$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: QPI3KDMNMpywu/fH91kYYt7URzcBPfy/O0fRnO0J2JA= Subject key identifier: DB:47:84:8B:ED:74:E6:90:FD:21:D6:E5:49:92:2C:8A:09:F5:CF:8F Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 20C92CA27F9135843883A29A6268A26D23A5AA5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: A0 Signing time: Tue 28 May 2024 13:21:41 +0000 Manifest this update: Tue 28 May 2024 13:16:41 +0000 Manifest next update: Fri 31 May 2024 21:39:41 +0000 Files and hashes: 1: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: C0Z3ePcxnI3/9rIfryMXvRuvKa9nIXhMbM3+pi3W1ao=) 2: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: k065Ob9WhflABEziSxciTc0gpRbSDyUrFqXd4quyNWo=) 3: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: +Inku8JbbUNqeg+Ljrd5Bs7t4gp+eduAPT8HbuOG6qQ=) 4: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: 83OI1kT3dr2p7fSwSdVid0kQfD5fuV74PbYWwoo6r1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c9:2c:a2:7f:91:35:84:38:83:a2:9a:62:68:a2:6d:23:a5:aa:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: May 28 13:16:41 2024 GMT Not After : May 31 21:39:41 2024 GMT Subject: CN=DB47848BED74E690FD21D6E549922C8A09F5CF8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:f5:0c:25:f9:1f:2d:b8:46:69:05:94:99: 43:a8:a7:bf:c1:3f:b0:32:e5:4a:3e:f9:ed:8f:93: ae:93:8b:53:55:09:7d:54:aa:39:6a:b8:4b:14:c0: 82:42:12:d5:85:15:29:3b:31:f7:96:e0:0a:11:a7: b0:e7:0c:f7:66:39:52:0d:f5:a9:44:06:f9:d5:81: aa:51:ed:fa:cd:56:76:93:f6:72:65:39:4b:8d:d7: 6d:90:4a:5b:fb:42:b2:1f:60:8a:a8:b2:96:0c:a4: 9f:10:39:d1:84:01:1f:a7:20:aa:ef:08:b4:1e:d1: e9:18:8b:78:59:5b:7d:6f:1b:41:3c:96:11:6d:f8: 87:66:36:af:9a:91:3f:29:77:86:88:1f:7c:39:0e: 34:ce:7f:d4:6b:86:00:a8:f6:b9:c3:0c:c3:fe:07: 41:bc:86:68:7b:01:f9:fd:f6:80:e3:e6:d6:2c:5b: 54:93:e6:ce:fb:cc:50:d1:84:60:ef:9a:b6:d8:84: d2:d8:b9:f9:eb:ce:1f:54:96:8e:ce:19:5b:b5:3d: c9:37:99:12:ef:86:59:6c:47:7d:eb:76:5d:62:7a: 97:59:fc:4e:92:5e:23:08:75:58:62:58:be:ea:2a: c5:89:e3:47:5a:02:f6:b7:66:5a:77:69:b0:bd:5e: 0c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:47:84:8B:ED:74:E6:90:FD:21:D6:E5:49:92:2C:8A:09:F5:CF:8F X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:26:d7:85:88:8e:32:48:4f:47:1e:c9:12:6a:ee:c3:7b:3a: 41:0a:d5:c7:70:aa:19:4a:19:17:19:85:5c:2d:3a:fa:81:84: 5b:a5:14:fb:5a:0e:38:5f:80:fd:87:2e:ae:66:2d:01:db:86: 88:02:96:b1:75:4a:96:f0:0a:00:d5:44:3a:43:b2:0b:01:91: 9d:52:e2:cc:9c:2d:e4:68:3b:f5:69:f3:fe:c3:bd:2e:ef:48: 4a:09:4d:1c:3a:52:21:7e:b4:b0:36:73:0b:f7:c8:78:ee:28: d8:41:c7:6a:5b:69:76:1f:75:80:3a:1c:59:31:23:d4:ff:5d: 02:97:0f:6b:ab:63:22:34:c5:cf:9e:45:93:20:41:64:3a:64: 12:13:e4:f4:5a:fb:1d:87:e8:1b:fe:00:a0:97:b4:db:df:49: 81:a6:e3:39:96:5e:2b:4c:1c:95:31:5d:ee:83:80:7e:d9:1f: 53:64:d0:dd:cb:df:fa:f5:78:98:33:da:cf:66:2d:39:c0:48: 4c:d1:fa:6d:4e:ec:87:f1:a2:1c:8b:e0:82:f3:e0:08:b7:23: 0d:65:12:4a:d9:a8:41:bc:73:d7:54:52:af:1e:b9:f4:c1:d4: 76:a0:19:14:ea:63:a9:b6:66:86:80:dc:27:f8:1e:ab:3b:f7: d7:22:d3:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMkson+RNYQ4g6KaYmiibSOlql8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNDA1MjgxMzE2NDFaFw0yNDA1MzEyMTM5NDFaMDMxMTAvBgNV BAMTKERCNDc4NDhCRUQ3NEU2OTBGRDIxRDZFNTQ5OTIyQzhBMDlGNUNGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tPUMJfkfLbhGaQWUmUOop7/B P7Ay5Uo++e2Pk66Ti1NVCX1UqjlquEsUwIJCEtWFFSk7MfeW4AoRp7DnDPdmOVIN 9alEBvnVgapR7frNVnaT9nJlOUuN122QSlv7QrIfYIqospYMpJ8QOdGEAR+nIKrv CLQe0ekYi3hZW31vG0E8lhFt+IdmNq+akT8pd4aIH3w5DjTOf9RrhgCo9rnDDMP+ B0G8hmh7Afn99oDj5tYsW1ST5s77zFDRhGDvmrbYhNLYufnrzh9Ulo7OGVu1Pck3 mRLvhllsR33rdl1iepdZ/E6SXiMIdVhiWL7qKsWJ40daAva3Zlp3abC9Xgy1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU20eEi+105pD9IdblSZIsign1z48wHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYm14WIjjJIT0ceyRJq7sN7OkEK1cdwqhlK GRcZhVwtOvqBhFulFPtaDjhfgP2HLq5mLQHbhogClrF1SpbwCgDVRDpDsgsBkZ1S 4sycLeRoO/Vp8/7DvS7vSEoJTRw6UiF+tLA2cwv3yHjuKNhBx2pbaXYfdYA6HFkx I9T/XQKXD2urYyI0xc+eRZMgQWQ6ZBIT5PRa+x2H6Bv+AKCXtNvfSYGm4zmWXitM HJUxXe6DgH7ZH1Nk0N3L3/r1eJgz2s9mLTnASEzR+m1O7IfxohyL4ILz4Ai3Iw1l EkrZqEG8c9dUUq8eufTB1HagGRTqY6m2ZoaA3Cf4Hqs799ci0wk= -----END CERTIFICATE-----Generated at Tue May 28 15:18:18 2024 by rpki-client on console-ams.rpki-client.org