$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft File: 665965FB7DA174CF19CD5F64A0820D37AB444D99.mft (raw, json) Hash identifier: ecDHNeRxmsjrZWlTk0dzuywpy2TXD4JA4UMT57ObYgI= Subject key identifier: 84:90:3A:1A:A2:32:D2:1F:1D:B7:65:DF:0B:C7:67:06:76:A6:55:B5 Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 2F40A4F8E8200F6E14B64C5A06552E4BCF9472EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft Manifest number: 020A Signing time: Tue 30 Apr 2024 15:10:39 +0000 Manifest this update: Tue 30 Apr 2024 15:05:39 +0000 Manifest next update: Fri 03 May 2024 20:39:39 +0000 Files and hashes: 1: 665965FB7DA174CF19CD5F64A0820D37AB444D99.crl (hash: mpJXnTYZ/8Oyejv15vZ6Xn5j0kYDiwRvy/cl7gZP5Qo=) 2: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: vcPGeXhxqtds+OgrHmvxoztzEjtqh354mClTcgctWs4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:40:a4:f8:e8:20:0f:6e:14:b6:4c:5a:06:55:2e:4b:cf:94:72:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Apr 30 15:05:39 2024 GMT Not After : May 3 20:39:39 2024 GMT Subject: CN=84903A1AA232D21F1DB765DF0BC7670676A655B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:51:79:0f:5a:50:5f:42:05:1f:95:e3:26:0b: a7:b3:44:aa:76:8d:bb:97:0a:dc:cd:99:de:fb:38: 4b:ea:25:fa:42:69:26:72:79:dc:37:3e:a5:00:26: 01:d8:f0:9f:21:cd:68:26:8e:22:dc:7d:6b:13:69: a9:e4:5e:55:c8:81:b0:e9:51:4a:97:6f:20:4a:a7: 12:e8:51:0e:f5:81:7b:be:ea:56:e8:21:c2:ce:70: 47:b9:91:ee:8f:05:cf:68:4d:3d:67:09:16:b8:d2: c1:a5:51:57:c3:98:b5:4c:ec:de:db:f6:8a:46:d5: 2d:04:01:56:33:40:0e:13:42:6c:23:6a:be:ba:a5: 75:ea:07:91:2c:aa:45:11:d4:d0:a3:58:0f:5c:b4: 0f:39:6b:69:d9:f1:7f:73:fa:99:f1:5b:6a:a7:9b: d9:26:80:af:34:5f:46:6b:39:76:5f:95:f3:cf:93: 77:84:2a:5a:d1:07:38:21:0a:f7:18:6a:ae:5b:76: b1:9d:e0:7c:d0:a9:2b:9b:12:f0:a1:27:bf:17:a5: db:43:b3:23:cd:37:84:b9:19:28:22:be:29:cc:0d: 2f:27:ad:17:90:07:85:91:12:f3:cd:ad:5b:14:4e: e9:32:a5:72:92:00:21:6f:b8:64:dc:b2:4b:ed:0d: 7b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:90:3A:1A:A2:32:D2:1F:1D:B7:65:DF:0B:C7:67:06:76:A6:55:B5 X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:cc:0c:d1:f4:95:78:10:bc:ee:ab:c2:da:28:5c:0b:34:50: 52:9d:6b:49:e5:2a:33:f5:a8:d1:82:fd:a8:93:f2:fb:c3:1a: 2a:72:5d:7e:fc:fe:5f:e8:4e:0d:6c:12:ff:1e:ab:ab:50:83: b6:ea:e7:34:93:ce:94:17:1f:1b:75:ec:87:5c:c2:74:86:30: 5b:06:1d:80:55:16:07:6e:41:b3:0e:a6:6c:49:be:b6:8d:f4: a6:d6:02:15:63:54:db:56:85:13:af:ce:ab:66:c9:e3:ef:60: 63:6d:de:1e:b0:b3:99:10:c4:00:7e:94:ea:55:3a:7b:21:b6: 69:2a:50:6c:53:68:be:00:a7:8a:08:8e:34:af:08:ee:eb:21: d1:43:7b:15:61:7e:ce:99:34:57:5e:b8:f4:ac:31:d7:d3:9a: b7:db:16:a0:1f:3f:d1:41:d3:77:99:14:78:c3:43:f1:52:bc: bb:44:1e:ab:70:ce:ee:ed:8c:a8:e8:98:24:72:da:9c:92:5d: c1:9e:eb:c0:a6:62:eb:8e:de:63:74:fd:ee:03:7b:58:c4:03: 9e:b8:db:af:d6:31:0d:c3:7c:53:31:ac:f7:c4:d0:2d:72:22: 42:c3:5d:56:9a:5e:1c:0e:11:78:c7:2e:89:e7:29:38:2a:8d: f1:93:5e:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0Ck+OggD24UtkxaBlUuS8+Ucu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNDA0MzAxNTA1MzlaFw0yNDA1MDMyMDM5MzlaMDMxMTAvBgNV BAMTKDg0OTAzQTFBQTIzMkQyMUYxREI3NjVERjBCQzc2NzA2NzZBNjU1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmUXkPWlBfQgUfleMmC6ezRKp2 jbuXCtzNmd77OEvqJfpCaSZyedw3PqUAJgHY8J8hzWgmjiLcfWsTaankXlXIgbDp UUqXbyBKpxLoUQ71gXu+6lboIcLOcEe5ke6PBc9oTT1nCRa40sGlUVfDmLVM7N7b 9opG1S0EAVYzQA4TQmwjar66pXXqB5EsqkUR1NCjWA9ctA85a2nZ8X9z+pnxW2qn m9kmgK80X0ZrOXZflfPPk3eEKlrRBzghCvcYaq5bdrGd4HzQqSubEvChJ78XpdtD syPNN4S5GSgivinMDS8nrReQB4WREvPNrVsUTukypXKSACFvuGTcskvtDXsxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhJA6GqIy0h8dt2XfC8dnBnamVbUwHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBE MzdBQjQ0NEQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfMDNH0lXgQvO6rwtooXAs0UFKda0nlKjP1 qNGC/aiT8vvDGipyXX78/l/oTg1sEv8eq6tQg7bq5zSTzpQXHxt17IdcwnSGMFsG HYBVFgduQbMOpmxJvraN9KbWAhVjVNtWhROvzqtmyePvYGNt3h6ws5kQxAB+lOpV OnshtmkqUGxTaL4Ap4oIjjSvCO7rIdFDexVhfs6ZNFdeuPSsMdfTmrfbFqAfP9FB 03eZFHjDQ/FSvLtEHqtwzu7tjKjomCRy2pySXcGe68CmYuuO3mN0/e4De1jEA564 26/WMQ3DfFMxrPfE0C1yIkLDXVaaXhwOEXjHLonnKTgqjfGTXp0= -----END CERTIFICATE-----Generated at Tue Apr 30 15:50:30 2024 by rpki-client on console-fra.rpki-client.org