$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: id6M36gqnI5S7sOuXIh88l9hebmHtptuvmQW7+yCFhY= Subject key identifier: C1:8B:90:17:5D:6C:9B:B5:62:97:28:EF:F8:EB:BD:99:38:C2:62:70 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 037D2819CAF8665AF28C4C98D16C5C01DA62C013 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 0437 Signing time: Sun 19 May 2024 11:21:04 +0000 Manifest this update: Sun 19 May 2024 11:16:04 +0000 Manifest next update: Wed 22 May 2024 21:40:04 +0000 Files and hashes: 1: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Wg3rwLssx46aTqk+/Xtfr/fCRWeLjKbHMnBPIfvqa84=) 2: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: 2AJHwWgdpuXScTgYm/DeoeVMKJvtVcDa6vejlN+srWY=) 3: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: i+2ZZzfHCUXCCwROoAhUyzPTUuhD1uyOksffOp6JYQI=) 4: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: swJNtrC8e2vJ1wpVNAIyoYYEmbeES9DsvBl+ACa1hyk=) 5: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: XkjvnweDGpeU0h6UuxTTj6S4bH1DZiLJiCWEcrrGIeM=) 6: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: OiBKVKO/YMDUlk53r07NnYkFiIc/wGbNU90Z1DWqqbE=) 7: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: 07ReJGyIK53JeV+YbLu8rBqyx9+F8Oi7yrJ4HQHFxiY=) 8: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: 4fEOii8ZVkphitq3keztse3/jk9FCrDte0vKSiG2cac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7d:28:19:ca:f8:66:5a:f2:8c:4c:98:d1:6c:5c:01:da:62:c0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: May 19 11:16:04 2024 GMT Not After : May 22 21:40:04 2024 GMT Subject: CN=C18B90175D6C9BB5629728EFF8EBBD9938C26270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:88:c6:b7:fe:a2:bf:76:2e:5d:e5:1d:78:3f: e8:bd:24:0f:ae:9a:92:ab:c4:19:e5:a2:ae:62:b7: 23:a1:4a:4a:0a:a7:e8:d4:68:96:c4:d0:7b:f7:50: 09:d7:62:6b:85:9d:83:93:3d:59:2c:ae:ba:e0:0f: a8:c6:2c:88:52:0f:5b:0d:da:0c:c3:03:71:f2:fc: 10:77:28:f1:e5:66:b8:d1:ee:f4:d0:5e:cf:3a:31: c0:82:1f:ea:15:30:7f:ed:2b:a8:81:a8:6b:b8:c9: 53:9a:63:88:fb:dc:11:67:09:34:63:f4:80:be:4a: e8:c6:e5:03:64:17:eb:1a:0f:fa:5e:07:5c:36:fb: f8:9b:aa:1c:f5:4c:71:5c:4b:c5:04:8a:e9:07:9a: 6a:26:77:71:2c:8a:42:f4:e7:c2:68:d7:54:0f:df: 43:ce:94:16:d2:74:f9:ea:f3:49:7d:77:fd:61:5b: ab:05:aa:8d:dd:08:90:0c:70:4b:57:ea:fa:e1:5b: f3:77:57:c1:70:18:ab:17:32:28:99:36:2f:04:39: 35:69:29:30:66:fd:3f:f8:3d:ce:d9:f0:7a:4e:26: 35:72:ca:62:a9:ea:5f:20:82:04:7e:ec:b0:52:4f: cd:f1:b0:09:89:16:45:79:4c:65:e7:f6:0b:f4:1b: b6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8B:90:17:5D:6C:9B:B5:62:97:28:EF:F8:EB:BD:99:38:C2:62:70 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fa:04:ba:40:77:91:98:1d:77:10:62:6d:d7:30:31:94:7c: 9e:17:2e:c4:af:6a:30:ce:e4:b2:4c:49:0a:d5:09:84:5e:ce: 45:23:27:50:bd:fe:95:de:ab:e3:1c:6c:36:ae:e0:7a:d3:1c: 7c:46:e3:f2:9f:20:9d:4c:4b:2d:59:60:f1:56:5d:90:b9:70: 2a:ba:21:8e:76:92:13:66:df:e7:53:14:b3:93:9d:10:7f:e7: 76:1f:b7:f0:8d:e2:29:7a:56:36:ec:dd:d0:f1:4b:a2:d5:1b: 60:a4:b2:be:5f:12:c7:cc:84:f1:0f:c9:40:9b:e8:ea:d4:71: 70:12:4d:ca:3f:c6:79:54:7b:6c:c7:31:3d:5d:c1:4c:c3:8f: 23:0d:90:46:c8:f1:c9:d4:43:49:80:48:c5:49:71:57:c7:f0: 03:23:e6:5e:d4:a3:af:9e:15:d7:66:89:a3:22:c8:11:df:a6: 62:98:ac:dc:90:36:28:ba:ab:16:d9:c8:80:0d:3c:8b:bb:0d: c3:0a:c9:7e:e7:42:4c:46:98:f1:a7:e3:c0:c1:4c:3d:15:76: cb:ff:b0:30:2e:f9:11:54:2b:d7:d7:d1:19:b1:a5:e8:31:e2: b4:fa:44:ef:a6:84:89:e3:f0:f3:66:74:c5:60:6e:a6:d2:cf: be:6f:d8:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA30oGcr4ZlryjEyY0WxcAdpiwBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNDA1MTkxMTE2MDRaFw0yNDA1MjIyMTQwMDRaMDMxMTAvBgNV BAMTKEMxOEI5MDE3NUQ2QzlCQjU2Mjk3MjhFRkY4RUJCRDk5MzhDMjYyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCviMa3/qK/di5d5R14P+i9JA+u mpKrxBnloq5ityOhSkoKp+jUaJbE0Hv3UAnXYmuFnYOTPVksrrrgD6jGLIhSD1sN 2gzDA3Hy/BB3KPHlZrjR7vTQXs86McCCH+oVMH/tK6iBqGu4yVOaY4j73BFnCTRj 9IC+SujG5QNkF+saD/peB1w2+/ibqhz1THFcS8UEiukHmmomd3EsikL058Jo11QP 30POlBbSdPnq80l9d/1hW6sFqo3dCJAMcEtX6vrhW/N3V8FwGKsXMiiZNi8EOTVp KTBm/T/4Pc7Z8HpOJjVyymKp6l8gggR+7LBST83xsAmJFkV5TGXn9gv0G7ZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwYuQF11sm7Vilyjv+Ou9mTjCYnAwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHf6BLpAd5GYHXcQYm3XMDGUfJ4XLsSvajDO 5LJMSQrVCYRezkUjJ1C9/pXeq+McbDau4HrTHHxG4/KfIJ1MSy1ZYPFWXZC5cCq6 IY52khNm3+dTFLOTnRB/53Yft/CN4il6Vjbs3dDxS6LVG2Cksr5fEsfMhPEPyUCb 6OrUcXASTco/xnlUe2zHMT1dwUzDjyMNkEbI8cnUQ0mASMVJcVfH8AMj5l7Uo6+e FddmiaMiyBHfpmKYrNyQNii6qxbZyIANPIu7DcMKyX7nQkxGmPGn48DBTD0Vdsv/ sDAu+RFUK9fX0Rmxpegx4rT6RO+mhInj8PNmdMVgbqbSz75v2J4= -----END CERTIFICATE-----Generated at Sun May 19 12:05:07 2024 by rpki-client on console-fra.rpki-client.org