$ rpki-client -vvf repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft File: E380AA52674666F5E074BF511BB72FA0713E5270.mft (raw, json) Hash identifier: CAEu6sxcMez7e0t/F4S0Uutb6MHZslWAZYG/iS3/cZU= Subject key identifier: 10:E8:A6:D3:87:2E:47:35:EA:0A:E1:78:B7:BB:C6:44:B5:97:B1:2F Authority key identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 Certificate issuer: /CN=E380AA52674666F5E074BF511BB72FA0713E5270 Certificate serial: 72159F633E5281B34E9761B106768063DBF6E362 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft Manifest number: 1A Signing time: Tue 28 May 2024 16:51:00 +0000 Manifest this update: Tue 28 May 2024 16:46:00 +0000 Manifest next update: Fri 31 May 2024 19:43:00 +0000 Files and hashes: 1: E380AA52674666F5E074BF511BB72FA0713E5270.crl (hash: nsabGgQ0j51KM/ee2Mae7Rzhbi64ncI9gWbNI9NK4/Y=) 2: 33362e35302e34362e302f32332d3233203d3e20313334363337.roa (hash: 2dbC2ZJVhaxzNioEDe+RlpMQfV4iJjtxOOu6kQr8li4=) 3: 33362e35302e34362e302f32342d3234203d3e20313334363337.roa (hash: 9VZiA9Thvqp82AiGM88mpiJT1+zVHNmVsr7RTpcRvKw=) 4: 33362e35302e34372e302f32342d3234203d3e20313334363337.roa (hash: qmltahXscPIq/sZrqiN4O0VnUNiUuMlpGQSF8yqM5es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:15:9f:63:3e:52:81:b3:4e:97:61:b1:06:76:80:63:db:f6:e3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E380AA52674666F5E074BF511BB72FA0713E5270 Validity Not Before: May 28 16:46:00 2024 GMT Not After : May 31 19:43:00 2024 GMT Subject: CN=10E8A6D3872E4735EA0AE178B7BBC644B597B12F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:2c:12:b2:02:0d:a0:b4:64:d3:e2:69:76: 62:89:d2:9d:e2:0f:14:03:de:81:73:ba:8a:e7:5f: ea:a7:18:ba:bd:0a:2a:05:15:fa:b6:cc:1c:0a:7e: 4e:e1:5f:38:7e:65:e1:07:19:b4:34:cb:b2:e8:cc: 57:68:a8:b7:e9:93:60:43:d1:c1:c9:a6:0b:a7:37: 96:50:58:82:98:5e:65:7e:af:f7:da:0d:0e:a4:59: 69:ff:3b:2a:b3:0f:99:7c:be:44:7e:54:01:f2:5d: 3f:01:e8:78:80:1e:0e:ec:7c:70:8f:fb:5a:2e:09: ed:ee:30:7f:ed:5f:fa:a9:a3:43:b2:e5:a3:f7:34: c1:83:b2:ea:cc:f8:cf:df:12:e1:67:aa:88:43:3f: ee:84:e3:4f:d3:bf:18:20:0a:95:aa:42:af:dc:3e: 35:15:1a:d1:b5:07:2e:71:e2:7c:53:73:df:f9:cb: 03:a2:3b:99:59:79:83:76:fa:36:fa:bb:7d:26:79: c9:6b:a9:be:a0:f7:56:5f:87:cf:a3:98:39:95:a2: 3d:d0:1d:24:9f:f6:17:d1:a8:b0:70:26:c6:68:5f: 23:17:0f:29:eb:9f:e6:ab:39:9d:c7:e5:de:e6:3b: 1a:0e:7f:42:f8:6c:cd:b8:56:3a:00:7a:03:25:f5: 51:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E8:A6:D3:87:2E:47:35:EA:0A:E1:78:B7:BB:C6:44:B5:97:B1:2F X509v3 Authority Key Identifier: keyid:E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:cb:8b:92:eb:1f:10:a4:07:46:77:e8:97:97:c4:40:91:75: a2:6a:43:ad:43:db:cd:34:b9:ab:7f:a7:16:42:e6:24:83:dd: ac:ae:f1:7e:30:cd:ab:a9:c3:a1:a7:24:06:fc:a2:c4:83:16: a8:76:85:9f:0f:10:7b:07:a2:fa:46:38:ec:72:af:23:da:88: 25:d5:31:2a:db:2d:17:9d:1b:5c:ec:fa:cb:0f:51:e1:84:2e: 35:a9:e4:13:16:db:41:4f:24:8b:32:f9:97:9a:4f:11:1d:a4: 1b:a3:d9:cc:2d:06:92:ba:58:d0:9a:e0:8f:a9:fe:d0:78:a0: 25:6b:17:84:e4:8f:3e:06:44:8b:7e:c1:2e:5f:9c:92:ab:dd: 69:a2:ac:6f:64:92:80:83:7a:9b:48:cd:fa:c1:b1:37:01:0b: a0:ea:32:be:1c:f9:34:d7:34:94:5e:37:51:9e:39:96:bf:51: 18:8c:ce:bb:58:b7:43:1b:aa:48:70:d2:65:37:69:27:31:0b: a2:28:c3:77:b5:11:71:95:6c:20:06:2b:1c:fc:d9:8e:89:98: 3e:aa:37:ff:aa:25:64:01:83:ce:95:d9:b7:22:86:b7:c8:a6: 69:5b:e4:a0:3e:6c:e7:ba:e2:f4:7a:16:b2:16:90:fc:22:e1: 7a:2b:ff:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchWfYz5SgbNOl2GxBnaAY9v242IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJGQTA3 MTNFNTI3MDAeFw0yNDA1MjgxNjQ2MDBaFw0yNDA1MzExOTQzMDBaMDMxMTAvBgNV BAMTKDEwRThBNkQzODcyRTQ3MzVFQTBBRTE3OEI3QkJDNjQ0QjU5N0IxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2CwSsgINoLRk0+JpdmKJ0p3i DxQD3oFzuornX+qnGLq9CioFFfq2zBwKfk7hXzh+ZeEHGbQ0y7LozFdoqLfpk2BD 0cHJpgunN5ZQWIKYXmV+r/faDQ6kWWn/OyqzD5l8vkR+VAHyXT8B6HiAHg7sfHCP +1ouCe3uMH/tX/qpo0Oy5aP3NMGDsurM+M/fEuFnqohDP+6E40/TvxggCpWqQq/c PjUVGtG1By5x4nxTc9/5ywOiO5lZeYN2+jb6u30meclrqb6g91Zfh8+jmDmVoj3Q HSSf9hfRqLBwJsZoXyMXDynrn+arOZ3H5d7mOxoOf0L4bM24VjoAegMl9VErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEOim04cuRzXqCuF4t7vGRLWXsS8wHwYDVR0j BBgwFoAU44CqUmdGZvXgdL9RG7cvoHE+UnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjY4NDYyZS1iZmE1LTQzMzctOTE1My1jNTU2ZDlkNzcxZmEvMC9FMzgwQUE1MjY3 NDY2NkY1RTA3NEJGNTExQkI3MkZBMDcxM0U1MjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJGQTA3MTNF NTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRTM4MEFBNTI2NzQ2NjZGNUUwNzRCRjUxMUJCNzJG QTA3MTNFNTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTLi5LrHxCkB0Z36JeXxECRdaJqQ61D2800 uat/pxZC5iSD3ayu8X4wzaupw6GnJAb8osSDFqh2hZ8PEHsHovpGOOxyryPaiCXV MSrbLRedG1zs+ssPUeGELjWp5BMW20FPJIsy+ZeaTxEdpBuj2cwtBpK6WNCa4I+p /tB4oCVrF4Tkjz4GRIt+wS5fnJKr3WmirG9kkoCDeptIzfrBsTcBC6DqMr4c+TTX NJReN1GeOZa/URiMzrtYt0Mbqkhw0mU3aScxC6Iow3e1EXGVbCAGKxz82Y6JmD6q N/+qJWQBg86V2bcihrfIpmlb5KA+bOe64vR6FrIWkPwi4Xor/w4= -----END CERTIFICATE-----Generated at Tue May 28 17:49:09 2024 by rpki-client on console-fra.rpki-client.org