$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft File: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft (raw, json) Hash identifier: KQbrNQM6Dm5pxEpbEqAy0ezQaa8ZmhJFHE5cnoPZHcQ= Subject key identifier: DC:52:45:A8:2B:CF:DF:26:5E:6B:03:B4:91:5B:8F:7B:59:CF:20:4A Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB Certificate issuer: /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Certificate serial: 70F38F7CDFEE68E6C67C3B7F26E1A74D41E7D225 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft Manifest number: 0430 Signing time: Sat 18 May 2024 17:01:19 +0000 Manifest this update: Sat 18 May 2024 16:56:19 +0000 Manifest next update: Tue 21 May 2024 17:45:19 +0000 Files and hashes: 1: 323030313a6466363a353930303a3a2f34382d3438203d3e20313338303536.roa (hash: JsJST0L1AEZwkDhHHr6HI+GYNSJTausSL292nKaOgv8=) 2: 65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl (hash: r5CYsB3I9xXIR/ukD8X5uKw6aQPY6SMv/ob+wM/mXQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f3:8f:7c:df:ee:68:e6:c6:7c:3b:7f:26:e1:a7:4d:41:e7:d2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB Validity Not Before: May 18 16:56:19 2024 GMT Not After : May 21 17:45:19 2024 GMT Subject: CN=DC5245A82BCFDF265E6B03B4915B8F7B59CF204A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:91:1f:71:66:89:9e:ac:e9:b5:12:10:dc:e2: 4e:aa:f1:cd:3f:94:50:f4:6c:bb:1a:44:bf:60:13: 9f:9d:d9:1f:93:f3:f9:59:28:ca:7f:17:74:6c:d0: 41:d4:11:81:b5:71:91:d0:13:81:b7:23:ed:82:ae: 46:2b:95:d2:97:00:66:d5:0d:8a:f5:b5:79:93:3d: 24:7c:db:f3:59:2f:b9:db:f9:4c:06:1f:57:56:c0: f6:84:85:a4:d7:19:39:09:d6:b1:0b:c2:4e:7b:b5: 13:fb:22:fa:ec:41:0a:8c:8b:eb:18:11:69:dc:f1: 4c:75:bf:5b:6a:89:82:23:28:26:fb:b7:b9:77:29: 6c:2b:41:0e:99:8f:16:9a:ee:f8:3a:ae:8c:6a:b8: 70:7f:da:5a:9d:90:19:ac:eb:9f:cf:2b:bc:05:0f: 45:ab:48:6c:22:c5:a6:b4:9f:fb:a3:9f:1a:4b:80: 22:97:0f:a3:15:fc:dc:80:22:35:25:9d:8e:19:50: 3a:7d:67:6c:55:0c:2c:9b:e0:18:e5:cb:1c:f8:49: 73:2c:68:12:0f:7a:8c:06:a6:aa:b4:5c:e2:56:47: 18:19:e2:85:e9:fa:49:7e:26:79:5c:50:4e:fc:9d: e0:7d:c1:bd:8a:9a:15:b0:17:4f:7f:48:fc:ad:f3: 6b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:52:45:A8:2B:CF:DF:26:5E:6B:03:B4:91:5B:8F:7B:59:CF:20:4A X509v3 Authority Key Identifier: keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a8:11:fd:40:20:1f:68:73:52:fb:ce:e5:21:a3:2d:2e:aa: 97:76:3f:88:33:a7:ef:2a:a0:dd:dc:08:c4:cb:ad:18:d4:e4: 43:a3:75:b8:72:ae:37:b6:6d:d1:46:32:58:2b:a0:ce:8a:26: 08:12:86:ff:36:19:60:27:16:08:60:81:1d:ca:93:e5:5d:ad: 2b:93:5e:36:d5:8f:38:ba:1e:3e:29:4a:03:b3:39:ba:39:da: 91:14:06:70:95:f2:79:e2:27:da:6e:51:2d:9f:d1:ef:e5:74: c0:5f:e7:d2:5d:35:86:b1:ba:c0:58:f8:7d:a3:57:b8:25:b6: 3a:0c:08:c7:22:cf:29:25:b7:11:b8:89:35:e4:4d:05:58:5f: 16:03:20:00:26:cb:a5:1f:03:7a:2a:84:dc:eb:a4:d1:e7:9e: c7:f3:e6:c2:61:1b:4a:68:c8:cc:75:82:91:31:aa:5f:1c:d7: 8e:dd:02:5d:69:32:a9:21:2a:e0:ad:51:f1:92:4f:01:77:1a: 33:41:98:4a:b0:5a:ab:ea:cf:4c:9e:3e:b1:be:83:94:78:8e: aa:54:cf:3d:f5:47:80:b9:8e:1c:cc:33:10:e8:99:6a:d3:44: f9:16:60:31:0c:57:ea:e8:7c:24:f7:bb:61:07:16:34:04:bd: cf:2f:da:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPOPfN/uaObGfDt/JuGnTUHn0iUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIy RjIzQTdFQjAeFw0yNDA1MTgxNjU2MTlaFw0yNDA1MjExNzQ1MTlaMDMxMTAvBgNV BAMTKERDNTI0NUE4MkJDRkRGMjY1RTZCMDNCNDkxNUI4RjdCNTlDRjIwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZkR9xZomerOm1EhDc4k6q8c0/ lFD0bLsaRL9gE5+d2R+T8/lZKMp/F3Rs0EHUEYG1cZHQE4G3I+2CrkYrldKXAGbV DYr1tXmTPSR82/NZL7nb+UwGH1dWwPaEhaTXGTkJ1rELwk57tRP7IvrsQQqMi+sY EWnc8Ux1v1tqiYIjKCb7t7l3KWwrQQ6Zjxaa7vg6roxquHB/2lqdkBms65/PK7wF D0WrSGwixaa0n/ujnxpLgCKXD6MV/NyAIjUlnY4ZUDp9Z2xVDCyb4Bjlyxz4SXMs aBIPeowGpqq0XOJWRxgZ4oXp+kl+JnlcUE78neB9wb2KmhWwF09/SPyt82sFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FJFqCvP3yZeawO0kVuPe1nPIEowHwYDVR0j BBgwFoAUZa52UoigjJMB2yG03d2Way8jp+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVmMTkyMC04NTIzLTRlZDQtYjM1Ny05ZGU5YTBjOTE3MTAvMC82NUFFNzY1Mjg4 QTA4QzkzMDFEQjIxQjREREREOTY2QjJGMjNBN0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIyRjIz QTdFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTRlZjE5MjAtODUyMy00ZWQ0LWIz NTctOWRlOWEwYzkxNzEwLzAvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2 NkIyRjIzQTdFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKoEf1AIB9oc1L7zuUhoy0uqpd2P4gzp+8q oN3cCMTLrRjU5EOjdbhyrje2bdFGMlgroM6KJggShv82GWAnFghggR3Kk+VdrSuT XjbVjzi6Hj4pSgOzObo52pEUBnCV8nniJ9puUS2f0e/ldMBf59JdNYaxusBY+H2j V7gltjoMCMcizykltxG4iTXkTQVYXxYDIAAmy6UfA3oqhNzrpNHnnsfz5sJhG0po yMx1gpExql8c147dAl1pMqkhKuCtUfGSTwF3GjNBmEqwWqvqz0yePrG+g5R4jqpU zz31R4C5jhzMMxDomWrTRPkWYDEMV+rofCT3u2EHFjQEvc8v2oQ= -----END CERTIFICATE-----Generated at Sat May 18 18:21:12 2024 by rpki-client on console-ams.rpki-client.org