$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft File: 73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft (raw, json) Hash identifier: OVfbi+NAxT2vGd8Yj1tTuNgkXfymObJT7vxSvyxP4Kg= Subject key identifier: 70:7B:28:E2:2E:C2:31:69:8A:9C:7F:2D:0A:32:02:B1:66:D0:4E:A3 Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Certificate serial: 7163DEA3195404B960E4B97FF178AFB594F655E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft Manifest number: 018E Signing time: Fri 17 May 2024 18:10:36 +0000 Manifest this update: Fri 17 May 2024 18:05:36 +0000 Manifest next update: Mon 20 May 2024 18:37:36 +0000 Files and hashes: 1: 3130332e36382e332e302f32342d3234203d3e20313335343539.roa (hash: Q4INmFgyHV2q/3eme/9wh097anFX2uLA1TkwYOMJUg4=) 2: 3130332e36382e322e302f32342d3234203d3e20313335343539.roa (hash: yqu1fYLh6u40LyT+HMvbGElSVzlBAZ51DM/4sy12htY=) 3: 3130332e36382e312e302f32342d3234203d3e20313335343539.roa (hash: oavRM2VcqOxwRCcHwvTdFnkCi7RKIItx+cJ+ThWsudo=) 4: 73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl (hash: WnIJeGDH0eaY3FH44fzWwLAXrmS47EKy7sCysq61Zm8=) 5: 3130332e36382e302e302f32322d3232203d3e20313335343539.roa (hash: oFZC2kRBkSHJSAAhUHwtuUOn8BkeHg/lZamkhCDyHAg=) 6: 3130332e36382e302e302f32332d3233203d3e20313335343539.roa (hash: V4qvx0NtNgVfF/lQGdNGi33YiX4i6WzXluSo+ohjrYk=) 7: 3130332e36382e322e302f32332d3233203d3e20313335343539.roa (hash: nWnAz+7ISlhcPUbApyc3PU0NM5FJOyBwmXMZVYfi4TI=) 8: 3130332e36382e302e302f32342d3234203d3e20313335343539.roa (hash: vxlEJFvZvDoRM080i+O8CmpTZ9hlhVOzU2+GIkx+jjI=) 9: 323430353a646238303a3a2f33322d3332203d3e20313335343539.roa (hash: 07KbQyBFEN3RAmCwM+FH7kMFe6/cXxEw8SNoCxQvu6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 18:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:63:de:a3:19:54:04:b9:60:e4:b9:7f:f1:78:af:b5:94:f6:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Validity Not Before: May 17 18:05:36 2024 GMT Not After : May 20 18:37:36 2024 GMT Subject: CN=707B28E22EC231698A9C7F2D0A3202B166D04EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:28:21:fc:6a:20:43:d2:71:d7:e9:65:1e: 55:71:81:d3:ba:57:bd:0a:49:24:bc:ac:58:9b:45: 78:e7:3e:0b:b1:71:41:cd:17:91:4e:49:23:e9:39: 14:7a:69:94:37:0b:16:be:cb:31:53:d5:a2:91:50: aa:e3:63:e9:d6:d4:0f:24:ee:c8:b3:84:fa:80:6f: f2:6a:27:69:87:5d:b3:48:bd:90:c4:2c:8c:7c:26: 15:88:18:7a:90:b3:70:85:0a:17:62:58:5d:e2:ed: e0:24:92:2e:95:33:92:4d:82:56:5b:7c:66:84:bd: ad:a7:a9:0f:77:1f:65:98:bd:01:17:5d:60:7c:48: 24:2c:8a:b4:6b:63:77:23:fa:2f:e2:fc:31:ef:9f: 6a:7f:72:9d:a2:88:7f:55:ab:78:8a:17:01:c3:dc: 43:8a:06:f1:ae:62:bd:99:95:a0:dc:3b:16:26:ca: a1:b8:8c:6c:65:99:1c:72:73:1e:14:d0:11:5a:f5: f7:56:51:a0:47:56:74:60:57:1a:0e:fc:b5:0b:2a: 33:87:06:58:89:f3:75:8d:b0:e7:a0:a1:d6:7e:f0: d7:09:ed:f5:88:11:e3:c1:89:f8:0a:56:b5:cd:7d: b1:67:fb:0f:3f:66:98:e5:8e:14:46:4f:91:98:d9: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7B:28:E2:2E:C2:31:69:8A:9C:7F:2D:0A:32:02:B1:66:D0:4E:A3 X509v3 Authority Key Identifier: keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:5c:b0:b5:7b:ab:03:9f:be:95:8b:56:f6:75:d1:00:71:b3: 77:73:70:5d:76:4f:b4:c4:63:4a:25:47:a2:cf:29:93:d2:5c: c8:cb:bb:55:f3:16:2e:d4:2b:a8:ed:47:75:a9:6e:40:28:db: f6:36:aa:1b:40:3d:b3:d9:53:02:57:e4:11:2c:ee:c2:e2:0d: ce:be:f8:8d:43:eb:18:f1:b5:e2:33:4e:e6:90:55:28:ca:eb: 36:cc:52:db:33:4c:db:3e:de:fa:aa:87:0f:0b:6c:b6:8f:e9: 56:ca:8f:f3:7b:3b:53:9f:b2:1a:04:37:18:04:25:2d:ea:df: 48:b9:74:6e:23:6f:91:7d:04:b2:a1:af:57:f7:8d:39:d4:10: 91:6f:33:9e:fa:1d:aa:f8:ff:c6:70:8d:8d:51:d1:c3:a0:0d: 61:52:4a:ad:40:68:4a:9d:c0:33:aa:82:f6:91:f0:0c:3a:a2: dd:79:51:ed:ee:e9:81:1a:83:b0:ce:02:f8:62:49:73:97:19: ee:b1:26:a7:98:fb:5c:99:3d:76:96:70:77:60:90:5e:ee:b8: 24:7a:e3:4a:42:01:bc:c0:e6:d5:d6:4a:64:d2:1d:e5:b8:9a: cc:50:00:08:06:07:95:a5:f2:c4:eb:d8:16:e3:3d:a9:92:8e: a4:4d:f8:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWPeoxlUBLlg5Ll/8XivtZT2VeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw RTMxMDQ0ODAeFw0yNDA1MTcxODA1MzZaFw0yNDA1MjAxODM3MzZaMDMxMTAvBgNV BAMTKDcwN0IyOEUyMkVDMjMxNjk4QTlDN0YyRDBBMzIwMkIxNjZEMDRFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60ygh/GogQ9Jx1+llHlVxgdO6 V70KSSS8rFibRXjnPguxcUHNF5FOSSPpORR6aZQ3Cxa+yzFT1aKRUKrjY+nW1A8k 7sizhPqAb/JqJ2mHXbNIvZDELIx8JhWIGHqQs3CFChdiWF3i7eAkki6VM5JNglZb fGaEva2nqQ93H2WYvQEXXWB8SCQsirRrY3cj+i/i/DHvn2p/cp2iiH9Vq3iKFwHD 3EOKBvGuYr2ZlaDcOxYmyqG4jGxlmRxycx4U0BFa9fdWUaBHVnRgVxoO/LULKjOH BliJ83WNsOegodZ+8NcJ7fWIEePBifgKVrXNfbFn+w8/ZpjljhRGT5GY2fx3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcHso4i7CMWmKnH8tCjICsWbQTqMwHwYDVR0j BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx MDQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5N2RiYzYtOTM3NC00MmUyLWEz ZDAtODc5ZWQ2YTE5MTk2LzAvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRC NUEwRTMxMDQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJcsLV7qwOfvpWLVvZ10QBxs3dzcF12T7TE Y0olR6LPKZPSXMjLu1XzFi7UK6jtR3WpbkAo2/Y2qhtAPbPZUwJX5BEs7sLiDc6+ +I1D6xjxteIzTuaQVSjK6zbMUtszTNs+3vqqhw8LbLaP6VbKj/N7O1OfshoENxgE JS3q30i5dG4jb5F9BLKhr1f3jTnUEJFvM576Har4/8ZwjY1R0cOgDWFSSq1AaEqd wDOqgvaR8Aw6ot15Ue3u6YEag7DOAvhiSXOXGe6xJqeY+1yZPXaWcHdgkF7uuCR6 40pCAbzA5tXWSmTSHeW4msxQAAgGB5Wl8sTr2BbjPamSjqRN+Go= -----END CERTIFICATE-----Generated at Fri May 17 20:09:44 2024 by rpki-client on console-fra.rpki-client.org