$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft File: 764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft (raw, json) Hash identifier: LfXNBWnhkZR0VSSUJgXbiy4/vU+/EfpiYA8hkz/AabY= Subject key identifier: 14:27:22:FB:BA:1A:11:27:96:77:A1:F5:E0:E5:13:10:42:5B:30:96 Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Certificate issuer: /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Certificate serial: 241CAFCA33A8EB6190BD7CD67EF8CB712BD04578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft Manifest number: 0431 Signing time: Sun 19 May 2024 00:51:48 +0000 Manifest this update: Sun 19 May 2024 00:46:48 +0000 Manifest next update: Wed 22 May 2024 09:00:48 +0000 Files and hashes: 1: 764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl (hash: 2UVZ9+eB/Zevbzi0QZmUMLwKU9uIlgbndJZZHF3dk3M=) 2: 3130332e34392e33302e302f32332d3233203d3e203633383632.roa (hash: x9ie0gdVt6kqpJpvl8P8pC6xGTnAL3Dd9dPjO5yasC8=) 3: 3130332e34392e32382e302f32342d3234203d3e203633383632.roa (hash: bCmqhd20NCN1m0jA0/u8aEfDLqnS/vSvT5SZLMhaiVQ=) 4: 3130332e34392e33302e302f32342d3234203d3e203633383632.roa (hash: mHr7ZOR/UV4GsODMFfObi3OuJQt+2kkh2gnOIQwbamw=) 5: 3130332e34392e32382e302f32332d3233203d3e203633383632.roa (hash: C+isCwCteEo9lt7gOENsAGbL/viihv1omXABNCcRCYs=) 6: 3130332e34392e33312e302f32342d3234203d3e203633383632.roa (hash: B4uSrijALF83ZvKw3VCQPocGPLascdKfhLRE/oAuho0=) 7: 3130332e34392e32382e302f32322d3232203d3e203633383632.roa (hash: xD5J1KsdNWTxj0ipfnq65tJY2HWNY+8NxRmlKPSGFtI=) 8: 323430313a663938303a3a2f33322d3332203d3e203633383632.roa (hash: Fm9ZrZ7HMNLGeHeNHKLJD92e42WmoiS+NfFvtiBt/5I=) 9: 3130332e34392e32392e302f32342d3234203d3e203633383632.roa (hash: PpgndnZpAzdDc2UDkV4VvsCyGTBCJcBIPiwK8bhunj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1c:af:ca:33:a8:eb:61:90:bd:7c:d6:7e:f8:cb:71:2b:d0:45:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Validity Not Before: May 19 00:46:48 2024 GMT Not After : May 22 09:00:48 2024 GMT Subject: CN=142722FBBA1A11279677A1F5E0E51310425B3096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:64:52:78:76:20:a6:b2:a6:9e:2e:ab:10:71: ba:fc:e9:18:5b:18:d8:23:a9:fd:f0:a8:4e:1e:65: bd:1e:06:7a:80:07:07:26:f0:63:d0:a0:34:f2:f3: 6f:73:dd:23:ac:a0:29:64:ad:ee:d2:62:2e:af:65: 5f:26:fc:a3:48:67:d4:bd:ad:97:89:ee:5c:58:ac: e7:9e:a8:b5:0a:c4:e7:0b:ad:f6:d1:c9:04:46:4a: 00:f7:30:37:88:7c:77:58:4b:ca:a3:12:e1:c2:16: bc:a7:36:c7:cd:c6:b2:71:7a:aa:63:7d:d3:f0:05: c5:3a:5c:59:ee:d9:32:85:54:f1:5a:c4:7d:ea:39: ef:14:dd:12:d9:87:11:dd:4f:a8:b3:40:be:ec:e8: 89:49:fa:df:8b:80:fb:9c:c6:6c:0b:f0:81:41:c1: 67:ae:4c:ef:65:16:2b:3c:85:dd:39:2a:43:06:2f: c3:c8:b8:8e:cb:ed:f4:73:04:b7:6f:1f:0d:01:68: e3:03:97:2f:b0:76:95:4f:e0:06:d9:21:0f:f7:a9: cf:15:4f:19:bc:b3:b6:f0:67:cd:b6:5c:13:4d:11: e7:56:db:c1:6b:4a:3a:51:c1:12:42:c1:d0:67:9b: cd:27:68:72:be:35:82:15:7f:dc:b1:75:26:2f:3e: 48:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:27:22:FB:BA:1A:11:27:96:77:A1:F5:E0:E5:13:10:42:5B:30:96 X509v3 Authority Key Identifier: keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:16:ef:bc:78:0b:ca:77:33:35:be:a1:6f:c6:ea:64:16:2f: 39:9a:ab:d1:59:46:0b:1c:7e:85:5c:14:42:87:ce:a3:f1:5f: 36:87:ce:98:99:c3:a3:55:bd:88:95:09:f6:e0:83:72:27:11: 6f:e2:39:8b:88:b1:a8:04:8c:85:18:05:65:1c:00:c2:ee:0b: 69:30:5e:c5:37:57:ee:04:3c:ec:b1:63:86:89:74:b1:b9:5c: 33:b2:af:eb:65:c5:ec:4c:58:06:65:11:00:d7:86:7f:a9:a5: 4b:ac:5b:9a:8b:5a:d2:4a:cd:fd:22:e6:58:31:12:5a:31:85: d9:f4:1e:cc:57:1a:f1:b6:d6:80:fd:41:2c:3d:40:99:4d:84: ad:ed:31:d1:b2:e4:ae:5d:0d:ba:8d:cb:52:c8:f7:ef:51:33: ea:de:e6:56:46:1f:43:90:0e:89:46:3c:98:ca:c8:1e:89:66: a0:d1:a6:b5:20:6f:1b:aa:e1:6d:d0:66:ef:63:5c:8a:07:0c: dd:bd:4b:38:8c:a5:af:83:70:90:e8:04:d0:86:21:3e:1b:45: c5:1c:0a:21:ff:89:46:66:2e:fe:df:92:fd:82:9e:8c:52:95: c6:a0:69:20:19:5f:4b:e0:28:a5:fd:ae:1e:7a:52:71:83:db: 05:3b:59:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJByvyjOo62GQvXzWfvjLcSvQRXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFF MDFENjBDOTAeFw0yNDA1MTkwMDQ2NDhaFw0yNDA1MjIwOTAwNDhaMDMxMTAvBgNV BAMTKDE0MjcyMkZCQkExQTExMjc5Njc3QTFGNUUwRTUxMzEwNDI1QjMwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZFJ4diCmsqaeLqsQcbr86Rhb GNgjqf3wqE4eZb0eBnqABwcm8GPQoDTy829z3SOsoClkre7SYi6vZV8m/KNIZ9S9 rZeJ7lxYrOeeqLUKxOcLrfbRyQRGSgD3MDeIfHdYS8qjEuHCFrynNsfNxrJxeqpj fdPwBcU6XFnu2TKFVPFaxH3qOe8U3RLZhxHdT6izQL7s6IlJ+t+LgPucxmwL8IFB wWeuTO9lFis8hd05KkMGL8PIuI7L7fRzBLdvHw0BaOMDly+wdpVP4AbZIQ/3qc8V Txm8s7bwZ822XBNNEedW28FrSjpRwRJCwdBnm80naHK+NYIVf9yxdSYvPkjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFCci+7oaESeWd6H14OUTEEJbMJYwHwYDVR0j BBgwFoAUdksj62xj/8qjBfN9vpuQSuAdYMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMC83NjRCMjNFQjZD NjNGRkNBQTMwNUYzN0RCRTlCOTA0QUUwMUQ2MEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFFMDFE NjBDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdlODMwYzgtZDU1OS00NTZhLTg4 MzUtNGY2ZWI1NTI3YWEyLzAvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5Qjkw NEFFMDFENjBDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYW77x4C8p3MzW+oW/G6mQWLzmaq9FZRgsc foVcFEKHzqPxXzaHzpiZw6NVvYiVCfbgg3InEW/iOYuIsagEjIUYBWUcAMLuC2kw XsU3V+4EPOyxY4aJdLG5XDOyr+tlxexMWAZlEQDXhn+ppUusW5qLWtJKzf0i5lgx Eloxhdn0HsxXGvG21oD9QSw9QJlNhK3tMdGy5K5dDbqNy1LI9+9RM+re5lZGH0OQ DolGPJjKyB6JZqDRprUgbxuq4W3QZu9jXIoHDN29SziMpa+DcJDoBNCGIT4bRcUc CiH/iUZmLv7fkv2CnoxSlcagaSAZX0vgKKX9rh56UnGD2wU7WX4= -----END CERTIFICATE-----Generated at Sun May 19 01:44:54 2024 by rpki-client on console-ams.rpki-client.org