$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft File: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft (raw, json) Hash identifier: gUTlxcb/Na5oFYvE5BvPKiabtP7kdAlabaVLZy6sxWY= Subject key identifier: 95:DE:B5:BE:B7:17:32:9E:05:F8:E5:D2:4A:95:AC:AF:FB:A8:B3:09 Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 Certificate issuer: /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Certificate serial: 4E19EFD0A05D2B05DF4417E3A180835DB4C57E88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft Manifest number: 016C Signing time: Tue 28 May 2024 09:21:35 +0000 Manifest this update: Tue 28 May 2024 09:16:35 +0000 Manifest next update: Fri 31 May 2024 14:25:35 +0000 Files and hashes: 1: 3130332e3138302e3235302e302f32342d3234203d3e20313439333733.roa (hash: MEZxJgd/hWxPnWbsHzQjzlGPCO/qxP9YMyi3V7a1p9c=) 2: 3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (hash: Sk0wkDqGConkmWy9npP0doI1sV1k0RuaSswpEBtoT8g=) 3: 1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl (hash: 6oD8AZ/xfp8WsRx5c61/Z9ylPYmjMGlVKy/5u+DD0fc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:19:ef:d0:a0:5d:2b:05:df:44:17:e3:a1:80:83:5d:b4:c5:7e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20 Validity Not Before: May 28 09:16:35 2024 GMT Not After : May 31 14:25:35 2024 GMT Subject: CN=95DEB5BEB717329E05F8E5D24A95ACAFFBA8B309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:e4:ca:43:35:fd:ef:94:36:fe:2a:b5:79: 47:5a:4f:c6:b1:bd:96:df:1a:2b:9f:24:7e:a3:5a: 2a:e0:36:4b:42:0a:f1:9d:cc:54:d6:00:8a:59:3e: 91:a2:b6:9a:7e:c5:bf:df:b2:0b:72:bc:ad:cb:c4: 9d:ea:5e:dc:0b:c1:f5:9a:f1:0e:d3:a6:1d:22:8e: d3:45:d9:fd:77:d0:98:23:fa:68:1e:67:20:86:56: 7c:49:af:05:bd:95:17:ca:bd:46:ed:ad:79:cc:3e: c2:cc:7c:27:96:dd:a4:87:21:9b:20:31:53:7f:71: 4a:78:f1:10:1b:fc:28:1a:36:27:3a:b4:57:5a:d5: ef:5c:f3:39:92:a6:38:3f:00:92:ed:ad:79:c8:e3: c2:42:7d:0c:69:f6:a5:3b:10:1a:70:cc:7d:d9:fd: ee:c0:98:3e:7d:10:f6:ee:fa:16:79:25:77:a5:28: 54:9e:39:c8:62:eb:89:f6:94:7a:a3:43:ad:1c:44: 09:b0:6f:2c:6c:ae:b6:b8:83:ff:dc:41:5c:c5:15: 42:52:b9:42:e0:4e:ae:62:75:6f:d4:57:cf:b6:6e: aa:b4:09:73:18:9d:4b:ad:b1:50:9d:fa:04:e5:d4: 00:2e:49:3a:90:90:4f:a3:9e:ad:6c:b6:11:ac:b3: 97:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DE:B5:BE:B7:17:32:9E:05:F8:E5:D2:4A:95:AC:AF:FB:A8:B3:09 X509v3 Authority Key Identifier: keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:81:7d:74:89:c8:6d:c6:e4:a9:55:f4:74:b2:90:0c:03:d4: a0:3b:8d:9e:42:2d:b2:d5:96:56:59:1c:97:5a:2b:4e:0c:bc: 2b:5c:39:76:4e:26:16:69:e2:8e:b8:a7:58:aa:bb:0a:af:a9: 1b:85:76:e2:49:63:7e:d0:db:b8:b9:31:28:a2:f5:54:22:6b: 76:15:f0:33:b3:bf:10:96:61:e6:d6:d6:e2:6a:2e:70:0d:26: eb:ed:4d:06:5e:5e:3f:98:bc:d0:a8:63:d5:91:45:fc:95:43: 39:7b:b4:28:46:09:ef:02:af:e1:54:ab:a9:58:3a:7f:48:1b: 9f:fb:08:46:c9:e4:7d:b7:e1:0f:2f:0f:cc:25:da:62:6f:99: 3f:88:dd:d9:43:19:22:1c:f7:d1:53:de:d4:19:42:11:92:db: 3c:fd:63:2d:78:83:9d:b3:14:cd:d3:77:7d:02:44:b4:65:19: 6a:ba:c6:ff:e6:0c:bd:1a:90:04:81:d9:5c:0d:14:f8:0b:56: 7b:4e:11:1f:06:9f:4a:b6:da:7d:ef:48:b5:eb:5d:57:aa:d5: d5:05:e5:29:9b:65:af:c2:17:90:0a:a7:b6:2c:12:e7:4a:05: fb:c0:52:17:40:a7:6b:5d:7c:ba:a1:ac:36:de:7f:14:f6:49: 46:e2:8d:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThnv0KBdKwXfRBfjoYCDXbTFfogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB MTBBMUUyMDAeFw0yNDA1MjgwOTE2MzVaFw0yNDA1MzExNDI1MzVaMDMxMTAvBgNV BAMTKDk1REVCNUJFQjcxNzMyOUUwNUY4RTVEMjRBOTVBQ0FGRkJBOEIzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVuTKQzX975Q2/iq1eUdaT8ax vZbfGiufJH6jWirgNktCCvGdzFTWAIpZPpGitpp+xb/fsgtyvK3LxJ3qXtwLwfWa 8Q7Tph0ijtNF2f130Jgj+mgeZyCGVnxJrwW9lRfKvUbtrXnMPsLMfCeW3aSHIZsg MVN/cUp48RAb/CgaNic6tFda1e9c8zmSpjg/AJLtrXnI48JCfQxp9qU7EBpwzH3Z /e7AmD59EPbu+hZ5JXelKFSeOchi64n2lHqjQ60cRAmwbyxsrra4g//cQVzFFUJS uULgTq5idW/UV8+2bqq0CXMYnUutsVCd+gTl1AAuSTqQkE+jnq1sthGss5e3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUld61vrcXMp4F+OXSSpWsr/uoswkwHwYDVR0j BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB MUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTI0OWQzODctNzBjZi00MGU5LTg3 NTktOWI4NmUwYzY1MTI4LzAvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlC RDdBMTBBMUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6BfXSJyG3G5KlV9HSykAwD1KA7jZ5CLbLV llZZHJdaK04MvCtcOXZOJhZp4o64p1iquwqvqRuFduJJY37Q27i5MSii9VQia3YV 8DOzvxCWYebW1uJqLnANJuvtTQZeXj+YvNCoY9WRRfyVQzl7tChGCe8Cr+FUq6lY On9IG5/7CEbJ5H234Q8vD8wl2mJvmT+I3dlDGSIc99FT3tQZQhGS2zz9Yy14g52z FM3Td30CRLRlGWq6xv/mDL0akASB2VwNFPgLVntOER8Gn0q22n3vSLXrXVeq1dUF 5SmbZa/CF5AKp7YsEudKBfvAUhdAp2tdfLqhrDbefxT2SUbijSI= -----END CERTIFICATE-----Generated at Tue May 28 11:45:39 2024 by rpki-client on console-ams.rpki-client.org