$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft File: EC39D766063B56E5EA4DBFB2A502298FB995956A.mft (raw, json) Hash identifier: pTbW90cLwlFfDasM2VxdKd/BcsZVSUfyxx4PS4g9jJ4= Subject key identifier: 40:6C:AE:CD:1D:DC:6A:44:1F:15:00:A4:52:48:27:05:9A:DD:B1:6B Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A Certificate issuer: /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Certificate serial: 297453425AEA9F189383667A6AEA0A40BB52C003 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft Manifest number: 0431 Signing time: Sun 19 May 2024 06:10:31 +0000 Manifest this update: Sun 19 May 2024 06:05:31 +0000 Manifest next update: Wed 22 May 2024 09:33:31 +0000 Files and hashes: 1: EC39D766063B56E5EA4DBFB2A502298FB995956A.crl (hash: ZqwDwOHmt0aOKnXGODmn6HcvT/Anmh2UEnYKomNOCdg=) 2: 3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (hash: dGC3Ba7gDg44WGmhoadcVrdZFepIk5RYXaxJNW0mdRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:74:53:42:5a:ea:9f:18:93:83:66:7a:6a:ea:0a:40:bb:52:c0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A Validity Not Before: May 19 06:05:31 2024 GMT Not After : May 22 09:33:31 2024 GMT Subject: CN=406CAECD1DDC6A441F1500A4524827059ADDB16B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:7d:4b:b7:c9:16:1b:5b:88:72:07:f8:29: 35:2a:3a:ff:67:44:28:fa:92:1d:13:c2:33:3f:0a: b2:df:c4:7d:76:40:19:04:e8:ad:52:44:e6:0e:9d: 5e:f5:52:f0:c4:ec:a4:3d:cc:cd:76:ad:50:25:cb: 80:8a:24:c2:8f:ee:28:b5:2a:d2:0b:a8:e5:9c:b3: 08:90:e7:65:fc:b0:ba:cd:66:8a:99:44:c0:14:14: 19:0a:a8:7e:d3:61:63:03:2f:73:47:8f:d7:ae:85: 85:67:d7:33:7d:bd:89:b6:ba:e0:e7:4f:1f:39:d6: be:13:b3:32:e8:07:12:bf:f3:8c:63:0f:0a:9c:59: 0e:70:72:ca:b7:7d:5a:4d:31:00:b4:35:71:b1:d7: 59:bb:ee:c1:c8:3d:87:c2:fa:18:8f:de:8b:35:19: 9c:ff:d7:d6:14:c8:c6:8b:0e:06:0e:fa:88:9b:da: 3b:c8:a8:8e:f1:a8:a2:6c:03:50:b6:cd:85:9f:bc: 28:f2:92:e2:4b:9b:78:28:b8:32:e6:92:1c:97:72: ef:d5:08:68:68:0c:3b:b4:85:ac:a9:48:80:59:53: ad:e9:4e:5b:7b:48:1d:93:e0:11:7e:4e:6f:ca:38: c6:2c:bf:fe:7e:32:21:0f:df:b8:ea:5f:1a:64:52: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6C:AE:CD:1D:DC:6A:44:1F:15:00:A4:52:48:27:05:9A:DD:B1:6B X509v3 Authority Key Identifier: keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:af:ad:ba:3c:a1:da:c3:ac:40:10:16:9f:c3:ba:69:fb:82: a0:96:cd:1e:ea:b8:55:a0:0b:54:28:74:2d:67:92:9d:3a:56: 81:97:c4:2c:1b:b2:45:17:8d:36:97:24:65:19:a5:99:cf:01: ca:d6:45:54:60:cb:60:e1:89:8c:bd:fd:16:86:2f:c4:94:e6: d0:0b:fa:42:f1:e9:2e:19:b0:ba:cc:8e:4a:1c:df:89:c7:74: c6:37:ae:2a:98:cf:61:eb:03:0b:cb:c9:14:e3:6b:7c:f9:dc: b7:c8:06:39:0b:f3:42:b4:18:49:3f:3d:d9:66:2d:c1:f4:a1: 39:43:cb:3b:6c:2e:cb:5e:2b:f3:0b:e8:dc:a7:d2:f9:cc:01: 35:52:c6:d8:6b:e6:33:72:eb:0c:76:5c:2c:b6:f2:e1:0a:2a: b7:d8:e3:22:d5:84:ca:4e:a5:53:30:d1:07:71:27:6c:7b:75: df:21:de:d7:da:a2:fd:44:45:c3:12:9d:e0:aa:77:8a:18:44: b3:25:49:d8:d5:2e:63:58:7c:f9:cd:42:f0:13:f8:0f:57:e9: b0:25:a2:2e:9e:4d:d5:62:fb:5f:33:6d:76:f8:a7:eb:cc:96: e6:04:85:5c:89:e6:6a:d8:48:ba:90:fa:12:63:b9:27:76:ec: 9c:92:75:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKXRTQlrqnxiTg2Z6auoKQLtSwAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZC OTk1OTU2QTAeFw0yNDA1MTkwNjA1MzFaFw0yNDA1MjIwOTMzMzFaMDMxMTAvBgNV BAMTKDQwNkNBRUNEMUREQzZBNDQxRjE1MDBBNDUyNDgyNzA1OUFEREIxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzH1Lt8kWG1uIcgf4KTUqOv9n RCj6kh0TwjM/CrLfxH12QBkE6K1SROYOnV71UvDE7KQ9zM12rVAly4CKJMKP7ii1 KtILqOWcswiQ52X8sLrNZoqZRMAUFBkKqH7TYWMDL3NHj9euhYVn1zN9vYm2uuDn Tx851r4TszLoBxK/84xjDwqcWQ5wcsq3fVpNMQC0NXGx11m77sHIPYfC+hiP3os1 GZz/19YUyMaLDgYO+oib2jvIqI7xqKJsA1C2zYWfvCjykuJLm3gouDLmkhyXcu/V CGhoDDu0haypSIBZU63pTlt7SB2T4BF+Tm/KOMYsv/5+MiEP37jqXxpkUmz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQGyuzR3cakQfFQCkUkgnBZrdsWswHwYDVR0j BBgwFoAU7DnXZgY7VuXqTb+ypQIpj7mVlWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2ZlNDI1NS0xZDkxLTRmY2MtYmNlNC04YTQyYWRmZTNjMjkvMC9FQzM5RDc2NjA2 M0I1NkU1RUE0REJGQjJBNTAyMjk4RkI5OTU5NTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5OEZCOTk1 OTU2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmZTQyNTUtMWQ5MS00ZmNjLWJj ZTQtOGE0MmFkZmUzYzI5LzAvRUMzOUQ3NjYwNjNCNTZFNUVBNERCRkIyQTUwMjI5 OEZCOTk1OTU2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2vrbo8odrDrEAQFp/Dumn7gqCWzR7quFWg C1QodC1nkp06VoGXxCwbskUXjTaXJGUZpZnPAcrWRVRgy2DhiYy9/RaGL8SU5tAL +kLx6S4ZsLrMjkoc34nHdMY3riqYz2HrAwvLyRTja3z53LfIBjkL80K0GEk/Pdlm LcH0oTlDyztsLsteK/ML6Nyn0vnMATVSxthr5jNy6wx2XCy28uEKKrfY4yLVhMpO pVMw0QdxJ2x7dd8h3tfaov1ERcMSneCqd4oYRLMlSdjVLmNYfPnNQvAT+A9X6bAl oi6eTdVi+18zbXb4p+vMluYEhVyJ5mrYSLqQ+hJjuSd27JySdUY= -----END CERTIFICATE-----Generated at Sun May 19 07:40:10 2024 by rpki-client on console-fra.rpki-client.org