$ rpki-client -vvf repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft File: 7701FBF4A9C9B559888F02656447A3AA1963811C.mft (raw, json) Hash identifier: o8vl21LlZextA54tcvXMlDDJblc9ND64fLRcZB17PDQ= Subject key identifier: E4:6B:60:E9:70:0E:16:81:D1:66:3B:6C:15:D6:E6:C4:9E:1B:D9:73 Authority key identifier: 77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C Certificate issuer: /CN=7701FBF4A9C9B559888F02656447A3AA1963811C Certificate serial: 72906D44E7DF99BDE18228F08430E5B5A242C0C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft Manifest number: 0109 Signing time: Wed 29 May 2024 19:41:05 +0000 Manifest this update: Wed 29 May 2024 19:36:05 +0000 Manifest next update: Sat 01 Jun 2024 23:07:05 +0000 Files and hashes: 1: 3130332e3230322e3232372e302f32342d3234203d3e20313334363335.roa (hash: umgAQ0PNaYBKrQbfESBNVdfbxADL2rLMdV7xeIm1Xl8=) 2: 3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (hash: z21WJ25QnX9BaWlmJu9Zi5rDyGZSz01Ad6v69ZQ2nao=) 3: 7701FBF4A9C9B559888F02656447A3AA1963811C.crl (hash: 84vVrrayyrbtgcb95gvcMU8gG0bB+9KXhfGvUyEAAso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.crl rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 23:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:90:6d:44:e7:df:99:bd:e1:82:28:f0:84:30:e5:b5:a2:42:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7701FBF4A9C9B559888F02656447A3AA1963811C Validity Not Before: May 29 19:36:05 2024 GMT Not After : Jun 1 23:07:05 2024 GMT Subject: CN=E46B60E9700E1681D1663B6C15D6E6C49E1BD973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d8:fb:77:a9:c8:ec:5b:29:c4:9e:1b:63:56: fc:f8:48:be:3c:d2:38:9a:91:43:89:34:21:37:aa: fd:38:63:9b:f0:9e:6e:d4:ab:e2:8d:83:d8:f8:72: 32:8a:25:01:68:1e:66:aa:3a:8b:a9:10:d7:ed:70: 83:9f:56:16:4a:bc:e6:de:af:62:f6:6b:b1:c7:3a: 1b:66:10:65:15:16:bf:7e:10:4d:f2:1a:69:14:1a: 3a:53:35:8a:37:86:1c:af:dc:96:f0:3f:fd:ff:ae: 72:34:ed:23:21:1a:b1:97:89:22:85:c7:17:8f:d8: e0:3c:28:aa:03:14:fb:5f:4e:2d:a7:a8:35:91:2b: 01:0f:9e:fe:5c:87:62:80:d7:d5:c2:0d:36:2d:c6: 5e:b6:d0:dd:b4:f9:ad:d9:98:93:c8:97:99:75:13: fc:de:70:10:48:37:85:ae:db:30:2d:81:df:94:a5: d6:71:c5:2d:00:4c:0f:a7:7c:5b:30:4c:a3:98:89: 2c:0c:d7:b6:b6:48:a7:86:2b:85:d9:b4:60:41:62: 35:15:f6:af:2a:b6:76:7a:5d:fa:3c:4f:a3:d0:ad: c8:2f:a7:a6:8d:a6:9a:97:10:63:a3:08:50:8d:c9: e9:29:b6:b1:91:20:30:bf:cc:bd:f1:ef:3d:ec:d8: 97:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6B:60:E9:70:0E:16:81:D1:66:3B:6C:15:D6:E6:C4:9E:1B:D9:73 X509v3 Authority Key Identifier: keyid:77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a8:9c:c3:02:38:ce:6f:3d:70:26:55:5e:5a:52:56:97:65: cf:87:d3:ee:55:ad:01:00:b0:82:fb:12:4c:b0:34:fa:48:e3: 65:8c:d8:ef:b4:6b:7c:95:57:60:1f:d2:f9:eb:aa:ca:d2:0b: 20:f6:81:c5:af:9a:c9:69:50:c9:b5:1b:38:58:6b:fe:18:8f: 56:33:b8:9f:f2:00:89:d3:b4:39:84:02:23:a6:ea:4e:9d:4d: 59:2d:49:7b:0d:c8:dd:b3:4f:ce:1b:70:bd:fd:63:43:59:86: 84:ed:06:d7:83:5b:2f:48:d8:8c:b2:cb:20:e4:34:aa:13:22: af:2d:33:73:72:3d:42:6f:08:a4:34:f1:a6:31:b0:c2:00:29: 6a:f8:3d:62:bd:0b:03:88:8e:1f:f1:65:e9:f7:1d:c1:26:08: d2:27:42:3a:65:09:45:31:dd:ba:0a:17:18:39:54:16:ba:e7: 2e:b5:ce:79:32:be:a6:2e:0d:0c:27:b1:a4:7e:df:52:de:b6: a8:0c:d7:43:d1:5a:a7:de:0a:d7:e4:90:52:64:6b:00:c0:a1: 05:e7:32:2d:13:a6:2b:a9:e7:fa:3c:94:fa:15:6c:09:5b:1f: 41:d0:93:7c:81:ab:18:0d:bd:22:6e:fd:aa:16:56:ab:7f:b1: 3a:a6:19:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcpBtROffmb3hgijwhDDltaJCwMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzcwMUZCRjRBOUM5QjU1OTg4OEYwMjY1NjQ0N0EzQUEx OTYzODExQzAeFw0yNDA1MjkxOTM2MDVaFw0yNDA2MDEyMzA3MDVaMDMxMTAvBgNV BAMTKEU0NkI2MEU5NzAwRTE2ODFEMTY2M0I2QzE1RDZFNkM0OUUxQkQ5NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/2Pt3qcjsWynEnhtjVvz4SL48 0jiakUOJNCE3qv04Y5vwnm7Uq+KNg9j4cjKKJQFoHmaqOoupENftcIOfVhZKvObe r2L2a7HHOhtmEGUVFr9+EE3yGmkUGjpTNYo3hhyv3JbwP/3/rnI07SMhGrGXiSKF xxeP2OA8KKoDFPtfTi2nqDWRKwEPnv5ch2KA19XCDTYtxl620N20+a3ZmJPIl5l1 E/zecBBIN4Wu2zAtgd+UpdZxxS0ATA+nfFswTKOYiSwM17a2SKeGK4XZtGBBYjUV 9q8qtnZ6Xfo8T6PQrcgvp6aNppqXEGOjCFCNyekptrGRIDC/zL3x7z3s2JdxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Gtg6XAOFoHRZjtsFdbmxJ4b2XMwHwYDVR0j BBgwFoAUdwH79KnJtVmIjwJlZEejqhljgRwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTMyYTc0MC1iZDdkLTQ2YjgtYjEwYS1hN2E3MDNlMzUwZjIvMC83NzAxRkJGNEE5 QzlCNTU5ODg4RjAyNjU2NDQ3QTNBQTE5NjM4MTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzcwMUZCRjRBOUM5QjU1OTg4OEYwMjY1NjQ0N0EzQUExOTYz ODExQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEzMmE3NDAtYmQ3ZC00NmI4LWIx MGEtYTdhNzAzZTM1MGYyLzAvNzcwMUZCRjRBOUM5QjU1OTg4OEYwMjY1NjQ0N0Ez QUExOTYzODExQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSonMMCOM5vPXAmVV5aUlaXZc+H0+5VrQEA sIL7EkywNPpI42WM2O+0a3yVV2Af0vnrqsrSCyD2gcWvmslpUMm1GzhYa/4Yj1Yz uJ/yAInTtDmEAiOm6k6dTVktSXsNyN2zT84bcL39Y0NZhoTtBteDWy9I2IyyyyDk NKoTIq8tM3NyPUJvCKQ08aYxsMIAKWr4PWK9CwOIjh/xZen3HcEmCNInQjplCUUx 3boKFxg5VBa65y61znkyvqYuDQwnsaR+31LetqgM10PRWqfeCtfkkFJkawDAoQXn Mi0Tpiup5/o8lPoVbAlbH0HQk3yBqxgNvSJu/aoWVqt/sTqmGQQ= -----END CERTIFICATE-----Generated at Wed May 29 20:52:41 2024 by rpki-client on console-fra.rpki-client.org