$ rpki-client -vvf repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft File: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft (raw, json) Hash identifier: rK04u+QWAedIJ/zpLIcS086R1+8X905DxvAkmh/iwec= Subject key identifier: DF:06:56:77:B6:4A:82:1A:2B:C7:44:4B:44:B1:F5:6F:AD:B1:11:99 Authority key identifier: 7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 Certificate issuer: /CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Certificate serial: 378E82DBD6E64A9268F3CF70A88947BD635E2B1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft Manifest number: 01E9 Signing time: Sun 19 May 2024 14:31:00 +0000 Manifest this update: Sun 19 May 2024 14:26:00 +0000 Manifest next update: Wed 22 May 2024 14:44:00 +0000 Files and hashes: 1: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: cq5cIVi1bjRN2rVWyyfBqNMVr8ibn5o0bTb6f5c6To8=) 2: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: XWLcVbOKT7e4tGOD81y3Tket2A4XH980LzP5V6xkXxg=) 3: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl (hash: PrageaHVSeRDlaZqfD9Q+l5H/R93tcqPC4jBICTWnb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 14:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:8e:82:db:d6:e6:4a:92:68:f3:cf:70:a8:89:47:bd:63:5e:2b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Validity Not Before: May 19 14:26:00 2024 GMT Not After : May 22 14:44:00 2024 GMT Subject: CN=DF065677B64A821A2BC7444B44B1F56FADB11199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:c8:5d:62:e8:94:3b:05:61:5a:bf:99:f5: b8:8c:64:16:03:9c:c2:3f:5a:4f:3f:51:ef:63:d7: 18:d8:b3:ee:b4:18:48:e1:41:7e:8e:76:3f:34:6e: 7e:bd:2b:ee:4c:17:2c:d0:b4:0b:8a:d7:5f:bb:83: aa:33:b0:fe:1e:54:9f:30:07:45:3c:80:2e:3d:52: 0e:2a:08:ae:02:bd:a9:36:90:8d:25:cf:07:ea:dc: 7d:f2:90:23:d5:19:ca:34:56:3c:76:e2:e1:e0:b0: a8:8c:df:57:15:11:b9:02:83:06:d3:de:71:e6:22: 73:5e:d4:85:c6:b5:94:4f:33:6f:ac:f7:24:14:06: 7a:57:58:12:17:c9:96:c5:e4:1b:5b:b9:85:e9:6c: e9:6d:f3:e5:1c:b6:53:48:07:10:2e:44:61:ec:13: fd:a8:a1:89:1f:43:4c:86:66:46:a5:27:a0:ba:8f: 32:e6:41:a6:9a:65:60:d7:72:33:51:c4:2e:94:04: 46:69:e0:34:c6:3b:5d:9d:62:fe:9f:2b:3d:e2:2d: e4:d3:2a:66:62:d8:7d:c9:f5:2a:30:3f:f2:e9:01: f1:61:23:61:21:4e:ec:d9:6e:7b:b4:f6:63:0f:12: 70:cf:61:60:b7:79:b8:93:91:c6:58:86:7d:5e:76: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:06:56:77:B6:4A:82:1A:2B:C7:44:4B:44:B1:F5:6F:AD:B1:11:99 X509v3 Authority Key Identifier: keyid:7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:19:c3:34:8e:8d:6e:ce:26:f2:30:03:98:9a:9d:15:15:96: df:43:6b:94:50:b7:72:15:f9:4a:3f:75:c1:c9:4e:a4:20:e7: 47:67:33:73:bd:43:41:75:99:19:74:17:d5:d2:f6:ec:39:a3: 40:bf:13:f0:be:97:e5:cc:99:bd:ab:03:8c:02:dd:73:16:51: 0f:3b:92:74:4c:7d:30:08:6b:c8:69:cb:b0:e0:8d:0b:72:42: a2:7b:b7:b9:ea:fb:87:37:57:0b:86:f5:f4:80:91:cb:3e:8a: fb:55:9a:92:7a:c8:4e:b1:48:7f:49:a7:fe:99:6c:5b:0e:f8: 48:be:0b:d0:c1:fe:6d:5e:ec:ab:df:e9:67:95:15:7d:fe:86: 98:51:6a:a3:01:97:0e:ac:b6:b3:96:89:dd:61:bc:15:2e:1f: 6b:1e:c3:76:fb:aa:09:b2:6e:63:49:83:f3:4b:15:64:0e:9c: 55:7f:7b:27:47:89:a0:dc:b9:18:af:1c:bd:65:8b:fd:a7:68: 7e:f1:d0:cf:59:bb:e6:dd:7c:4b:22:cf:a7:60:cf:11:fb:7e: c1:76:1a:6e:08:3e:bd:e6:7a:33:01:f0:19:68:b3:34:ec:68: be:67:d6:d8:bf:9e:2a:ac:b7:b1:4b:7d:bc:00:64:52:8d:8e: c8:21:0b:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN46C29bmSpJo889wqIlHvWNeKx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkND RTBCNjI1NDAeFw0yNDA1MTkxNDI2MDBaFw0yNDA1MjIxNDQ0MDBaMDMxMTAvBgNV BAMTKERGMDY1Njc3QjY0QTgyMUEyQkM3NDQ0QjQ0QjFGNTZGQURCMTExOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ochdYuiUOwVhWr+Z9biMZBYD nMI/Wk8/Ue9j1xjYs+60GEjhQX6Odj80bn69K+5MFyzQtAuK11+7g6ozsP4eVJ8w B0U8gC49Ug4qCK4Cvak2kI0lzwfq3H3ykCPVGco0Vjx24uHgsKiM31cVEbkCgwbT 3nHmInNe1IXGtZRPM2+s9yQUBnpXWBIXyZbF5BtbuYXpbOlt8+UctlNIBxAuRGHs E/2ooYkfQ0yGZkalJ6C6jzLmQaaaZWDXcjNRxC6UBEZp4DTGO12dYv6fKz3iLeTT KmZi2H3J9SowP/LpAfFhI2EhTuzZbnu09mMPEnDPYWC3ebiTkcZYhn1edkQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3wZWd7ZKghorx0RLRLH1b62xEZkwHwYDVR0j BBgwFoAUfHpztn/8ZmS8zTCyATxU/M4LYlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGI1OTBlOC00Zjg5LTQ3ODUtYWU3OS0yYmZmZmEyYzUyYzkvMC83QzdBNzNCNjdG RkM2NjY0QkNDRDMwQjIwMTNDNTRGQ0NFMEI2MjU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkNDRTBC NjI1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBiNTkwZTgtNGY4OS00Nzg1LWFl NzktMmJmZmZhMmM1MmM5LzAvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0 RkNDRTBCNjI1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoZwzSOjW7OJvIwA5ianRUVlt9Da5RQt3IV +Uo/dcHJTqQg50dnM3O9Q0F1mRl0F9XS9uw5o0C/E/C+l+XMmb2rA4wC3XMWUQ87 knRMfTAIa8hpy7DgjQtyQqJ7t7nq+4c3VwuG9fSAkcs+ivtVmpJ6yE6xSH9Jp/6Z bFsO+Ei+C9DB/m1e7Kvf6WeVFX3+hphRaqMBlw6strOWid1hvBUuH2sew3b7qgmy bmNJg/NLFWQOnFV/eydHiaDcuRivHL1li/2naH7x0M9Zu+bdfEsiz6dgzxH7fsF2 Gm4IPr3mejMB8BloszTsaL5n1ti/niqst7FLfbwAZFKNjsghCxU= -----END CERTIFICATE-----Generated at Sun May 19 15:45:23 2024 by rpki-client on console-fra.rpki-client.org