$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: LgBmLNzMcYNXEZTpNwP1l5jWmkP3hnboeQZ9kmGwVQA= Subject key identifier: 56:21:48:79:78:97:A4:0A:42:C2:8C:05:C6:6A:D6:B3:AA:A9:C3:6E Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 701021D715CDFF5BC5BB7C620507AF94613878AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 0434 Signing time: Thu 30 May 2024 10:01:54 +0000 Manifest this update: Thu 30 May 2024 09:56:54 +0000 Manifest next update: Sun 02 Jun 2024 10:17:54 +0000 Files and hashes: 1: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: WwLxjgI7zoHAFu7rNcQbJUkndDI9ijwmDh7zSYEP6jA=) 2: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: toRDYePEusqqMy+Tuvc1VNNrTsAFudxq9bPx/dVypjA=) 3: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: y6jFLQ2FkK/iJQ8dnXVYSbw0BlEqv1RLQrMjG78moNI=) 4: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: 71o4NMVLOynETBTiYsgexul5r47ijyMZ1uwVfIn2FfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 10:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:10:21:d7:15:cd:ff:5b:c5:bb:7c:62:05:07:af:94:61:38:78:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: May 30 09:56:54 2024 GMT Not After : Jun 2 10:17:54 2024 GMT Subject: CN=562148797897A40A42C28C05C66AD6B3AAA9C36E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f8:ab:51:cf:e8:7f:be:ef:77:a8:15:af:b4: 34:09:52:f5:4f:e9:2d:e8:2e:85:0e:4f:31:cb:8e: 88:a9:2f:ad:5d:bb:e9:a7:2a:8e:33:4b:da:a2:d7: ce:cf:b9:90:78:3d:34:ab:12:16:2e:5a:0a:99:80: 4f:6f:41:4f:db:c3:4b:c2:74:40:4e:f6:02:c6:75: 6d:7d:90:ce:52:4f:f5:27:c5:bc:43:00:70:ee:93: bb:c8:5c:83:cc:7c:37:10:80:7d:5a:4e:56:54:86: 8f:3d:99:0d:21:e6:9f:2d:a6:fd:95:57:56:dc:2e: 91:60:c7:28:30:a8:c3:10:f2:7a:96:ff:66:62:66: e6:5f:11:b2:41:e0:f7:0c:c3:33:dc:b3:15:fb:e0: ce:37:0c:3c:cb:50:43:d7:d8:6d:9b:bd:f5:16:24: 09:d0:99:d4:26:b7:28:f0:80:6c:68:d8:72:d3:2a: 60:03:79:93:f5:aa:2e:43:07:b3:d8:7f:08:0d:77: 16:cb:77:70:d0:ef:fe:1d:b9:69:30:4e:05:8b:5c: 3f:ba:72:2d:e8:ae:5f:ff:a5:ea:bf:cc:47:d9:1d: 35:38:d1:a4:05:be:2f:ca:9d:28:16:13:0a:7e:ef: 54:5e:83:d1:4a:e6:26:8f:55:8b:ff:40:88:c9:21: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:21:48:79:78:97:A4:0A:42:C2:8C:05:C6:6A:D6:B3:AA:A9:C3:6E X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0b:4a:ee:70:fa:8b:e0:f7:ae:3c:8b:60:a7:72:f6:90:37: 95:e2:b0:ba:73:7d:f6:eb:00:00:0c:c8:02:fe:0c:3b:93:a4: 21:e9:6d:a6:c9:75:4e:fb:61:fd:c9:4c:1f:82:72:91:12:09: 33:4b:98:3b:b8:cd:82:7c:be:64:8b:86:de:52:43:55:9d:8c: d3:60:75:f1:e0:e6:9c:f3:3e:75:b0:cf:88:53:6b:c6:7b:af: bd:3b:7e:21:9a:ef:3e:80:e3:72:19:80:c5:6f:c0:44:c2:6b: a3:41:27:03:c8:eb:73:c8:f9:37:b1:f0:18:26:98:47:a0:c2: fe:6b:e7:6d:34:e9:f4:7d:4a:4b:21:48:1c:76:f1:ef:97:a1: 4d:fd:36:fe:54:6f:65:66:fa:f7:13:48:4c:a1:3b:28:47:9c: f4:d4:09:34:6c:83:05:3c:51:d8:f6:d3:db:ad:e9:bf:d1:57: c3:1a:6a:b8:4c:2e:22:ab:4d:89:24:b2:c8:2b:00:32:7e:03: 54:d4:2d:48:69:ea:e7:ae:a3:33:99:0f:fb:96:3c:87:8a:ae: 65:bb:05:6e:32:20:1a:61:78:1c:94:e4:6e:7d:ae:07:39:27: 17:49:30:79:34:b5:19:74:4c:95:b0:43:1b:b6:21:7f:d5:69: 44:8e:80:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBAh1xXN/1vFu3xiBQevlGE4eKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNDA1MzAwOTU2NTRaFw0yNDA2MDIxMDE3NTRaMDMxMTAvBgNV BAMTKDU2MjE0ODc5Nzg5N0E0MEE0MkMyOEMwNUM2NkFENkIzQUFBOUMzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV+KtRz+h/vu93qBWvtDQJUvVP 6S3oLoUOTzHLjoipL61du+mnKo4zS9qi187PuZB4PTSrEhYuWgqZgE9vQU/bw0vC dEBO9gLGdW19kM5ST/UnxbxDAHDuk7vIXIPMfDcQgH1aTlZUho89mQ0h5p8tpv2V V1bcLpFgxygwqMMQ8nqW/2ZiZuZfEbJB4PcMwzPcsxX74M43DDzLUEPX2G2bvfUW JAnQmdQmtyjwgGxo2HLTKmADeZP1qi5DB7PYfwgNdxbLd3DQ7/4duWkwTgWLXD+6 ci3orl//peq/zEfZHTU40aQFvi/KnSgWEwp+71Reg9FK5iaPVYv/QIjJIS3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUViFIeXiXpApCwowFxmrWs6qpw24wHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQLSu5w+ovg9648i2CncvaQN5XisLpzffbr AAAMyAL+DDuTpCHpbabJdU77Yf3JTB+CcpESCTNLmDu4zYJ8vmSLht5SQ1WdjNNg dfHg5pzzPnWwz4hTa8Z7r707fiGa7z6A43IZgMVvwETCa6NBJwPI63PI+Tex8Bgm mEegwv5r52006fR9SkshSBx28e+XoU39Nv5Ub2Vm+vcTSEyhOyhHnPTUCTRsgwU8 Udj209ut6b/RV8MaarhMLiKrTYkkssgrADJ+A1TULUhp6ueuozOZD/uWPIeKrmW7 BW4yIBpheByU5G59rgc5JxdJMHk0tRl0TJWwQxu2IX/VaUSOgL0= -----END CERTIFICATE-----Generated at Thu May 30 11:27:40 2024 by rpki-client on console-ams.rpki-client.org