$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft File: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft (raw, json) Hash identifier: gN4unL9RLd7D60G9HVcpfPMA7OxIbqHH+yOq39HuWhU= Subject key identifier: 90:AB:92:E0:65:C7:C7:1A:EC:4F:18:A7:1B:E6:A2:A3:14:D3:48:C1 Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 Certificate issuer: /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Certificate serial: 42ADD23A96D1B3D8973828579B4C84DC29A69B2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft Manifest number: 0434 Signing time: Thu 30 May 2024 19:30:47 +0000 Manifest this update: Thu 30 May 2024 19:25:47 +0000 Manifest next update: Mon 03 Jun 2024 06:28:47 +0000 Files and hashes: 1: 3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (hash: fC2bvvgG5U8l9Q1vc64tvgrtZi8gDm8M2g3GDgMJRHU=) 2: 3131332e3231322e3131322e302f32302d3234203d3e203435323934.roa (hash: vxAbE3Z4RNfH5L/gObLVt0SzUBLfgfnlTBMQ/1us3yQ=) 3: 323430343a366430303a3a2f33322d3438203d3e203435323934.roa (hash: GcMxg6xZkPR1IE7FNUxD1NSvXsbtKpnO0cHQMV5lHhk=) 4: 34352e36342e3235322e302f32322d3234203d3e203435323934.roa (hash: rzzkjrzBOgPLCUMIXG1jRO3g85W7N9wigfnt0HhwNa4=) 5: 662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl (hash: FqjGeqr7sKV6V1pDdddL61bHs5uJCFlxrwU21GrY9ks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 00:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ad:d2:3a:96:d1:b3:d8:97:38:28:57:9b:4c:84:dc:29:a6:9b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2 Validity Not Before: May 30 19:25:47 2024 GMT Not After : Jun 3 06:28:47 2024 GMT Subject: CN=90AB92E065C7C71AEC4F18A71BE6A2A314D348C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:c7:76:16:f1:53:d0:69:0d:02:a7:3e:f5: 40:48:9c:27:19:eb:3a:78:15:21:e8:7e:bd:35:c5: 01:fe:35:89:98:c6:f9:5a:1e:e2:42:b5:02:e3:f3: d9:68:c3:7a:7c:7e:09:2c:44:e0:3f:a7:9e:72:b6: 55:1c:59:59:5e:b7:3a:0f:45:c2:89:82:60:8d:92: ce:dd:87:24:a2:12:31:b6:63:d4:e9:33:01:f5:8f: 45:6d:49:40:3b:15:c8:45:88:22:a4:be:09:09:3f: 0b:63:21:63:e7:cb:7e:26:4d:1c:d3:b4:e3:33:36: 24:04:ef:e5:2e:79:11:56:9b:a8:f5:b2:a0:a4:84: b0:4d:9c:c1:19:96:a4:b4:37:c1:fe:31:fc:2e:73: 96:05:07:5f:1f:b3:f5:6a:de:5c:ed:cb:66:1e:20: 4c:97:92:b6:32:f1:3b:ca:bf:e7:10:e6:af:71:86: db:7f:fb:0d:77:1e:39:d8:23:b8:34:9c:c7:7b:02: 1d:af:b5:18:b8:0e:30:dc:77:7d:a9:9d:89:65:79: f9:0a:37:a1:96:40:40:ec:d5:83:fe:62:9b:b5:91: 94:60:73:4b:eb:e5:62:f9:d4:fb:1a:06:af:cc:94: 74:4e:7a:fc:5c:f6:78:1c:c9:a9:08:31:06:71:a9: 14:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AB:92:E0:65:C7:C7:1A:EC:4F:18:A7:1B:E6:A2:A3:14:D3:48:C1 X509v3 Authority Key Identifier: keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:14:1e:23:db:f8:a3:5e:4d:4f:4b:9a:ad:c0:aa:32:1f:1b: 1a:97:49:65:bb:ae:de:e8:2a:e0:5b:7a:db:b2:43:ad:93:f2: 25:3d:5c:4f:f8:2b:b8:c8:51:cd:33:7d:a5:6a:89:de:97:2c: 6d:30:1a:16:40:21:b7:4e:09:44:17:d0:fb:96:ed:cf:e9:8b: e8:d5:ee:ed:a4:c7:f1:f8:57:34:b3:0e:89:ba:e0:a5:11:fb: a1:96:54:4e:0f:43:d7:fd:f1:79:59:5e:1a:52:40:1c:e0:a0: 54:4e:53:80:91:90:b7:bc:3f:58:8c:b2:45:8d:4b:50:52:0e: f8:e9:b0:b5:aa:54:f3:e6:16:4b:4a:35:14:36:75:f6:e9:a9: ba:b7:1d:96:3f:05:f1:84:fd:4b:60:a2:63:c2:d4:01:f2:3b: 46:97:02:a1:16:1a:87:cd:53:4e:c3:73:d4:6b:d2:7d:ac:d0: 8d:86:da:78:de:95:3d:d1:38:7f:dd:5f:b6:3b:0f:4a:85:f1: f1:4b:01:af:5b:1b:76:2b:37:3a:09:98:4d:69:57:10:4b:1c: b9:07:3a:80:eb:2e:de:15:36:13:0c:da:d6:36:65:89:86:70: af:f5:0b:17:72:e9:7b:1b:84:08:08:60:0b:d0:86:7a:ee:ea: 38:d5:42:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQq3SOpbRs9iXOChXm0yE3Cmmmy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVD NkU2MThFMjAeFw0yNDA1MzAxOTI1NDdaFw0yNDA2MDMwNjI4NDdaMDMxMTAvBgNV BAMTKDkwQUI5MkUwNjVDN0M3MUFFQzRGMThBNzFCRTZBMkEzMTREMzQ4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/18d2FvFT0GkNAqc+9UBInCcZ 6zp4FSHofr01xQH+NYmYxvlaHuJCtQLj89low3p8fgksROA/p55ytlUcWVletzoP RcKJgmCNks7dhySiEjG2Y9TpMwH1j0VtSUA7FchFiCKkvgkJPwtjIWPny34mTRzT tOMzNiQE7+UueRFWm6j1sqCkhLBNnMEZlqS0N8H+Mfwuc5YFB18fs/Vq3lzty2Ye IEyXkrYy8TvKv+cQ5q9xhtt/+w13HjnYI7g0nMd7Ah2vtRi4DjDcd32pnYllefkK N6GWQEDs1YP+Ypu1kZRgc0vr5WL51PsaBq/MlHROevxc9ngcyakIMQZxqRSbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkKuS4GXHxxrsTxinG+aioxTTSMEwHwYDVR0j BBgwFoAUZirVkw7FSkhJJUCfwunI1cbmGOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDgzMzA3NC0zMzBlLTRhYWEtOGMwMC0wNDA4OTBhNzFhMTEvMC82NjJBRDU5MzBF QzU0QTQ4NDkyNTQwOUZDMkU5QzhENUM2RTYxOEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4RDVDNkU2 MThFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ4MzMwNzQtMzMwZS00YWFhLThj MDAtMDQwODkwYTcxYTExLzAvNjYyQUQ1OTMwRUM1NEE0ODQ5MjU0MDlGQzJFOUM4 RDVDNkU2MThFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQUHiPb+KNeTU9Lmq3AqjIfGxqXSWW7rt7o KuBbetuyQ62T8iU9XE/4K7jIUc0zfaVqid6XLG0wGhZAIbdOCUQX0PuW7c/pi+jV 7u2kx/H4VzSzDom64KUR+6GWVE4PQ9f98XlZXhpSQBzgoFROU4CRkLe8P1iMskWN S1BSDvjpsLWqVPPmFktKNRQ2dfbpqbq3HZY/BfGE/UtgomPC1AHyO0aXAqEWGofN U07Dc9Rr0n2s0I2G2njelT3ROH/dX7Y7D0qF8fFLAa9bG3YrNzoJmE1pVxBLHLkH OoDrLt4VNhMM2tY2ZYmGcK/1Cxdy6XsbhAgIYAvQhnru6jjVQow= -----END CERTIFICATE-----Generated at Thu May 30 20:34:41 2024 by rpki-client on console-fra.rpki-client.org