$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft File: C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft (raw, json) Hash identifier: qxaE2+kiyELcinAZdRiKtJIJNJdvhns1Njgyaaxe024= Subject key identifier: 6C:C6:77:1D:DF:BC:8F:72:66:EF:59:41:BD:43:6A:D3:BC:C4:24:05 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 40EA4D5AF891A148007E70E86D5E031F41538814 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft Manifest number: 037E Signing time: Thu 16 May 2024 15:40:46 +0000 Manifest this update: Thu 16 May 2024 15:35:46 +0000 Manifest next update: Sun 19 May 2024 23:50:46 +0000 Files and hashes: 1: 3131372e35332e3134382e302f32342d3234203d3e203538333937.roa (hash: k/aYVCZ7zSJn6ub8iCRapvgrJ3pAIO9tMzVZVUMMhfY=) 2: 3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (hash: 3UrV2joe91GVv5UrXaKyEVRXWlR7DvUIxt1TBGwvMGw=) 3: C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl (hash: BY06ZuTegwmZNWGGdwkUJXqfJKioN2rUObOZVL32vMQ=) 4: 3130332e34312e3230372e302f32342d3234203d3e203538333937.roa (hash: Uk0ugrCa2nqCkhnbyUFAFIkSSyYsqStCGHk/lRvkifg=) 5: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (hash: HKVKgP2DiCFcE1ol84eqttrqH4BEUCk3X5rZIBCFu7A=) 6: 3131372e35332e3134392e302f32342d3234203d3e203538333937.roa (hash: JtGsbR94Q0VAwqm3d3PJL5RkFU8vnmgz3ScXJMqleEw=) 7: 3131372e35332e3135302e302f32342d3234203d3e203538333937.roa (hash: foU8evYUUK/WhOPn2iCnkUpSmUWVhP1OJKYDM3g1/O4=) 8: 3130332e34312e3230352e302f32342d3234203d3e203538333937.roa (hash: 0zuTvljvdNNL9h43xLv1n/Jd/iDOArcEMQK9WF7aqRU=) 9: 3131372e35332e3135312e302f32342d3234203d3e203538333937.roa (hash: 8BrAITvHaerrYAu1VoqOOGMXo5eUwhwyhxfTRZCHQl4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 20:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ea:4d:5a:f8:91:a1:48:00:7e:70:e8:6d:5e:03:1f:41:53:88:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: May 16 15:35:46 2024 GMT Not After : May 19 23:50:46 2024 GMT Subject: CN=6CC6771DDFBC8F7266EF5941BD436AD3BCC42405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:23:42:e2:e0:06:9b:49:f0:02:63:5c:d4: bc:d1:b0:bd:99:ab:68:99:b1:9a:63:c1:63:c3:8c: d1:ec:f4:f1:5c:2a:db:58:e1:f0:e4:77:9b:6d:dd: 5d:26:f7:cd:4f:8c:f4:6a:b9:80:3d:da:f7:70:9f: 7a:c6:ec:8e:2d:84:94:ee:cd:a4:86:c9:eb:8e:4a: 6a:28:bc:7e:55:5e:a8:95:23:f9:ef:5f:29:41:cc: 94:b4:c3:b8:c4:e9:d3:5d:d3:d6:a4:4c:a7:22:00: 24:e9:37:8b:ed:a1:53:87:33:d6:7a:c1:00:4e:3f: 47:ff:59:24:ba:d8:01:4d:44:e4:45:9d:44:42:00: d9:45:41:05:e0:c5:c5:cb:34:31:21:64:1b:2a:36: ab:1c:1a:bf:99:6a:04:6f:c6:bd:dc:e1:0c:0e:13: 77:22:e5:c2:32:2b:cf:dd:2d:a4:0f:96:e7:49:48: d0:5d:0f:e0:d7:4c:de:2c:92:2a:84:f8:52:74:60: 39:90:57:6f:fd:51:e2:4a:f7:ac:4a:5a:8c:ef:99: e9:e7:fa:e6:a4:4d:63:c8:e5:08:4a:b4:cb:90:38: 4c:75:b0:9a:1e:0e:6b:04:c9:e2:49:68:69:44:ff: e5:3a:41:58:0b:b1:8c:5d:c3:c4:2a:0b:b7:a0:9a: 23:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C6:77:1D:DF:BC:8F:72:66:EF:59:41:BD:43:6A:D3:BC:C4:24:05 X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e3:fc:77:24:18:ff:ef:4b:4b:af:c5:a9:1b:32:db:32:20: 71:5d:ad:c5:c0:d4:e4:04:bc:76:78:6f:dc:ed:12:4c:95:9b: dd:58:4b:ab:b4:47:e0:ff:6d:5a:d2:89:7c:b9:05:d2:f8:39: 2c:9c:87:fd:5e:41:ad:a6:7d:1f:84:fe:5e:27:be:32:af:df: 4b:b3:82:76:be:01:9a:c3:70:c6:cc:c8:c5:d6:d9:ea:4b:62: fc:3c:6d:29:36:23:f2:fe:d4:fb:14:e6:61:5b:86:e2:48:41: 76:ec:b2:70:86:88:94:a2:e3:7e:3c:ad:5d:35:d9:ed:5b:5b: f7:b1:6d:2f:c4:a8:f4:51:0c:a3:f4:fb:23:b4:cd:77:8a:a6: eb:f3:5e:be:a2:72:c4:ae:9b:0c:7e:47:0f:11:e3:3a:10:65: b1:99:43:e3:a7:1d:dd:5f:4b:ec:e5:cb:83:84:12:28:c1:69: c2:d1:44:0f:5b:17:0e:66:b9:0b:7d:bc:6c:5c:5b:00:2a:75: 30:b1:f8:c4:0e:c3:52:fb:d8:ae:a2:a4:e3:f7:bb:4e:e3:03: 47:ce:e9:5d:41:cc:76:5a:32:5c:a9:e9:98:f6:94:4e:cc:96: f2:1d:6b:b4:c1:f0:62:06:28:2a:f9:bf:76:f4:1d:b5:33:fb: e0:c2:cd:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQOpNWviRoUgAfnDobV4DH0FTiBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNDA1MTYxNTM1NDZaFw0yNDA1MTkyMzUwNDZaMDMxMTAvBgNV BAMTKDZDQzY3NzFEREZCQzhGNzI2NkVGNTk0MUJENDM2QUQzQkNDNDI0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgByNC4uAGm0nwAmNc1LzRsL2Z q2iZsZpjwWPDjNHs9PFcKttY4fDkd5tt3V0m981PjPRquYA92vdwn3rG7I4thJTu zaSGyeuOSmoovH5VXqiVI/nvXylBzJS0w7jE6dNd09akTKciACTpN4vtoVOHM9Z6 wQBOP0f/WSS62AFNRORFnURCANlFQQXgxcXLNDEhZBsqNqscGr+ZagRvxr3c4QwO E3ci5cIyK8/dLaQPludJSNBdD+DXTN4skiqE+FJ0YDmQV2/9UeJK96xKWozvmenn +uakTWPI5QhKtMuQOEx1sJoeDmsEyeJJaGlE/+U6QVgLsYxdw8QqC7egmiNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMZ3Hd+8j3Jm71lBvUNq07zEJAUwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmE0NWUtZjVkYS00NTgxLWJm ZTUtYzE2MTZjMzBlZmFiLzAvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENF Nzg1Mzg5OThBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzj/HckGP/vS0uvxakbMtsyIHFdrcXA1OQE vHZ4b9ztEkyVm91YS6u0R+D/bVrSiXy5BdL4OSych/1eQa2mfR+E/l4nvjKv30uz gna+AZrDcMbMyMXW2epLYvw8bSk2I/L+1PsU5mFbhuJIQXbssnCGiJSi4348rV01 2e1bW/exbS/EqPRRDKP0+yO0zXeKpuvzXr6icsSumwx+Rw8R4zoQZbGZQ+OnHd1f S+zly4OEEijBacLRRA9bFw5muQt9vGxcWwAqdTCx+MQOw1L72K6ipOP3u07jA0fO 6V1BzHZaMlyp6Zj2lE7MlvIda7TB8GIGKCr5v3b0HbUz++DCzSU= -----END CERTIFICATE-----Generated at Thu May 16 16:13:46 2024 by rpki-client on console-fra.rpki-client.org