$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft File: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft (raw, json) Hash identifier: qQcTOpp4zc6FgroYreAQJN98bKWC93x4paJzbzp+2oA= Subject key identifier: 01:D1:6F:7C:84:5E:E2:D3:C6:1A:DA:8F:3A:1D:C6:F8:F3:CA:D5:E6 Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 Certificate issuer: /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Certificate serial: 4571459CDBEF4A9B230FBF91E38E52CB537E26EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft Manifest number: 0428 Signing time: Thu 02 May 2024 20:40:41 +0000 Manifest this update: Thu 02 May 2024 20:35:41 +0000 Manifest next update: Mon 06 May 2024 00:35:41 +0000 Files and hashes: 1: 3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (hash: FAm+UWOVke+ikblIivA820mXrApctFU0eEQ7rFuIRgM=) 2: F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl (hash: LBsVbLHJ+08pegI6CWF/L37MUcPWk2DX2CyUv3eKBlU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:71:45:9c:db:ef:4a:9b:23:0f:bf:91:e3:8e:52:cb:53:7e:26:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63 Validity Not Before: May 2 20:35:41 2024 GMT Not After : May 6 00:35:41 2024 GMT Subject: CN=01D16F7C845EE2D3C61ADA8F3A1DC6F8F3CAD5E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fa:da:52:d9:0f:5f:c0:f9:23:1f:f6:98:08: 2d:f4:45:54:4c:d3:30:87:dd:ac:70:26:a7:ef:d5: 06:25:93:d7:f3:88:62:81:b6:61:f4:d2:48:63:14: b4:9b:7b:97:37:2a:54:46:d0:99:04:01:8e:7e:8e: 51:bf:ff:67:04:d4:eb:48:d7:41:08:6c:eb:58:88: b7:54:9a:40:41:b5:1f:d0:cf:41:b6:0d:be:e9:30: 35:22:53:67:e9:ce:9a:99:79:b2:54:c5:ad:53:b0: 46:6a:46:b6:29:69:54:a4:24:c4:2f:71:94:2f:6f: 6c:47:fb:d9:16:1c:31:d7:7a:6a:29:ed:3f:e5:ab: b7:db:ec:c9:f6:72:68:4a:5d:0b:71:64:77:ee:0f: d7:0d:eb:39:97:7a:89:f2:df:6d:5b:71:5d:55:62: 0d:0a:94:6b:b6:35:51:0c:fb:31:0f:b8:b9:5e:07: 69:0f:c8:ec:5e:69:7f:c5:4f:11:18:c8:44:fc:32: 4d:4c:3e:a8:61:1f:41:77:12:04:c8:13:b2:2b:ad: 48:e1:93:9d:15:97:de:87:29:a8:6e:60:37:96:3e: 45:88:e7:8d:ae:c9:78:2a:be:5c:6a:b7:65:f5:f3: 63:8f:2c:81:77:78:06:6d:48:ae:9d:1d:12:8a:02: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D1:6F:7C:84:5E:E2:D3:C6:1A:DA:8F:3A:1D:C6:F8:F3:CA:D5:E6 X509v3 Authority Key Identifier: keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:16:96:7e:ef:b2:7c:93:7d:6b:46:6f:23:49:25:bf:74:db: ce:cc:2e:81:a2:cd:67:b0:51:ed:68:ff:cd:c1:5e:f0:a2:16: 8e:b7:39:cb:7a:81:27:f7:8f:db:3d:54:e0:27:e2:ee:56:bf: b0:a4:8a:a3:12:6e:e0:2c:ce:41:d8:92:fe:67:05:13:ab:49: 77:7a:6d:ab:0b:52:3f:dc:2e:b8:23:bf:e9:a0:18:59:6d:8a: 0f:00:ad:d1:a5:17:76:83:3d:42:ef:c5:08:c3:33:81:52:20: 8c:8c:46:93:67:dd:cd:85:85:a1:01:ae:01:dc:75:dc:5f:0f: bd:6f:f5:91:aa:ab:68:71:ce:ef:33:54:02:a6:d4:bb:ba:72: b5:ff:42:96:34:d2:56:f9:c8:ab:47:1d:0e:ff:7a:28:5d:79: 7b:c3:24:d7:d5:5c:5f:5e:2e:86:7a:9c:1b:e9:22:70:ac:87: 1d:44:e6:82:8e:c0:b4:b0:d6:6c:82:fb:b9:c4:ec:27:fe:04: 34:bb:8b:66:6d:7d:de:77:8e:a2:09:85:36:41:50:e9:e2:24: 4d:b8:96:21:8c:86:0b:a6:d3:b3:81:f6:30:ed:2d:e5:0c:1f: fa:5a:6f:30:95:75:d4:9f:c9:27:b8:3b:49:9e:be:29:d0:4c: 39:2b:e6:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXFFnNvvSpsjD7+R445Sy1N+JuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1 MkRDNEQ2MzAeFw0yNDA1MDIyMDM1NDFaFw0yNDA1MDYwMDM1NDFaMDMxMTAvBgNV BAMTKDAxRDE2RjdDODQ1RUUyRDNDNjFBREE4RjNBMURDNkY4RjNDQUQ1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+tpS2Q9fwPkjH/aYCC30RVRM 0zCH3axwJqfv1QYlk9fziGKBtmH00khjFLSbe5c3KlRG0JkEAY5+jlG//2cE1OtI 10EIbOtYiLdUmkBBtR/Qz0G2Db7pMDUiU2fpzpqZebJUxa1TsEZqRrYpaVSkJMQv cZQvb2xH+9kWHDHXemop7T/lq7fb7Mn2cmhKXQtxZHfuD9cN6zmXeony321bcV1V Yg0KlGu2NVEM+zEPuLleB2kPyOxeaX/FTxEYyET8Mk1MPqhhH0F3EgTIE7IrrUjh k50Vl96HKahuYDeWPkWI542uyXgqvlxqt2X182OPLIF3eAZtSK6dHRKKAt3HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAdFvfIRe4tPGGtqPOh3G+PPK1eYwHwYDVR0j BBgwFoAU9SDFrsBR+9A5VNFfelLquFLcTWMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmE5OGM4Yi1jYWQ5LTQ5ZTEtYjE3OC0xZGFmM2I2MmVmNTkvMC9GNTIwQzVBRUMw NTFGQkQwMzk1NEQxNUY3QTUyRUFCODUyREM0RDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVBQjg1MkRD NEQ2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJhOThjOGItY2FkOS00OWUxLWIx NzgtMWRhZjNiNjJlZjU5LzAvRjUyMEM1QUVDMDUxRkJEMDM5NTREMTVGN0E1MkVB Qjg1MkRDNEQ2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0Wln7vsnyTfWtGbyNJJb90287MLoGizWew Ue1o/83BXvCiFo63Oct6gSf3j9s9VOAn4u5Wv7CkiqMSbuAszkHYkv5nBROrSXd6 basLUj/cLrgjv+mgGFltig8ArdGlF3aDPULvxQjDM4FSIIyMRpNn3c2FhaEBrgHc ddxfD71v9ZGqq2hxzu8zVAKm1Lu6crX/QpY00lb5yKtHHQ7/eihdeXvDJNfVXF9e LoZ6nBvpInCshx1E5oKOwLSw1myC+7nE7Cf+BDS7i2Ztfd53jqIJhTZBUOniJE24 liGMhgum07OB9jDtLeUMH/pabzCVddSfySe4O0mevinQTDkr5nU= -----END CERTIFICATE-----Generated at Thu May 2 22:27:16 2024 by rpki-client on console-ams.rpki-client.org