$ rpki-client -vvf repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft File: C5E0183A7142717E23D90AF4650F1E14418D85C3.mft (raw, json) Hash identifier: iemH1D/XvdwyDey4WbAXwbwJTckqq614dfspJ/YBvrw= Subject key identifier: A2:AE:92:46:C2:95:9A:9C:A8:E7:E3:2F:F7:E1:F0:5A:E6:E9:BE:28 Authority key identifier: C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3 Certificate issuer: /CN=C5E0183A7142717E23D90AF4650F1E14418D85C3 Certificate serial: 448C65C280C094FCAD62858FA0EA8D1756ACC214 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft Manifest number: 0432 Signing time: Sat 18 May 2024 00:50:41 +0000 Manifest this update: Sat 18 May 2024 00:45:41 +0000 Manifest next update: Tue 21 May 2024 05:19:41 +0000 Files and hashes: 1: C5E0183A7142717E23D90AF4650F1E14418D85C3.crl (hash: GbFEqouclSXptADpaa3zVxfRwRNhmdS/7R+oL40D1po=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.crl rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8c:65:c2:80:c0:94:fc:ad:62:85:8f:a0:ea:8d:17:56:ac:c2:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5E0183A7142717E23D90AF4650F1E14418D85C3 Validity Not Before: May 18 00:45:41 2024 GMT Not After : May 21 05:19:41 2024 GMT Subject: CN=A2AE9246C2959A9CA8E7E32FF7E1F05AE6E9BE28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:ef:85:04:96:5c:48:b0:bb:63:3f:85:6e: c0:88:e1:5d:bb:55:7e:5d:c3:99:33:63:21:bb:d2: 23:47:48:41:ae:30:2f:bf:a7:cf:6f:6b:b5:8b:ad: e5:72:5d:bb:46:30:56:70:69:62:9d:08:36:39:32: 69:cc:30:67:44:8c:05:d3:ea:36:0a:fa:ea:df:8f: 5b:ee:81:fa:e7:25:ed:b9:e1:e4:3c:e1:dc:0a:50: 82:3e:67:05:e8:9a:70:dd:35:1c:7b:83:cb:cf:60: 20:bd:15:be:ba:a3:d1:c2:7f:03:40:2a:d0:05:90: 9c:e1:cc:50:2c:b1:9c:63:ee:65:c6:01:fa:1e:69: ae:0b:71:85:2b:3a:32:6f:25:0f:94:f7:27:3d:bf: 13:47:80:f1:9e:45:e5:b7:86:94:82:f2:f4:93:d7: f7:ea:82:46:84:fb:6e:e6:bd:de:13:3c:3d:d5:7f: 39:a8:0b:3b:15:9e:11:df:06:0f:c3:45:39:1d:74: 1e:59:07:0f:01:5e:a3:87:0d:5d:e9:2f:e9:03:28: 5f:21:14:3d:2a:96:14:1b:9b:df:44:d1:39:57:05: c9:77:be:c7:3f:66:0f:66:b8:53:64:7a:be:73:65: 9c:01:ec:c6:91:fe:97:77:e9:96:c8:dd:cc:0f:dd: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AE:92:46:C2:95:9A:9C:A8:E7:E3:2F:F7:E1:F0:5A:E6:E9:BE:28 X509v3 Authority Key Identifier: keyid:C5:E0:18:3A:71:42:71:7E:23:D9:0A:F4:65:0F:1E:14:41:8D:85:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5E0183A7142717E23D90AF4650F1E14418D85C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/C5E0183A7142717E23D90AF4650F1E14418D85C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5a:bf:b4:55:38:25:af:00:94:6b:6b:fd:f0:e7:f1:d0:1d: f8:80:b9:2a:a8:bf:48:e3:0d:08:0c:fd:bf:5e:b8:43:fc:f0: ea:cc:be:68:85:fd:48:54:0d:e6:01:78:42:ec:04:5a:15:34: 9d:cb:7f:0a:9e:13:b9:f6:bf:0a:b5:11:16:94:2e:8e:60:9e: 47:1c:79:02:7a:59:78:2c:25:a9:da:80:30:ef:96:8c:7c:3c: a6:2e:93:9e:3d:3c:36:99:e7:ac:f9:a2:24:8b:89:df:22:45: f1:72:9f:06:7e:1a:77:c2:6f:ea:de:2f:8b:90:95:84:d2:61: 02:06:0b:33:44:97:c4:fe:a0:5a:d0:98:13:62:72:94:a3:45: 92:24:41:7c:b4:6f:f7:42:d7:b3:35:21:98:82:28:a2:60:46: 7b:b4:51:89:e1:5f:a4:b2:11:cd:76:66:f2:7a:43:50:f1:46: 42:7b:66:7a:9c:1d:17:05:42:43:0e:1c:23:16:25:07:75:bb: d1:2b:44:1e:b8:9b:e2:1f:09:31:a4:e9:e3:75:3a:aa:e5:22: eb:23:47:04:0e:de:4f:a5:fc:61:0b:81:b9:3d:20:6c:7c:9a: f0:cf:e4:b2:27:27:36:03:c3:2b:5d:e1:2f:b1:97:6c:20:72: bc:84:f0:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURIxlwoDAlPytYoWPoOqNF1aswhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFFMTQ0 MThEODVDMzAeFw0yNDA1MTgwMDQ1NDFaFw0yNDA1MjEwNTE5NDFaMDMxMTAvBgNV BAMTKEEyQUU5MjQ2QzI5NTlBOUNBOEU3RTMyRkY3RTFGMDVBRTZFOUJFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWO+FBJZcSLC7Yz+FbsCI4V27 VX5dw5kzYyG70iNHSEGuMC+/p89va7WLreVyXbtGMFZwaWKdCDY5MmnMMGdEjAXT 6jYK+urfj1vugfrnJe254eQ84dwKUII+ZwXomnDdNRx7g8vPYCC9Fb66o9HCfwNA KtAFkJzhzFAssZxj7mXGAfoeaa4LcYUrOjJvJQ+U9yc9vxNHgPGeReW3hpSC8vST 1/fqgkaE+27mvd4TPD3VfzmoCzsVnhHfBg/DRTkddB5ZBw8BXqOHDV3pL+kDKF8h FD0qlhQbm99E0TlXBcl3vsc/Zg9muFNker5zZZwB7MaR/pd36ZbI3cwP3SbtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoq6SRsKVmpyo5+Mv9+HwWubpvigwHwYDVR0j BBgwFoAUxeAYOnFCcX4j2Qr0ZQ8eFEGNhcMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDRmMjQ2MC1mZTUwLTQ4MDAtYWUwMi01N2NiM2U4MTVkNWUvMC9DNUUwMTgzQTcx NDI3MTdFMjNEOTBBRjQ2NTBGMUUxNDQxOEQ4NUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFFMTQ0MThE ODVDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ0ZjI0NjAtZmU1MC00ODAwLWFl MDItNTdjYjNlODE1ZDVlLzAvQzVFMDE4M0E3MTQyNzE3RTIzRDkwQUY0NjUwRjFF MTQ0MThEODVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpav7RVOCWvAJRra/3w5/HQHfiAuSqov0jj DQgM/b9euEP88OrMvmiF/UhUDeYBeELsBFoVNJ3LfwqeE7n2vwq1ERaULo5gnkcc eQJ6WXgsJanagDDvlox8PKYuk549PDaZ56z5oiSLid8iRfFynwZ+GnfCb+reL4uQ lYTSYQIGCzNEl8T+oFrQmBNicpSjRZIkQXy0b/dC17M1IZiCKKJgRnu0UYnhX6Sy Ec12ZvJ6Q1DxRkJ7ZnqcHRcFQkMOHCMWJQd1u9ErRB64m+IfCTGk6eN1OqrlIusj RwQO3k+l/GELgbk9IGx8mvDP5LInJzYDwytd4S+xl2wgcryE8Nk= -----END CERTIFICATE-----Generated at Sat May 18 01:29:13 2024 by rpki-client on console-fra.rpki-client.org