$ rpki-client -vvf repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft File: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft (raw, json) Hash identifier: uVXiGK6PbNmjYsx4jLEiQxdIezHaTH1vS6tGmLNtyCI= Subject key identifier: CC:E4:37:47:4A:F6:F1:97:22:6D:DE:7E:11:C0:CA:B1:D0:22:E7:4C Authority key identifier: 77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 Certificate issuer: /CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Certificate serial: 3FAE4B831CCFC19092120870727161BDF01F0951 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft Manifest number: 0158 Signing time: Fri 17 May 2024 23:01:32 +0000 Manifest this update: Fri 17 May 2024 22:56:32 +0000 Manifest next update: Tue 21 May 2024 08:00:32 +0000 Files and hashes: 1: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: 8BgGQFKQndoiET6mUnD+3KzPxt+C7HWtTI69H8u0uKU=) 2: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl (hash: +AU07CUdQ3C0/hXfjdV2getvpKNEJoqjrq1XcxWyKjA=) 3: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: 2/BO5q4FxJ0TtWaXRvmAYcsGvqXuzC7OVHrzQY+oShQ=) 4: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: wc8vaORuO6YGru+QYIoMg5FerWzrR5B/rJOP4jftbB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ae:4b:83:1c:cf:c1:90:92:12:08:70:72:71:61:bd:f0:1f:09:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Validity Not Before: May 17 22:56:32 2024 GMT Not After : May 21 08:00:32 2024 GMT Subject: CN=CCE437474AF6F197226DDE7E11C0CAB1D022E74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:f6:1e:51:01:cd:73:bf:20:6d:d3:6c:0d: 97:f9:1a:5e:66:1e:78:12:5d:c4:d6:85:2c:4b:fd: 92:44:72:8a:ee:d3:d8:53:6e:73:7a:e7:84:7e:db: bc:13:39:b1:ba:4b:ba:a4:61:47:65:20:76:bb:4e: 12:a6:84:16:3d:a6:c4:c1:cf:17:91:00:f7:83:21: f1:d0:03:ec:35:16:02:ea:9d:cf:b6:e9:24:2f:52: 08:79:fd:31:ee:8f:f5:fc:d3:51:b3:2b:db:26:87: ed:38:ba:ef:16:41:20:15:70:c1:0f:69:b1:e3:b8: d3:74:fd:55:cf:65:06:d6:c2:ef:46:e4:01:3a:92: 0c:06:e6:c4:7e:08:0f:c0:d1:b9:80:e2:a5:d6:42: 67:f5:42:22:a7:5f:a4:aa:40:3d:0a:54:04:46:2b: 59:44:fe:cb:31:58:95:a9:91:b7:e2:a9:8f:1a:41: fe:3a:c3:3f:30:b5:5a:d1:9e:1a:9f:46:02:d8:f9: fd:6b:11:06:5d:12:ab:86:4d:fe:0b:d9:65:98:69: 78:61:86:be:5a:29:79:72:db:73:64:49:68:be:1e: 38:59:c4:fc:b9:c1:e8:b1:64:2a:36:7d:17:f2:9c: e2:ac:ad:b6:ae:78:f3:6a:30:68:8c:0f:37:a8:bc: 49:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E4:37:47:4A:F6:F1:97:22:6D:DE:7E:11:C0:CA:B1:D0:22:E7:4C X509v3 Authority Key Identifier: keyid:77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ab:b4:e2:83:55:8e:cf:1f:cb:2f:20:f5:d6:0e:3c:cd:e2: 3d:30:a2:a3:b3:3d:92:df:ef:23:ae:ae:80:93:c3:b5:70:ce: bd:32:e5:da:44:96:e2:f4:ab:4a:78:28:07:7e:67:ea:fd:c7: 7f:91:3b:33:0e:18:b9:cf:12:cb:b5:29:48:0f:bd:ad:fc:c7: 7c:df:49:98:27:0d:e2:92:e6:83:fe:17:1b:e4:42:2c:1d:80: cd:66:d6:ff:7b:9e:fd:82:4c:0f:bf:a6:31:d9:ba:ef:72:3e: d5:38:60:44:da:f3:29:b4:55:40:6b:39:fa:e2:e0:10:57:e3: 31:6b:8b:7d:94:41:23:4e:63:af:40:d2:5b:ed:2e:9d:ff:f6: aa:37:d1:1b:31:9a:60:bb:8b:de:33:16:e3:60:5a:10:8b:e5: 61:91:47:db:19:13:5e:19:93:28:78:1e:d3:f5:4e:a3:4d:55: 83:13:e8:7e:c1:24:19:33:8e:99:28:cc:e1:21:b9:72:d6:79: f9:66:79:71:85:62:e9:e2:7c:ec:6c:28:f9:06:96:38:3c:66: b8:34:e8:2b:39:7e:fd:ac:53:28:e2:53:f5:12:a6:3f:96:19: 78:8a:d3:fb:9a:15:9f:e6:40:6b:95:fe:ea:80:8c:f6:15:e1: ac:f6:3c:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP65LgxzPwZCSEghwcnFhvfAfCVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNE OUE4NkNFNDAeFw0yNDA1MTcyMjU2MzJaFw0yNDA1MjEwODAwMzJaMDMxMTAvBgNV BAMTKENDRTQzNzQ3NEFGNkYxOTcyMjZEREU3RTExQzBDQUIxRDAyMkU3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBfYeUQHNc78gbdNsDZf5Gl5m HngSXcTWhSxL/ZJEcoru09hTbnN654R+27wTObG6S7qkYUdlIHa7ThKmhBY9psTB zxeRAPeDIfHQA+w1FgLqnc+26SQvUgh5/THuj/X801GzK9smh+04uu8WQSAVcMEP abHjuNN0/VXPZQbWwu9G5AE6kgwG5sR+CA/A0bmA4qXWQmf1QiKnX6SqQD0KVARG K1lE/ssxWJWpkbfiqY8aQf46wz8wtVrRnhqfRgLY+f1rEQZdEquGTf4L2WWYaXhh hr5aKXly23NkSWi+HjhZxPy5weixZCo2fRfynOKsrbauePNqMGiMDzeovEnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzOQ3R0r28Zcibd5+EcDKsdAi50wwHwYDVR0j BBgwFoAUd2fPSddmGvq0WHA0HYjS89mobOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTcwZDQ0ZS0wZjcwLTQ1YTMtYWYwNC04MWY0MjlkYjNhNWQvMC83NzY3Q0Y0OUQ3 NjYxQUZBQjQ1ODcwMzQxRDg4RDJGM0Q5QTg2Q0U0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNEOUE4 NkNFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm MDQtODFmNDI5ZGIzYTVkLzAvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQy RjNEOUE4NkNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSrtOKDVY7PH8svIPXWDjzN4j0woqOzPZLf 7yOuroCTw7Vwzr0y5dpEluL0q0p4KAd+Z+r9x3+ROzMOGLnPEsu1KUgPva38x3zf SZgnDeKS5oP+FxvkQiwdgM1m1v97nv2CTA+/pjHZuu9yPtU4YETa8ym0VUBrOfri 4BBX4zFri32UQSNOY69A0lvtLp3/9qo30RsxmmC7i94zFuNgWhCL5WGRR9sZE14Z kyh4HtP1TqNNVYMT6H7BJBkzjpkozOEhuXLWeflmeXGFYunifOxsKPkGljg8Zrg0 6Cs5fv2sUyjiU/USpj+WGXiK0/uaFZ/mQGuV/uqAjPYV4az2PFM= -----END CERTIFICATE-----Generated at Fri May 17 23:32:47 2024 by rpki-client on console-fra.rpki-client.org