$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json) Hash identifier: 0cTfAMoH2g12GTvpR++yyX8DCGrpFXbY6zzZ4D0Bh5A= Subject key identifier: 46:A5:B0:FD:95:AE:A7:1D:6D:0E:04:EC:3D:72:A5:0D:08:52:49:7C Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Certificate serial: 259B5160198E2431041F12F96EF7D87F2DD2B6D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft Manifest number: 014C Signing time: Sat 18 May 2024 10:20:45 +0000 Manifest this update: Sat 18 May 2024 10:15:45 +0000 Manifest next update: Tue 21 May 2024 11:47:45 +0000 Files and hashes: 1: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: YWKzDpl9v9jRnukp+eNp9QvhKFqzwcN+qdwORmJkhJA=) 2: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: Kn9UdT6Bn5USPgPzsguechkf6th1+rKWZ3g9pkJt4r8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 11:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9b:51:60:19:8e:24:31:04:1f:12:f9:6e:f7:d8:7f:2d:d2:b6:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Validity Not Before: May 18 10:15:45 2024 GMT Not After : May 21 11:47:45 2024 GMT Subject: CN=46A5B0FD95AEA71D6D0E04EC3D72A50D0852497C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d0:ed:16:44:61:99:9a:7a:55:02:04:32:61: 37:1d:bd:aa:d6:c2:6d:a2:95:0b:6d:e5:e8:f0:77: bb:4e:d2:44:53:bf:37:cc:e5:97:c8:67:86:70:28: 3d:e2:5c:7a:35:da:05:89:45:76:47:c6:1e:c6:6c: 25:53:bc:ac:74:c0:5b:e1:38:24:1b:b0:65:34:20: 21:74:c3:35:82:b7:3e:a3:2f:19:a6:65:00:65:b7: 83:ba:e5:81:ae:f6:71:74:64:7f:31:da:7d:fd:36: 7b:dc:28:5c:26:66:60:b9:a2:12:cd:00:ee:8c:29: aa:6c:93:ac:4f:b8:81:75:e6:48:10:b1:6d:9d:44: aa:c8:ba:05:09:50:4a:12:11:4d:17:a2:1f:0c:04: 70:8a:ee:8c:e2:15:fa:29:2c:25:df:9c:e8:ca:75: 09:37:7d:e6:d8:72:41:39:e7:58:80:5a:92:b0:91: 0f:a1:1f:9e:e1:de:38:95:a2:69:39:54:fd:6e:b6: 75:74:47:44:e5:c7:eb:09:af:9c:db:25:3a:89:fd: 67:b2:b5:f8:17:3f:0a:8e:56:6b:29:03:17:ab:b0: cd:ff:0e:5f:6d:a3:1f:11:e4:58:36:e1:9f:5a:73: 0c:ad:f7:fc:99:69:c5:27:33:f8:b4:ad:82:fe:dc: 8c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A5:B0:FD:95:AE:A7:1D:6D:0E:04:EC:3D:72:A5:0D:08:52:49:7C X509v3 Authority Key Identifier: keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:04:5e:24:c4:a2:5b:a1:a5:c7:e4:cf:52:c2:f0:c6:2d:bc: 25:da:99:29:28:42:b2:48:59:1c:a7:54:42:03:b4:74:3f:a2: d0:a8:c5:15:eb:68:1e:0d:19:07:cc:ff:e7:21:e0:87:cd:4f: 9c:1e:e7:5b:04:72:6e:ad:cd:ab:a4:21:46:d8:7c:93:10:53: 52:90:f1:59:36:bc:62:9c:45:c7:44:7a:f7:a6:74:de:95:46: 22:99:b5:53:59:1c:70:09:3e:d6:0c:d3:82:f2:df:2f:72:da: 54:dd:01:d3:aa:ac:b6:e0:3a:f7:4c:d4:dc:92:1b:f1:2d:34: fd:6a:7e:73:72:bb:c5:ae:e3:8a:0b:7a:7f:94:63:6c:73:b9: ab:8a:df:cc:6e:c2:43:4b:26:05:75:3b:8b:94:b9:c0:c9:51: fd:c0:0f:b2:72:5c:db:7e:20:25:d3:eb:3a:8f:16:86:e5:a6: 18:2c:13:85:85:9c:fb:94:1f:77:0d:06:10:e2:43:84:5e:40: b7:29:f8:bd:fb:30:37:82:4c:0b:21:64:0a:49:81:53:3b:77: 18:d9:ff:35:ac:11:f5:0b:24:09:ec:46:fd:0b:e2:fb:36:79: 00:75:cf:be:17:1c:23:28:4b:dd:53:0f:08:f7:cb:9f:2e:2f: 9b:d5:cf:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZtRYBmOJDEEHxL5bvfYfy3SttUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC RTAwRDc0MTAeFw0yNDA1MTgxMDE1NDVaFw0yNDA1MjExMTQ3NDVaMDMxMTAvBgNV BAMTKDQ2QTVCMEZEOTVBRUE3MUQ2RDBFMDRFQzNENzJBNTBEMDg1MjQ5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0O0WRGGZmnpVAgQyYTcdvarW wm2ilQtt5ejwd7tO0kRTvzfM5ZfIZ4ZwKD3iXHo12gWJRXZHxh7GbCVTvKx0wFvh OCQbsGU0ICF0wzWCtz6jLxmmZQBlt4O65YGu9nF0ZH8x2n39NnvcKFwmZmC5ohLN AO6MKapsk6xPuIF15kgQsW2dRKrIugUJUEoSEU0Xoh8MBHCK7oziFfopLCXfnOjK dQk3febYckE551iAWpKwkQ+hH57h3jiVomk5VP1utnV0R0Tlx+sJr5zbJTqJ/Wey tfgXPwqOVmspAxersM3/Dl9tox8R5Fg24Z9acwyt9/yZacUnM/i0rYL+3Ix3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURqWw/ZWupx1tDgTsPXKlDQhSSXwwHwYDVR0j BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw RDc0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMz RkJCRTAwRDc0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYEXiTEoluhpcfkz1LC8MYtvCXamSkoQrJI WRynVEIDtHQ/otCoxRXraB4NGQfM/+ch4IfNT5we51sEcm6tzaukIUbYfJMQU1KQ 8Vk2vGKcRcdEevemdN6VRiKZtVNZHHAJPtYM04Ly3y9y2lTdAdOqrLbgOvdM1NyS G/EtNP1qfnNyu8Wu44oLen+UY2xzuauK38xuwkNLJgV1O4uUucDJUf3AD7JyXNt+ ICXT6zqPFoblphgsE4WFnPuUH3cNBhDiQ4ReQLcp+L37MDeCTAshZApJgVM7dxjZ /zWsEfULJAnsRv0L4vs2eQB1z74XHCMoS91TDwj3y58uL5vVz3Q= -----END CERTIFICATE-----Generated at Sat May 18 11:25:22 2024 by rpki-client on console-ams.rpki-client.org