$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: Iy8UUfjKlzu87D0hEppe+s5dH9U7seazM43K09Me8uo= Subject key identifier: 07:DA:7C:D5:D8:FA:AE:56:57:F3:E8:2D:DF:E4:0B:93:AD:B5:12:3C Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 7446B04D2BD71780944305FA2319C8ED20A785D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 036F Signing time: Fri 17 May 2024 21:51:42 +0000 Manifest this update: Fri 17 May 2024 21:46:42 +0000 Manifest next update: Tue 21 May 2024 01:25:42 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: 2RXzjnyKnoK55CVhVamKpIUNo0E/agBgokPATbv99Kc=) 2: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: 6/FY3RC+twjOpfbNhZ4550fDvtj/p6Q8LfwttWyG3OU=) 3: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: uBl6L16J7+JQ5f2OA4faYqe4NqatV0QQZFxDVxkiagg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 01:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:46:b0:4d:2b:d7:17:80:94:43:05:fa:23:19:c8:ed:20:a7:85:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: May 17 21:46:42 2024 GMT Not After : May 21 01:25:42 2024 GMT Subject: CN=07DA7CD5D8FAAE5657F3E82DDFE40B93ADB5123C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:87:76:15:b6:73:4e:72:48:c6:99:1f:7e:67: 25:4e:7a:66:6f:40:ea:07:3c:2c:95:0f:2f:92:5a: ac:e6:2c:b3:25:3c:cc:0d:56:07:7c:fa:67:0d:51: 02:d2:7d:2b:f2:d0:e4:ad:cd:d7:a3:6b:fd:59:98: 80:64:ee:65:c8:0f:91:6b:27:d2:a6:7a:6c:01:60: 5a:17:70:b5:d9:2c:d8:c5:37:80:0e:29:2a:0f:66: 2a:65:fa:ce:4f:6d:f8:21:a3:38:88:0b:0a:f2:7a: 2a:85:b3:d9:66:ea:86:1c:58:6e:37:ef:11:89:91: 64:a0:76:ec:4f:5e:3e:0a:a1:54:e5:6a:ea:5c:44: 07:01:14:32:05:e2:0f:bd:4c:f2:f1:7a:9a:4b:ed: 69:c5:a5:9e:ed:2f:88:49:9a:25:17:a6:96:ab:21: 57:ab:b7:aa:4c:10:cb:68:fd:05:ef:79:95:85:87: ac:25:bb:47:76:bc:c8:15:eb:1b:99:c8:17:e2:7b: ce:f6:b9:9a:ea:71:17:65:51:19:7f:7f:7f:ff:68: bc:d7:3d:ad:0c:29:c9:8d:15:ba:b1:39:e8:78:0f: e6:15:61:77:3d:be:b7:b0:09:f9:91:7b:c4:ce:bb: 09:c0:68:6b:38:92:13:53:d4:66:16:5e:ef:cc:6a: 40:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DA:7C:D5:D8:FA:AE:56:57:F3:E8:2D:DF:E4:0B:93:AD:B5:12:3C X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:9b:78:a6:02:6b:02:f7:de:e2:71:82:06:68:ba:b3:70:4d: 76:e3:2d:15:68:27:93:48:41:af:3f:50:89:4d:f8:f5:38:d5: 11:c3:aa:08:b7:4c:0a:fa:02:2e:a8:01:07:3f:b1:07:11:33: 6e:57:ea:e0:14:65:a5:ec:a2:89:08:d8:e1:22:da:56:83:4c: 1b:31:44:d8:bb:66:ed:81:e4:52:43:81:d3:f6:b4:e0:ac:c4: a9:13:ea:79:9d:7f:d2:05:f5:7a:b6:57:ac:b8:27:5d:98:44: 90:1d:0c:fd:94:49:ca:71:5a:e9:2c:45:ca:2f:ab:ff:f0:d7: 97:2b:bd:85:f3:3e:05:e3:16:2c:eb:78:e6:ce:87:a1:ac:f5: 20:25:7d:40:2d:db:3b:ed:68:c8:1e:e4:00:5d:f0:cf:08:10: 52:51:88:b8:27:9a:6e:a5:4d:1a:4c:65:df:ed:c0:ca:c2:34: 2a:20:08:7a:37:96:fe:b2:77:50:f2:e2:72:6f:04:29:2d:3e: a2:68:7a:5d:d0:9e:60:7c:c9:ff:07:e3:ae:0e:46:a2:66:fe: 3c:67:cc:81:41:a9:06:ae:ea:b1:30:40:e9:e5:b3:59:11:44: c8:b7:b8:40:91:88:7e:d1:48:87:ff:d4:7d:aa:74:e3:9e:15: e9:58:0e:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdEawTSvXF4CUQwX6IxnI7SCnhdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNDA1MTcyMTQ2NDJaFw0yNDA1MjEwMTI1NDJaMDMxMTAvBgNV BAMTKDA3REE3Q0Q1RDhGQUFFNTY1N0YzRTgyRERGRTQwQjkzQURCNTEyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbh3YVtnNOckjGmR9+ZyVOemZv QOoHPCyVDy+SWqzmLLMlPMwNVgd8+mcNUQLSfSvy0OStzdeja/1ZmIBk7mXID5Fr J9KmemwBYFoXcLXZLNjFN4AOKSoPZipl+s5PbfghoziICwryeiqFs9lm6oYcWG43 7xGJkWSgduxPXj4KoVTlaupcRAcBFDIF4g+9TPLxeppL7WnFpZ7tL4hJmiUXppar IVert6pMEMto/QXveZWFh6wlu0d2vMgV6xuZyBfie872uZrqcRdlURl/f3//aLzX Pa0MKcmNFbqxOeh4D+YVYXc9vrewCfmRe8TOuwnAaGs4khNT1GYWXu/MakAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB9p81dj6rlZX8+gt3+QLk621EjwwHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIabeKYCawL33uJxggZourNwTXbjLRVoJ5NI Qa8/UIlN+PU41RHDqgi3TAr6Ai6oAQc/sQcRM25X6uAUZaXsookI2OEi2laDTBsx RNi7Zu2B5FJDgdP2tOCsxKkT6nmdf9IF9Xq2V6y4J12YRJAdDP2UScpxWuksRcov q//w15crvYXzPgXjFizreObOh6Gs9SAlfUAt2zvtaMge5ABd8M8IEFJRiLgnmm6l TRpMZd/twMrCNCogCHo3lv6yd1Dy4nJvBCktPqJoel3QnmB8yf8H464ORqJm/jxn zIFBqQau6rEwQOnls1kRRMi3uECRiH7RSIf/1H2qdOOeFelYDjk= -----END CERTIFICATE-----Generated at Fri May 17 22:51:20 2024 by rpki-client on console-ams.rpki-client.org