$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: gWqC2O0jqSAXnGqnir+QxLMvAl87PoZIyrZWxxFJIE0= Subject key identifier: AD:59:2B:37:2C:7A:97:6E:F5:7D:52:84:21:B5:DD:9F:18:8B:18:68 Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 3958779A1B15D4543E8E5CB5105BED562DAA7484 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: D3 Signing time: Thu 16 May 2024 11:31:39 +0000 Manifest this update: Thu 16 May 2024 11:26:39 +0000 Manifest next update: Sun 19 May 2024 16:22:39 +0000 Files and hashes: 1: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: L1hRzxE9lmcWg/BjtXeL7156zMfMKEw38z3N/7PthNI=) 2: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: zBy0OdAPR76tx5S+ZXerj5zrkF2anughe6Tnd7MmBxA=) 3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: iCuE445BiHrqm4IxxIzg+73QX6xB94j0kDVfJpzOBMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 16:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:58:77:9a:1b:15:d4:54:3e:8e:5c:b5:10:5b:ed:56:2d:aa:74:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: May 16 11:26:39 2024 GMT Not After : May 19 16:22:39 2024 GMT Subject: CN=AD592B372C7A976EF57D528421B5DD9F188B1868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:3d:5d:a3:fd:8c:38:be:dd:a7:71:40:6f: 54:c8:9c:87:fb:34:13:82:9e:c3:f6:bd:b7:ca:9c: 2b:b9:4d:66:90:1a:91:c9:07:fa:37:56:65:13:9c: db:e5:0f:b5:39:df:a9:04:44:6c:78:32:80:4f:c3: 09:d2:f3:8b:ef:98:68:82:21:3d:97:32:54:17:54: 74:6c:64:55:87:96:72:b8:df:d5:8d:6d:e9:15:5f: 65:c4:07:34:2b:59:36:56:55:a1:49:81:a3:16:3a: ae:11:c5:63:e9:7b:df:54:a3:d6:90:f5:b3:08:f9: 53:6f:61:70:11:19:a9:7b:03:44:12:07:d8:e8:cc: 72:af:1a:ff:75:03:32:e3:99:a6:62:7f:c9:81:81: f6:12:4b:4b:f1:95:48:bd:36:1b:1b:a5:3f:32:ff: 1e:94:17:77:43:43:89:cf:37:4a:c3:32:47:08:e8: fe:6d:f0:5b:14:f7:88:b6:48:bd:ca:3d:df:0d:af: 8b:76:f9:53:3c:4b:99:63:0b:96:1f:e8:71:d7:83: 70:48:ea:75:dc:19:b1:ab:cc:a5:54:c1:5c:ef:06: 2b:cd:29:d0:ec:4b:1f:ff:33:d7:55:3d:ea:3c:0d: 7c:65:bf:03:b6:b6:5e:70:6c:7e:33:4d:d6:f4:a6: c8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:59:2B:37:2C:7A:97:6E:F5:7D:52:84:21:B5:DD:9F:18:8B:18:68 X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:05:8c:fd:c7:f7:87:d0:aa:d4:0a:18:6f:a6:1d:d7:53:3d: 70:0b:bc:c1:74:ae:89:ea:74:67:58:ad:de:d0:36:ef:24:a4: 7f:4f:c4:96:6d:c9:d6:45:99:d6:25:2f:a3:98:7a:2c:0e:93: d8:9c:ef:f9:fa:89:4c:d2:d4:4d:9d:48:72:25:da:d9:b5:59: 10:d2:9b:c3:5d:44:6f:67:37:66:44:d6:f0:93:a0:2c:eb:60: a1:35:10:d7:a7:b3:a5:9e:9c:1b:41:6e:59:7b:db:7f:aa:72: a0:1e:29:72:38:54:0f:6c:3b:68:ef:07:7e:30:f6:9f:a4:69: 2a:69:a2:26:ee:97:74:c2:bb:8a:9f:40:2e:f4:e4:84:fd:9e: d5:8f:6a:16:68:80:b4:40:5c:a2:b5:79:0b:91:47:a5:b6:f6: 59:a8:2a:a5:7d:20:d9:6b:73:35:6c:75:02:5b:e3:75:90:9b: 96:b9:73:2c:45:8f:1a:49:64:b3:00:37:f3:de:ce:d2:03:45: e2:7a:3f:37:f2:3e:8e:7f:0e:65:ac:fd:70:12:60:f3:3e:2a: 7c:17:8c:1f:6f:28:28:0d:30:76:3e:52:35:af:af:17:d1:b6: 27:e2:34:26:98:ce:ec:24:f7:32:e7:a3:bf:68:df:98:ed:eb: 03:83:03:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVh3mhsV1FQ+jly1EFvtVi2qdIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNDA1MTYxMTI2MzlaFw0yNDA1MTkxNjIyMzlaMDMxMTAvBgNV BAMTKEFENTkyQjM3MkM3QTk3NkVGNTdENTI4NDIxQjVERDlGMTg4QjE4NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dz1do/2MOL7dp3FAb1TInIf7 NBOCnsP2vbfKnCu5TWaQGpHJB/o3VmUTnNvlD7U536kERGx4MoBPwwnS84vvmGiC IT2XMlQXVHRsZFWHlnK439WNbekVX2XEBzQrWTZWVaFJgaMWOq4RxWPpe99Uo9aQ 9bMI+VNvYXARGal7A0QSB9jozHKvGv91AzLjmaZif8mBgfYSS0vxlUi9NhsbpT8y /x6UF3dDQ4nPN0rDMkcI6P5t8FsU94i2SL3KPd8Nr4t2+VM8S5ljC5Yf6HHXg3BI 6nXcGbGrzKVUwVzvBivNKdDsSx//M9dVPeo8DXxlvwO2tl5wbH4zTdb0pshxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrVkrNyx6l271fVKEIbXdnxiLGGgwHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQFjP3H94fQqtQKGG+mHddTPXALvMF0ronq dGdYrd7QNu8kpH9PxJZtydZFmdYlL6OYeiwOk9ic7/n6iUzS1E2dSHIl2tm1WRDS m8NdRG9nN2ZE1vCToCzrYKE1ENens6WenBtBbll723+qcqAeKXI4VA9sO2jvB34w 9p+kaSppoibul3TCu4qfQC705IT9ntWPahZogLRAXKK1eQuRR6W29lmoKqV9INlr czVsdQJb43WQm5a5cyxFjxpJZLMAN/PeztIDReJ6PzfyPo5/DmWs/XASYPM+KnwX jB9vKCgNMHY+UjWvrxfRtifiNCaYzuwk9zLno79o35jt6wODA+U= -----END CERTIFICATE-----Generated at Thu May 16 13:03:39 2024 by rpki-client on console-ams.rpki-client.org