$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: P3rwCU/B65MSEhsJWwg/gapZ3Ns/aARmb96VCT86eiw= Subject key identifier: 22:C5:0B:22:40:A4:3F:2D:86:72:EF:8E:3C:9D:E3:33:21:E3:F6:71 Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 6427F338E4CEF6AE875EE99068D09733101C5BC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 0187 Signing time: Sat 18 May 2024 14:11:55 +0000 Manifest this update: Sat 18 May 2024 14:06:55 +0000 Manifest next update: Tue 21 May 2024 19:04:55 +0000 Files and hashes: 1: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 9FnonwM5oZgBU1rHzUd/IWj/Dm+/F9N/fY9hXL98xD8=) 2: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: dT5PTSxC8OBBeScPrWsMMvlBL2u2+WE2gzQK/v03ejc=) 3: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: eaDHXompNyoJw9eDQUonpgv4Hhe2sKzjUb9sb9tjeJI=) 4: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Z1139f8SYhxMGCJCgRPQwIEWH4tedHLshgGrgMzsNUY=) 5: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: VkdKdC9/+k4lO/arS04um9wSvj6TdRmv17oOYwT5D6M=) 6: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: YsYlWLJlKPB1eVovlLV3toEh65vc8tLPMGPN6AO8Pq4=) 7: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: B5eEvABZchTLJ7stHyeDIqFYNUY+5GycjLRg813Nqlc=) 8: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: X0n7T3j0+1cyzYeP19ywAVGo30NYGtoSBCceIo4mtg4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 19:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:27:f3:38:e4:ce:f6:ae:87:5e:e9:90:68:d0:97:33:10:1c:5b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: May 18 14:06:55 2024 GMT Not After : May 21 19:04:55 2024 GMT Subject: CN=22C50B2240A43F2D8672EF8E3C9DE33321E3F671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:d3:4f:2f:e7:8a:f0:c0:2b:c0:4b:ec:97: 4d:ab:ab:66:a6:a7:71:5e:61:47:19:e6:1a:91:52: 80:c8:5a:35:85:a8:34:88:a6:14:39:8c:27:43:82: b6:01:ea:04:88:4e:ef:67:77:2e:45:27:78:4d:cf: c2:55:ce:9a:43:68:46:fb:37:90:dd:42:36:1b:94: e9:b2:a4:02:02:c8:b8:a7:97:73:6a:9b:92:89:53: dd:a5:9c:1b:06:d8:57:d7:e9:c4:ca:59:8e:c5:0d: cb:b5:cc:e3:cf:14:1b:80:69:26:df:6e:3b:3f:c6: e2:e1:75:4f:c8:8d:21:0c:0a:08:ae:e7:48:4d:a9: 1f:f6:56:c8:e5:f5:6f:d0:29:16:24:c5:6e:b6:8b: 7c:c8:a2:85:7f:46:86:51:20:8d:91:85:e0:64:73: 1f:ae:41:db:94:29:8f:04:6d:65:ef:a0:21:e6:6c: 09:e4:f6:b4:07:6d:47:31:f4:2e:96:ae:bf:ba:c5: 26:04:df:b4:bf:94:48:57:d6:f8:3a:82:2e:0a:40: 4d:38:60:8e:ac:cb:be:43:b1:4b:16:2d:26:59:53: 82:0a:60:8f:37:8c:d4:8f:22:0d:33:5d:10:99:ab: fd:23:7d:98:77:cf:77:15:ea:6d:8d:c7:ef:0b:79: 95:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C5:0B:22:40:A4:3F:2D:86:72:EF:8E:3C:9D:E3:33:21:E3:F6:71 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:5e:d8:52:bc:84:5c:04:88:39:f4:f9:4c:ad:cb:22:90:9d: 0b:0a:69:5a:99:66:23:5f:95:05:7d:fd:ea:96:1c:be:76:54: e2:5b:cc:93:be:1c:e5:a8:97:c6:44:5a:f2:16:90:7f:ea:d6: 47:e6:a8:43:a9:81:3b:ff:05:06:be:57:3f:d0:32:62:d3:85: a9:57:8d:0e:32:ba:62:fe:d8:5e:60:29:d9:b7:7e:ca:05:e7: 57:d6:93:1e:37:01:55:7e:36:d1:54:2c:9f:ab:4a:7d:f3:77: bc:75:70:f2:ff:cd:9b:f5:0d:1c:15:26:53:66:58:fe:de:69: 2a:14:da:2a:95:32:de:65:2b:32:7c:77:2b:fb:74:29:db:d3: 5b:22:80:71:1b:6f:cf:19:9a:bd:cc:14:b1:77:a1:c5:fc:6b: 67:1f:74:80:73:ca:db:1b:82:f1:69:39:4e:5e:63:5e:39:ce: 94:c4:e1:58:ef:0b:96:58:81:32:31:0d:14:13:55:d0:46:11: 95:f2:02:a0:5d:f1:3f:c0:e0:ff:ec:04:97:a7:a2:69:6e:03: af:ac:d0:8d:2f:51:a8:0b:a2:1e:b8:29:a5:d9:5c:44:ed:2c: e8:87:5d:f1:b3:a7:7b:97:ff:8f:e8:e8:a6:b3:6c:0b:13:8a: 1a:28:1b:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCfzOOTO9q6HXumQaNCXMxAcW8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNDA1MTgxNDA2NTVaFw0yNDA1MjExOTA0NTVaMDMxMTAvBgNV BAMTKDIyQzUwQjIyNDBBNDNGMkQ4NjcyRUY4RTNDOURFMzMzMjFFM0Y2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQ9NPL+eK8MArwEvsl02rq2am p3FeYUcZ5hqRUoDIWjWFqDSIphQ5jCdDgrYB6gSITu9ndy5FJ3hNz8JVzppDaEb7 N5DdQjYblOmypAICyLinl3Nqm5KJU92lnBsG2FfX6cTKWY7FDcu1zOPPFBuAaSbf bjs/xuLhdU/IjSEMCgiu50hNqR/2Vsjl9W/QKRYkxW62i3zIooV/RoZRII2RheBk cx+uQduUKY8EbWXvoCHmbAnk9rQHbUcx9C6Wrr+6xSYE37S/lEhX1vg6gi4KQE04 YI6sy75DsUsWLSZZU4IKYI83jNSPIg0zXRCZq/0jfZh3z3cV6m2Nx+8LeZWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIsULIkCkPy2Gcu+OPJ3jMyHj9nEwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVe2FK8hFwEiDn0+UytyyKQnQsKaVqZZiNf lQV9/eqWHL52VOJbzJO+HOWol8ZEWvIWkH/q1kfmqEOpgTv/BQa+Vz/QMmLThalX jQ4yumL+2F5gKdm3fsoF51fWkx43AVV+NtFULJ+rSn3zd7x1cPL/zZv1DRwVJlNm WP7eaSoU2iqVMt5lKzJ8dyv7dCnb01sigHEbb88Zmr3MFLF3ocX8a2cfdIBzytsb gvFpOU5eY145zpTE4VjvC5ZYgTIxDRQTVdBGEZXyAqBd8T/A4P/sBJenomluA6+s 0I0vUagLoh64KaXZXETtLOiHXfGzp3uX/4/o6KazbAsTihooGyM= -----END CERTIFICATE-----Generated at Sat May 18 15:25:22 2024 by rpki-client on console-fra.rpki-client.org