$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft File: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft (raw, json) Hash identifier: OXRdF4035wTII+P8fwe9GXL95q1fGTgD7+r7JcaKTMg= Subject key identifier: 7A:A1:AE:34:84:A5:CA:62:FA:23:3B:78:A0:FB:C6:D0:9D:54:06:BA Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC Certificate issuer: /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Certificate serial: 31384D9FF194B55A1A6EFC897E142A539F4C6C33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft Manifest number: BC Signing time: Sun 19 May 2024 15:11:05 +0000 Manifest this update: Sun 19 May 2024 15:06:05 +0000 Manifest next update: Wed 22 May 2024 22:53:05 +0000 Files and hashes: 1: 3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (hash: KeyqYwWRulk+OFOsVfZqlpRSGJ0ZS+rCEYgeptsrcsk=) 2: 27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl (hash: JvGwKdPtATkpAyQ/nuYCt371e0S61i46x6/FBUGqk9A=) 3: 3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (hash: YRe6enaJqWVTJR1Jjaj35/a7biuZfOw432b2vxqaDoU=) 4: 3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (hash: cYSH2vn92qbrcEWKMz2fC0jHljokBUi4MArcwakpwcQ=) 5: 3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (hash: 5O64hKt9RzH3ZzDpkJQi2OQjZz2H00iXtdqxYuETUUo=) 6: 3130332e37302e31362e302f32322d3232203d3e20313335343632.roa (hash: Cffb9PkKzDpnNi+H5wjp//YtIY4RaBP+4ANvlLTOSTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:38:4d:9f:f1:94:b5:5a:1a:6e:fc:89:7e:14:2a:53:9f:4c:6c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC Validity Not Before: May 19 15:06:05 2024 GMT Not After : May 22 22:53:05 2024 GMT Subject: CN=7AA1AE3484A5CA62FA233B78A0FBC6D09D5406BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:8a:3a:f8:58:4f:a5:fa:cb:49:9b:86:28: de:e4:63:c5:72:99:f7:96:a3:bc:85:2e:46:28:95: 20:af:b3:5d:ac:fe:81:08:10:d5:f3:8e:cf:e5:a8: 47:c9:2f:40:65:80:9a:2a:ad:ba:ea:09:e3:20:cd: 7a:07:bf:58:68:a0:b3:c6:db:76:a0:45:69:59:ba: 1a:00:fc:73:56:27:be:23:68:ac:7c:57:c5:e9:76: f5:a1:b8:3f:9f:5b:12:9f:46:5c:3b:29:e4:73:1f: 6d:85:00:50:98:c6:96:30:46:42:fb:b5:34:d8:9d: b5:68:c5:56:da:bb:c3:6c:8a:ff:df:27:e3:1f:fc: ce:07:bf:d9:bd:44:73:73:90:fa:16:96:12:b0:5c: aa:36:e9:bb:bb:da:4a:b7:ef:ff:0f:9f:0d:a8:dc: ef:11:55:13:3d:b6:f5:c3:c9:05:51:c3:36:d7:07: 1b:51:5f:fb:83:4c:6f:4b:8a:2d:3b:53:30:5c:c7: 13:59:8f:b2:7d:82:e9:86:84:9e:b9:6e:fc:df:02: cb:df:74:6b:48:1f:ba:27:a6:7b:91:1a:93:f5:30: 70:1b:03:31:c6:88:5a:49:2e:cf:c4:31:c7:b4:c3: e3:24:a5:9d:c0:c9:bc:25:dc:f7:35:35:f1:cd:59: 4f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A1:AE:34:84:A5:CA:62:FA:23:3B:78:A0:FB:C6:D0:9D:54:06:BA X509v3 Authority Key Identifier: keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:cc:5f:57:76:ed:9c:de:6d:4c:0b:c1:ad:83:75:4c:7f:f1: 71:56:6e:ec:6c:2d:ce:38:4a:8d:6d:c1:33:21:fc:6e:20:67: 20:32:61:43:88:bd:51:cb:70:15:2b:dc:61:a8:58:cb:e6:f1: a8:f2:b1:81:22:7d:82:0b:7c:ce:62:a0:36:c3:58:bf:a4:94: ca:41:46:29:df:3d:1e:a4:ec:33:58:c0:97:1c:92:a9:24:b8: 66:9d:db:b1:29:f4:3f:5c:69:ba:78:74:6b:0d:59:aa:4b:a4: 96:81:4a:d8:e8:86:9d:b7:7d:11:24:69:8c:70:5d:50:ef:13: 1d:1c:e6:ad:b4:6d:58:bb:89:dd:de:55:20:16:75:56:98:73: b5:bf:f7:9b:24:f8:4a:db:6d:9e:0a:73:32:01:c9:e1:e5:20: e1:3c:98:d7:83:57:88:d6:31:c2:0c:23:b9:61:1b:13:e1:04: 46:aa:2c:60:d6:c1:78:39:06:79:a7:b6:ad:8c:83:b8:ce:19: 0c:4b:a4:e9:1f:b8:78:60:4b:07:04:24:92:f3:7f:b0:c4:39: fd:67:d0:74:89:49:16:f1:b4:ed:65:64:6f:98:b9:58:63:de: ba:b1:d0:36:3b:e2:33:be:e3:51:3a:2b:a6:b8:9b:02:c3:31: d6:7b:41:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMThNn/GUtVoabvyJfhQqU59MbDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC NTM2OTVGQzAeFw0yNDA1MTkxNTA2MDVaFw0yNDA1MjIyMjUzMDVaMDMxMTAvBgNV BAMTKDdBQTFBRTM0ODRBNUNBNjJGQTIzM0I3OEEwRkJDNkQwOUQ1NDA2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpu4o6+FhPpfrLSZuGKN7kY8Vy mfeWo7yFLkYolSCvs12s/oEIENXzjs/lqEfJL0BlgJoqrbrqCeMgzXoHv1hooLPG 23agRWlZuhoA/HNWJ74jaKx8V8XpdvWhuD+fWxKfRlw7KeRzH22FAFCYxpYwRkL7 tTTYnbVoxVbau8Nsiv/fJ+Mf/M4Hv9m9RHNzkPoWlhKwXKo26bu72kq37/8Pnw2o 3O8RVRM9tvXDyQVRwzbXBxtRX/uDTG9Lii07UzBcxxNZj7J9gumGhJ65bvzfAsvf dGtIH7onpnuRGpP1MHAbAzHGiFpJLs/EMce0w+MkpZ3Aybwl3Pc1NfHNWU8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeqGuNISlymL6Izt4oPvG0J1UBrowHwYDVR0j BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2 OTVGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZmNGQ0ZjEtYjM2Yy00YTQ2LTg4 NDQtNGU2YzdhM2M5N2Q5LzAvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4 MDlCNTM2OTVGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzMX1d27ZzebUwLwa2DdUx/8XFWbuxsLc44 So1twTMh/G4gZyAyYUOIvVHLcBUr3GGoWMvm8ajysYEifYILfM5ioDbDWL+klMpB RinfPR6k7DNYwJcckqkkuGad27Ep9D9cabp4dGsNWapLpJaBStjohp23fREkaYxw XVDvEx0c5q20bVi7id3eVSAWdVaYc7W/95sk+ErbbZ4KczIByeHlIOE8mNeDV4jW McIMI7lhGxPhBEaqLGDWwXg5Bnmntq2Mg7jOGQxLpOkfuHhgSwcEJJLzf7DEOf1n 0HSJSRbxtO1lZG+YuVhj3rqx0DY74jO+41E6K6a4mwLDMdZ7QfE= -----END CERTIFICATE-----Generated at Sun May 19 17:04:59 2024 by rpki-client on console-ams.rpki-client.org