b2:38:c0:e5:f3:4e:29:f8:74:45:1a:a2:e3:ee:fe:65:49:39: ba:c9:45:c3:93:e0:c9:86:10:8d:42:82:eb:4f:e2:72:08:28: 34:96:d5:c9:79:5e:d4:b0:8e:f5:ac:6d:db:ca:b0:aa:6a:b7: ac:fe:3b:e0:29:1d:61:12:fe:e3:ed:28:4a:c7:36:09:08:c0: 46:bb:c6:02:55:aa:64:0b:7b:9c:33:fd:f7:8f:7a:f1:fa:4b: c0:98:cc:a8:6b:ed:55:0c:1a:3f:87:e6:58:c1:d0:fa:fd:33: f6:1d:1f:b5:23:1a:4b:56:c3:4f:30:16:c1:b3:31:a1:26:7a: a4:a4:f1:db:bc:01:53:ae:c4:d4:80:48:e5:23:db:2c:00:78: 00:af:67:af:d2:49:a1:73:d2:d3:d6:f8:46:d0:5a:a1:37:cf: 61:42:48:74:61:51:b2:c0:3b:c0:9c:42:9b:1d:0b:f3:18:c1: 2f:8e:b6:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE8wmTlSBP4jqgAIiFJNWkFJaYg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNDA1MjMxNDU3MDlaFw0yNDA1MjcwMTQyMDlaMDMxMTAvBgNV BAMTKEJFMUFCNjQ3OUQ4ODYxODUzRjhGN0E5RjQzREE2RkRBRkQ3RThDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYa3cOKUtvJ6Xrf/7pQYr/gjV +FO4aF3y2qvZUKzcbaSt6iVMWu68X3yAGb+dq3kpYtx7DnI0rrePds3OH+QIQXMW hxyRjbh78Ny4JkVWoKnJXtKZO1bPTOVg3WxIKXBGw0CZk31FGAUvRCNUbRaZVzt7 DmzvSfV4649SViZSSuP8S+PoWI1mtlTzOVjRSX1p07QVXgRcOTcs/JG+ANCfGnzl qE+2Q6+mk1adrbbCwOLGyPiJEhmrj2/Nz3tqVQDXDxIVYO7md66lE/7MYzVRnY5W MKl7LUcc2ae2UWZ3SXHxAeaMAappq1qoWe/DnhAhq7LwNjK9he6lelIm8LTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvhq2R52IYYU/j3qfQ9pv2v1+jGswHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAII/Lb+T1g1UZDgoem0h3E6/vmIY3uGGVq2a X38PcRGWcg8G/SF0HbzucS9fLY6WYpizSyH8eee6E4VbZUbUAFJXe1UjbuEgxLI4 wOXzTin4dEUaouPu/mVJObrJRcOT4MmGEI1CgutP4nIIKDSW1cl5XtSwjvWsbdvK sKpqt6z+O+ApHWES/uPtKErHNgkIwEa7xgJVqmQLe5wz/fePevH6S8CYzKhr7VUM Gj+H5ljB0Pr9M/YdH7UjGktWw08wFsGzMaEmeqSk8du8AVOuxNSASOUj2ywAeACv Z6/SSaFz0tPW+EbQWqE3z2FCSHRhUbLAO8CcQpsdC/MYwS+OtrQ= -----END CERTIFICATE-----Generated at Thu May 23 15:44:55 2024 by rpki-client on console-fra.rpki-client.org