$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: hsh5A7VO0AGLIFbGoS20K1Yj+7EaTrBjK4ic/w2nfqw= Subject key identifier: C7:C0:1C:ED:9B:AF:3A:63:F1:62:D5:56:53:9E:2F:0F:38:6A:20:E8 Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 05A889EBA377349FE794DAF0DABFF586B1BEC4E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 02B1 Signing time: Sat 25 May 2024 09:11:48 +0000 Manifest this update: Sat 25 May 2024 09:06:48 +0000 Manifest next update: Tue 28 May 2024 12:03:48 +0000 Files and hashes: 1: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: bKnT0ID9p9F9Fds+dLHPVD/fyEfVSe7qpAIfp5exZEA=) 2: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: E161lkGg5q1gG1EXq1+8+szD2pqDUdt6RMALt0NGfDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 09:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a8:89:eb:a3:77:34:9f:e7:94:da:f0:da:bf:f5:86:b1:be:c4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: May 25 09:06:48 2024 GMT Not After : May 28 12:03:48 2024 GMT Subject: CN=C7C01CED9BAF3A63F162D556539E2F0F386A20E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:33:e2:50:81:0a:50:22:a8:85:92:4a:71: d8:1e:78:21:5c:79:29:4b:7d:20:6a:40:bf:df:da: d9:61:ea:1d:e5:ac:76:b2:35:6b:87:aa:16:1c:ba: 80:45:d5:cd:30:d4:5f:28:cb:7c:fa:84:6f:45:d7: e9:f1:d7:5d:92:bc:0f:ab:d6:a9:1b:73:2b:56:85: 5d:6a:cd:68:7a:75:6a:fd:5f:7d:e1:f1:be:27:9b: af:2e:5d:e8:24:cd:c7:79:cb:11:01:ea:0b:22:9f: 55:b0:4e:f0:a4:6c:3e:3b:c7:31:81:73:34:a7:28: 9a:94:c8:8a:9c:ec:eb:51:43:c3:08:0a:10:4a:62: 1c:3f:2c:41:2f:22:ca:3e:6c:91:c8:e4:31:63:9f: 46:c6:11:d3:a9:12:5e:63:2e:c7:bd:fc:bf:12:b9: 30:1f:62:25:d5:35:b6:1c:01:85:59:50:0b:e3:fb: f1:cf:82:e8:ac:3b:11:24:dc:1a:42:f0:5e:b9:28: 63:7f:1d:0f:b1:a5:4e:1a:39:bd:25:5b:f6:1a:5c: 13:0d:c1:1d:02:42:c0:8e:10:f5:f7:13:8e:5e:f0: d0:7c:26:2f:91:e9:3e:b6:fe:f8:5c:f8:db:66:47: df:0a:a4:09:c2:86:2a:15:0f:8d:6d:95:eb:be:fe: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C0:1C:ED:9B:AF:3A:63:F1:62:D5:56:53:9E:2F:0F:38:6A:20:E8 X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9e:d1:69:a6:7a:90:20:55:68:ef:69:4e:30:ef:1d:4b:d4: 8f:4f:4f:42:8a:d1:fd:5d:1d:e8:99:4d:85:43:69:0a:6d:a4: ce:0f:9f:ee:ca:b8:0b:a6:99:b2:29:79:69:a0:d6:c9:f7:8b: 59:b6:31:cc:3d:57:fc:67:87:6e:52:3e:f5:52:ea:8b:ab:c2: ad:33:00:25:27:32:d3:53:01:57:64:f1:06:d7:90:ba:f0:4a: c2:2c:5b:52:84:44:33:96:bd:d5:c8:1b:ed:90:26:41:9c:be: 74:b8:d2:72:7d:9e:52:0d:27:a3:dd:df:45:36:fe:42:b5:8f: 0e:e9:d7:4d:b4:e9:d1:71:97:0f:02:4f:75:f4:5b:aa:7a:ff: 00:cb:41:4c:9b:5b:b9:a5:04:3b:c5:99:9d:d2:08:e6:13:8e: 65:0d:4d:00:1f:10:7b:67:95:a2:b9:6f:81:22:14:13:30:f1: 35:f4:37:70:56:97:dd:57:9c:c1:ce:8f:e9:ea:51:cb:22:5d: 0f:e0:9e:06:2d:b8:1c:b8:3a:d3:2c:44:b7:56:85:0e:09:30: c0:17:78:63:92:59:06:78:1b:fb:cb:ee:b3:5f:8c:0d:ae:f5: ad:46:99:49:04:07:4e:c0:06:21:b0:7a:0d:bc:f7:e5:ab:9b: 9e:ff:e6:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBaiJ66N3NJ/nlNrw2r/1hrG+xOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNDA1MjUwOTA2NDhaFw0yNDA1MjgxMjAzNDhaMDMxMTAvBgNV BAMTKEM3QzAxQ0VEOUJBRjNBNjNGMTYyRDU1NjUzOUUyRjBGMzg2QTIwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOTPiUIEKUCKohZJKcdgeeCFc eSlLfSBqQL/f2tlh6h3lrHayNWuHqhYcuoBF1c0w1F8oy3z6hG9F1+nx112SvA+r 1qkbcytWhV1qzWh6dWr9X33h8b4nm68uXegkzcd5yxEB6gsin1WwTvCkbD47xzGB czSnKJqUyIqc7OtRQ8MIChBKYhw/LEEvIso+bJHI5DFjn0bGEdOpEl5jLse9/L8S uTAfYiXVNbYcAYVZUAvj+/HPguisOxEk3BpC8F65KGN/HQ+xpU4aOb0lW/YaXBMN wR0CQsCOEPX3E45e8NB8Ji+R6T62/vhc+NtmR98KpAnChioVD41tleu+/mHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx8Ac7ZuvOmPxYtVWU54vDzhqIOgwHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKie0WmmepAgVWjvaU4w7x1L1I9PT0KK0f1d HeiZTYVDaQptpM4Pn+7KuAummbIpeWmg1sn3i1m2Mcw9V/xnh25SPvVS6ourwq0z ACUnMtNTAVdk8QbXkLrwSsIsW1KERDOWvdXIG+2QJkGcvnS40nJ9nlINJ6Pd30U2 /kK1jw7p10206dFxlw8CT3X0W6p6/wDLQUybW7mlBDvFmZ3SCOYTjmUNTQAfEHtn laK5b4EiFBMw8TX0N3BWl91XnMHOj+nqUcsiXQ/gngYtuBy4OtMsRLdWhQ4JMMAX eGOSWQZ4G/vL7rNfjA2u9a1GmUkEB07ABiGweg289+Wrm57/5sk= -----END CERTIFICATE-----Generated at Sat May 25 09:51:19 2024 by rpki-client on console-fra.rpki-client.org