$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: TnCg0gQwYG6Dncmu2EJ69z5wIsijjHZUQCjnHP/sZOc= Subject key identifier: D2:19:88:D7:86:8B:56:80:0F:D5:AD:C2:05:F9:16:FB:7B:BD:22:4C Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 216821241308C0927EB7BBE471C21EC6260D5FD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 029A Signing time: Sat 18 May 2024 12:51:59 +0000 Manifest this update: Sat 18 May 2024 12:46:59 +0000 Manifest next update: Tue 21 May 2024 17:08:59 +0000 Files and hashes: 1: 3130332e3135382e35392e302f32342d3234203d3e203137393935.roa (hash: pr2MBZq6g7ft4f9khoEPd8GyxWW5p8Qaxvgx0CiJp9c=) 2: 3130332e3135382e35382e302f32342d3234203d3e203137393935.roa (hash: eLElha3taylp2ysYME+GbE2ZFl6WH4lBY9beIkH8KvM=) 3: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: HcdCI3mtsax7RPIgNpXjxT/BnUL9A8AibvPH5Q7XfSM=) 4: 3130332e3135382e35382e302f32332d3233203d3e203137393935.roa (hash: NY7ZKpTS8x6iG7pDiKwo2lthlZvBEnvtv5ofUcq2cR4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:68:21:24:13:08:c0:92:7e:b7:bb:e4:71:c2:1e:c6:26:0d:5f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: May 18 12:46:59 2024 GMT Not After : May 21 17:08:59 2024 GMT Subject: CN=D21988D7868B56800FD5ADC205F916FB7BBD224C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:34:18:20:fc:88:10:b9:7f:dc:13:c8:0e: 75:06:79:9e:90:7b:bf:f0:8c:f6:83:24:a7:bc:8e: 3e:33:0f:bd:40:2d:bf:72:4d:b0:73:9f:4e:de:4a: dc:87:40:8d:7b:63:a8:bf:89:8e:8c:d2:5e:e7:fb: 27:22:e9:a7:59:33:2f:18:8f:b7:6d:55:16:97:12: 45:d4:d6:86:b8:01:99:0c:94:cf:31:6c:c6:f1:2d: 25:1c:c1:1c:aa:45:43:d3:96:1f:ee:5b:16:87:f5: 3c:2c:09:9e:1e:17:ef:38:7a:a4:cf:08:82:f7:0e: a6:1e:e7:42:47:4c:ec:aa:a9:ee:3b:d8:56:a9:05: f2:75:b1:31:84:38:cf:69:b6:b0:b3:e4:97:6c:33: 96:68:ac:84:6b:57:d3:f5:db:96:f1:82:58:dc:b7: 3b:91:ec:9b:c1:e6:9b:59:42:b2:5a:17:ef:d8:9f: bb:43:4a:56:ab:3e:0a:b8:dd:a7:04:f9:dd:d2:c9: 6e:90:6f:12:d1:12:07:6d:24:46:e8:09:e8:08:65: a9:f1:d7:4d:fd:27:77:69:3a:dd:17:ab:41:bb:fe: e0:b3:65:61:c0:93:10:d8:33:3c:66:b8:bd:c8:3f: ca:40:60:2e:8e:a2:f1:64:b9:8e:1f:75:46:26:94: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:19:88:D7:86:8B:56:80:0F:D5:AD:C2:05:F9:16:FB:7B:BD:22:4C X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:38:e7:ea:c2:64:b2:4f:4e:ef:2e:4f:78:eb:48:b2:ac:53: 4a:fc:f3:40:63:c9:be:a1:5b:a7:66:65:de:45:fa:f8:2a:4f: 85:b1:c0:a5:52:68:f5:1d:7f:92:24:09:8b:26:65:61:f5:35: ff:87:62:13:b3:48:64:49:b0:f8:2a:f1:6f:20:41:17:7c:d4: 67:73:90:9b:4b:44:f0:e1:a4:d8:7c:59:d3:31:b3:ee:64:98: 03:98:f3:58:1c:62:20:18:d1:f3:94:13:b8:a9:a3:9d:3e:6f: 7e:4c:94:6d:a8:ee:81:79:2e:09:ac:c6:5f:be:a1:0a:25:79: f1:2c:4e:bd:d8:90:d4:68:30:1e:66:6b:b0:79:ba:d8:85:9c: 5b:67:0e:d8:1e:43:e8:40:db:5a:48:af:4e:02:e8:94:65:29: 39:a9:60:20:ab:84:04:9e:aa:8a:28:46:ff:eb:b4:df:b6:e8: 0a:f0:8e:d7:6a:f2:b1:da:bc:f7:51:f2:cb:da:0b:0a:96:e1: d8:00:17:90:1b:68:3f:55:f3:3d:41:30:76:04:ea:e2:7a:f9: f5:88:06:dd:20:b0:26:14:86:7b:da:e8:42:92:99:21:71:7c: 4e:79:54:b2:8c:c7:c7:89:07:48:1a:2d:e3:02:a1:4a:6f:19: 10:00:10:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWghJBMIwJJ+t7vkccIexiYNX9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNDA1MTgxMjQ2NTlaFw0yNDA1MjExNzA4NTlaMDMxMTAvBgNV BAMTKEQyMTk4OEQ3ODY4QjU2ODAwRkQ1QURDMjA1RjkxNkZCN0JCRDIyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7zQYIPyIELl/3BPIDnUGeZ6Q e7/wjPaDJKe8jj4zD71ALb9yTbBzn07eStyHQI17Y6i/iY6M0l7n+yci6adZMy8Y j7dtVRaXEkXU1oa4AZkMlM8xbMbxLSUcwRyqRUPTlh/uWxaH9TwsCZ4eF+84eqTP CIL3DqYe50JHTOyqqe472FapBfJ1sTGEOM9ptrCz5JdsM5ZorIRrV9P125bxgljc tzuR7JvB5ptZQrJaF+/Yn7tDSlarPgq43acE+d3SyW6QbxLREgdtJEboCegIZanx 1039J3dpOt0Xq0G7/uCzZWHAkxDYMzxmuL3IP8pAYC6OovFkuY4fdUYmlBgzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0hmI14aLVoAP1a3CBfkW+3u9IkwwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKg45+rCZLJPTu8uT3jrSLKsU0r880Bjyb6h W6dmZd5F+vgqT4WxwKVSaPUdf5IkCYsmZWH1Nf+HYhOzSGRJsPgq8W8gQRd81Gdz kJtLRPDhpNh8WdMxs+5kmAOY81gcYiAY0fOUE7ipo50+b35MlG2o7oF5Lgmsxl++ oQolefEsTr3YkNRoMB5ma7B5utiFnFtnDtgeQ+hA21pIr04C6JRlKTmpYCCrhASe qoooRv/rtN+26Arwjtdq8rHavPdR8svaCwqW4dgAF5AbaD9V8z1BMHYE6uJ6+fWI Bt0gsCYUhnva6EKSmSFxfE55VLKMx8eJB0gaLeMCoUpvGRAAECY= -----END CERTIFICATE-----Generated at Sat May 18 13:39:19 2024 by rpki-client on console-ams.rpki-client.org