$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: bwSYVolicSu3Pp5j7gOROxCGwNpzGWu2PnOMhFkkawY= Subject key identifier: C5:A7:63:B5:EB:03:88:67:BC:90:B0:85:69:1A:48:70:8A:BB:B0:F7 Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 3208C156B55F8776EEC585D4943CF53A70735DA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 0427 Signing time: Wed 01 May 2024 01:01:51 +0000 Manifest this update: Wed 01 May 2024 00:56:51 +0000 Manifest next update: Sat 04 May 2024 04:27:51 +0000 Files and hashes: 1: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: evc/UpwdT3gTClNncvGMlQTNbD6X2VVV/aczvt6xJGI=) 2: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: grVncX0giRBJ34nO2ApdqdxcJFtYWBEBC4pmSc/wPyA=) 3: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: 6g3BJiRYJrqvKlrMmXjkPJLXetMt/jSearNW8mZPwLc=) 4: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: xlQEc7JlyT3ZUMA5NVkIbOhgP9f5RcyMscr102/e71o=) 5: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: 5Qca1RZ+7cLLXzXz+g3f6fluG4ajfjZEjcaQkL2wQFM=) 6: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: S0jz9/CvwZquCQdr3zzMug2f9bRerKc/cchjpAQ98O8=) 7: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: 8tGJB+mBb7pJEjFKzOgFUizirJ+hMgkUkUVdT/0gOAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 04:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:08:c1:56:b5:5f:87:76:ee:c5:85:d4:94:3c:f5:3a:70:73:5d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: May 1 00:56:51 2024 GMT Not After : May 4 04:27:51 2024 GMT Subject: CN=C5A763B5EB038867BC90B085691A48708ABBB0F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:c8:b2:5a:19:dd:ec:ce:f7:29:d9:d5:86: 7c:f0:56:89:b6:de:46:ed:f2:56:b8:de:fd:0b:c7: 59:bd:ff:6b:5e:db:cf:7c:71:34:e0:c8:3e:84:6c: f1:e3:c3:bb:c5:71:6e:1a:11:a5:6f:57:60:f4:47: f0:27:60:cd:12:3d:99:f7:5c:a0:91:26:36:f5:e5: 53:26:fc:69:86:21:d5:3b:d3:49:ac:c0:67:c8:54: fe:da:56:f3:d7:9d:9b:48:59:ee:ce:7c:fc:92:07: 1d:87:79:a4:8e:de:55:b6:82:62:f0:ef:88:7a:29: 02:7c:b9:11:80:d3:04:c7:7c:bb:fe:cc:af:ed:be: b6:c9:7c:01:3c:ac:98:c7:2c:79:3d:8f:ad:01:1a: 17:3c:a4:b5:a5:05:7f:d6:59:f0:05:d0:59:99:31: a9:dd:c2:74:d8:d5:75:02:b5:16:0c:5c:5e:a2:90: 1d:d2:c3:ba:59:b2:d7:ac:d3:b7:53:75:f1:f0:58: 85:f2:5a:e5:ae:a5:76:a2:8b:c2:71:2c:ee:86:b5: 97:28:4e:cf:32:82:53:54:0e:b3:76:51:37:e9:cb: e3:89:1b:1c:ed:52:f5:86:ca:cc:b6:53:40:b3:46: 68:af:e4:85:d1:d2:ea:43:67:a9:ff:de:d6:f5:8c: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:63:B5:EB:03:88:67:BC:90:B0:85:69:1A:48:70:8A:BB:B0:F7 X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:31:c4:14:fe:1c:6f:b3:b2:ea:c6:48:83:da:e7:66:d9:8f: 68:31:86:5a:de:4e:28:ca:43:8f:94:ff:aa:b1:1f:ec:0d:63: 7d:2d:5c:fc:e8:e7:f6:a5:65:93:61:0d:0d:42:a6:b7:a8:ae: 4f:fb:47:14:68:0b:13:ab:4b:65:a1:dd:9d:b5:5d:18:79:03: 54:85:4d:55:35:8d:50:a1:56:c5:1b:03:32:fd:20:a0:d4:6d: 12:52:47:6b:1b:0e:90:d5:ee:87:ce:9f:75:05:e7:f8:81:c1: fb:15:b4:1b:ad:e6:30:33:8a:b6:92:84:aa:9a:32:94:ac:6a: 8a:4e:00:9b:7c:50:a3:c9:bb:ae:8c:a5:41:56:61:39:de:05: cb:80:e8:86:33:ac:49:9b:f7:c0:62:22:60:5b:43:91:78:aa: b5:52:83:62:91:a2:2e:ea:fc:da:5e:fe:40:cc:86:01:6c:82: 68:8b:9a:bf:09:a0:9a:b1:a2:46:76:4d:ed:86:76:ab:8a:b7: 3c:5a:8b:1f:3b:2d:5b:45:49:c8:1a:f3:b6:4a:d2:c8:49:5d: e6:7f:7e:84:18:df:08:e9:49:48:09:88:f4:05:4b:b6:cb:4a: bb:9e:7a:d8:73:75:45:1f:80:cc:5c:18:42:50:a8:2c:f3:de: c6:67:07:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgjBVrVfh3buxYXUlDz1OnBzXaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNDA1MDEwMDU2NTFaFw0yNDA1MDQwNDI3NTFaMDMxMTAvBgNV BAMTKEM1QTc2M0I1RUIwMzg4NjdCQzkwQjA4NTY5MUE0ODcwOEFCQkIwRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCef8iyWhnd7M73KdnVhnzwVom2 3kbt8la43v0Lx1m9/2te2898cTTgyD6EbPHjw7vFcW4aEaVvV2D0R/AnYM0SPZn3 XKCRJjb15VMm/GmGIdU700mswGfIVP7aVvPXnZtIWe7OfPySBx2HeaSO3lW2gmLw 74h6KQJ8uRGA0wTHfLv+zK/tvrbJfAE8rJjHLHk9j60BGhc8pLWlBX/WWfAF0FmZ MandwnTY1XUCtRYMXF6ikB3Sw7pZstes07dTdfHwWIXyWuWupXaii8JxLO6GtZco Ts8yglNUDrN2UTfpy+OJGxztUvWGysy2U0CzRmiv5IXR0upDZ6n/3tb1jCYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxadjtesDiGe8kLCFaRpIcIq7sPcwHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUxxBT+HG+zsurGSIPa52bZj2gxhlreTijK Q4+U/6qxH+wNY30tXPzo5/alZZNhDQ1Cpreork/7RxRoCxOrS2Wh3Z21XRh5A1SF TVU1jVChVsUbAzL9IKDUbRJSR2sbDpDV7ofOn3UF5/iBwfsVtBut5jAziraShKqa MpSsaopOAJt8UKPJu66MpUFWYTneBcuA6IYzrEmb98BiImBbQ5F4qrVSg2KRoi7q /Npe/kDMhgFsgmiLmr8JoJqxokZ2Te2GdquKtzxaix87LVtFScga87ZK0shJXeZ/ foQY3wjpSUgJiPQFS7bLSrueethzdUUfgMxcGEJQqCzz3sZnB94= -----END CERTIFICATE-----Generated at Wed May 1 01:36:44 2024 by rpki-client on console-ams.rpki-client.org