$ rpki-client -vvf repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft File: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft (raw, json) Hash identifier: kORfkVd50+dCSzojJIcX109bT10mdnnKHkflpFV1EWI= Subject key identifier: 1B:48:37:F3:7F:73:B9:27:C7:14:F4:80:E9:B3:55:62:79:0D:AE:72 Authority key identifier: A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 Certificate issuer: /CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Certificate serial: 3D1C4A9D25432B156DA4B4F1498C99F72CA266ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft Manifest number: 019B Signing time: Fri 17 May 2024 18:22:09 +0000 Manifest this update: Fri 17 May 2024 18:17:09 +0000 Manifest next update: Tue 21 May 2024 04:54:09 +0000 Files and hashes: 1: 323430343a343230303a3a2f33322d3438203d3e203234353336.roa (hash: uVXMX8Jibcvo4KnIlQYaSLUZj8jCK70TV4KAO/ZpeZs=) 2: A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl (hash: JmiwNwgE9OLkmqzlsiFZ+utM1amAgWcq0D6BlZgck5Q=) 3: 3230322e3134362e3137362e302f32312d3234203d3e203234353336.roa (hash: uwItBU1GZ7lr9WOFzvc0EVXKr7dVKFn2+edoQTsS9+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 04:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1c:4a:9d:25:43:2b:15:6d:a4:b4:f1:49:8c:99:f7:2c:a2:66:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4 Validity Not Before: May 17 18:17:09 2024 GMT Not After : May 21 04:54:09 2024 GMT Subject: CN=1B4837F37F73B927C714F480E9B35562790DAE72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:56:5d:3f:78:ad:2e:8d:e8:2e:89:99:44: d8:fc:95:3e:22:54:87:a6:1c:99:25:e2:fe:cd:95: 6c:82:64:c0:9b:7d:72:ff:ca:08:8e:ea:2e:72:75: f3:60:ee:76:19:fa:4c:51:0a:10:92:0f:4f:de:89: fd:2b:16:b1:de:e9:e3:bb:4a:03:da:73:28:d7:35: e5:a6:7b:65:73:a8:81:19:46:34:00:27:6a:64:b2: 72:b8:3f:13:30:c7:8d:45:2c:f6:7b:30:75:e3:58: 74:4b:5f:d8:d1:d5:7d:6a:e0:f4:3d:93:49:9f:26: b3:3a:bb:e8:8f:5d:a7:d9:19:21:48:5d:a4:9b:10: 36:c7:32:25:b1:27:63:df:35:69:19:6a:a1:1c:f9: c1:30:bb:64:6f:0f:5f:86:79:79:00:8d:13:30:39: fd:9d:64:97:b4:7f:f2:b4:e9:10:ab:28:9d:9c:93: cd:66:2d:0f:b3:7d:30:0d:3b:9d:0d:e4:6d:ab:7e: 45:7a:e6:8c:26:05:b0:8f:4d:bb:44:72:e7:e6:2f: 2c:c1:b7:b9:a2:d0:c9:22:b8:85:eb:eb:13:52:7b: e1:d3:7d:fd:74:fa:bb:b7:6b:ce:9b:4d:da:b2:63: d9:4d:f6:38:7d:a1:2f:08:0b:3e:ea:3e:56:15:0b: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:48:37:F3:7F:73:B9:27:C7:14:F4:80:E9:B3:55:62:79:0D:AE:72 X509v3 Authority Key Identifier: keyid:A6:3C:CE:63:66:E3:FC:B7:A2:66:6A:90:90:F2:A0:57:5A:74:DC:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87775dcf-283f-43c5-af60-09e0deba01a2/0/A63CCE6366E3FCB7A2666A9090F2A0575A74DCF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fc:cf:88:72:93:3d:7d:74:43:d5:0e:71:70:8f:ca:1e:66: 65:fc:97:e1:ad:99:c7:6f:da:a1:ca:44:b3:f3:d7:b2:7c:a6: cc:33:b1:db:d5:e5:4f:e0:07:c1:b5:1d:d1:a9:27:e2:fd:b4: 23:5f:61:eb:15:39:a6:a4:1d:93:c3:a6:db:04:80:0c:e9:25: c9:db:50:10:48:0d:cf:e6:05:5c:ef:07:36:85:cc:88:61:c5: dc:ea:2d:f9:01:42:68:ad:f9:92:5a:85:fc:fa:90:df:e3:6f: e5:6a:73:82:8f:46:24:2b:46:62:2e:b5:34:7e:fa:4c:14:a9: 15:82:3b:69:33:68:ec:fa:d2:06:d8:c7:9a:f4:1f:96:cc:1c: 61:a6:5c:7d:50:4b:71:e1:71:69:6e:6c:5b:52:f3:38:9b:21: 83:6f:1b:b5:02:6a:35:fd:35:14:e9:4a:1e:e0:3a:66:9c:ad: 96:e1:f7:fa:ab:f2:13:2b:c4:84:c2:72:9e:a6:a8:92:03:9d: 8b:4b:02:d4:25:c6:4f:b0:f5:84:82:a0:80:e6:d0:ba:9d:6a: 34:47:59:67:be:14:76:42:6f:48:34:4c:32:e0:52:ec:2f:dc: f2:a4:81:0a:02:0a:16:28:13:10:39:70:19:ce:51:d8:32:31: 89:ed:07:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRxKnSVDKxVtpLTxSYyZ9yyiZu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1 QTc0RENGNDAeFw0yNDA1MTcxODE3MDlaFw0yNDA1MjEwNDU0MDlaMDMxMTAvBgNV BAMTKDFCNDgzN0YzN0Y3M0I5MjdDNzE0RjQ4MEU5QjM1NTYyNzkwREFFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUFZdP3itLo3oLomZRNj8lT4i VIemHJkl4v7NlWyCZMCbfXL/ygiO6i5ydfNg7nYZ+kxRChCSD0/eif0rFrHe6eO7 SgPacyjXNeWme2VzqIEZRjQAJ2pksnK4PxMwx41FLPZ7MHXjWHRLX9jR1X1q4PQ9 k0mfJrM6u+iPXafZGSFIXaSbEDbHMiWxJ2PfNWkZaqEc+cEwu2RvD1+GeXkAjRMw Of2dZJe0f/K06RCrKJ2ck81mLQ+zfTANO50N5G2rfkV65owmBbCPTbtEcufmLyzB t7mi0MkiuIXr6xNSe+HTff10+ru3a86bTdqyY9lN9jh9oS8ICz7qPlYVC3NLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG0g3839zuSfHFPSA6bNVYnkNrnIwHwYDVR0j BBgwFoAUpjzOY2bj/LeiZmqQkPKgV1p03PQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Nzc3NWRjZi0yODNmLTQzYzUtYWY2MC0wOWUwZGViYTAxYTIvMC9BNjNDQ0U2MzY2 RTNGQ0I3QTI2NjZBOTA5MEYyQTA1NzVBNzREQ0Y0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEwNTc1QTc0 RENGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3NzVkY2YtMjgzZi00M2M1LWFm NjAtMDllMGRlYmEwMWEyLzAvQTYzQ0NFNjM2NkUzRkNCN0EyNjY2QTkwOTBGMkEw NTc1QTc0RENGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIz8z4hykz19dEPVDnFwj8oeZmX8l+Gtmcdv 2qHKRLPz17J8pswzsdvV5U/gB8G1HdGpJ+L9tCNfYesVOaakHZPDptsEgAzpJcnb UBBIDc/mBVzvBzaFzIhhxdzqLfkBQmit+ZJahfz6kN/jb+Vqc4KPRiQrRmIutTR+ +kwUqRWCO2kzaOz60gbYx5r0H5bMHGGmXH1QS3HhcWlubFtS8zibIYNvG7UCajX9 NRTpSh7gOmacrZbh9/qr8hMrxITCcp6mqJIDnYtLAtQlxk+w9YSCoIDm0LqdajRH WWe+FHZCb0g0TDLgUuwv3PKkgQoCChYoExA5cBnOUdgyMYntB1U= -----END CERTIFICATE-----Generated at Fri May 17 20:09:45 2024 by rpki-client on console-fra.rpki-client.org