$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft File: 064A8F9FBD487AB04370A31B7D603B27E6674937.mft (raw, json) Hash identifier: wPZPeD+dIVPlSxUI8K5blWLZBhmS8+peHq5XmAZixhE= Subject key identifier: 87:B4:2F:8E:B8:C1:55:92:84:FB:19:2D:52:B6:EE:DB:7F:61:98:BB Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 35044F2712CB37BD82D7E6826F731D1562B64C0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft Manifest number: A7 Signing time: Sat 18 May 2024 10:01:40 +0000 Manifest this update: Sat 18 May 2024 09:56:40 +0000 Manifest next update: Tue 21 May 2024 18:26:40 +0000 Files and hashes: 1: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (hash: I8C1s7AwytoZeFwVAIfV9U4FINxgteczcHOALBPtd1Y=) 2: 064A8F9FBD487AB04370A31B7D603B27E6674937.crl (hash: JdusbcTGDUbRgGql7XC8j/sRpxGWf1j6MbSqQPjJ65A=) 3: 3130332e3134342e32312e302f32342d3234203d3e20313339343233.roa (hash: p/PG7M6bvmcXfVdmsw48vkWAa7JqlT1k7HjqxXEwBA8=) 4: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (hash: UY6qWdPxznQdw1UQm9yf5GU3dWuf7sMTmmJrD5PQUfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:04:4f:27:12:cb:37:bd:82:d7:e6:82:6f:73:1d:15:62:b6:4c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: May 18 09:56:40 2024 GMT Not After : May 21 18:26:40 2024 GMT Subject: CN=87B42F8EB8C1559284FB192D52B6EEDB7F6198BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:ed:05:ce:63:7a:a7:9d:e6:73:26:33:9c: 26:ae:00:cb:e2:af:20:f3:e6:9d:d8:86:f8:f8:9c: 4e:2b:4e:0c:86:9b:79:47:5a:cb:65:96:2d:2b:71: ac:26:11:81:43:f5:93:48:59:cb:89:a7:cd:40:8f: 27:7b:a5:de:9b:ff:10:74:8b:2a:4d:f9:a9:99:bb: ae:11:64:a2:da:39:97:07:5c:5b:e2:c0:ab:43:19: 55:63:80:c8:46:8b:09:5e:66:be:99:24:92:76:5c: 74:0a:2f:b2:e3:fa:3e:38:e7:cb:66:e8:02:73:00: 8e:b2:7a:d0:70:80:38:4d:95:2d:43:c7:c4:15:39: ec:ac:b7:88:31:27:4a:19:a4:f4:dd:05:5b:e4:d4: 1c:c5:cb:e9:37:20:87:fa:74:90:3f:13:f5:81:6a: eb:4d:8e:ce:28:00:97:8b:44:db:f0:5d:d7:87:2c: cc:e4:34:a6:94:d3:05:75:7b:8b:ea:9f:56:46:c3: 0b:bd:02:8b:d8:79:0a:24:a4:40:f2:e8:c4:43:84: 60:71:ca:88:d6:60:05:c0:d1:c6:fc:15:55:11:56: 7a:fe:29:05:dc:69:b6:59:25:a8:c6:de:f4:b8:47: c5:57:19:a3:46:2a:b4:be:f2:b4:ff:66:09:33:0c: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B4:2F:8E:B8:C1:55:92:84:FB:19:2D:52:B6:EE:DB:7F:61:98:BB X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ae:2c:35:7d:2b:1e:da:55:a2:a1:de:21:4b:63:88:e6:5a: 18:04:3c:d6:1c:56:44:74:dc:48:35:85:57:f0:83:d0:b8:9e: 2c:74:c7:3a:20:2d:c0:fb:db:cf:9c:6c:07:36:99:e3:a8:c1: a6:0c:ce:b6:f4:95:79:ff:9a:97:59:7e:0f:dd:91:69:f8:10: db:2f:bd:76:f8:7c:ac:5a:10:0a:91:16:c6:44:a8:ed:a6:ce: 8e:c9:d3:77:a1:cd:c6:ad:5d:40:77:72:28:7a:9c:27:d3:ec: fa:10:2b:3b:09:e6:28:ec:49:3a:4a:17:e7:a4:90:0e:ad:92: 2a:4f:1d:b1:bc:d0:68:dc:11:bf:c3:84:61:69:af:45:ff:30: 39:b7:2f:d0:55:28:3c:b9:3f:b6:66:73:bc:c8:d8:0e:31:88: 27:4a:44:46:60:66:ce:87:94:0f:d8:8c:6f:ad:b1:34:3f:7c: d0:aa:3a:e6:db:a4:84:8d:5c:27:5d:41:bf:36:d9:53:c0:da: b3:d9:1d:d4:e1:d8:1e:67:5c:70:97:84:89:2d:fb:3d:a4:d8: 07:08:70:c4:db:bf:c6:15:72:b8:ca:81:51:f3:ca:98:cf:ab: 2e:6b:f4:b6:05:78:1d:c0:28:b7:d9:93:bd:cc:ec:67:53:4f: 01:14:a4:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQRPJxLLN72C1+aCb3MdFWK2TA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNDA1MTgwOTU2NDBaFw0yNDA1MjExODI2NDBaMDMxMTAvBgNV BAMTKDg3QjQyRjhFQjhDMTU1OTI4NEZCMTkyRDUyQjZFRURCN0Y2MTk4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHf+0FzmN6p53mcyYznCauAMvi ryDz5p3Yhvj4nE4rTgyGm3lHWstlli0rcawmEYFD9ZNIWcuJp81Ajyd7pd6b/xB0 iypN+amZu64RZKLaOZcHXFviwKtDGVVjgMhGiwleZr6ZJJJ2XHQKL7Lj+j4458tm 6AJzAI6yetBwgDhNlS1Dx8QVOeyst4gxJ0oZpPTdBVvk1BzFy+k3IIf6dJA/E/WB autNjs4oAJeLRNvwXdeHLMzkNKaU0wV1e4vqn1ZGwwu9AovYeQokpEDy6MRDhGBx yojWYAXA0cb8FVURVnr+KQXcabZZJajG3vS4R8VXGaNGKrS+8rT/ZgkzDKOzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh7QvjrjBVZKE+xktUrbu239hmLswHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQxZmYzZTItNzZiNi00ODMzLTg2 YjUtODJmM2ZhNGViY2I3LzAvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNC MjdFNjY3NDkzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6uLDV9Kx7aVaKh3iFLY4jmWhgEPNYcVkR0 3Eg1hVfwg9C4nix0xzogLcD728+cbAc2meOowaYMzrb0lXn/mpdZfg/dkWn4ENsv vXb4fKxaEAqRFsZEqO2mzo7J03ehzcatXUB3cih6nCfT7PoQKzsJ5ijsSTpKF+ek kA6tkipPHbG80GjcEb/DhGFpr0X/MDm3L9BVKDy5P7Zmc7zI2A4xiCdKREZgZs6H lA/YjG+tsTQ/fNCqOubbpISNXCddQb822VPA2rPZHdTh2B5nXHCXhIkt+z2k2AcI cMTbv8YVcrjKgVHzypjPqy5r9LYFeB3AKLfZk73M7GdTTwEUpCo= -----END CERTIFICATE-----Generated at Sat May 18 10:34:19 2024 by rpki-client on console-fra.rpki-client.org