$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft File: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft (raw, json) Hash identifier: hap5ysyzI8ILQPbgikCXgAq7zazE117LIOIQ+n/+kYo= Subject key identifier: A5:73:A1:58:ED:05:1E:D4:B6:F6:58:96:DD:D4:81:3A:59:83:C7:01 Authority key identifier: 65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 Certificate issuer: /CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Certificate serial: 71A46A971C23E87A0F8EB4073E30CC043F9001EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft Manifest number: 0255 Signing time: Sun 19 May 2024 10:21:22 +0000 Manifest this update: Sun 19 May 2024 10:16:22 +0000 Manifest next update: Wed 22 May 2024 16:01:22 +0000 Files and hashes: 1: 658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl (hash: TumQRt3BXgbTHOV5musp4yHVmxjh4hXuo70A/0LA8L8=) 2: 3130332e3135302e3137342e302f32342d3234203d3e20313430333936.roa (hash: YQAINg5/c07fJYo4z2/F7ZS9jeqUaVDtAyjeMeCD5pg=) 3: 323430363a3663303a3a2f33322d3438203d3e20313430333936.roa (hash: xpPKGtdE0DfyIZw1JaNTtyHBfu4SXPZKnmZiVdFDOi0=) 4: 3130332e3135302e3137352e302f32342d3234203d3e20313430333936.roa (hash: HCMuZxZrHCKSpAX2a5vse7/WsDvGgfBnoBOTaWG6LjY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a4:6a:97:1c:23:e8:7a:0f:8e:b4:07:3e:30:cc:04:3f:90:01:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=658CE677CBFABF819AD1DE1FB865B1A2FD17C487 Validity Not Before: May 19 10:16:22 2024 GMT Not After : May 22 16:01:22 2024 GMT Subject: CN=A573A158ED051ED4B6F65896DDD4813A5983C701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:ac:4c:f1:4d:37:3a:09:68:0f:c8:3d:bc: a4:21:7d:98:ba:da:e5:32:d2:5e:d7:9f:00:54:9d: 07:60:b7:14:49:16:30:0c:54:fe:41:e1:b4:70:bb: f0:99:b8:d1:2e:c0:c0:ee:51:74:e5:20:8c:99:2a: 52:5e:c5:db:8b:96:ff:d1:d1:46:b0:2b:3d:b2:47: c4:ed:79:44:95:65:d6:3f:59:37:9d:9b:30:5b:ef: 1c:20:0f:5d:ab:e8:27:6d:b6:cf:88:c2:a4:69:fc: d3:42:62:27:6a:a2:13:4b:cc:b5:9f:f4:a4:08:63: b4:3c:65:2d:fa:f3:79:94:92:2f:af:44:f8:fa:14: 7a:eb:5f:1f:b8:69:20:cf:78:b4:08:ed:c4:a3:25: b7:c1:7b:46:8f:f4:68:5f:25:fb:26:09:7a:9e:d5: da:7f:2c:00:0d:c4:a3:69:de:2d:19:9a:2f:8b:1b: aa:d5:e0:be:66:70:0e:90:b6:3c:0c:63:f0:d6:64: b7:03:d4:d9:5b:f6:03:f8:82:6f:80:55:a2:e9:5f: 31:13:f0:28:44:53:18:16:72:4a:fa:a9:ca:17:cf: 6d:55:c2:b8:3a:32:0d:60:85:f6:6f:84:57:1f:28: 4e:89:cc:09:ed:03:0f:39:3d:2b:27:6c:de:85:de: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:73:A1:58:ED:05:1E:D4:B6:F6:58:96:DD:D4:81:3A:59:83:C7:01 X509v3 Authority Key Identifier: keyid:65:8C:E6:77:CB:FA:BF:81:9A:D1:DE:1F:B8:65:B1:A2:FD:17:C4:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5ecd74-4424-4d40-96a1-7fd763011944/0/658CE677CBFABF819AD1DE1FB865B1A2FD17C487.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:99:32:a0:9d:f2:0e:4a:ff:38:36:22:be:6b:4f:c5:3a:f3: 77:10:73:c4:f5:38:b7:91:a2:7f:98:57:0b:5b:53:35:c7:db: db:18:e0:78:a1:68:10:47:55:f5:cb:01:af:db:4a:a7:ca:51: e1:ba:6f:7f:9b:41:10:9d:8f:87:4b:db:b0:b4:de:64:cd:4e: f2:7a:1f:18:50:0c:d6:51:79:47:2c:84:1b:8e:62:dc:6a:7d: 70:e3:55:c2:3c:7e:5e:90:2d:a7:3b:86:f9:de:3c:27:ac:41: b7:e1:87:60:be:e3:fc:b8:42:28:0b:6c:46:26:e3:c5:d1:ee: 38:a4:1b:c8:18:2b:65:16:f1:ff:1a:fa:f2:9e:c3:85:81:c4: c2:27:43:c2:76:51:a9:40:98:98:6e:41:19:15:3f:25:eb:3a: b1:af:bc:1f:6c:96:85:f1:6a:56:87:17:67:90:be:ed:a2:f6: 6c:12:8c:fa:16:21:14:c8:eb:45:e3:90:8c:47:3f:6b:e8:f0: b7:e3:4c:b0:9d:ef:13:7d:9e:26:15:fe:2a:21:11:88:dc:31: ce:22:60:92:6a:4d:55:e7:b0:22:3b:f2:ee:5c:22:3e:4e:48: 9b:bd:65:4c:b0:71:8c:45:e1:05:14:3a:4b:30:a0:b8:f4:72: 57:92:e6:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcaRqlxwj6HoPjrQHPjDMBD+QAeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJG RDE3QzQ4NzAeFw0yNDA1MTkxMDE2MjJaFw0yNDA1MjIxNjAxMjJaMDMxMTAvBgNV BAMTKEE1NzNBMTU4RUQwNTFFRDRCNkY2NTg5NkRERDQ4MTNBNTk4M0M3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6w6xM8U03OgloD8g9vKQhfZi6 2uUy0l7XnwBUnQdgtxRJFjAMVP5B4bRwu/CZuNEuwMDuUXTlIIyZKlJexduLlv/R 0UawKz2yR8TteUSVZdY/WTedmzBb7xwgD12r6Cdtts+IwqRp/NNCYidqohNLzLWf 9KQIY7Q8ZS3683mUki+vRPj6FHrrXx+4aSDPeLQI7cSjJbfBe0aP9GhfJfsmCXqe 1dp/LAANxKNp3i0Zmi+LG6rV4L5mcA6QtjwMY/DWZLcD1Nlb9gP4gm+AVaLpXzET 8ChEUxgWckr6qcoXz21Vwrg6Mg1ghfZvhFcfKE6JzAntAw85PSsnbN6F3nmXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpXOhWO0FHtS29liW3dSBOlmDxwEwHwYDVR0j BBgwFoAUZYzmd8v6v4Ga0d4fuGWxov0XxIcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVlY2Q3NC00NDI0LTRkNDAtOTZhMS03ZmQ3NjMwMTE5NDQvMC82NThDRTY3N0NC RkFCRjgxOUFEMURFMUZCODY1QjFBMkZEMTdDNDg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIxQTJGRDE3 QzQ4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZWNkNzQtNDQyNC00ZDQwLTk2 YTEtN2ZkNzYzMDExOTQ0LzAvNjU4Q0U2NzdDQkZBQkY4MTlBRDFERTFGQjg2NUIx QTJGRDE3QzQ4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6ZMqCd8g5K/zg2Ir5rT8U683cQc8T1OLeR on+YVwtbUzXH29sY4HihaBBHVfXLAa/bSqfKUeG6b3+bQRCdj4dL27C03mTNTvJ6 HxhQDNZReUcshBuOYtxqfXDjVcI8fl6QLac7hvnePCesQbfhh2C+4/y4QigLbEYm 48XR7jikG8gYK2UW8f8a+vKew4WBxMInQ8J2UalAmJhuQRkVPyXrOrGvvB9sloXx alaHF2eQvu2i9mwSjPoWIRTI60XjkIxHP2vo8LfjTLCd7xN9niYV/iohEYjcMc4i YJJqTVXnsCI78u5cIj5OSJu9ZUywcYxF4QUUOkswoLj0cleS5h0= -----END CERTIFICATE-----Generated at Sun May 19 10:47:50 2024 by rpki-client on console-fra.rpki-client.org