$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft File: 651790FFFC1688AFA384D136FC4792AD18879019.mft (raw, json) Hash identifier: w7OrAmltfDbsLoLMtNgKRJTYbqaKoPSEKRKFl17K6ZQ= Subject key identifier: D9:F1:C1:7A:F5:30:73:FD:49:9B:14:8C:0B:98:60:82:44:84:61:32 Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 Certificate issuer: /CN=651790FFFC1688AFA384D136FC4792AD18879019 Certificate serial: 5652DEBA1FE97ABE8FD64456D916E65D77B88E1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft Manifest number: 042F Signing time: Sun 19 May 2024 16:11:53 +0000 Manifest this update: Sun 19 May 2024 16:06:53 +0000 Manifest next update: Wed 22 May 2024 17:24:53 +0000 Files and hashes: 1: 323430323a353538303a3a2f33322d3438203d3e20313333383137.roa (hash: JaoTKzjqoKCQAIT7iC/1JB+GYyX2yEStr1WhrRtgqIg=) 2: 3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (hash: RqVG/+fevGlzeGifywjaerpBfQu8ZmqLalIOCMIkhYI=) 3: 651790FFFC1688AFA384D136FC4792AD18879019.crl (hash: jtP/0gaTeHl5Qrimj5kPEyxyqvluhjSZb4r4GfiyfqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 17:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:52:de:ba:1f:e9:7a:be:8f:d6:44:56:d9:16:e6:5d:77:b8:8e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019 Validity Not Before: May 19 16:06:53 2024 GMT Not After : May 22 17:24:53 2024 GMT Subject: CN=D9F1C17AF53073FD499B148C0B98608244846132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:87:1b:be:ae:36:e3:8c:9f:33:2b:d5:23:87: 62:a1:d2:d1:cc:1e:ef:84:4d:b8:a8:d1:0b:9c:a6: e6:95:a5:14:a6:0d:ab:32:c3:46:83:97:03:51:70: 20:c9:5d:18:c8:c0:90:ee:86:ca:3a:2d:bb:fe:9a: a1:8f:13:12:92:b5:e9:3b:91:8f:78:63:f4:04:de: 0b:e9:b0:c3:e2:11:4c:5d:d6:76:0a:ec:f2:88:2a: 23:85:2b:4b:1a:d7:0c:78:30:96:69:f5:f9:17:6e: dd:dd:d0:61:fc:00:9e:15:81:eb:e7:cb:f0:29:3a: 6e:1b:af:04:20:a3:69:0e:ee:ae:18:78:98:16:56: 46:88:0c:a9:d0:07:74:44:92:53:2c:38:a6:18:08: 21:b0:a7:51:1f:5f:49:d4:11:06:ba:a8:27:85:80: bb:b9:a3:02:3a:5f:42:31:96:82:16:21:20:64:55: 65:d8:f2:f6:8f:8b:68:79:9d:f9:9a:02:8f:f4:56: 16:09:17:3e:35:9b:3f:54:fd:83:7d:20:b8:c2:53: a2:dc:b0:ca:88:0a:9d:2c:4b:58:c3:63:86:45:51: ac:4e:52:de:9d:67:cb:fc:74:a9:b5:34:42:1e:b2: e3:12:9e:92:a2:81:1e:e3:9c:c0:66:18:1e:d6:4c: a4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F1:C1:7A:F5:30:73:FD:49:9B:14:8C:0B:98:60:82:44:84:61:32 X509v3 Authority Key Identifier: keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4c:49:8f:ab:89:d8:ec:e3:df:ba:10:59:3e:76:12:91:1d: 6e:fd:53:33:c8:06:0d:64:d3:68:c3:13:4d:81:25:46:34:ab: 6c:78:b3:49:33:57:5f:4c:74:17:ea:37:21:dd:b2:57:f4:67: ed:14:23:dd:18:eb:95:5d:75:bf:2e:55:ba:74:b0:b6:53:d1: 39:fa:4f:0d:86:33:0d:36:77:ad:9d:8f:3e:70:e9:fa:ea:15: 7f:e5:dd:79:56:6d:d1:33:60:e3:a2:ea:94:80:ea:f7:86:d7: 63:9b:0f:9d:6a:1e:33:15:5b:3b:d8:86:90:51:c3:38:72:81: 6e:9d:48:a0:89:a8:81:fd:05:3a:ff:06:21:46:b1:67:f5:d8: 3e:bc:0d:44:70:d1:8e:91:0d:69:3f:66:6a:60:97:47:79:71: 48:ec:6e:4f:7e:af:25:d6:89:58:d4:f1:8c:ef:e7:e1:0d:3c: 4b:5f:ff:0f:aa:86:dd:7f:d0:32:4a:79:f7:ff:be:56:c0:3c: 1c:08:6a:13:47:2e:ba:14:8c:8c:bb:64:d5:89:44:2e:dd:27: 3f:8f:bf:e1:12:87:70:ce:f6:c9:2a:5f:d6:41:b6:ca:63:b3: c9:b0:d5:ba:b8:e7:22:0d:3c:92:3e:24:72:d5:77:61:18:50: b5:a1:95:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlLeuh/per6P1kRW2RbmXXe4jhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQx ODg3OTAxOTAeFw0yNDA1MTkxNjA2NTNaFw0yNDA1MjIxNzI0NTNaMDMxMTAvBgNV BAMTKEQ5RjFDMTdBRjUzMDczRkQ0OTlCMTQ4QzBCOTg2MDgyNDQ4NDYxMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuhxu+rjbjjJ8zK9Ujh2Kh0tHM Hu+ETbio0QucpuaVpRSmDasyw0aDlwNRcCDJXRjIwJDuhso6Lbv+mqGPExKStek7 kY94Y/QE3gvpsMPiEUxd1nYK7PKIKiOFK0sa1wx4MJZp9fkXbt3d0GH8AJ4Vgevn y/ApOm4brwQgo2kO7q4YeJgWVkaIDKnQB3REklMsOKYYCCGwp1EfX0nUEQa6qCeF gLu5owI6X0IxloIWISBkVWXY8vaPi2h5nfmaAo/0VhYJFz41mz9U/YN9ILjCU6Lc sMqICp0sS1jDY4ZFUaxOUt6dZ8v8dKm1NEIesuMSnpKigR7jnMBmGB7WTKRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2fHBevUwc/1JmxSMC5hggkSEYTIwHwYDVR0j BBgwFoAUZReQ//wWiK+jhNE2/EeSrRiHkBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmY3ZWYzNC00OTkxLTRiYjEtOTZiNC1iZTQzZjFlY2FiYjQvMC82NTE3OTBGRkZD MTY4OEFGQTM4NEQxMzZGQzQ3OTJBRDE4ODc5MDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0NzkyQUQxODg3 OTAxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZmN2VmMzQtNDk5MS00YmIxLTk2 YjQtYmU0M2YxZWNhYmI0LzAvNjUxNzkwRkZGQzE2ODhBRkEzODREMTM2RkM0Nzky QUQxODg3OTAxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5MSY+ridjs49+6EFk+dhKRHW79UzPIBg1k 02jDE02BJUY0q2x4s0kzV19MdBfqNyHdslf0Z+0UI90Y65Vddb8uVbp0sLZT0Tn6 Tw2GMw02d62djz5w6frqFX/l3XlWbdEzYOOi6pSA6veG12ObD51qHjMVWzvYhpBR wzhygW6dSKCJqIH9BTr/BiFGsWf12D68DURw0Y6RDWk/Zmpgl0d5cUjsbk9+ryXW iVjU8Yzv5+ENPEtf/w+qht1/0DJKeff/vlbAPBwIahNHLroUjIy7ZNWJRC7dJz+P v+ESh3DO9skqX9ZBtspjs8mw1bq45yINPJI+JHLVd2EYULWhlVU= -----END CERTIFICATE-----Generated at Sun May 19 16:36:51 2024 by rpki-client on console-fra.rpki-client.org