$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: ZcZ3XMv/VxcxrXHsosgghuQL92bsd/KpRRU1KbR/djw= Subject key identifier: 0C:A3:3B:4C:64:8D:CE:C3:51:3B:00:C6:A9:B5:F4:FB:45:ED:23:EB Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 0A52B61758CB1A407918ACBEF5ACBB54E36D9B32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 0132 Signing time: Wed 29 May 2024 09:50:53 +0000 Manifest this update: Wed 29 May 2024 09:45:52 +0000 Manifest next update: Sat 01 Jun 2024 12:57:52 +0000 Files and hashes: 1: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: 4qwj0sLOAw0YO6sg3A9W6PtXjNf4JcdHJAIuX69elUU=) 2: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: wrwXYHiVExbuxEse8hLvJxXI/WdhLaEx4yaUE17RFII=) 3: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: D9ElUQYQqbnd19jqH4xEkk4zy2SIU1QWphw5i3jyVoc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 12:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:52:b6:17:58:cb:1a:40:79:18:ac:be:f5:ac:bb:54:e3:6d:9b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: May 29 09:45:52 2024 GMT Not After : Jun 1 12:57:52 2024 GMT Subject: CN=0CA33B4C648DCEC3513B00C6A9B5F4FB45ED23EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:a8:67:c4:20:04:22:1f:5b:14:df:72:16: 98:4b:be:10:88:1f:18:44:a1:eb:08:e9:a1:f9:cc: bb:57:1b:d9:d5:9e:65:e0:87:54:ed:cb:8b:83:27: 66:3f:c0:b4:88:9a:83:2f:ff:6d:21:bf:e6:00:3b: f2:3f:2d:4a:34:5e:06:b0:3c:5d:24:ed:2b:a5:0d: 0a:2d:08:92:db:04:40:99:aa:3f:9b:25:2b:4f:91: 7c:b4:7b:31:34:e8:de:02:6d:b2:90:b9:e8:dc:ed: 9a:71:6d:fc:44:e0:36:ea:98:2a:53:5e:b2:85:2d: 0d:8b:97:d2:c0:39:e6:44:ce:6f:6d:ea:91:4c:3a: c2:cd:0a:b8:0d:4d:78:23:87:1b:13:79:68:ce:c5: 44:21:66:c3:2d:00:66:72:90:82:88:b5:eb:c4:18: c6:9b:6f:91:00:4d:be:ae:7b:64:34:54:cc:78:93: e7:d4:35:6b:1b:ba:b9:0e:63:aa:bc:e5:24:ca:ea: 7b:d5:cb:35:6e:94:6f:f0:36:d2:8f:7c:38:66:20: ef:70:85:58:3f:54:e5:60:7c:4f:8d:f8:dc:fb:d8: bf:70:02:fe:5c:01:11:70:64:25:2c:c6:d4:7b:ab: da:13:3b:96:92:3b:7e:b6:20:b2:b4:ef:8d:08:43: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A3:3B:4C:64:8D:CE:C3:51:3B:00:C6:A9:B5:F4:FB:45:ED:23:EB X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4e:df:9b:b2:a8:c9:d3:b9:34:87:2e:be:34:8b:2b:cc:2d: df:df:81:dc:dc:9d:e5:cf:1b:75:56:83:87:95:2e:77:aa:1f: 85:5a:10:ae:04:0a:cb:89:07:8e:79:f3:ee:07:42:4a:2d:a0: ed:4e:b1:4d:14:e0:3b:67:47:ea:aa:97:44:42:65:b8:74:49: f4:78:57:11:32:ae:a8:df:c5:84:51:4e:8d:6f:cf:b2:35:14: ff:90:50:e2:c9:83:73:25:fa:28:df:04:c1:38:98:47:7c:f4: 22:7d:42:b3:d9:b5:1a:c2:d2:76:0d:50:a8:23:3c:da:4e:fc: ce:0f:e2:50:d7:cc:60:06:dc:92:dc:b2:19:d2:71:11:66:ae: bb:86:6a:ff:78:e3:77:f5:49:01:48:75:21:ce:ca:f8:d3:8a: c6:9b:e7:be:d3:2c:7e:a4:e8:c0:cd:70:e8:c9:86:43:22:46: e5:3c:48:d4:8d:24:a4:e8:52:1a:bf:98:59:da:28:c3:13:2b: 7b:eb:24:7e:43:94:f6:04:b1:11:97:80:f3:ef:0b:be:7b:20: 6e:40:d7:ad:32:f0:b0:a1:4e:82:86:d6:1c:f7:fc:d8:dd:b4: b1:19:f4:ee:8a:db:8f:f7:5f:cc:2e:2f:df:7f:78:2d:a1:ea: b0:d0:03:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClK2F1jLGkB5GKy+9ay7VONtmzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNDA1MjkwOTQ1NTJaFw0yNDA2MDExMjU3NTJaMDMxMTAvBgNV BAMTKDBDQTMzQjRDNjQ4RENFQzM1MTNCMDBDNkE5QjVGNEZCNDVFRDIzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0W6hnxCAEIh9bFN9yFphLvhCI HxhEoesI6aH5zLtXG9nVnmXgh1Tty4uDJ2Y/wLSImoMv/20hv+YAO/I/LUo0Xgaw PF0k7SulDQotCJLbBECZqj+bJStPkXy0ezE06N4CbbKQuejc7ZpxbfxE4DbqmCpT XrKFLQ2Ll9LAOeZEzm9t6pFMOsLNCrgNTXgjhxsTeWjOxUQhZsMtAGZykIKItevE GMabb5EATb6ue2Q0VMx4k+fUNWsburkOY6q85STK6nvVyzVulG/wNtKPfDhmIO9w hVg/VOVgfE+N+Nz72L9wAv5cARFwZCUsxtR7q9oTO5aSO362ILK0740IQwyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDKM7TGSNzsNROwDGqbX0+0XtI+swHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlO35uyqMnTuTSHLr40iyvMLd/fgdzcneXP G3VWg4eVLneqH4VaEK4ECsuJB4558+4HQkotoO1OsU0U4DtnR+qql0RCZbh0SfR4 VxEyrqjfxYRRTo1vz7I1FP+QUOLJg3Ml+ijfBME4mEd89CJ9QrPZtRrC0nYNUKgj PNpO/M4P4lDXzGAG3JLcshnScRFmrruGav9443f1SQFIdSHOyvjTisab577TLH6k 6MDNcOjJhkMiRuU8SNSNJKToUhq/mFnaKMMTK3vrJH5DlPYEsRGXgPPvC757IG5A 160y8LChToKG1hz3/NjdtLEZ9O6K24/3X8wuL99/eC2h6rDQA7Q= -----END CERTIFICATE-----Generated at Wed May 29 11:17:24 2024 by rpki-client on console-fra.rpki-client.org