$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft File: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft (raw, json) Hash identifier: AJxVRgtqnB9n7Wy7A06Ub3QN9Af7vkS6jQDKby9SiFo= Subject key identifier: 7E:BD:7B:7E:2A:4D:88:1F:87:21:81:09:B2:F9:49:D0:96:9C:2F:8A Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 Certificate issuer: /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Certificate serial: 3351AA168597A066C99BC892EFA4D6CC7800D6DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft Manifest number: 03E7 Signing time: Fri 17 May 2024 12:40:46 +0000 Manifest this update: Fri 17 May 2024 12:35:46 +0000 Manifest next update: Tue 21 May 2024 00:35:46 +0000 Files and hashes: 1: 3130332e3131342e37392e302f32342d3234203d3e203233363739.roa (hash: xE/Hu5o7m5DVPp5T2r5JizSYZQshzPQj7i70LmxRLwg=) 2: 3130332e3131342e37362e302f32342d3234203d3e203233363739.roa (hash: Di4bxTeHVZAGALpcAJOfAd5SAJgetpbmq8aeWJaZ+aw=) 3: 3130332e3131342e37372e302f32342d3234203d3e203233363739.roa (hash: 4iF2DAYXca0PwyRa6I/9oqnyxS2Bxw4WunP3ufbDqb0=) 4: 44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl (hash: TRkvg7yY6GDPZBgc+FKF5sLdUFzFx5Vj3V/hE8pvugM=) 5: 3130332e3131342e37382e302f32342d3234203d3e203233363739.roa (hash: z4JufMAAhm6RIwM2MCEN5dNOyrlVB1ETMbcKAAyjeIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 23:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:51:aa:16:85:97:a0:66:c9:9b:c8:92:ef:a4:d6:cc:78:00:d6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045 Validity Not Before: May 17 12:35:46 2024 GMT Not After : May 21 00:35:46 2024 GMT Subject: CN=7EBD7B7E2A4D881F87218109B2F949D0969C2F8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:f8:67:a6:a4:21:bb:db:5c:18:11:90:3d: 24:a9:64:5a:b9:fa:69:51:ab:5a:c9:45:60:54:1e: 4a:29:39:b2:9e:16:1d:25:0c:eb:e5:0d:e5:d6:56: 78:46:1a:7d:d5:19:f9:de:22:92:c4:6f:bb:db:19: e0:1a:63:e5:b0:d3:42:de:2f:7e:38:cf:a2:32:0c: c8:5c:35:51:48:01:fa:9b:bd:05:eb:b0:ab:72:4b: e2:58:d0:3b:e0:5c:57:65:cf:c5:9f:78:16:6c:fc: d2:c7:48:0c:72:46:6e:62:34:1c:de:2d:17:a5:c0: f3:02:45:fa:17:87:8a:c2:93:6c:73:91:ec:ca:78: 7a:1f:59:6b:c3:9d:c8:dc:ba:66:1d:5e:93:b9:ea: 64:01:10:e3:40:96:84:3a:a3:a9:fe:9d:0f:a7:05: 6a:a7:f1:5b:cf:9b:63:af:45:ef:0d:75:fe:f2:e8: 91:e3:89:1d:b8:24:1d:65:46:27:fd:27:4e:e5:06: a2:6e:19:57:22:bf:bc:c1:b7:f7:0a:23:24:cd:57: a9:52:1d:2e:41:0d:fa:bb:ec:4e:6e:7c:a5:35:80: 72:c2:79:71:d0:d7:75:5f:77:36:52:6f:a4:cf:66: ff:c7:9a:4d:10:a8:8c:a7:80:e0:37:b7:70:25:0d: 37:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BD:7B:7E:2A:4D:88:1F:87:21:81:09:B2:F9:49:D0:96:9C:2F:8A X509v3 Authority Key Identifier: keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:82:eb:cd:50:9d:8e:ee:80:f3:00:96:70:f4:10:e6:c7:03: 66:bc:39:95:8e:8a:90:52:1b:89:5d:ee:5d:5c:d7:ef:44:69: 07:f8:ce:02:47:74:db:52:10:ac:dd:3d:44:5a:2a:0f:69:23: ed:0c:20:1b:48:79:b5:cd:5b:ae:b6:76:9d:bd:1d:02:75:3f: 43:32:93:3e:9b:ab:19:62:b0:d7:c1:06:10:b0:e0:df:55:ea: b7:45:13:eb:8d:90:17:70:0b:7d:9c:5c:b0:3a:f5:34:24:d8: e8:0d:f9:5c:25:0b:ed:f2:53:d8:c9:cb:c5:35:e4:2d:ec:64: 19:fb:8b:b9:46:0d:86:6a:ab:ef:62:ea:b7:b9:da:38:cc:5c: 58:e8:3c:07:7d:63:22:e6:09:4c:7f:eb:ad:df:04:15:17:fe: 99:56:cf:e3:40:dc:de:66:d2:be:94:ed:20:d5:5e:93:42:5c: 4e:13:d5:43:67:41:b7:91:8e:22:de:fa:5b:52:d7:c7:b0:45: 72:7e:96:0f:7f:59:37:e0:c6:0c:e7:2a:a3:95:49:e6:bd:ba: 88:c6:19:3c:31:10:25:a6:ce:2f:39:30:9f:fb:37:31:7b:bf: bb:c1:21:61:03:82:03:f7:18:92:55:ac:ad:81:5f:01:52:aa: a4:94:81:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1GqFoWXoGbJm8iS76TWzHgA1towDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3 RkNDODA0NTAeFw0yNDA1MTcxMjM1NDZaFw0yNDA1MjEwMDM1NDZaMDMxMTAvBgNV BAMTKDdFQkQ3QjdFMkE0RDg4MUY4NzIxODEwOUIyRjk0OUQwOTY5QzJGOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1PhnpqQhu9tcGBGQPSSpZFq5 +mlRq1rJRWBUHkopObKeFh0lDOvlDeXWVnhGGn3VGfneIpLEb7vbGeAaY+Ww00Le L344z6IyDMhcNVFIAfqbvQXrsKtyS+JY0DvgXFdlz8WfeBZs/NLHSAxyRm5iNBze LRelwPMCRfoXh4rCk2xzkezKeHofWWvDncjcumYdXpO56mQBEONAloQ6o6n+nQ+n BWqn8VvPm2OvRe8Ndf7y6JHjiR24JB1lRif9J07lBqJuGVciv7zBt/cKIyTNV6lS HS5BDfq77E5ufKU1gHLCeXHQ13VfdzZSb6TPZv/Hmk0QqIyngOA3t3AlDTfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfr17fipNiB+HIYEJsvlJ0JacL4owHwYDVR0j BBgwFoAUREMP1qvKslS65674bl9dd3/MgEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODU0NzdjZS0wNzE3LTQ3YzAtODc2Ni04YjliZWMwYzA4NmMvMC80NDQzMEZENkFC Q0FCMjU0QkFFN0FFRjg2RTVGNUQ3NzdGQ0M4MDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVENzc3RkND ODA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg1NDc3Y2UtMDcxNy00N2MwLTg3 NjYtOGI5YmVjMGMwODZjLzAvNDQ0MzBGRDZBQkNBQjI1NEJBRTdBRUY4NkU1RjVE Nzc3RkNDODA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqC681QnY7ugPMAlnD0EObHA2a8OZWOipBS G4ld7l1c1+9EaQf4zgJHdNtSEKzdPURaKg9pI+0MIBtIebXNW662dp29HQJ1P0My kz6bqxlisNfBBhCw4N9V6rdFE+uNkBdwC32cXLA69TQk2OgN+VwlC+3yU9jJy8U1 5C3sZBn7i7lGDYZqq+9i6re52jjMXFjoPAd9YyLmCUx/663fBBUX/plWz+NA3N5m 0r6U7SDVXpNCXE4T1UNnQbeRjiLe+ltS18ewRXJ+lg9/WTfgxgznKqOVSea9uojG GTwxECWmzi85MJ/7NzF7v7vBIWEDggP3GJJVrK2BXwFSqqSUgUM= -----END CERTIFICATE-----Generated at Fri May 17 14:07:15 2024 by rpki-client on console-fra.rpki-client.org