$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: RU6yqpbI+Jcie31TGK2Xk4DfWw4lFLN4lo2tML0jGrc= Subject key identifier: 52:3C:DA:F2:D8:95:6E:66:EE:54:34:35:8E:B9:BD:A1:3C:6F:BB:59 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 592F7BD8832276652137FFD2F78071D0E3DE9721 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: DA Signing time: Sat 18 May 2024 04:40:04 +0000 Manifest this update: Sat 18 May 2024 04:35:04 +0000 Manifest next update: Tue 21 May 2024 06:54:04 +0000 Files and hashes: 1: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: Q3zRBtWXohLxpCcx75lJY/YxbTBODSs1A3iNqOtSXzY=) 2: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: JZy5DWRZQDaAhuKeCX60rsin8MHWu2ywoNVco7902zI=) 3: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: eMYnKtJVifr+HfUAVDuz61PfwwCVCxdNK5OolJcHZJw=) 4: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: OWL4MIVmgVVJVxVhS31U6TkaUeoSlkNV0yfqcH38RKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 06:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2f:7b:d8:83:22:76:65:21:37:ff:d2:f7:80:71:d0:e3:de:97:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: May 18 04:35:04 2024 GMT Not After : May 21 06:54:04 2024 GMT Subject: CN=523CDAF2D8956E66EE5434358EB9BDA13C6FBB59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5c:00:27:b8:ea:e7:fc:ff:19:30:d7:b7:81: 62:d3:93:15:13:cb:29:59:cb:cf:67:c3:34:f4:8f: 11:59:f2:6d:fa:00:72:b4:5d:45:ac:be:d7:80:ce: b5:bf:cd:32:fa:6a:3b:95:98:f0:b7:05:98:57:24: bf:b1:cf:4b:5e:e0:66:09:e3:c9:76:d8:4d:b9:40: 2a:ca:16:0b:6c:f3:59:b1:eb:39:9d:03:ba:2a:9e: f9:bf:15:8e:37:8e:71:ea:88:3c:2d:68:a8:73:8b: 35:62:8c:cc:0b:24:98:1e:18:24:c4:77:ba:ad:cf: 4d:e5:0b:3c:99:f7:7a:26:bb:e1:5c:be:56:03:e3: 5a:77:36:26:8a:d7:98:96:01:c4:af:14:55:ec:b7: 69:e8:95:ae:2a:24:e4:16:c3:fb:40:4e:11:c3:3c: b6:0a:44:c7:8c:7d:b2:9a:b7:f9:54:e4:cf:cb:bb: 39:53:d9:a5:c0:58:7d:63:36:e4:a3:42:e1:00:43: 29:44:88:35:e5:81:c2:3f:9b:d8:51:0f:59:35:c1: 7a:96:ca:f5:d2:b1:15:6c:a9:23:11:d9:2e:26:27: 55:75:9a:9b:f9:8a:ce:4b:4d:38:9c:cc:25:47:56: dd:03:ba:a1:f7:a8:c6:6f:58:2c:88:40:53:30:49: 7b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3C:DA:F2:D8:95:6E:66:EE:54:34:35:8E:B9:BD:A1:3C:6F:BB:59 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:45:9b:cb:da:bc:b9:36:d9:91:ef:7a:14:ae:c2:48:b3:da: a2:21:45:6f:fa:be:d4:73:9c:63:97:1b:bb:20:0b:3d:9e:34: 80:d7:63:f1:ee:09:62:54:68:ce:be:0f:07:05:3a:cf:4e:37: 91:26:d5:61:de:08:4a:87:c0:b1:00:f8:06:e7:ed:8f:2a:4d: 55:c4:cd:43:47:df:c9:57:4f:72:cf:db:8e:8e:a8:70:0b:37: 7f:75:e0:5e:24:86:55:98:40:8c:78:b2:6c:9a:f5:b7:26:c6: 0e:00:ae:0f:3a:34:68:5f:60:0e:1c:7a:49:76:8c:d2:36:e3: 86:b3:b0:54:ff:17:b5:4c:e3:d5:cb:9f:cb:af:36:03:65:8f: 38:af:3d:d7:a9:fc:0f:26:7e:4c:e9:df:30:f5:6b:a2:dc:92: 0c:39:1c:37:26:27:73:6f:b9:d3:d6:b8:69:91:a3:31:37:e7: c8:77:e4:86:82:2d:4b:8a:a8:45:ed:b2:88:e7:eb:aa:79:43: 1f:70:1c:e0:08:56:a7:40:08:b8:ce:54:06:bf:f5:e2:b5:3d: f5:df:dc:96:7d:7f:7b:7d:68:9f:99:d9:6a:8e:f5:c0:90:02: 5b:ed:80:38:c6:b8:3f:46:c3:60:5b:0d:94:36:17:9c:4e:05: f6:11:4d:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWS972IMidmUhN//S94Bx0OPelyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNDA1MTgwNDM1MDRaFw0yNDA1MjEwNjU0MDRaMDMxMTAvBgNV BAMTKDUyM0NEQUYyRDg5NTZFNjZFRTU0MzQzNThFQjlCREExM0M2RkJCNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVXAAnuOrn/P8ZMNe3gWLTkxUT yylZy89nwzT0jxFZ8m36AHK0XUWsvteAzrW/zTL6ajuVmPC3BZhXJL+xz0te4GYJ 48l22E25QCrKFgts81mx6zmdA7oqnvm/FY43jnHqiDwtaKhzizVijMwLJJgeGCTE d7qtz03lCzyZ93omu+FcvlYD41p3NiaK15iWAcSvFFXst2nola4qJOQWw/tAThHD PLYKRMeMfbKat/lU5M/LuzlT2aXAWH1jNuSjQuEAQylEiDXlgcI/m9hRD1k1wXqW yvXSsRVsqSMR2S4mJ1V1mpv5is5LTTiczCVHVt0DuqH3qMZvWCyIQFMwSXtJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUjza8tiVbmbuVDQ1jrm9oTxvu1kwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJFm8vavLk22ZHvehSuwkiz2qIhRW/6vtRz nGOXG7sgCz2eNIDXY/HuCWJUaM6+DwcFOs9ON5Em1WHeCEqHwLEA+Abn7Y8qTVXE zUNH38lXT3LP246OqHALN3914F4khlWYQIx4smya9bcmxg4Arg86NGhfYA4cekl2 jNI244azsFT/F7VM49XLn8uvNgNljzivPdep/A8mfkzp3zD1a6Lckgw5HDcmJ3Nv udPWuGmRozE358h35IaCLUuKqEXtsojn66p5Qx9wHOAIVqdACLjOVAa/9eK1PfXf 3JZ9f3t9aJ+Z2WqO9cCQAlvtgDjGuD9Gw2BbDZQ2F5xOBfYRTXw= -----END CERTIFICATE-----Generated at Sat May 18 05:38:11 2024 by rpki-client on console-ams.rpki-client.org