$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: uUBAgDaxsDRvUA9gGw6OpfiZghKrubuPo3plXvHtMF4= Subject key identifier: 31:A7:CF:4E:6A:51:EE:08:68:82:D6:3F:2D:7B:DA:02:9B:89:FF:5D Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 4A4137E28D7F8F3FD297B8B21AD23B805C09F743 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 032A Signing time: Sat 22 Jun 2024 15:31:45 +0000 Manifest this update: Sat 22 Jun 2024 15:26:45 +0000 Manifest next update: Wed 26 Jun 2024 00:25:45 +0000 Files and hashes: 1: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: SBYMmYBfrCs2WfNZN3VgvFkpEHtrvM3R/R/LXQKrJ8A=) 2: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: wFJ0ba8HuNB/OKXoQmP64RpXh53KiHLMWS+Nt/Tbzv0=) 3: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: m+riYYWBjYg5bArfNGpmozd1ySUeq6OAgOemoOaCUbc=) 4: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: KJraJguQ7laMIEBC1Np5Kt1fMBfmXEvcADkiF683UEk=) 5: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: fJfkrNUZ22LXZ2eFwdxloDXOCffqaxnvAKklKrizBbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 07:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:41:37:e2:8d:7f:8f:3f:d2:97:b8:b2:1a:d2:3b:80:5c:09:f7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Jun 22 15:26:45 2024 GMT Not After : Jun 26 00:25:45 2024 GMT Subject: CN=31A7CF4E6A51EE086882D63F2D7BDA029B89FF5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:2a:10:d0:6d:d1:70:ea:52:4f:2b:01:c8: c0:27:f1:ab:d1:71:42:7a:91:dc:e2:62:b6:8f:31: 2e:45:69:7f:1d:5e:06:4f:51:f3:c6:01:cd:97:71: 85:05:8f:84:15:12:fc:d4:5b:d5:bc:95:dc:f0:01: a0:5c:44:15:d3:b4:dc:e9:33:ef:9f:53:5c:61:31: a8:f9:67:c6:6d:a7:74:76:05:a8:0e:16:fd:11:30: c4:62:99:24:dc:43:c6:87:b9:5c:f4:fa:d7:bb:69: 16:91:c6:98:a7:90:0e:1e:0c:84:84:b3:c9:61:96: 44:e1:ca:35:a4:a2:3f:40:aa:e8:e6:24:60:2a:d6: 21:9a:13:cd:35:92:9c:66:91:7e:d4:09:05:72:fc: d3:bd:b2:7a:62:17:1a:23:6c:c9:ad:68:1d:a4:62: b1:4e:92:a2:02:19:48:a7:bc:bc:0e:db:43:8a:7f: 8f:2d:df:4e:61:41:eb:d6:a4:99:fa:1e:c3:67:5f: d4:84:aa:bc:de:50:f9:af:05:7c:93:bb:b0:40:79: 33:1d:b2:b3:44:c2:15:48:03:9a:6a:e2:fa:17:57: 2a:25:de:36:01:c6:1e:57:3f:9b:75:da:e0:0f:50: 23:43:8e:97:fb:9d:7f:b8:cd:8c:40:de:e8:b4:f2: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A7:CF:4E:6A:51:EE:08:68:82:D6:3F:2D:7B:DA:02:9B:89:FF:5D X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:14:8a:bd:c8:5e:f8:a9:2b:1c:e6:79:ea:26:0d:32:b3:52: 3e:bc:35:e0:79:bf:a6:bb:57:fa:6d:44:03:2e:5a:21:21:c9: 77:d2:66:5e:c5:48:44:be:56:71:07:5e:a6:9a:80:c1:e8:19: d8:93:63:e4:f4:16:c7:d3:f3:07:3a:0e:7d:ae:36:e9:56:d9: 47:7d:14:ad:ad:3a:41:6c:15:a4:20:27:e2:63:51:42:01:03: 65:5e:67:17:5e:f6:f9:42:3f:0e:eb:8b:af:91:e9:87:ed:80: b1:b2:ea:04:df:46:ab:29:67:2c:a6:cc:66:1e:a1:17:cd:1d: f0:1d:29:24:49:66:cb:1d:78:92:93:b5:e7:54:48:ce:6d:f9: ee:f4:c4:15:28:2c:95:08:90:64:2d:82:40:65:cb:4d:df:3c: f6:47:d8:27:7b:ae:2e:5d:f2:cd:c8:3c:2f:66:63:c1:57:f9: e7:d4:ce:93:9c:44:53:3a:1d:3b:e6:a7:f0:e9:24:52:b2:e7: b7:4a:44:40:41:83:e1:55:5c:b6:60:5d:bf:ea:4c:75:0f:5f: e0:dc:ee:84:c3:05:1d:07:48:60:aa:30:05:87:e4:27:4a:7c: b6:cb:78:a2:13:49:c3:93:6d:37:02:34:bb:59:66:14:31:7a: 5d:99:c1:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSkE34o1/jz/Sl7iyGtI7gFwJ90MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNDA2MjIxNTI2NDVaFw0yNDA2MjYwMDI1NDVaMDMxMTAvBgNV BAMTKDMxQTdDRjRFNkE1MUVFMDg2ODgyRDYzRjJEN0JEQTAyOUI4OUZGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDECyoQ0G3RcOpSTysByMAn8avR cUJ6kdziYraPMS5FaX8dXgZPUfPGAc2XcYUFj4QVEvzUW9W8ldzwAaBcRBXTtNzp M++fU1xhMaj5Z8Ztp3R2BagOFv0RMMRimSTcQ8aHuVz0+te7aRaRxpinkA4eDISE s8lhlkThyjWkoj9AqujmJGAq1iGaE801kpxmkX7UCQVy/NO9snpiFxojbMmtaB2k YrFOkqICGUinvLwO20OKf48t305hQevWpJn6HsNnX9SEqrzeUPmvBXyTu7BAeTMd srNEwhVIA5pq4voXVyol3jYBxh5XP5t12uAPUCNDjpf7nX+4zYxA3ui08lKzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMafPTmpR7ghogtY/LXvaApuJ/10wHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkUir3IXvipKxzmeeomDTKzUj68NeB5v6a7 V/ptRAMuWiEhyXfSZl7FSES+VnEHXqaagMHoGdiTY+T0FsfT8wc6Dn2uNulW2Ud9 FK2tOkFsFaQgJ+JjUUIBA2VeZxde9vlCPw7ri6+R6YftgLGy6gTfRqspZyymzGYe oRfNHfAdKSRJZssdeJKTtedUSM5t+e70xBUoLJUIkGQtgkBly03fPPZH2Cd7ri5d 8s3IPC9mY8FX+efUzpOcRFM6HTvmp/DpJFKy57dKREBBg+FVXLZgXb/qTHUPX+Dc 7oTDBR0HSGCqMAWH5CdKfLbLeKITScOTbTcCNLtZZhQxel2ZwQ0= -----END CERTIFICATE-----Generated at Sat Jun 22 16:30:38 2024 by rpki-client on console-fra.rpki-client.org