$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft File: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft (raw, json) Hash identifier: dnqmY1HuBghqnfBYXYQx35A0A15J75hDkEdRrQXCyR0= Subject key identifier: 91:0E:47:F5:BD:09:15:C5:8D:E7:26:3A:48:15:6C:7C:99:9C:61:DB Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 75EBEEF56CC3A36CBF04EE21525DCFA25B366B20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft Manifest number: 042E Signing time: Sat 04 May 2024 00:01:30 +0000 Manifest this update: Fri 03 May 2024 23:56:30 +0000 Manifest next update: Tue 07 May 2024 10:35:30 +0000 Files and hashes: 1: 3130332e3134382e37362e302f32342d3234203d3e20313339393839.roa (hash: dPdN/8Z5J8ZD0ct0U0KZcSI2sI3lVPr3IPGdX9dvsPs=) 2: 323030313a6466323a633238303a3a2f34382d3438203d3e20313339393839.roa (hash: RN1hq3qQtmcBptwGx1Nrpt8KoXq37tvNFqLtNxr4voA=) 3: 3130332e3134382e37372e302f32342d3234203d3e20313339393839.roa (hash: dzZ7PkZX4uczFsofl8L+4yxAbYvyyQNYlByyYilbB+w=) 4: 5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl (hash: W2OH1pw1Bl8pnrAo9GkuwSTWibBQaCJWoUWqdJxA+aI=) 5: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (hash: 5A2C36U8HTCvU0pViOzKlpqcbRYDkSYucBfxXQMgwuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:eb:ee:f5:6c:c3:a3:6c:bf:04:ee:21:52:5d:cf:a2:5b:36:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: May 3 23:56:30 2024 GMT Not After : May 7 10:35:30 2024 GMT Subject: CN=910E47F5BD0915C58DE7263A48156C7C999C61DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:f4:f1:ca:28:b6:a3:38:b4:26:87:d9:7a: bc:8b:a0:bd:aa:26:12:c2:4f:c8:4f:d9:5b:e1:46: e7:4f:09:eb:2c:a4:15:fe:d6:e6:00:a7:89:32:61: 01:52:ae:fb:5f:11:de:61:67:77:78:b4:df:c7:0a: ec:f4:79:5b:72:5d:6f:af:75:c7:6d:a5:c1:88:aa: 26:65:49:51:86:cb:cd:cb:f8:fe:6c:21:77:f5:33: e6:33:f6:eb:cf:e4:ef:a2:6a:fb:ff:a4:21:8c:18: f4:a0:ff:cc:96:2b:07:d0:ea:bf:e2:db:3c:3e:f5: 4d:73:80:ee:89:02:35:16:78:8c:18:01:30:31:1b: 41:f3:f6:f7:c1:fb:fd:19:d7:ae:04:79:49:33:cc: 37:80:88:c3:7a:3b:22:f3:24:0c:d4:2d:e6:ef:33: 7a:40:f2:99:ad:9e:4f:fa:fb:78:85:cb:d8:92:b5: c5:9a:8f:66:f9:69:8b:97:6c:c7:92:d9:a1:e3:49: b9:37:a0:c7:7f:51:15:96:ec:99:5a:4e:81:db:de: de:9e:35:bf:78:58:24:2c:48:d1:c7:80:f5:8b:52: d7:b9:9a:22:3c:aa:77:1b:2b:dd:3f:f3:ee:4b:e2: c6:48:c7:69:30:75:92:1d:05:43:95:a6:cc:9e:95: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0E:47:F5:BD:09:15:C5:8D:E7:26:3A:48:15:6C:7C:99:9C:61:DB X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:1c:3a:3c:e0:8f:64:d6:89:39:60:09:b7:82:87:23:da:7a: 71:e7:97:3d:5e:0c:68:96:eb:50:53:d9:5c:67:32:e2:a2:01: ba:3c:e6:06:2e:be:6f:3e:19:e0:92:51:fe:54:3c:d0:5a:f6: aa:ac:70:f5:40:c4:c8:af:8b:a2:bb:45:38:99:62:49:54:8a: e9:66:da:26:07:b8:0f:8a:3c:6e:95:70:10:a1:be:3b:65:4b: 07:9e:82:34:bb:aa:9a:ab:e1:35:c3:0f:fc:ac:6b:a0:73:39: b4:d4:45:7d:67:aa:8d:f1:2f:49:ec:11:b3:0e:be:dc:c7:df: 95:a8:81:40:d5:5a:37:f8:66:8f:54:c6:4d:3e:27:8b:5d:60: 35:3d:0f:45:f7:e3:54:9d:5b:9a:ff:e0:73:e0:b2:a8:5f:c2: 8c:8b:30:2e:cb:e4:69:2f:ad:97:a8:bd:fa:44:8f:a5:b7:77: 17:8d:6e:90:d4:4d:d6:52:41:49:03:76:e7:39:ee:0d:84:d4: 7a:1b:66:f1:27:fc:fc:ef:04:d7:b4:24:df:ac:e1:e6:9a:90: df:b0:a1:89:87:db:8a:f0:d5:b9:ad:db:6c:52:c5:8c:bf:d8: 83:8a:69:df:78:a3:b3:75:02:db:1c:de:17:a4:06:77:55:3d: 13:72:86:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdevu9WzDo2y/BO4hUl3Pols2ayAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNDA1MDMyMzU2MzBaFw0yNDA1MDcxMDM1MzBaMDMxMTAvBgNV BAMTKDkxMEU0N0Y1QkQwOTE1QzU4REU3MjYzQTQ4MTU2QzdDOTk5QzYxREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ofTxyii2ozi0JofZeryLoL2q JhLCT8hP2VvhRudPCesspBX+1uYAp4kyYQFSrvtfEd5hZ3d4tN/HCuz0eVtyXW+v dcdtpcGIqiZlSVGGy83L+P5sIXf1M+Yz9uvP5O+iavv/pCGMGPSg/8yWKwfQ6r/i 2zw+9U1zgO6JAjUWeIwYATAxG0Hz9vfB+/0Z164EeUkzzDeAiMN6OyLzJAzULebv M3pA8pmtnk/6+3iFy9iStcWaj2b5aYuXbMeS2aHjSbk3oMd/URWW7JlaToHb3t6e Nb94WCQsSNHHgPWLUte5miI8qncbK90/8+5L4sZIx2kwdZIdBUOVpsyelUbpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkQ5H9b0JFcWN5yY6SBVsfJmcYdswHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAzMTc0NmUtYjBmNi00ODI3LThj NGUtYjgxOTJkZWNjMzlhLzAvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5 NTQ0MkQ4MzVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM8cOjzgj2TWiTlgCbeChyPaenHnlz1eDGiW 61BT2VxnMuKiAbo85gYuvm8+GeCSUf5UPNBa9qqscPVAxMivi6K7RTiZYklUiulm 2iYHuA+KPG6VcBChvjtlSweegjS7qpqr4TXDD/ysa6BzObTURX1nqo3xL0nsEbMO vtzH35WogUDVWjf4Zo9Uxk0+J4tdYDU9D0X341SdW5r/4HPgsqhfwoyLMC7L5Gkv rZeovfpEj6W3dxeNbpDUTdZSQUkDduc57g2E1HobZvEn/PzvBNe0JN+s4eaakN+w oYmH24rw1bmt22xSxYy/2IOKad94o7N1Atsc3hekBndVPRNyhpM= -----END CERTIFICATE-----Generated at Sat May 4 01:50:55 2024 by rpki-client on console-ams.rpki-client.org