$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft File: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json) Hash identifier: /9+2+ZoXLWT2Snvaw473EaNlxFZr35mNjOhARR0f0+Q= Subject key identifier: CE:4D:A1:A1:0C:BD:00:D9:59:AF:D7:19:7B:DF:F4:F8:19:3F:2F:2A Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 75E5E5EBC72B717D27B7F97E4DFEE0D5E4202B5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft Manifest number: D4 Signing time: Wed 15 May 2024 08:51:11 +0000 Manifest this update: Wed 15 May 2024 08:46:11 +0000 Manifest next update: Sat 18 May 2024 11:18:11 +0000 Files and hashes: 1: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: zMxSmroB5hx9dKNqeKSghm5X3bKfrqcdd3JxnZwBQZY=) 2: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: UejcqXthU+xDYc57QX1uPj4KvmZun8dR+kYv7mUvD0Y=) 3: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: 9jQD1o7HyWhmbNj6MMuctDXiy7mYJJ9lCC2YJ0RSBCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 May 2024 11:18:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e5:e5:eb:c7:2b:71:7d:27:b7:f9:7e:4d:fe:e0:d5:e4:20:2b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: May 15 08:46:11 2024 GMT Not After : May 18 11:18:11 2024 GMT Subject: CN=CE4DA1A10CBD00D959AFD7197BDFF4F8193F2F2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2b:fc:8e:ad:8c:b7:d6:3e:5d:12:90:0d:fb: 76:76:ff:9b:34:3b:18:5d:68:d2:8e:7e:7a:29:6e: 97:0c:e2:b7:ff:cb:01:4c:54:c3:48:c3:d3:5c:8a: a5:bc:67:68:74:1c:69:df:b2:61:03:72:f3:cc:bb: 12:c9:87:97:f4:2d:ed:12:6a:70:d7:c5:3e:3f:91: ee:ed:bd:6c:32:0c:26:45:f1:da:2a:ca:fa:09:42: 5c:51:73:26:21:2e:25:3d:95:56:95:93:33:aa:13: 4a:fc:0b:65:a3:4e:fa:3b:9d:22:71:50:af:4c:fc: b7:09:42:13:3e:7a:44:3d:d1:70:c1:21:79:d8:71: b3:87:fe:4b:83:93:ae:ab:bb:61:f4:f0:d1:05:79: e7:66:26:e7:c2:15:8e:0a:4a:11:a8:9f:51:ce:cd: 3c:67:ac:4a:e0:c5:66:ea:eb:a9:dc:6d:e7:69:2e: f7:5a:b3:31:01:be:24:34:b7:55:1a:b9:53:53:18: dc:b6:64:ba:57:96:c8:73:ef:8b:e4:8a:70:d8:91: 62:7f:d8:c7:a4:4a:9a:df:17:28:c5:dd:b5:c5:86: 32:35:49:02:82:da:d7:12:ee:ff:8f:ed:ff:3b:20: 6a:21:59:32:fe:53:65:ec:b7:6d:8d:88:f2:cb:11: c3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4D:A1:A1:0C:BD:00:D9:59:AF:D7:19:7B:DF:F4:F8:19:3F:2F:2A X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:81:fe:e6:0a:50:35:03:6b:21:d9:ea:82:84:7f:1e:e9:aa: d1:47:85:ea:2c:2a:83:ec:12:39:53:d8:b0:83:ba:65:36:00: 5e:3e:50:56:fe:15:49:d0:a7:5a:1f:c5:92:70:08:44:88:cc: ed:b3:df:7a:62:3d:6d:98:9d:cc:c6:4b:2d:de:b6:e2:75:52: 93:b6:7c:0d:89:44:6e:44:ac:ac:e7:ca:53:2a:c5:fc:f1:5b: 32:99:c4:5b:ac:bc:c9:62:a0:95:5b:fb:d0:b6:ff:09:8f:c2: a4:33:9b:a9:69:04:30:b2:85:04:ef:6e:23:03:37:43:33:6f: a1:3d:7a:56:b7:23:25:a3:b2:c9:a8:0e:1b:21:13:fb:38:9d: a5:fe:ef:5c:81:34:f1:de:56:28:70:72:8d:7d:83:9f:70:e9: e8:39:88:1e:c7:64:e6:0b:de:6a:9b:67:a7:bd:e2:7b:12:72: 32:03:55:ff:9b:35:ec:36:28:b7:06:65:31:2d:9c:cd:34:9f: 0e:a7:04:af:db:3e:2e:70:24:7f:c9:4c:e4:ac:30:a0:88:96: 8c:fe:26:b4:07:9d:9c:86:30:6c:48:24:c0:2f:46:6a:02:0c: 0b:de:2d:c4:ec:d7:5b:f8:6b:97:0d:0f:c1:b9:dc:eb:1c:43: 1f:af:e5:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdeXl68crcX0nt/l+Tf7g1eQgK1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNDA1MTUwODQ2MTFaFw0yNDA1MTgxMTE4MTFaMDMxMTAvBgNV BAMTKENFNERBMUExMENCRDAwRDk1OUFGRDcxOTdCREZGNEY4MTkzRjJGMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkK/yOrYy31j5dEpAN+3Z2/5s0 OxhdaNKOfnopbpcM4rf/ywFMVMNIw9NciqW8Z2h0HGnfsmEDcvPMuxLJh5f0Le0S anDXxT4/ke7tvWwyDCZF8doqyvoJQlxRcyYhLiU9lVaVkzOqE0r8C2WjTvo7nSJx UK9M/LcJQhM+ekQ90XDBIXnYcbOH/kuDk66ru2H08NEFeedmJufCFY4KShGon1HO zTxnrErgxWbq66ncbedpLvdaszEBviQ0t1UauVNTGNy2ZLpXlshz74vkinDYkWJ/ 2MekSprfFyjF3bXFhjI1SQKC2tcS7v+P7f87IGohWTL+U2Xst22NiPLLEcMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzk2hoQy9ANlZr9cZe9/0+Bk/LyowHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOB/uYKUDUDayHZ6oKEfx7pqtFHheosKoPs EjlT2LCDumU2AF4+UFb+FUnQp1ofxZJwCESIzO2z33piPW2YnczGSy3etuJ1UpO2 fA2JRG5ErKznylMqxfzxWzKZxFusvMlioJVb+9C2/wmPwqQzm6lpBDCyhQTvbiMD N0Mzb6E9ela3IyWjssmoDhshE/s4naX+71yBNPHeVihwco19g59w6eg5iB7HZOYL 3mqbZ6e94nsScjIDVf+bNew2KLcGZTEtnM00nw6nBK/bPi5wJH/JTOSsMKCIloz+ JrQHnZyGMGxIJMAvRmoCDAveLcTs11v4a5cND8G53OscQx+v5UU= -----END CERTIFICATE-----Generated at Wed May 15 11:16:30 2024 by rpki-client on console-ams.rpki-client.org