$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json) Hash identifier: lkJAY7ZZKq0T3nfIOyVORYJ6nSVz53b/PqAKxI30huk= Subject key identifier: 43:29:3D:16:BD:F6:77:2E:85:CF:71:40:7D:40:9F:7B:8A:E7:0C:94 Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Certificate serial: 5EB50A0A31C088731B3F0477DDE7C3AED77CBF89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft Manifest number: 0137 Signing time: Sun 19 May 2024 06:31:20 +0000 Manifest this update: Sun 19 May 2024 06:26:20 +0000 Manifest next update: Wed 22 May 2024 09:35:20 +0000 Files and hashes: 1: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: ph3uYTlFMX1BFRHHGEZlKMgJ6csPlVRgtyfF036CKIk=) 2: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: /X9uJGt5aoxOtJ0JeG1O/rdAcBw9161RNgahYwMuPCc=) 3: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: dehqxFCHBrMds+ZiAeLPjrR/fRS6PqqqAhfp9EkpWIg=) 4: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: zR665DTyJA/CfbJT9XZ1rRiLHbhOu+eqALD6NRCm228=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b5:0a:0a:31:c0:88:73:1b:3f:04:77:dd:e7:c3:ae:d7:7c:bf:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Validity Not Before: May 19 06:26:20 2024 GMT Not After : May 22 09:35:20 2024 GMT Subject: CN=43293D16BDF6772E85CF71407D409F7B8AE70C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:a8:0b:b6:c2:82:44:d9:ba:3b:cc:1e:95: 84:1a:5a:c5:29:6e:1c:3d:9d:08:26:59:81:bd:f8: 5c:87:67:6e:05:04:19:85:b9:b4:ae:c5:a9:c5:f7: 94:5c:70:b3:87:67:f3:8f:3d:0a:b6:da:e0:22:1d: bb:f0:f9:d6:a0:c6:a9:08:bf:4a:ec:4e:e9:2f:f5: ec:df:d3:b2:08:ac:3e:58:f6:58:98:28:38:ea:13: 93:fb:3b:fc:e2:c9:f3:32:c2:c4:9a:64:52:dd:d5: 95:75:40:14:79:09:bc:dc:fe:89:90:bd:8b:ec:4b: 4e:4f:dc:f7:40:6f:a4:ad:b3:6c:87:b4:7e:37:36: 94:98:03:c7:6f:de:8b:c8:e4:04:a7:21:5f:05:49: d2:2d:80:5e:ba:79:b7:6f:95:3c:ba:a1:67:cb:82: 5f:f2:d5:e1:37:d3:c2:0b:d2:82:68:41:16:59:9b: 15:a4:60:18:7b:f9:7b:b9:8d:43:52:a3:06:db:4f: d5:4c:08:8e:c1:3f:62:91:d8:15:b4:4b:8e:2c:cb: 68:31:a3:a0:17:e5:16:95:22:4a:37:08:d9:b9:f2: 1f:0f:04:fa:be:5a:c4:ab:d5:d3:7b:fe:5a:59:ca: 68:99:5b:24:01:cd:63:f5:26:03:72:02:04:ea:ab: c0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:29:3D:16:BD:F6:77:2E:85:CF:71:40:7D:40:9F:7B:8A:E7:0C:94 X509v3 Authority Key Identifier: keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e4:0b:5d:a3:5b:7d:f7:2e:de:8d:a3:8d:86:45:1b:9e:29: eb:50:c8:c4:e6:36:a9:98:8b:7c:c6:25:98:ca:d4:b3:cd:da: 51:e9:a0:e4:83:56:d2:8f:85:1e:d1:2c:8f:af:6b:e9:a9:82: d8:5b:ce:a9:39:36:84:2c:13:24:bb:26:08:55:3d:65:13:dd: 8f:c1:0f:c9:d7:8d:0b:28:61:6d:03:a8:17:bf:c9:34:74:e8: ff:d7:c1:4e:8a:a2:2b:eb:23:fb:2a:31:7e:e8:64:df:2b:76: 87:a6:26:eb:f5:2a:f0:3a:ee:30:88:cc:26:ac:df:67:b8:59: 1f:ac:82:8f:e8:33:b9:15:a1:d6:ac:39:a2:ee:b9:44:f8:a4: 24:bd:8a:6d:c6:c5:8b:9f:fc:28:76:33:81:e5:ea:4b:be:25: ed:68:96:5e:84:76:f0:40:b1:bb:0f:40:a5:d7:dc:91:21:7c: 27:9b:fc:08:81:a7:e3:77:61:e6:26:91:ee:19:9f:b7:72:53: 78:e2:29:52:61:34:1d:84:c2:f6:37:08:dc:5a:97:e8:e7:b4: 41:53:d7:74:23:f4:58:b3:56:de:f5:df:06:c6:65:45:85:67: 7b:be:98:76:2a:7a:2a:25:09:38:af:7f:c1:db:cd:37:d0:59: d5:81:f9:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrUKCjHAiHMbPwR33efDrtd8v4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJE MzIxNEVDMjAeFw0yNDA1MTkwNjI2MjBaFw0yNDA1MjIwOTM1MjBaMDMxMTAvBgNV BAMTKDQzMjkzRDE2QkRGNjc3MkU4NUNGNzE0MDdENDA5RjdCOEFFNzBDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLragLtsKCRNm6O8welYQaWsUp bhw9nQgmWYG9+FyHZ24FBBmFubSuxanF95RccLOHZ/OPPQq22uAiHbvw+dagxqkI v0rsTukv9ezf07IIrD5Y9liYKDjqE5P7O/ziyfMywsSaZFLd1ZV1QBR5Cbzc/omQ vYvsS05P3PdAb6Sts2yHtH43NpSYA8dv3ovI5ASnIV8FSdItgF66ebdvlTy6oWfL gl/y1eE308IL0oJoQRZZmxWkYBh7+Xu5jUNSowbbT9VMCI7BP2KR2BW0S44sy2gx o6AX5RaVIko3CNm58h8PBPq+WsSr1dN7/lpZymiZWyQBzWP1JgNyAgTqq8AFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQyk9Fr32dy6Fz3FAfUCfe4rnDJQwHwYDVR0j BBgwFoAUXHJAyhNck4Nflajh81JpQtMhTsIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjFmOTk5Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC81QzcyNDBDQTEz NUM5MzgzNUY5NUE4RTFGMzUyNjk0MkQzMjE0RUMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJEMzIx NEVDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5 NDJEMzIxNEVDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITkC12jW333Lt6No42GRRueKetQyMTmNqmY i3zGJZjK1LPN2lHpoOSDVtKPhR7RLI+va+mpgthbzqk5NoQsEyS7JghVPWUT3Y/B D8nXjQsoYW0DqBe/yTR06P/XwU6KoivrI/sqMX7oZN8rdoemJuv1KvA67jCIzCas 32e4WR+sgo/oM7kVodasOaLuuUT4pCS9im3GxYuf/Ch2M4Hl6ku+Je1oll6EdvBA sbsPQKXX3JEhfCeb/AiBp+N3YeYmke4Zn7dyU3jiKVJhNB2EwvY3CNxal+jntEFT 13Qj9FizVt713wbGZUWFZ3u+mHYqeiolCTivf8HbzTfQWdWB+bc= -----END CERTIFICATE-----Generated at Sun May 19 08:24:27 2024 by rpki-client on console-ams.rpki-client.org