$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: 6HBKtXynMWHZqXMIktMh6j0KbiKSFKk8DxEXv9L7pcQ= Subject key identifier: DF:75:20:4D:DD:9E:56:B6:6C:60:87:B6:4C:4B:C8:4C:1F:DF:02:8A Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 35D0B0D9BC0489895B85E1B951784859AFFCB44B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 02C8 Signing time: Wed 29 May 2024 19:21:33 +0000 Manifest this update: Wed 29 May 2024 19:16:33 +0000 Manifest next update: Sat 01 Jun 2024 23:31:33 +0000 Files and hashes: 1: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: qlsnnMGB3pEiulOuEdOGGwyfWYnb5v4ye+BKemUKd58=) 2: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: 67RaJO0BVjwL2QvHGTiy37df+7Wryiq/JiMgePF6ZjA=) 3: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: ptdB14OH/KEJBJuJDneWvHIf1eH0/ytKubtngKPMCWo=) 4: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: 3o94ySZn3ymzRSoPlKuIImNUjtpbeDT+svqlyPdQDQw=) 5: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: ciXT6z5vtm66GnIFMEU4jXlTjAv9E2PR+NPFegREDPQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 23:31:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d0:b0:d9:bc:04:89:89:5b:85:e1:b9:51:78:48:59:af:fc:b4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: May 29 19:16:33 2024 GMT Not After : Jun 1 23:31:33 2024 GMT Subject: CN=DF75204DDD9E56B66C6087B64C4BC84C1FDF028A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:71:80:d8:78:4d:74:d5:b3:df:ce:6b:29:25: fd:e6:55:4e:f0:48:d9:c8:13:ec:bc:40:7b:f6:28: 67:1b:f6:39:3a:05:e2:f4:5a:ed:b3:71:55:31:c3: 2c:f1:60:ab:a9:e3:7f:10:1f:e9:9b:df:23:47:26: 3e:fa:73:fb:42:71:c6:0d:76:3e:6b:5a:31:93:fd: 16:1f:37:bf:8b:b9:84:86:e7:30:d0:c2:12:7c:18: 54:8a:11:f9:e0:84:f6:f3:ec:29:13:af:67:56:7d: f7:fb:ed:ee:88:27:c4:fe:52:9f:18:08:41:ea:78: eb:b4:68:86:bd:7e:dc:9c:9e:da:90:b1:52:05:08: 55:a6:61:2f:b3:80:ca:a8:87:b4:6f:5e:55:74:e0: 9a:82:0d:33:19:cd:73:41:2f:8a:97:b8:c3:61:38: f4:2a:b0:fc:e1:f0:e9:ea:1c:1a:7b:01:79:e7:02: 07:e1:f8:0b:d4:fe:db:ec:d4:71:f4:4d:bd:94:3d: 7f:09:44:ed:5b:cf:38:6e:5e:65:be:e6:f0:9c:6c: a7:60:85:cb:64:a3:d5:64:4b:d2:b9:86:39:e5:a8: 9a:81:3b:ec:d9:db:c7:1f:37:f6:79:e8:f8:d5:dc: 85:46:42:01:a6:a8:53:d3:cc:e9:65:b6:44:13:a1: 27:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:75:20:4D:DD:9E:56:B6:6C:60:87:B6:4C:4B:C8:4C:1F:DF:02:8A X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:da:2d:40:ab:fc:31:04:88:82:97:ef:08:12:f2:93:40:37: 32:ad:81:84:c7:7b:7d:14:af:47:19:3c:b7:b3:54:e2:05:80: 56:96:3f:38:92:f0:4c:21:1f:af:48:9d:08:2e:44:c5:3f:f8: 8b:77:0c:90:c5:4e:9c:e3:d6:11:fe:3d:81:95:a4:e2:da:23: 02:cc:81:e3:c0:70:0b:b9:c6:3d:84:6f:a1:17:84:ac:1d:78: 9b:1e:19:e2:a2:65:5d:b6:f4:b0:1d:52:43:58:cf:97:67:9c: d9:15:75:b3:0c:df:e1:46:d5:d2:d3:57:56:ef:93:ff:4f:ed: f9:57:df:ef:c9:53:b3:01:d1:22:ec:82:2e:12:3a:8b:10:4b: ac:9b:e4:9e:01:23:f1:6a:07:64:a0:ad:1a:9e:83:90:f5:9f: a5:6c:57:e4:ce:60:68:c5:d1:aa:7f:be:ad:6e:df:48:41:9c: 75:36:80:69:cb:33:7a:a3:96:b5:aa:f3:14:bf:96:33:1c:16: f8:28:a7:99:0f:65:4d:b4:c5:45:bc:59:29:96:a2:9a:cc:8c: e3:88:ca:08:40:aa:17:e6:88:18:74:96:03:a3:cb:f6:3f:c5: c3:ad:70:bb:8c:bb:e5:e5:61:ea:26:30:57:a3:8e:91:ab:42: 2e:4f:b9:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdCw2bwEiYlbheG5UXhIWa/8tEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNDA1MjkxOTE2MzNaFw0yNDA2MDEyMzMxMzNaMDMxMTAvBgNV BAMTKERGNzUyMDREREQ5RTU2QjY2QzYwODdCNjRDNEJDODRDMUZERjAyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtcYDYeE101bPfzmspJf3mVU7w SNnIE+y8QHv2KGcb9jk6BeL0Wu2zcVUxwyzxYKup438QH+mb3yNHJj76c/tCccYN dj5rWjGT/RYfN7+LuYSG5zDQwhJ8GFSKEfnghPbz7CkTr2dWfff77e6IJ8T+Up8Y CEHqeOu0aIa9ftycntqQsVIFCFWmYS+zgMqoh7RvXlV04JqCDTMZzXNBL4qXuMNh OPQqsPzh8OnqHBp7AXnnAgfh+AvU/tvs1HH0Tb2UPX8JRO1bzzhuXmW+5vCcbKdg hctko9VkS9K5hjnlqJqBO+zZ28cfN/Z56PjV3IVGQgGmqFPTzOlltkQToSexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU33UgTd2eVrZsYIe2TEvITB/fAoowHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnaLUCr/DEEiIKX7wgS8pNANzKtgYTHe30U r0cZPLezVOIFgFaWPziS8EwhH69InQguRMU/+It3DJDFTpzj1hH+PYGVpOLaIwLM gePAcAu5xj2Eb6EXhKwdeJseGeKiZV229LAdUkNYz5dnnNkVdbMM3+FG1dLTV1bv k/9P7flX3+/JU7MB0SLsgi4SOosQS6yb5J4BI/FqB2SgrRqeg5D1n6VsV+TOYGjF 0ap/vq1u30hBnHU2gGnLM3qjlrWq8xS/ljMcFvgop5kPZU20xUW8WSmWoprMjOOI yghAqhfmiBh0lgOjy/Y/xcOtcLuMu+XlYeomMFejjpGrQi5Pubg= -----END CERTIFICATE-----Generated at Wed May 29 20:52:56 2024 by rpki-client on console-fra.rpki-client.org