$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: BfaAUyquip/3JOmn7FUOmTd5cKOWHQue9SALbNt0GSs= Subject key identifier: 8A:D5:6B:46:A5:A5:ED:DE:5E:A6:30:9E:E7:32:35:F1:43:1E:47:BB Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 35648295DD3489FBAE19C74BD37FE73886C474F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 0102 Signing time: Sat 18 May 2024 08:51:14 +0000 Manifest this update: Sat 18 May 2024 08:46:14 +0000 Manifest next update: Tue 21 May 2024 17:43:14 +0000 Files and hashes: 1: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: FIc16vt9G0bRif4JqKVqjsAujikmE5Hh//qR33ikifQ=) 2: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: CtFPAoFCWQMoGC7obJ982ibcO5Aaxh3EjrLSrLSyo4E=) 3: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: +3d3ni85obTjksCVTVT5eeZhuEeRN8VnJiNM8q/vZ10=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:64:82:95:dd:34:89:fb:ae:19:c7:4b:d3:7f:e7:38:86:c4:74:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: May 18 08:46:14 2024 GMT Not After : May 21 17:43:14 2024 GMT Subject: CN=8AD56B46A5A5EDDE5EA6309EE73235F1431E47BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:94:7c:d4:e1:f8:fb:d0:9f:8f:c1:42:dd:28: 0b:69:5e:8f:4a:26:72:bb:a0:9b:a1:07:56:3a:18: 1e:82:30:a7:e9:b1:1c:c1:95:27:72:2c:36:7a:67: 08:a0:26:73:8e:f9:de:fd:c8:16:d4:ff:ea:6a:14: 0f:03:3f:52:46:8b:c0:50:b2:ff:6b:fc:6e:0a:da: 3c:45:02:dc:58:a7:7c:0c:d8:3a:78:71:9e:7b:fa: 13:72:18:d5:e0:39:be:88:12:f8:e6:a1:b2:74:73: c9:6c:a2:db:1d:c4:ba:2e:6c:bb:83:69:d1:12:7c: eb:c6:93:19:02:2a:86:86:ad:85:7e:57:d3:5f:61: 76:d9:41:cc:54:07:19:eb:6d:c9:13:29:e5:54:c5: d3:f4:7b:9a:cd:68:8c:e0:6a:db:69:f7:57:f3:98: 1b:34:2b:d2:2c:54:e4:de:09:75:2c:c5:07:fe:1f: 14:67:db:ca:63:29:fc:e2:9f:25:b2:37:fe:bb:db: ab:1e:88:58:65:d4:c2:1c:e9:d8:75:02:31:8d:96: e7:fb:26:9d:3e:ee:36:6f:fe:4f:95:35:78:7a:b7: ff:aa:8a:46:27:02:b3:64:89:e9:47:cb:e9:f5:57: 4b:8a:08:5a:17:75:21:de:bd:7a:fb:44:d7:0f:7d: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D5:6B:46:A5:A5:ED:DE:5E:A6:30:9E:E7:32:35:F1:43:1E:47:BB X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a5:6b:2a:4b:50:a3:04:36:73:7d:b0:c9:dd:3c:db:75:4f: 7f:09:26:75:53:1a:96:26:f2:c1:6a:a0:1f:c9:06:ea:6b:e2: b7:ec:c0:74:c3:51:3b:42:e9:74:3e:23:b1:e0:a8:1a:57:02: 3a:b4:d8:08:8b:c8:bd:a5:40:49:35:71:8e:95:6a:ee:84:1a: 3b:70:71:25:2a:65:b5:99:f8:89:a0:69:d6:1b:32:ba:2f:36: 04:db:cb:df:19:5d:d4:d2:2b:1a:e4:e0:fe:2d:0b:e0:e4:be: 4f:1b:8d:04:e1:7e:fe:39:12:5e:1e:c4:6d:88:0b:c0:10:06: af:d9:cb:69:03:88:59:39:ec:95:3f:44:f5:aa:e9:81:67:39: b7:4e:01:ae:96:ee:7a:4d:79:d8:c1:20:e2:89:e1:6f:b1:57: 82:52:b6:12:b0:68:44:6c:c4:d4:60:ec:45:2d:61:ca:e0:9e: 2a:a7:f1:dd:c0:69:27:66:98:ba:81:50:84:ea:6b:34:a3:ee: 72:95:01:f5:18:12:5d:17:da:65:39:e8:3d:d5:00:28:76:b9: 05:1e:21:33:f5:f4:c3:75:b9:a0:0f:4c:79:97:ef:04:f8:a7: 01:1c:17:9a:d6:ef:57:af:cc:3f:aa:e5:b8:c7:fb:59:c2:83: 9e:43:ca:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWSCld00ifuuGcdL03/nOIbEdPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNDA1MTgwODQ2MTRaFw0yNDA1MjExNzQzMTRaMDMxMTAvBgNV BAMTKDhBRDU2QjQ2QTVBNUVEREU1RUE2MzA5RUU3MzIzNUYxNDMxRTQ3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlHzU4fj70J+PwULdKAtpXo9K JnK7oJuhB1Y6GB6CMKfpsRzBlSdyLDZ6ZwigJnOO+d79yBbU/+pqFA8DP1JGi8BQ sv9r/G4K2jxFAtxYp3wM2Dp4cZ57+hNyGNXgOb6IEvjmobJ0c8lsotsdxLoubLuD adESfOvGkxkCKoaGrYV+V9NfYXbZQcxUBxnrbckTKeVUxdP0e5rNaIzgattp91fz mBs0K9IsVOTeCXUsxQf+HxRn28pjKfzinyWyN/6726seiFhl1MIc6dh1AjGNluf7 Jp0+7jZv/k+VNXh6t/+qikYnArNkielHy+n1V0uKCFoXdSHevXr7RNcPfdRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUitVrRqWl7d5epjCe5zI18UMeR7swHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGulaypLUKMENnN9sMndPNt1T38JJnVTGpYm 8sFqoB/JBupr4rfswHTDUTtC6XQ+I7HgqBpXAjq02AiLyL2lQEk1cY6Vau6EGjtw cSUqZbWZ+ImgadYbMrovNgTby98ZXdTSKxrk4P4tC+Dkvk8bjQThfv45El4exG2I C8AQBq/Zy2kDiFk57JU/RPWq6YFnObdOAa6W7npNedjBIOKJ4W+xV4JSthKwaERs xNRg7EUtYcrgniqn8d3AaSdmmLqBUITqazSj7nKVAfUYEl0X2mU56D3VACh2uQUe ITP19MN1uaAPTHmX7wT4pwEcF5rW71evzD+q5bjH+1nCg55Dypw= -----END CERTIFICATE-----Generated at Sat May 18 09:23:11 2024 by rpki-client on console-fra.rpki-client.org