$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft File: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft (raw, json) Hash identifier: FfJozFSQLlbuSPI93L7FmOhK+azYnNkZGLDCZOV71Ok= Subject key identifier: 45:8E:94:AF:46:9A:87:58:FD:63:C4:DD:4E:E8:6E:E7:C2:44:90:B7 Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Certificate serial: 33D454BA3B44B903F493D748D4896672A81E139C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft Manifest number: 0406 Signing time: Sat 18 May 2024 07:30:43 +0000 Manifest this update: Sat 18 May 2024 07:25:43 +0000 Manifest next update: Tue 21 May 2024 18:18:43 +0000 Files and hashes: 1: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl (hash: QhJ6xojpZQCNcu3eBxlq5DeaXdwifv3QYvnySqBSqfo=) 2: 3130332e3134372e3235342e302f32342d3234203d3e20313339393736.roa (hash: QXUf4jimu/UouQXFzQTpPBFNrJAhvzQibNJ+kg9ZnEA=) 3: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: MeSDcFZdl8fC3ANtpyfVe+4fTCeiEvl3iCuAR+/cGVU=) 4: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: ZdLf1dnxJ+PJuHFv8WPC1d5ErmC4m7AKFOUO+qf5vLQ=) 5: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: +5b87/sHiUCTHgVCk7RaEplhbAWsAXFtn4Y+TEcap/U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d4:54:ba:3b:44:b9:03:f4:93:d7:48:d4:89:66:72:a8:1e:13:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Validity Not Before: May 18 07:25:43 2024 GMT Not After : May 21 18:18:43 2024 GMT Subject: CN=458E94AF469A8758FD63C4DD4EE86EE7C24490B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:f9:d1:69:be:72:e7:53:41:c6:69:42:d9: 57:ec:be:8f:5c:cc:da:9e:2e:ac:69:e1:30:00:b8: 1b:0b:fb:f8:72:75:72:5b:7e:77:8d:74:7e:d5:7a: c7:42:37:6e:67:3e:9a:5b:9a:11:87:ea:e9:21:9d: ea:c4:41:b0:8c:fa:2a:db:06:78:64:db:d8:df:1d: 10:38:5c:d7:64:58:de:10:6f:b4:27:53:83:21:b0: 00:f5:2a:27:f4:7c:91:bb:92:22:cd:20:48:c7:96: bf:d5:9c:49:ef:be:c2:f2:54:3b:7f:9b:c0:df:bb: b1:4d:fe:0d:71:ff:08:d1:31:e7:3b:34:9e:ca:c8: 07:db:48:4f:fe:e5:50:86:4c:3e:7a:b2:6d:86:f6: c7:d0:0a:2d:52:ba:9f:47:16:ac:94:a8:15:30:10: 4a:25:95:ab:39:1b:06:01:74:8d:c5:f0:89:ed:24: f5:9c:36:8e:5e:f0:3b:2e:41:cd:d7:30:f2:8b:29: e5:4f:a9:3e:2e:3c:c0:13:8e:e5:eb:c5:d4:a7:2e: 1f:e6:da:e7:2a:63:5f:42:f5:de:cb:71:65:4a:27: c6:ff:fb:6f:c6:68:18:80:9a:13:e6:8c:ab:3c:58: 8c:fa:72:1a:c2:3b:12:c2:52:83:b4:36:e6:06:76: 3c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8E:94:AF:46:9A:87:58:FD:63:C4:DD:4E:E8:6E:E7:C2:44:90:B7 X509v3 Authority Key Identifier: keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:be:fa:cd:07:a0:51:23:c2:94:8a:47:95:33:39:d0:d2:55: 0b:b3:06:5a:d9:75:85:3b:7b:62:b1:42:93:23:d2:2e:e1:35: 0a:76:4d:72:47:cb:a6:62:6e:08:89:d4:f8:e8:75:ab:46:0c: 0a:13:6e:a4:43:f6:a6:3b:95:6e:d8:9e:60:7d:1c:75:82:f5: 48:55:5f:af:54:21:a6:1b:ac:52:35:cb:19:cb:cd:c4:1d:b4: 68:ca:23:70:43:ac:6f:48:97:20:73:7e:7b:4c:40:ac:b8:78: f3:2c:a4:75:93:b9:d1:95:55:31:aa:5d:e3:ec:eb:99:c2:39: 2e:9e:95:0b:4a:26:9a:54:80:cc:bf:a7:88:f3:ef:be:57:57: 4a:d8:4a:bc:15:60:5f:56:c0:30:90:ef:1c:be:34:5d:be:4a: e6:d4:59:5f:b8:fd:ff:c6:d0:a6:a8:91:65:d3:1e:a2:42:7a: 00:2f:f7:25:87:88:a6:04:e3:64:22:b7:ff:ff:83:a2:45:a0: fd:64:9f:e3:15:0a:e7:bc:86:55:c1:45:0e:73:e9:ef:79:1c: 01:0a:49:21:82:75:76:df:74:99:54:f8:49:81:bf:43:21:d6: 74:3d:7d:be:8f:af:4a:18:f7:f5:64:30:c7:64:88:9b:0f:86: 2e:0d:dc:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM9RUujtEuQP0k9dI1IlmcqgeE5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3 QzRDOEUwRDAeFw0yNDA1MTgwNzI1NDNaFw0yNDA1MjExODE4NDNaMDMxMTAvBgNV BAMTKDQ1OEU5NEFGNDY5QTg3NThGRDYzQzRERDRFRTg2RUU3QzI0NDkwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW+fnRab5y51NBxmlC2Vfsvo9c zNqeLqxp4TAAuBsL+/hydXJbfneNdH7VesdCN25nPppbmhGH6ukhnerEQbCM+irb Bnhk29jfHRA4XNdkWN4Qb7QnU4MhsAD1Kif0fJG7kiLNIEjHlr/VnEnvvsLyVDt/ m8Dfu7FN/g1x/wjRMec7NJ7KyAfbSE/+5VCGTD56sm2G9sfQCi1Sup9HFqyUqBUw EEollas5GwYBdI3F8IntJPWcNo5e8DsuQc3XMPKLKeVPqT4uPMATjuXrxdSnLh/m 2ucqY19C9d7LcWVKJ8b/+2/GaBiAmhPmjKs8WIz6chrCOxLCUoO0NuYGdjypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURY6Ur0aah1j9Y8TdTuhu58JEkLcwHwYDVR0j BBgwFoAUpsexyguQiFXuWPGZHMyVtXxMjg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMC9BNkM3QjFDQTBC OTA4ODU1RUU1OEYxOTkxQ0NDOTVCNTdDNEM4RTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1QjU3QzRD OEUwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQTZDN0IxQ0EwQjkwODg1NUVFNThGMTk5MUNDQzk1 QjU3QzRDOEUwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHe++s0HoFEjwpSKR5UzOdDSVQuzBlrZdYU7 e2KxQpMj0i7hNQp2TXJHy6ZibgiJ1PjodatGDAoTbqRD9qY7lW7YnmB9HHWC9UhV X69UIaYbrFI1yxnLzcQdtGjKI3BDrG9IlyBzfntMQKy4ePMspHWTudGVVTGqXePs 65nCOS6elQtKJppUgMy/p4jz775XV0rYSrwVYF9WwDCQ7xy+NF2+SubUWV+4/f/G 0KaokWXTHqJCegAv9yWHiKYE42Qit///g6JFoP1kn+MVCue8hlXBRQ5z6e95HAEK SSGCdXbfdJlU+EmBv0Mh1nQ9fb6Pr0oY9/VkMMdkiJsPhi4N3LI= -----END CERTIFICATE-----Generated at Sat May 18 08:05:07 2024 by rpki-client on console-fra.rpki-client.org