$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: w88I+0VJKivtbOSN2Qpsouyxg2A9j5g7M8ijiEsXvHs= Subject key identifier: 8D:E8:32:77:7C:EE:B6:FC:1B:B1:7E:C1:CA:0D:8F:A4:E0:0E:80:56 Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 05BE3DD24632C17494B9A7B26BACA004D8FB852F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 01CE Signing time: Wed 29 May 2024 19:31:47 +0000 Manifest this update: Wed 29 May 2024 19:26:47 +0000 Manifest next update: Sun 02 Jun 2024 00:38:47 +0000 Files and hashes: 1: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: 8YGyz0UaKi6z3Drt49bNzX8VPlJ60PqCpnmd8QtI7/8=) 2: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: 58/soKQWPVQGTqv8hOCxxWuXW2GL47DGIdYmRaMlabg=) 3: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: eaHL11YPYQmD16JWL9dlj20tYnaqej7F/9THjXWGQSs=) 4: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: 7oq4FRLBUB7lLbbThElrgZXsIoSH7Cdmk1YFzVPU5qQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:be:3d:d2:46:32:c1:74:94:b9:a7:b2:6b:ac:a0:04:d8:fb:85:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: May 29 19:26:47 2024 GMT Not After : Jun 2 00:38:47 2024 GMT Subject: CN=8DE832777CEEB6FC1BB17EC1CA0D8FA4E00E8056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:a0:9f:e8:cf:3d:92:77:aa:7b:e2:33:54: 5a:67:1a:d4:23:dc:96:b0:44:52:6a:3c:8c:20:4c: a0:4c:51:33:17:d0:84:3d:43:62:8d:d5:23:0f:e5: 6e:de:31:3e:ae:15:cd:1a:27:c7:80:ca:e4:e4:22: 46:0b:eb:e2:7a:a7:e4:78:8d:64:95:95:e9:33:d4: 5e:bf:70:77:5d:f5:b0:51:85:45:0f:76:98:96:ff: 42:95:c2:fa:a3:15:20:69:9b:90:ec:5c:a3:58:71: 9a:e8:73:8b:c6:db:88:d3:34:4b:ca:2e:9e:3c:75: dd:f5:b9:dc:34:42:79:cd:41:97:86:c5:26:1e:d8: f7:fb:eb:68:06:24:a0:5a:db:17:3b:e0:cd:c3:78: 49:28:11:07:7f:55:20:9c:50:cc:2e:3b:bc:d2:7a: 4d:8b:27:d6:1f:4c:49:3e:e9:7f:f2:e8:05:c4:58: 61:d6:db:bd:a7:36:d6:c9:91:9a:2d:23:97:38:5a: a8:0f:ff:ac:93:e6:41:1c:39:d6:6d:91:0b:17:2c: 31:0f:ae:4a:87:4a:0b:8c:c5:4b:d3:2f:0e:a5:20: 53:b0:5a:4a:5b:93:5d:db:f6:e6:7b:bd:5c:10:15: 6e:f6:41:d2:70:2e:95:9c:8c:b0:b9:cf:dd:0c:97: ea:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E8:32:77:7C:EE:B6:FC:1B:B1:7E:C1:CA:0D:8F:A4:E0:0E:80:56 X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cd:25:0b:26:03:e8:20:6d:1a:80:2e:10:ac:99:ae:c1:e8: 97:dd:ed:f6:f3:87:b9:ad:17:f2:a3:d0:5d:bd:3c:91:2d:38: 69:73:6e:42:09:e1:fe:74:8d:06:fa:35:48:4e:85:67:27:54: 5d:ae:e0:c5:c0:66:d7:2b:56:1d:f1:67:40:e2:1e:0b:28:8c: c2:0f:d2:35:76:a7:86:0a:51:36:3c:67:18:f8:8d:45:19:fe: f1:15:f9:cd:4d:1b:9e:5f:4d:c8:e5:87:d5:f6:8f:0f:d5:b3: 55:38:ab:ed:cb:93:a2:7e:a5:46:52:47:e9:4a:d0:c4:14:63: 14:55:5d:74:2f:cb:2a:5d:0c:85:09:35:33:5c:50:47:5a:ca: 51:c8:a5:21:ec:5f:d2:29:9e:c1:df:38:b3:84:9f:4f:26:3f: cb:d6:13:45:79:a8:b8:a9:1e:05:3e:aa:97:61:76:c1:17:04: 46:42:ab:ca:6c:20:d9:ab:25:84:cd:23:24:06:e5:6e:07:9f: dd:72:53:e9:e8:52:30:3c:e3:12:29:0e:95:4a:2b:06:e9:77: 61:1f:34:7c:4a:80:25:41:b7:c5:25:b8:66:48:b4:5e:2f:96: 5b:71:90:fd:df:af:98:3b:8c:3b:7c:58:97:cd:8c:05:b4:15: 88:35:24:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBb490kYywXSUuaeya6ygBNj7hS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNDA1MjkxOTI2NDdaFw0yNDA2MDIwMDM4NDdaMDMxMTAvBgNV BAMTKDhERTgzMjc3N0NFRUI2RkMxQkIxN0VDMUNBMEQ4RkE0RTAwRTgwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4qCf6M89kneqe+IzVFpnGtQj 3JawRFJqPIwgTKBMUTMX0IQ9Q2KN1SMP5W7eMT6uFc0aJ8eAyuTkIkYL6+J6p+R4 jWSVlekz1F6/cHdd9bBRhUUPdpiW/0KVwvqjFSBpm5DsXKNYcZroc4vG24jTNEvK Lp48dd31udw0QnnNQZeGxSYe2Pf762gGJKBa2xc74M3DeEkoEQd/VSCcUMwuO7zS ek2LJ9YfTEk+6X/y6AXEWGHW272nNtbJkZotI5c4WqgP/6yT5kEcOdZtkQsXLDEP rkqHSguMxUvTLw6lIFOwWkpbk13b9uZ7vVwQFW72QdJwLpWcjLC5z90Ml+oVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjegyd3zutvwbsX7Byg2PpOAOgFYwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/NJQsmA+ggbRqALhCsma7B6Jfd7fbzh7mt F/Kj0F29PJEtOGlzbkIJ4f50jQb6NUhOhWcnVF2u4MXAZtcrVh3xZ0DiHgsojMIP 0jV2p4YKUTY8Zxj4jUUZ/vEV+c1NG55fTcjlh9X2jw/Vs1U4q+3Lk6J+pUZSR+lK 0MQUYxRVXXQvyypdDIUJNTNcUEdaylHIpSHsX9IpnsHfOLOEn08mP8vWE0V5qLip HgU+qpdhdsEXBEZCq8psINmrJYTNIyQG5W4Hn91yU+noUjA84xIpDpVKKwbpd2Ef NHxKgCVBt8UluGZItF4vlltxkP3fr5g7jDt8WJfNjAW0FYg1JGA= -----END CERTIFICATE-----Generated at Wed May 29 20:52:40 2024 by rpki-client on console-fra.rpki-client.org