$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: AOjfRR8f8Inn1BPT6sLssuHcBal9YQ1fT6TBFnKJhMk= Subject key identifier: BB:3F:61:B6:AB:22:9B:D7:5C:97:02:9B:34:F4:0B:4D:AD:33:FA:BF Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 4B4C22F3E7245693B0D0D26C0F228C7EF90A15D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 0419 Signing time: Sat 18 May 2024 12:21:01 +0000 Manifest this update: Sat 18 May 2024 12:16:01 +0000 Manifest next update: Tue 21 May 2024 15:27:01 +0000 Files and hashes: 1: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: ywqbC3u64/3fAs2hl+hAogVLaS8vKG9/441bav+Hcsc=) 2: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: RiiQ47FgjDDXPOQgafq/MIwIli1Z5JMSiHG1fjZhFfs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 15:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4c:22:f3:e7:24:56:93:b0:d0:d2:6c:0f:22:8c:7e:f9:0a:15:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: May 18 12:16:01 2024 GMT Not After : May 21 15:27:01 2024 GMT Subject: CN=BB3F61B6AB229BD75C97029B34F40B4DAD33FABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:01:8e:72:70:1f:d2:c9:d9:5a:c6:9c:97: 82:5a:74:f7:8d:47:12:91:b5:ea:d1:88:dc:46:e0: 78:c6:5a:5a:96:8f:c8:85:b4:ea:3f:d8:6d:ec:c0: 21:fc:07:1b:2f:66:cf:b1:b6:b1:d9:42:32:af:65: 16:49:5e:f5:b3:58:ec:8a:dc:20:1a:90:cf:ca:4d: f9:f3:e0:82:98:99:8f:ef:d0:7f:7b:be:ec:cb:b6: fc:8f:33:fa:b6:91:40:80:bc:68:08:f0:b5:48:6a: 02:aa:36:53:56:16:f8:a1:68:86:1b:73:45:b6:7c: fd:a1:2c:c6:d4:6d:8c:7d:84:b4:a8:ae:25:64:db: d9:5f:cd:dc:a6:95:d9:30:74:5f:ad:8d:74:76:3c: 69:e4:c5:7f:b7:3b:fe:f0:49:98:2f:e3:6f:57:d2: 08:e8:2d:c5:f9:7a:5b:30:c6:f9:25:ec:72:49:fa: 32:97:a4:7f:d1:02:34:b8:d7:8f:1e:f4:da:f7:32: 92:fe:3f:60:bf:0f:fc:bb:de:52:c5:26:b3:78:eb: 26:20:f3:ea:52:da:7e:ca:74:86:21:2f:56:fe:0c: 7e:f0:1a:de:9d:1a:c6:f2:2c:ae:7c:a0:1a:b9:63: 20:f5:25:33:11:2b:16:75:e3:33:de:04:b1:ce:74: b6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3F:61:B6:AB:22:9B:D7:5C:97:02:9B:34:F4:0B:4D:AD:33:FA:BF X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5c:90:9a:c6:ab:ab:a3:86:76:fd:2a:73:43:9f:49:c0:dd: 06:ad:b8:ca:e7:03:8a:d0:67:83:0a:21:bc:b7:89:d6:8c:67: 59:82:af:46:80:52:43:62:6b:a6:a6:b7:6d:57:63:f2:d8:74: ce:5e:b6:8d:07:9a:ae:f3:8e:72:17:b9:0e:4c:ac:93:d6:de: c0:ad:f4:38:67:21:af:c8:d7:d7:23:0b:44:bf:45:e6:68:94: c6:e4:9f:95:d2:91:1a:32:29:3a:30:83:6d:60:32:bd:74:a9: a8:f2:07:0b:34:e8:2e:f1:c7:b2:f4:d7:a0:72:7d:9f:6f:36: da:dc:0b:8e:60:75:87:76:ab:df:0d:61:25:97:fd:53:4e:59: 22:f6:20:c0:1a:03:bd:5c:96:4b:87:98:12:1a:d1:22:15:9f: e3:ae:b3:d9:a3:a4:55:6b:02:a5:b9:b4:c7:77:9e:52:50:b1: ef:b9:60:6f:22:c1:61:b5:d3:a8:d5:48:ed:df:8c:f8:d9:c8: 78:39:5e:9c:50:80:35:2d:59:0c:18:1e:ab:25:71:cb:93:49: 2d:70:8f:fd:98:55:11:a4:af:3c:b9:9e:3b:5f:e2:b3:f3:e7: e9:05:30:0a:24:a9:bc:bd:b4:70:67:cc:cb:ef:9c:bc:c8:34: 48:95:5f:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0wi8+ckVpOw0NJsDyKMfvkKFdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNDA1MTgxMjE2MDFaFw0yNDA1MjExNTI3MDFaMDMxMTAvBgNV BAMTKEJCM0Y2MUI2QUIyMjlCRDc1Qzk3MDI5QjM0RjQwQjREQUQzM0ZBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEwGOcnAf0snZWsacl4JadPeN RxKRterRiNxG4HjGWlqWj8iFtOo/2G3swCH8BxsvZs+xtrHZQjKvZRZJXvWzWOyK 3CAakM/KTfnz4IKYmY/v0H97vuzLtvyPM/q2kUCAvGgI8LVIagKqNlNWFvihaIYb c0W2fP2hLMbUbYx9hLSoriVk29lfzdymldkwdF+tjXR2PGnkxX+3O/7wSZgv429X 0gjoLcX5elswxvkl7HJJ+jKXpH/RAjS4148e9Nr3MpL+P2C/D/y73lLFJrN46yYg 8+pS2n7KdIYhL1b+DH7wGt6dGsbyLK58oBq5YyD1JTMRKxZ14zPeBLHOdLY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuz9htqsim9dclwKbNPQLTa0z+r8wHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdckJrGq6ujhnb9KnNDn0nA3QatuMrnA4rQ Z4MKIby3idaMZ1mCr0aAUkNia6amt21XY/LYdM5eto0Hmq7zjnIXuQ5MrJPW3sCt 9DhnIa/I19cjC0S/ReZolMbkn5XSkRoyKTowg21gMr10qajyBws06C7xx7L016By fZ9vNtrcC45gdYd2q98NYSWX/VNOWSL2IMAaA71clkuHmBIa0SIVn+Ous9mjpFVr AqW5tMd3nlJQse+5YG8iwWG106jVSO3fjPjZyHg5XpxQgDUtWQwYHqslccuTSS1w j/2YVRGkrzy5njtf4rPz5+kFMAokqby9tHBnzMvvnLzINEiVX4I= -----END CERTIFICATE-----Generated at Sat May 18 13:39:19 2024 by rpki-client on console-ams.rpki-client.org