$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: adD14sfpvWLdh/0MsYgAO1/TbsbBuBZngvNwkzVgn1I= Subject key identifier: 5B:60:82:18:6D:4B:51:E8:DD:5A:29:11:49:35:B7:51:FD:46:4C:43 Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 620E37874DC50CA7819955EFD36EB4AC6154C6CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 0123 Signing time: Sun 19 May 2024 19:50:05 +0000 Manifest this update: Sun 19 May 2024 19:45:05 +0000 Manifest next update: Thu 23 May 2024 03:25:05 +0000 Files and hashes: 1: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: i4ZKaGZWAvzmBCFUkLDA1MR5qYwA+xjdltIl6dVFvDg=) 2: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: s2lFb5b6Ogdn0OW9iuq32URBmNECwTGdjX68E0og9tc=) 3: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: D+cy+3ssRW3iD8T+OReN8ouYGeTxMJM/+ZSkw6V3LFs=) 4: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: 2ddhC/X8S+qs78goDKhqcg88ojaei1jRi+Z3MCd1WcM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0e:37:87:4d:c5:0c:a7:81:99:55:ef:d3:6e:b4:ac:61:54:c6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: May 19 19:45:05 2024 GMT Not After : May 23 03:25:05 2024 GMT Subject: CN=5B6082186D4B51E8DD5A29114935B751FD464C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:58:f6:97:c7:ee:12:e9:19:a5:22:b1:25:03: af:46:e6:71:eb:92:4e:57:a7:f1:50:89:cb:98:8c: a5:54:d3:c7:f5:28:6a:2d:0e:35:32:11:27:2d:0b: c9:fb:1f:25:d7:76:0a:02:e1:db:a6:c0:71:a6:7a: ee:de:a5:c0:a9:4b:60:d7:d1:35:8d:07:4e:12:c7: 4d:b3:b6:b9:a7:b1:65:96:c3:cd:b2:9c:bf:8e:b7: 57:f4:ac:38:73:51:b5:45:5d:e6:76:60:97:83:ef: 9c:0e:54:b4:9c:a6:5d:e7:e8:be:1e:31:67:ae:95: ed:7d:77:59:7d:99:eb:94:0e:14:3e:50:6d:42:77: 3c:d3:0c:6d:c2:2f:f8:99:e8:42:56:ce:4c:43:03: 35:61:c2:fb:de:25:6d:73:a2:3c:73:d4:57:ef:4c: cc:8d:1b:25:55:dd:ef:5f:e0:31:16:8f:e0:b4:e7: 51:03:ea:5b:2c:25:27:ff:ba:e7:8d:dd:3b:ef:43: 68:64:d7:0d:59:3d:71:41:e7:f7:4a:ee:70:6a:79: ad:a8:11:13:00:b2:85:53:e2:40:ea:0a:68:14:d2: 01:a9:55:7d:f1:ac:fb:1e:f9:4b:06:91:26:1b:4b: 50:6d:11:98:a4:f9:88:45:28:84:13:62:b8:47:60: 02:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:60:82:18:6D:4B:51:E8:DD:5A:29:11:49:35:B7:51:FD:46:4C:43 X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ea:06:a6:17:93:5d:2c:7d:c1:79:1a:1b:1d:a6:29:89:a4: 0a:9b:89:75:e0:c7:c6:ab:8d:af:48:19:c7:21:55:5f:7d:bc: e0:96:b3:11:3d:b2:46:e6:a5:94:91:7e:bd:73:e3:83:f7:2d: 20:83:d5:ec:75:32:d1:1f:24:48:66:db:53:73:ba:ec:53:c0: 1b:aa:76:ea:62:08:a3:d8:57:e0:8a:b8:2b:1e:94:a8:14:82: 01:43:20:50:c7:9e:9c:1c:5b:e8:fe:00:d2:b7:99:99:50:60: ff:08:b3:b8:72:cc:bf:0d:ff:98:14:d7:d2:94:62:49:9b:9e: 2c:9e:17:79:49:6c:d5:a5:2a:a4:cf:00:1a:01:c1:40:f8:50: 13:4b:17:23:2f:40:55:0e:c0:c8:3d:cc:6c:08:6b:c6:23:04: 2f:e5:0d:42:41:70:2d:b6:9c:89:d6:a5:7a:47:73:23:41:16: e1:fa:e2:ad:9c:56:45:5e:61:17:af:f5:59:67:21:b2:dc:46: a1:53:91:2a:92:23:65:6d:73:77:da:5e:0f:2e:f2:0a:cc:36: 6e:50:a4:2e:cc:aa:10:0d:3c:1a:9d:a9:77:0b:e8:67:d5:ca: ee:58:5e:c2:49:83:22:c7:c2:21:82:fe:fd:34:dc:59:4b:c2: 73:d1:ec:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYg43h03FDKeBmVXv0260rGFUxs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNDA1MTkxOTQ1MDVaFw0yNDA1MjMwMzI1MDVaMDMxMTAvBgNV BAMTKDVCNjA4MjE4NkQ0QjUxRThERDVBMjkxMTQ5MzVCNzUxRkQ0NjRDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeWPaXx+4S6RmlIrElA69G5nHr kk5Xp/FQicuYjKVU08f1KGotDjUyESctC8n7HyXXdgoC4dumwHGmeu7epcCpS2DX 0TWNB04Sx02ztrmnsWWWw82ynL+Ot1f0rDhzUbVFXeZ2YJeD75wOVLScpl3n6L4e MWeule19d1l9meuUDhQ+UG1CdzzTDG3CL/iZ6EJWzkxDAzVhwvveJW1zojxz1Ffv TMyNGyVV3e9f4DEWj+C051ED6lssJSf/uueN3TvvQ2hk1w1ZPXFB5/dK7nBqea2o ERMAsoVT4kDqCmgU0gGpVX3xrPse+UsGkSYbS1BtEZik+YhFKIQTYrhHYALtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW2CCGG1LUejdWikRSTW3Uf1GTEMwHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPqBqYXk10sfcF5GhsdpimJpAqbiXXgx8ar ja9IGcchVV99vOCWsxE9skbmpZSRfr1z44P3LSCD1ex1MtEfJEhm21NzuuxTwBuq dupiCKPYV+CKuCselKgUggFDIFDHnpwcW+j+ANK3mZlQYP8Is7hyzL8N/5gU19KU YkmbniyeF3lJbNWlKqTPABoBwUD4UBNLFyMvQFUOwMg9zGwIa8YjBC/lDUJBcC22 nInWpXpHcyNBFuH64q2cVkVeYRev9VlnIbLcRqFTkSqSI2Vtc3faXg8u8grMNm5Q pC7MqhANPBqdqXcL6GfVyu5YXsJJgyLHwiGC/v003FlLwnPR7NM= -----END CERTIFICATE-----Generated at Sun May 19 20:19:18 2024 by rpki-client on console-fra.rpki-client.org