$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft File: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft (raw, json) Hash identifier: W57wl8DMuwRfso8QDqw/uYDw82HeO8SkUfO+ok+6krw= Subject key identifier: 25:0F:32:CE:26:44:32:37:89:4B:E0:33:FB:7D:B7:48:1A:02:AC:BF Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 Certificate issuer: /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Certificate serial: 5E840726A5B98A2DDFCC5652CB8DB0196A361672 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft Manifest number: 039C Signing time: Thu 25 Apr 2024 19:40:45 +0000 Manifest this update: Thu 25 Apr 2024 19:35:45 +0000 Manifest next update: Mon 29 Apr 2024 07:32:45 +0000 Files and hashes: 1: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: lzIICb5CfvygUnGnttYRbznPbsxKoFgOU+KiDMfuDAE=) 2: 5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl (hash: qwzB0kAo3jm1/GfSb+6XhnhlC1cfCJReQBh/rDM9nNQ=) 3: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: yzAbUdtP+shpXPIjsu4LnuFhVuHMWoUzEW4R3EKtLdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Apr 2024 20:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:84:07:26:a5:b9:8a:2d:df:cc:56:52:cb:8d:b0:19:6a:36:16:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0 Validity Not Before: Apr 25 19:35:45 2024 GMT Not After : Apr 29 07:32:45 2024 GMT Subject: CN=250F32CE26443237894BE033FB7DB7481A02ACBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:b4:a2:5e:db:bc:15:7f:2b:fe:f6:23:50: e0:9b:7e:d3:4c:7c:2c:51:01:9e:13:92:b7:b7:e8: 1e:53:b7:73:9c:30:50:4c:10:b7:3b:4e:b5:8e:fa: 57:a2:a2:fd:ec:71:de:2b:c5:ba:37:c5:cd:31:0f: 7c:e3:02:59:a0:16:ee:5f:1d:e2:96:d9:fd:b8:f8: 4c:6a:d4:76:87:f5:20:6e:f8:49:f3:05:8f:b8:b3: 72:59:6f:4f:23:d8:9c:3f:41:8a:ca:14:20:03:9f: db:d4:05:cf:15:d8:f6:3b:be:d2:b2:aa:c2:50:2b: ce:08:9f:27:f1:cc:c2:1a:69:06:6e:59:78:55:2f: 87:e8:77:c1:1e:f6:ca:d0:58:40:97:cb:35:ac:db: 48:9a:ae:d4:cd:9c:45:8c:49:e7:50:8c:ae:44:3c: 62:bb:83:d7:73:9b:66:62:4d:02:5a:9d:0f:18:63: 47:b8:21:5f:e5:d5:26:0e:4b:53:1c:85:7c:66:8f: 4f:94:b3:c4:57:78:0f:5e:bc:5e:b6:3e:9e:09:db: d4:31:e4:e4:8f:25:02:c8:e8:b0:94:1d:70:64:87: 0b:66:77:0e:b3:02:e3:c9:8a:a3:b1:19:be:70:bb: fe:ab:9b:0d:87:61:02:21:09:2b:40:3f:f7:3a:14: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0F:32:CE:26:44:32:37:89:4B:E0:33:FB:7D:B7:48:1A:02:AC:BF X509v3 Authority Key Identifier: keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:88:dc:f8:33:2b:44:f6:7e:26:62:3b:6a:44:21:54:07:73: 0c:1c:c3:cf:e0:9f:8b:14:23:45:47:28:b3:4b:39:09:7c:dc: 8b:46:17:a4:07:c9:c8:d2:f1:e7:a0:51:1a:79:3c:00:83:51: bf:7e:f7:e0:bb:6f:9e:75:d3:d6:68:8b:d9:95:a4:0d:96:77: ba:91:ee:e1:8a:cb:e5:af:18:c9:12:4c:42:51:a2:03:a5:f5: 52:69:d7:ba:66:19:ec:14:76:74:e9:88:13:67:1b:c2:b4:0b: 9f:68:2b:63:e3:cd:64:d9:d5:25:f7:ea:20:60:a8:d5:19:02: 51:6c:ee:af:f0:0c:cc:c4:ad:3d:b2:da:3f:89:c0:2c:ce:31: 65:f1:76:57:ee:09:b8:72:63:b8:35:fe:87:97:15:68:22:31: f3:e2:3c:75:6c:d7:e1:a5:67:7f:78:36:a8:dc:d6:b8:a2:29: 57:52:79:a0:86:2c:6d:bc:b7:71:54:f6:9d:c6:12:c6:47:ab: 6d:d9:ff:15:f0:01:e9:c5:b5:34:23:54:8f:94:fd:68:a3:5a: ef:1d:b5:a2:b5:f8:99:c6:3c:c6:e2:8c:11:c0:90:b2:24:5b: f1:ad:7e:c1:14:48:cf:af:37:10:ec:db:05:eb:b5:4d:ca:03: ea:92:27:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXoQHJqW5ii3fzFZSy42wGWo2FnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD Q0IyQjlCMDAeFw0yNDA0MjUxOTM1NDVaFw0yNDA0MjkwNzMyNDVaMDMxMTAvBgNV BAMTKDI1MEYzMkNFMjY0NDMyMzc4OTRCRTAzM0ZCN0RCNzQ4MUEwMkFDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CbSiXtu8FX8r/vYjUOCbftNM fCxRAZ4Tkre36B5Tt3OcMFBMELc7TrWO+leiov3scd4rxbo3xc0xD3zjAlmgFu5f HeKW2f24+Exq1HaH9SBu+EnzBY+4s3JZb08j2Jw/QYrKFCADn9vUBc8V2PY7vtKy qsJQK84InyfxzMIaaQZuWXhVL4fod8Ee9srQWECXyzWs20iartTNnEWMSedQjK5E PGK7g9dzm2ZiTQJanQ8YY0e4IV/l1SYOS1MchXxmj0+Us8RXeA9evF62Pp4J29Qx 5OSPJQLI6LCUHXBkhwtmdw6zAuPJiqOxGb5wu/6rmw2HYQIhCStAP/c6FCj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJQ8yziZEMjeJS+Az+323SBoCrL8wHwYDVR0j BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0 NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy QjlCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNhN2YzNGMtNjNiOC00OTczLTgy MjYtZTEwNjk1YjI1ZDk0LzAvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNC NUVDQ0IyQjlCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2I3PgzK0T2fiZiO2pEIVQHcwwcw8/gn4sU I0VHKLNLOQl83ItGF6QHycjS8eegURp5PACDUb9+9+C7b55109Zoi9mVpA2Wd7qR 7uGKy+WvGMkSTEJRogOl9VJp17pmGewUdnTpiBNnG8K0C59oK2PjzWTZ1SX36iBg qNUZAlFs7q/wDMzErT2y2j+JwCzOMWXxdlfuCbhyY7g1/oeXFWgiMfPiPHVs1+Gl Z394Nqjc1riiKVdSeaCGLG28t3FU9p3GEsZHq23Z/xXwAenFtTQjVI+U/WijWu8d taK1+JnGPMbijBHAkLIkW/GtfsEUSM+vNxDs2wXrtU3KA+qSJx4= -----END CERTIFICATE-----Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org