$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft File: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft (raw, json) Hash identifier: tkg0trCsKIZIpLZ48+Tjns0Qgh4hCxGRDTspek2rgC8= Subject key identifier: CF:D2:BD:E9:D9:DB:F9:44:C5:F8:58:29:A9:76:B3:78:33:52:02:26 Authority key identifier: 68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C Certificate issuer: /CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Certificate serial: 6497E2BCC01414F0596E6E47501C718C8D4AA716 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft Manifest number: 02B4 Signing time: Fri 24 May 2024 12:01:23 +0000 Manifest this update: Fri 24 May 2024 11:56:23 +0000 Manifest next update: Mon 27 May 2024 15:21:23 +0000 Files and hashes: 1: 3130332e3136352e3235342e302f32332d3234203d3e203137393935.roa (hash: Nffkoo06i7fpkm9DqasN4skkNaTCVO14nqtiROVpXl4=) 2: 687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl (hash: y+78Z03trfEYogaklgqR8nfaLcm6IT6xdmm7KQwb7xs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 15:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:97:e2:bc:c0:14:14:f0:59:6e:6e:47:50:1c:71:8c:8d:4a:a7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687247CE80E62AD4B40F0B9915A1B6F3020F684C Validity Not Before: May 24 11:56:23 2024 GMT Not After : May 27 15:21:23 2024 GMT Subject: CN=CFD2BDE9D9DBF944C5F85829A976B37833520226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:a7:a0:85:7d:75:a6:90:c3:e8:a2:c7:84: a8:aa:7c:98:2c:5d:f8:5c:fb:97:48:03:37:c3:c1: a2:92:dc:22:41:de:de:5d:06:61:cf:b4:c9:64:58: 72:6f:ba:6d:be:67:87:9e:f5:d1:3d:30:97:83:3f: ae:e0:82:66:c6:b7:4e:c6:0d:c3:b4:57:d7:1e:91: 1c:9d:40:14:e6:af:b3:60:35:ff:96:a6:bc:e5:22: 2c:17:a3:48:d8:16:e5:90:98:11:83:ce:4a:6f:f0: 15:34:9b:43:48:32:59:0d:02:f6:e6:1a:7b:38:f6: a0:90:0e:98:3e:f5:24:df:b0:42:12:69:38:3d:5b: aa:61:23:7f:49:1e:60:89:a2:b7:76:cd:48:5d:7f: 32:08:6b:c1:02:9f:ef:11:43:d3:d8:10:19:34:b9: 32:53:d6:93:03:cd:51:2e:27:e3:9b:30:1a:da:87: dd:bb:4f:0e:bb:e3:d5:0c:f5:8b:3b:36:1d:1a:3d: a2:45:69:f8:93:98:72:fb:8e:58:4c:cd:2f:8d:fc: c8:8a:e0:df:ac:1a:bc:74:5f:9d:91:84:4c:67:79: 11:e9:73:5b:ad:c9:17:18:66:31:1a:f4:02:ff:17: 2c:c5:e6:9c:e3:b4:a4:2c:c1:d6:41:27:23:eb:b1: 2d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D2:BD:E9:D9:DB:F9:44:C5:F8:58:29:A9:76:B3:78:33:52:02:26 X509v3 Authority Key Identifier: keyid:68:72:47:CE:80:E6:2A:D4:B4:0F:0B:99:15:A1:B6:F3:02:0F:68:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/687247CE80E62AD4B40F0B9915A1B6F3020F684C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e5468c-0ac7-44a9-8821-28257c5a8607/0/687247CE80E62AD4B40F0B9915A1B6F3020F684C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:71:32:bd:e4:4a:fa:06:a6:7c:fd:68:cb:8f:ab:b9:b8:30: 11:38:f0:00:61:ab:44:dc:b0:68:d0:69:aa:c2:12:0f:3f:e3: ea:cb:a9:36:e5:68:02:48:54:90:8c:57:ec:d2:5c:cc:65:03: 52:56:7f:9b:5f:97:7d:b2:bd:e6:5b:2a:41:ab:52:00:9c:8c: 55:57:97:b0:93:f9:f1:23:bb:d9:a9:f1:af:20:cd:4c:3b:c0: 85:d1:2f:f3:e2:d0:07:9c:13:f6:51:5c:a1:ce:bc:61:4f:8d: 03:ec:44:ba:c6:5d:f6:1d:39:e7:5b:e4:29:1e:0c:84:79:dc: 21:ce:5e:91:a7:b9:55:17:9d:ae:19:f5:b1:cb:d4:84:7c:a2: a3:3c:01:0d:b8:32:5a:33:3f:53:b0:1e:66:5e:dd:2f:4a:ad: a7:c3:51:46:e9:7e:23:f2:33:9c:4a:cb:04:d5:a4:5a:46:86: 1b:07:fa:1c:9b:d7:3e:44:a0:62:95:26:c9:95:10:a6:1d:b1: 10:09:c5:9c:85:35:6c:63:00:e0:a8:09:81:07:62:7c:ef:1e: d6:d4:ec:d1:85:12:3d:f0:74:02:0c:81:d3:0c:58:75:33:71: 27:ee:75:d4:5b:7d:63:e1:f7:b3:31:7a:14:64:1f:d7:ff:79: 98:b7:07:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJfivMAUFPBZbm5HUBxxjI1KpxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMw MjBGNjg0QzAeFw0yNDA1MjQxMTU2MjNaFw0yNDA1MjcxNTIxMjNaMDMxMTAvBgNV BAMTKENGRDJCREU5RDlEQkY5NDRDNUY4NTgyOUE5NzZCMzc4MzM1MjAyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZaeghX11ppDD6KLHhKiqfJgs Xfhc+5dIAzfDwaKS3CJB3t5dBmHPtMlkWHJvum2+Z4ee9dE9MJeDP67ggmbGt07G DcO0V9cekRydQBTmr7NgNf+WprzlIiwXo0jYFuWQmBGDzkpv8BU0m0NIMlkNAvbm Gns49qCQDpg+9STfsEISaTg9W6phI39JHmCJord2zUhdfzIIa8ECn+8RQ9PYEBk0 uTJT1pMDzVEuJ+ObMBrah927Tw6749UM9Ys7Nh0aPaJFafiTmHL7jlhMzS+N/MiK 4N+sGrx0X52RhExneRHpc1utyRcYZjEa9AL/FyzF5pzjtKQswdZBJyPrsS01AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz9K96dnb+UTF+FgpqXazeDNSAiYwHwYDVR0j BBgwFoAUaHJHzoDmKtS0DwuZFaG28wIPaEwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWU1NDY4Yy0wYWM3LTQ0YTktODgyMS0yODI1N2M1YTg2MDcvMC82ODcyNDdDRTgw RTYyQUQ0QjQwRjBCOTkxNUExQjZGMzAyMEY2ODRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2RjMwMjBG Njg0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlNTQ2OGMtMGFjNy00NGE5LTg4 MjEtMjgyNTdjNWE4NjA3LzAvNjg3MjQ3Q0U4MEU2MkFENEI0MEYwQjk5MTVBMUI2 RjMwMjBGNjg0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMtxMr3kSvoGpnz9aMuPq7m4MBE48ABhq0Tc sGjQaarCEg8/4+rLqTblaAJIVJCMV+zSXMxlA1JWf5tfl32yveZbKkGrUgCcjFVX l7CT+fEju9mp8a8gzUw7wIXRL/Pi0AecE/ZRXKHOvGFPjQPsRLrGXfYdOedb5Cke DIR53CHOXpGnuVUXna4Z9bHL1IR8oqM8AQ24MlozP1OwHmZe3S9KrafDUUbpfiPy M5xKywTVpFpGhhsH+hyb1z5EoGKVJsmVEKYdsRAJxZyFNWxjAOCoCYEHYnzvHtbU 7NGFEj3wdAIMgdMMWHUzcSfuddRbfWPh97MxehRkH9f/eZi3BwI= -----END CERTIFICATE-----Generated at Fri May 24 13:32:44 2024 by rpki-client on console-fra.rpki-client.org