$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft (raw, json) Hash identifier: YyFHbvL1We85NKJR/oTTkDKpP9ycvcWXCEZtziQVVvg= Subject key identifier: 7C:CA:B8:C1:B2:A2:24:C8:24:3D:1C:A2:6B:43:99:04:FD:5B:DC:9C Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Certificate serial: 58BACD49FA0102C4AA032B54AAA12D64513E4AFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft Manifest number: 02CA Signing time: Fri 17 May 2024 20:31:44 +0000 Manifest this update: Fri 17 May 2024 20:26:44 +0000 Manifest next update: Tue 21 May 2024 04:32:44 +0000 Files and hashes: 1: 3230322e35312e32302e302f32342d3234203d3e20313439343039.roa (hash: VgauIJib/5YKcXTJMY5O4GwqNEjl+20ATgstQ4kaGk4=) 2: 3230322e35312e32312e302f32342d3234203d3e20313439343039.roa (hash: LDlAmIkfBI44itLAHSw+oCtaKYJxkyaV9N6k7QGrffc=) 3: 3230322e35312e33302e302f32332d3234203d3e203233393530.roa (hash: x1kqzJi4SsMuo+0Qxa1rUjPNa0qhD+pGqeZaVSvGl+o=) 4: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl (hash: xph5XZEheB1ttXyvgCVk1xabxD3Nmcwj6YrVhDAEmDw=) 5: 3230322e35312e31392e302f32342d3234203d3e203233393530.roa (hash: Hl9DDgWAc2Lj/tRCYlNYeMl7kFtkd20jP6Mp/zNrtVY=) 6: 3230322e35312e31362e302f32332d3234203d3e203233393530.roa (hash: LFSshHohvujyC4t8MnZGDLNz59k8RF0Gd5qPFRAxfIs=) 7: 3230322e35312e32302e302f32332d3234203d3e20313439343039.roa (hash: sdP0GfM29CjT2qSs6k29aTQAVtw7WuE4nuzVONDfaXA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 04:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ba:cd:49:fa:01:02:c4:aa:03:2b:54:aa:a1:2d:64:51:3e:4a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Validity Not Before: May 17 20:26:44 2024 GMT Not After : May 21 04:32:44 2024 GMT Subject: CN=7CCAB8C1B2A224C8243D1CA26B439904FD5BDC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4b:48:8b:31:06:ce:13:c9:03:27:1d:70:43: 7c:87:4d:2f:d9:2f:22:d7:db:7e:4c:db:eb:6e:4f: 90:a9:02:70:f5:40:dc:a5:e9:f7:39:45:de:0b:39: 12:d5:32:fc:6c:a8:e8:15:18:2f:8b:2d:ee:df:7b: b0:fe:9c:28:66:c2:29:49:ae:af:42:28:3e:44:9f: 62:d6:d3:f2:9b:7d:50:35:ce:a9:9b:1b:16:ff:c3: fe:09:35:fd:c6:91:26:78:e4:46:45:69:07:a8:68: 69:ae:79:ce:81:69:7a:9a:d4:3a:01:a4:78:ba:6d: d8:54:22:24:a6:5d:4c:c3:a6:76:4f:dc:29:f5:ad: 99:08:4b:3f:0c:52:5f:50:d6:f9:7c:8f:45:5e:ab: 94:43:59:3c:99:95:7e:4b:22:a4:ba:7b:5a:a6:fd: fe:cb:ba:65:c4:25:0e:d9:ef:1b:f7:5f:08:17:07: 8f:ab:d5:1c:18:b0:a5:69:5c:17:aa:67:c2:c2:9a: fe:8f:4a:22:1b:de:bf:9f:da:c8:6d:21:50:6e:f8: 68:71:d3:82:8f:b4:61:02:2a:65:b8:72:7e:a5:31: 65:04:9a:7e:37:b1:25:36:ed:cd:69:a7:49:65:fb: eb:b1:0d:c2:57:8a:5c:d1:b5:bc:a4:bf:9e:2e:58: 96:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:B8:C1:B2:A2:24:C8:24:3D:1C:A2:6B:43:99:04:FD:5B:DC:9C X509v3 Authority Key Identifier: keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a7:ee:3b:f5:99:dc:96:38:9f:76:87:6b:d0:18:c4:e8:2c: 2b:a9:44:d8:e8:a9:7c:80:da:89:f3:6a:a3:48:f8:75:6d:5c: e8:36:61:64:29:a3:22:5d:38:ec:17:63:b7:f2:90:5f:78:20: b3:a7:7e:07:4d:f7:7a:f6:2e:70:cc:0e:bc:3a:20:c5:69:bf: d5:e3:d0:9d:7b:83:dc:fa:24:0a:21:0f:0c:09:6c:e1:33:69: 85:5d:38:2e:1d:0c:6c:b7:96:87:f7:ec:1e:ea:9b:5e:dd:c6: c7:9a:6b:f6:a0:b6:3e:55:a9:ae:81:68:13:a5:93:cc:20:bd: 74:05:d2:79:60:87:0a:0a:b9:8f:8c:33:16:4d:75:64:ce:6a: 92:81:6d:0d:8b:2e:8e:42:f8:11:1c:51:34:ad:f2:2e:ca:b5: 94:88:2a:a4:9f:c0:33:4c:c9:76:50:ae:5b:2b:61:91:47:68: 20:43:58:cf:2b:41:4c:e0:aa:cf:26:fa:0c:53:f2:09:bd:41: d5:7c:66:15:ac:ac:d3:a6:a6:b0:74:16:77:6e:8b:66:63:88: 06:99:86:aa:e4:a7:b9:5a:ee:bd:13:31:cf:45:b4:de:f6:8e: 1e:d8:4d:55:f4:39:4e:f4:f7:2d:08:be:9c:d3:5a:e5:e7:27: 3c:9c:e0:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWLrNSfoBAsSqAytUqqEtZFE+Sv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcx QUI0MjBBMDAeFw0yNDA1MTcyMDI2NDRaFw0yNDA1MjEwNDMyNDRaMDMxMTAvBgNV BAMTKDdDQ0FCOEMxQjJBMjI0QzgyNDNEMUNBMjZCNDM5OTA0RkQ1QkRDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChS0iLMQbOE8kDJx1wQ3yHTS/Z LyLX235M2+tuT5CpAnD1QNyl6fc5Rd4LORLVMvxsqOgVGC+LLe7fe7D+nChmwilJ rq9CKD5En2LW0/KbfVA1zqmbGxb/w/4JNf3GkSZ45EZFaQeoaGmuec6BaXqa1DoB pHi6bdhUIiSmXUzDpnZP3Cn1rZkISz8MUl9Q1vl8j0Veq5RDWTyZlX5LIqS6e1qm /f7LumXEJQ7Z7xv3XwgXB4+r1RwYsKVpXBeqZ8LCmv6PSiIb3r+f2shtIVBu+Ghx 04KPtGECKmW4cn6lMWUEmn43sSU27c1pp0ll++uxDcJXilzRtbykv54uWJZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfMq4wbKiJMgkPRyia0OZBP1b3JwwHwYDVR0j BBgwFoAUnmpn1bnXJcH0Can7O/NaBxq0IKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMC85RTZBNjdENUI5 RDcyNUMxRjQwOUE5RkIzQkYzNUEwNzFBQjQyMEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVBMDcxQUI0 MjBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0ZTZiMmQtM2RkYi00NmViLTgz ZWYtYzk5YjIwMDM3ODNmLzAvOUU2QTY3RDVCOUQ3MjVDMUY0MDlBOUZCM0JGMzVB MDcxQUI0MjBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOn7jv1mdyWOJ92h2vQGMToLCupRNjoqXyA 2onzaqNI+HVtXOg2YWQpoyJdOOwXY7fykF94ILOnfgdN93r2LnDMDrw6IMVpv9Xj 0J17g9z6JAohDwwJbOEzaYVdOC4dDGy3lof37B7qm17dxseaa/agtj5Vqa6BaBOl k8wgvXQF0nlghwoKuY+MMxZNdWTOapKBbQ2LLo5C+BEcUTSt8i7KtZSIKqSfwDNM yXZQrlsrYZFHaCBDWM8rQUzgqs8m+gxT8gm9QdV8ZhWsrNOmprB0Fndui2ZjiAaZ hqrkp7la7r0TMc9FtN72jh7YTVX0OU709y0IvpzTWuXnJzyc4D0= -----END CERTIFICATE-----Generated at Fri May 17 20:56:06 2024 by rpki-client on console-fra.rpki-client.org