$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json) Hash identifier: 6AQgotEsmjAdjmQO93IZkEx8ycoTukWs3ABaVEFBDaw= Subject key identifier: ED:7D:C9:65:14:B5:AA:FF:78:CC:84:EB:F2:5E:76:6B:90:A0:9F:ED Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Certificate serial: 0B7CBBB73F1A9435DAF6BA66DE014F7D0BB471D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft Manifest number: 02AF Signing time: Sat 11 May 2024 16:32:06 +0000 Manifest this update: Sat 11 May 2024 16:27:06 +0000 Manifest next update: Tue 14 May 2024 18:04:06 +0000 Files and hashes: 1: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: EKtGUZIRCpNoGmhtlhOhyqc0zqoMHDxaoCUYH4QDF8w=) 2: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: pGDR6rhScn8r5O3Q0Nc/rhXEPBOf1EMfYizva6sFkRQ=) 3: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: 4aLq/Jksl4CmBvIM6NHk+U5uPLFOCaoomMdKQAu5R3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 18:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7c:bb:b7:3f:1a:94:35:da:f6:ba:66:de:01:4f:7d:0b:b4:71:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Validity Not Before: May 11 16:27:06 2024 GMT Not After : May 14 18:04:06 2024 GMT Subject: CN=ED7DC96514B5AAFF78CC84EBF25E766B90A09FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:ad:76:35:9f:64:53:0a:b3:e2:6d:04:89:25: 62:32:d3:b6:10:76:c8:ec:7a:f9:c1:f1:59:2a:7d: 6b:a1:b1:98:b4:9d:69:04:f9:a7:15:14:b9:1b:d0: 8f:39:22:1d:ad:13:54:b0:a9:d7:d8:b3:89:81:13: b1:e4:be:e2:6b:6f:4c:68:4d:44:ce:5a:6b:5b:17: 3d:4b:31:d8:45:8d:d7:4c:48:db:78:64:2a:56:46: a2:83:c0:74:30:9e:fc:b5:54:ce:72:f6:f9:12:6d: ff:db:f5:cd:f1:e5:64:7a:18:bb:96:25:b2:88:59: 63:f2:9f:a3:84:85:41:70:6e:49:ba:cc:38:7d:da: a1:6b:76:76:27:b2:66:94:55:c2:aa:4c:95:84:01: cb:13:04:c7:ed:36:15:fa:c0:ac:21:88:2e:80:a5: ec:30:bf:e8:31:5e:64:1a:1f:8b:2b:40:19:b9:62: 38:33:2c:5f:da:4b:e5:1a:d6:68:d9:3e:60:01:50: ad:2c:fb:27:03:35:8f:47:22:19:47:97:de:82:08: 09:88:44:a9:58:be:cf:c5:77:06:ae:ff:d4:2e:a4: 00:5c:be:aa:00:9e:1f:7a:b6:84:df:20:bc:67:32: 10:6d:00:0e:7d:54:35:8b:bc:f7:bf:c8:dc:25:45: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7D:C9:65:14:B5:AA:FF:78:CC:84:EB:F2:5E:76:6B:90:A0:9F:ED X509v3 Authority Key Identifier: keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:62:10:d5:86:2e:e0:4d:9d:5f:c4:ec:fe:d3:63:e9:84:70: 4a:a8:ec:38:38:54:df:8e:b3:bf:21:12:36:73:12:44:e6:ca: 92:38:b1:e8:b7:88:a5:e0:0a:c8:8d:20:2a:57:c4:53:bc:35: d9:d7:eb:07:82:15:4b:9a:f3:cd:fd:0e:fd:6e:52:0c:8c:38: e7:5c:da:13:1c:d3:5f:0b:56:3e:12:6e:6c:6e:42:f2:ed:51: 28:1e:0d:78:78:14:55:81:e4:28:6c:e9:42:ac:5d:42:32:3a: 08:ca:4d:fd:8d:4e:c7:8a:c2:73:4b:62:73:90:09:c7:18:c8: 5f:63:77:50:bb:a4:08:bf:e4:dc:61:e0:dc:9b:c1:69:3d:84: 9f:8d:50:18:c4:74:3c:40:2f:4a:cb:29:ed:49:8c:b1:da:ca: e7:c0:a6:18:e4:bf:4f:08:c3:2b:3b:3f:7a:2b:d4:cb:34:b3: 84:d6:18:8d:7b:62:61:c0:df:98:74:16:bb:82:a4:3e:04:3b: 50:8f:c7:2d:f2:3a:07:f2:96:15:c7:ee:dc:e3:e2:d7:e6:dd: da:53:7b:c4:80:1c:75:a9:b2:76:79:33:a6:13:aa:63:47:75: 78:d5:c6:68:1e:d3:7b:e4:0b:93:7d:a6:24:c3:5f:6a:63:f0: 03:25:f2:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3y7tz8alDXa9rpm3gFPfQu0cdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2 MThEN0QzMDAeFw0yNDA1MTExNjI3MDZaFw0yNDA1MTQxODA0MDZaMDMxMTAvBgNV BAMTKEVEN0RDOTY1MTRCNUFBRkY3OENDODRFQkYyNUU3NjZCOTBBMDlGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6rXY1n2RTCrPibQSJJWIy07YQ dsjsevnB8VkqfWuhsZi0nWkE+acVFLkb0I85Ih2tE1SwqdfYs4mBE7HkvuJrb0xo TUTOWmtbFz1LMdhFjddMSNt4ZCpWRqKDwHQwnvy1VM5y9vkSbf/b9c3x5WR6GLuW JbKIWWPyn6OEhUFwbkm6zDh92qFrdnYnsmaUVcKqTJWEAcsTBMftNhX6wKwhiC6A pewwv+gxXmQaH4srQBm5YjgzLF/aS+Ua1mjZPmABUK0s+ycDNY9HIhlHl96CCAmI RKlYvs/Fdwau/9QupABcvqoAnh96toTfILxnMhBtAA59VDWLvPe/yNwlRXmTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7X3JZRS1qv94zITr8l52a5Cgn+0wHwYDVR0j BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE N0QzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJE Mzg2MThEN0QzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIliENWGLuBNnV/E7P7TY+mEcEqo7Dg4VN+O s78hEjZzEkTmypI4sei3iKXgCsiNICpXxFO8NdnX6weCFUua8839Dv1uUgyMOOdc 2hMc018LVj4SbmxuQvLtUSgeDXh4FFWB5Chs6UKsXUIyOgjKTf2NTseKwnNLYnOQ CccYyF9jd1C7pAi/5Nxh4NybwWk9hJ+NUBjEdDxAL0rLKe1JjLHayufAphjkv08I wys7P3or1Ms0s4TWGI17YmHA35h0FruCpD4EO1CPxy3yOgfylhXH7tzj4tfm3dpT e8SAHHWpsnZ5M6YTqmNHdXjVxmge03vkC5N9piTDX2pj8AMl8mk= -----END CERTIFICATE-----Generated at Sat May 11 17:54:31 2024 by rpki-client on console-ams.rpki-client.org