$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: ygNL64wY0Ap7hS63wNC2zL39MUszc3HyOorh1zEr+CE= Subject key identifier: A1:31:42:05:0C:C3:E2:25:E7:D6:3C:5B:66:2F:2D:D2:77:B1:5D:7F Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 7147B5B318D8C23F203DFACB978AF1D6D6D1D9C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 02A4 Signing time: Thu 09 May 2024 18:20:50 +0000 Manifest this update: Thu 09 May 2024 18:15:50 +0000 Manifest next update: Mon 13 May 2024 00:44:50 +0000 Files and hashes: 1: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: 92PUeRgr/PdQEUP4i2ZvRoG4s2iOoHixbIIhUgrJ6ts=) 2: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: fZZ7IjNRVFjASzsh/zDperk7lekYEuqHX3yHuxKe3U8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 14:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:47:b5:b3:18:d8:c2:3f:20:3d:fa:cb:97:8a:f1:d6:d6:d1:d9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: May 9 18:15:50 2024 GMT Not After : May 13 00:44:50 2024 GMT Subject: CN=A13142050CC3E225E7D63C5B662F2DD277B15D7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:1d:6b:8d:d2:25:cb:59:f3:ee:30:ca:62: 14:85:97:1f:b8:08:77:63:ed:51:cd:2e:77:70:b8: 1a:65:42:b5:8e:cf:de:87:79:13:5d:75:d3:7f:bc: 7a:0e:38:b0:2c:5d:7f:33:42:4f:7e:5b:25:19:a1: 80:ec:37:16:4c:ba:b8:ae:02:12:a5:1a:c5:69:b3: 02:fe:c6:b9:b2:34:fe:9f:e6:3b:34:56:77:90:ed: 0c:ff:10:99:29:bf:61:84:e6:a9:d2:af:b4:7e:e2: 7c:5a:7b:da:79:15:c7:24:74:67:7c:6e:a3:d6:81: 2a:2b:73:f3:42:75:ba:30:d9:33:6b:33:4e:99:9b: c4:bb:c3:32:81:97:c4:2d:50:d5:da:c6:ba:19:a2: 90:e6:e4:27:b0:f1:cf:2f:35:89:6e:80:88:20:10: 4f:a4:3d:ea:94:45:be:67:d5:ea:eb:41:18:49:da: 35:d2:83:85:b9:73:64:cb:a5:a1:49:53:a0:e0:99: 8d:a3:dd:07:cc:d8:92:ef:e0:67:c8:69:cf:8a:6d: 3c:d5:94:08:b8:52:67:e0:54:e9:62:4c:e0:7e:0e: 2b:6b:31:05:06:8f:28:e9:31:2f:a0:38:5f:c2:27: c6:28:f6:ef:72:48:b4:3d:62:2e:6a:b5:76:77:cb: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:31:42:05:0C:C3:E2:25:E7:D6:3C:5B:66:2F:2D:D2:77:B1:5D:7F X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:32:88:e9:9f:fc:6b:d1:17:a4:de:c6:c1:e6:04:01:b7:3a: d0:fb:2f:4c:2f:c3:3a:99:e6:0c:5f:e7:e0:6d:d6:a3:13:ab: d8:57:b7:b0:9c:74:6d:c1:a9:dd:ba:bf:d6:85:63:89:f7:98: e7:fd:75:67:5e:37:c7:48:43:0a:e8:5f:99:5e:56:3a:58:02: ae:b8:15:fa:42:31:e3:85:20:fa:9f:09:6f:0a:ae:da:7c:2c: 6d:09:3c:b0:ce:91:2b:d1:ed:ef:07:ee:fb:70:91:14:40:82: 25:15:a9:df:10:10:30:3a:51:ef:a4:81:13:74:52:6d:76:c8: e4:38:ea:0b:db:28:5f:31:5e:18:7e:5c:a1:21:5e:e6:c6:fd: 33:d4:51:92:46:dc:e4:30:f8:61:e7:bf:a4:72:cf:73:68:c4: a3:aa:fd:fc:54:6e:22:aa:14:b5:dc:f4:a5:ee:49:14:c9:fd: 39:dc:bf:ce:ac:c1:45:a6:0a:c0:97:d6:2d:0e:f4:e2:22:d7: 6d:32:a3:ea:28:26:8c:5b:12:a8:7c:a2:82:d4:1c:f9:91:45: 5f:8f:1e:0e:6f:8c:fe:ac:db:c8:b2:1d:f2:7f:ff:ac:31:b8: fb:ed:5d:69:fd:39:fb:49:de:d8:59:07:30:1d:06:ac:db:51: 44:0a:27:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcUe1sxjYwj8gPfrLl4rx1tbR2cYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNDA1MDkxODE1NTBaFw0yNDA1MTMwMDQ0NTBaMDMxMTAvBgNV BAMTKEExMzE0MjA1MENDM0UyMjVFN0Q2M0M1QjY2MkYyREQyNzdCMTVEN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyoB1rjdIly1nz7jDKYhSFlx+4 CHdj7VHNLndwuBplQrWOz96HeRNdddN/vHoOOLAsXX8zQk9+WyUZoYDsNxZMuriu AhKlGsVpswL+xrmyNP6f5js0VneQ7Qz/EJkpv2GE5qnSr7R+4nxae9p5FcckdGd8 bqPWgSorc/NCdbow2TNrM06Zm8S7wzKBl8QtUNXaxroZopDm5Cew8c8vNYlugIgg EE+kPeqURb5n1errQRhJ2jXSg4W5c2TLpaFJU6DgmY2j3QfM2JLv4GfIac+KbTzV lAi4UmfgVOliTOB+DitrMQUGjyjpMS+gOF/CJ8Yo9u9ySLQ9Yi5qtXZ3y/H9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoTFCBQzD4iXn1jxbZi8t0nexXX8wHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEyiOmf/GvRF6TexsHmBAG3OtD7L0wvwzqZ 5gxf5+Bt1qMTq9hXt7CcdG3Bqd26v9aFY4n3mOf9dWdeN8dIQwroX5leVjpYAq64 FfpCMeOFIPqfCW8Krtp8LG0JPLDOkSvR7e8H7vtwkRRAgiUVqd8QEDA6Ue+kgRN0 Um12yOQ46gvbKF8xXhh+XKEhXubG/TPUUZJG3OQw+GHnv6Ryz3NoxKOq/fxUbiKq FLXc9KXuSRTJ/Tncv86swUWmCsCX1i0O9OIi120yo+ooJoxbEqh8ooLUHPmRRV+P Hg5vjP6s28iyHfJ//6wxuPvtXWn9OftJ3thZBzAdBqzbUUQKJ1o= -----END CERTIFICATE-----Generated at Thu May 9 20:54:33 2024 by rpki-client on console-fra.rpki-client.org