$ rpki-client -vvf repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft File: 54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft (raw, json) Hash identifier: m0Rs56bo2EXUnDJLpZIgZnXr1fiRRdJ83V0EDJi0NNs= Subject key identifier: D5:55:48:AF:64:59:A4:70:D4:1B:52:64:EE:D7:64:D7:5D:4B:1B:35 Authority key identifier: 54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE Certificate issuer: /CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE Certificate serial: 25648AE534A3E0E9A5D270E9BB9E3470ACF7E136 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft Manifest number: 042A Signing time: Fri 03 May 2024 12:01:15 +0000 Manifest this update: Fri 03 May 2024 11:56:15 +0000 Manifest next update: Mon 06 May 2024 12:41:15 +0000 Files and hashes: 1: 54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl (hash: F+J1rxHCQX46f4GNTqN1pin2cEacZP5FU/oLnhZ+tG4=) 2: 3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (hash: riVDVwXaTbab1nppF+xqV/7E+CtdbzxL3WMBn2b0F9s=) 3: 3130332e32312e3232382e302f32342d3234203d3e20313332363433.roa (hash: fqcEXh8NNz6jhLfh47MXoiJdbsjDjfnYUJUOxGn66fo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 03:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:64:8a:e5:34:a3:e0:e9:a5:d2:70:e9:bb:9e:34:70:ac:f7:e1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE Validity Not Before: May 3 11:56:15 2024 GMT Not After : May 6 12:41:15 2024 GMT Subject: CN=D55548AF6459A470D41B5264EED764D75D4B1B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:e7:78:0a:c1:a5:4c:5b:33:eb:fc:82:18: 5e:a4:1b:f9:d0:44:f0:b7:c3:01:bd:d8:6c:63:53: 16:97:c5:5c:be:00:3c:63:4f:37:e3:c1:3c:26:ed: 60:f6:6f:5a:81:d1:b6:00:22:96:eb:88:f2:d2:1a: 80:87:27:88:05:9f:f3:6d:9e:6f:dd:b8:69:57:3b: 18:10:62:22:dd:40:5d:f1:39:66:d3:43:a2:59:a7: 13:40:bd:36:7b:5c:63:a1:d8:db:0c:d8:27:83:ca: 5b:6e:9e:88:84:71:7c:81:80:a7:e3:40:22:25:08: d2:05:dc:b3:2a:1d:4f:f2:78:eb:a8:c9:26:af:26: 76:01:87:d9:85:40:9b:60:84:4b:45:7e:3c:67:69: 0e:35:9b:66:10:ee:6f:0e:52:6a:b1:57:dd:a7:4f: ff:1d:52:5c:91:2e:d2:94:8a:76:64:62:63:18:a4: 7d:9c:9a:9e:ae:68:8d:1d:fc:d9:e7:1b:59:e3:49: 25:d8:7a:52:67:7d:cd:b4:5d:aa:3e:00:af:7f:2b: c1:ca:87:a8:26:03:2d:2c:77:a7:90:7b:0b:cd:f4: 1b:eb:2a:6f:63:05:1b:27:53:8c:b1:1b:e2:c3:85: b4:69:e8:d3:21:40:88:36:ed:9e:8c:46:ee:7d:bd: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:55:48:AF:64:59:A4:70:D4:1B:52:64:EE:D7:64:D7:5D:4B:1B:35 X509v3 Authority Key Identifier: keyid:54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d7:f4:f4:d2:22:9f:e4:d4:b5:91:7d:f6:a0:16:7e:50:9c: 6f:28:bd:98:bd:ca:b2:3a:46:34:10:62:1e:9c:97:0b:e3:13: 28:17:54:be:93:f9:4e:9b:ee:6b:c1:ed:3a:ef:e4:2b:45:4a: 58:ba:a4:dc:84:58:5b:14:6e:c9:c0:35:c2:c0:ef:d3:aa:45: 4a:08:3f:f5:41:4b:c3:b8:26:61:9f:5c:c7:6a:d7:93:18:8d: fc:7f:d2:56:5b:f4:f7:20:05:4a:21:2d:64:c3:80:84:e0:6d: 56:00:db:63:af:29:ef:73:30:d6:d9:24:0c:8a:0a:89:0c:45: 50:1b:44:dd:e7:9a:6f:4b:35:5d:9e:a1:ed:ed:d8:3c:5b:27: 6d:61:86:07:a7:d9:d8:0c:40:a3:4f:b0:91:a9:34:8f:d4:57: 60:82:e1:bd:09:9a:59:c9:65:82:23:b7:77:3d:f9:9b:6b:13: 11:ed:97:f1:a7:b7:59:2c:24:41:a9:38:a1:97:7d:4d:e1:3d: c7:44:4a:3a:71:49:8c:d5:45:8d:a4:f6:66:27:f7:e4:3a:85: 33:4a:31:3a:b3:dd:bd:02:b1:c7:67:c8:0a:51:23:e5:52:ff: 70:80:8b:64:7b:8f:d1:ac:d7:f8:c2:1e:f8:d9:2c:8c:36:49: 12:ae:03:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWSK5TSj4Oml0nDpu540cKz34TYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNGQjRG NjYxOENCRTAeFw0yNDA1MDMxMTU2MTVaFw0yNDA1MDYxMjQxMTVaMDMxMTAvBgNV BAMTKEQ1NTU0OEFGNjQ1OUE0NzBENDFCNTI2NEVFRDc2NEQ3NUQ0QjFCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa1Od4CsGlTFsz6/yCGF6kG/nQ RPC3wwG92GxjUxaXxVy+ADxjTzfjwTwm7WD2b1qB0bYAIpbriPLSGoCHJ4gFn/Nt nm/duGlXOxgQYiLdQF3xOWbTQ6JZpxNAvTZ7XGOh2NsM2CeDyltunoiEcXyBgKfj QCIlCNIF3LMqHU/yeOuoySavJnYBh9mFQJtghEtFfjxnaQ41m2YQ7m8OUmqxV92n T/8dUlyRLtKUinZkYmMYpH2cmp6uaI0d/NnnG1njSSXYelJnfc20Xao+AK9/K8HK h6gmAy0sd6eQewvN9BvrKm9jBRsnU4yxG+LDhbRp6NMhQIg27Z6MRu59vdffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1VVIr2RZpHDUG1Jk7tdk111LGzUwHwYDVR0j BBgwFoAUVP8UG+lgE/5rwIFtmRvPtPZhjL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FmMjcxZi1jODNkLTQ0MWUtYmVhOS0xOGEyNDRkMGUwMGUvMC81NEZGMTQxQkU5 NjAxM0ZFNkJDMDgxNkQ5OTFCQ0ZCNEY2NjE4Q0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNGQjRGNjYx OENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZjI3MWYtYzgzZC00NDFlLWJl YTktMThhMjQ0ZDBlMDBlLzAvNTRGRjE0MUJFOTYwMTNGRTZCQzA4MTZEOTkxQkNG QjRGNjYxOENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/X9PTSIp/k1LWRffagFn5QnG8ovZi9yrI6 RjQQYh6clwvjEygXVL6T+U6b7mvB7Trv5CtFSli6pNyEWFsUbsnANcLA79OqRUoI P/VBS8O4JmGfXMdq15MYjfx/0lZb9PcgBUohLWTDgITgbVYA22OvKe9zMNbZJAyK CokMRVAbRN3nmm9LNV2eoe3t2DxbJ21hhgen2dgMQKNPsJGpNI/UV2CC4b0JmlnJ ZYIjt3c9+ZtrExHtl/Gnt1ksJEGpOKGXfU3hPcdESjpxSYzVRY2k9mYn9+Q6hTNK MTqz3b0CscdnyApRI+VS/3CAi2R7j9Gs1/jCHvjZLIw2SRKuA6c= -----END CERTIFICATE-----Generated at Fri May 3 12:58:05 2024 by rpki-client on console-ams.rpki-client.org