$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: orIi08rENX0n06tWrXAdDcggvPNk2jCs7Q+NeSqlgsc= Subject key identifier: E2:F6:35:E6:5F:54:09:F0:A0:39:06:B5:3E:FB:F6:21:77:CE:52:B4 Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 7E2E3F1273303E51A88075FA094CB248BC59020D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 0218 Signing time: Mon 20 May 2024 00:41:54 +0000 Manifest this update: Mon 20 May 2024 00:36:54 +0000 Manifest next update: Thu 23 May 2024 05:43:54 +0000 Files and hashes: 1: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: Z87qsxNPNaRhCqKmfSpinskgpsDc7QqYPFgB771tRhI=) 2: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: vIe+smybEka/GFGw+e6bnwqTO3SOJflph7OSezWx66g=) 3: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: wPlhDdOIo+vrWpBQm5SPX3dOK5fHjOqoqOAgw6ioHjI=) 4: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: 3mtWmxV0RYIuGQ+Jo3/FtJA2L4P6rL/8W87zmr/0vGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:2e:3f:12:73:30:3e:51:a8:80:75:fa:09:4c:b2:48:bc:59:02:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: May 20 00:36:54 2024 GMT Not After : May 23 05:43:54 2024 GMT Subject: CN=E2F635E65F5409F0A03906B53EFBF62177CE52B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:7e:0b:2c:91:c5:79:82:b8:a5:4b:22:c8: fe:4d:4d:ed:49:02:61:3d:ce:bb:c3:d6:48:31:fb: e8:59:17:61:da:83:44:54:95:79:4b:19:31:70:a7: 5f:bc:50:f8:a6:c7:11:ca:2a:2b:65:ba:47:5b:55: 90:11:21:c2:43:c6:57:98:40:bb:5e:e4:59:49:f6: a3:77:27:34:d6:fb:7d:87:7b:72:36:51:31:6d:19: 61:9e:0e:1c:39:82:72:b9:72:cf:28:01:93:e4:ce: 01:df:14:90:ed:fa:80:6b:e6:9e:15:dc:3b:74:24: d3:ba:ab:ef:ce:48:a1:8c:fa:93:4f:0c:8a:a2:ed: 33:af:7f:55:25:01:45:c6:34:a5:d7:d1:3d:23:14: 95:6f:5a:91:ba:6c:6f:3b:a7:9d:47:81:66:9e:b2: d8:fe:77:09:ee:99:04:42:27:ae:88:44:9e:8f:3a: d8:f8:05:7d:5a:e3:61:ef:9d:62:31:ba:5a:d6:8f: c2:2b:3f:59:1e:0f:7c:b7:61:af:cc:3e:55:9e:23: b1:b2:be:57:34:da:71:4b:f0:86:7b:dd:44:50:dd: 20:d1:c1:fe:de:4d:bd:c2:f7:dc:85:1c:b8:77:d9: f6:7a:8b:03:60:c2:63:bd:5e:1a:fe:3e:09:93:ca: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F6:35:E6:5F:54:09:F0:A0:39:06:B5:3E:FB:F6:21:77:CE:52:B4 X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:03:e0:94:33:6e:e7:ea:81:5a:ba:dd:c4:d6:cc:e7:73:7b: 7b:56:de:0b:4c:56:a1:fa:73:e0:f4:9c:03:4d:0e:7e:af:d0: df:9b:c8:91:f2:22:6e:1a:b8:12:1b:b7:d3:31:e6:f9:02:e9: e0:67:5e:34:d8:47:5c:56:46:d5:a6:3e:ef:91:0a:21:a0:ce: 73:43:e5:dc:e8:92:5b:f7:2e:99:2e:c5:17:55:54:cf:e5:91: d2:7c:38:51:c0:06:dd:e0:e0:60:e9:c0:b7:1b:35:d9:13:0d: 0b:b5:7f:83:5b:f0:35:de:81:70:bf:ce:75:3c:d9:dd:fa:a3: 0e:8c:87:73:34:9d:50:1f:10:be:40:57:d2:1d:91:5d:82:96: 5e:71:ef:01:7a:1a:66:c0:bf:a1:80:c9:31:68:6f:bb:d6:1b: a9:b2:da:de:bc:fc:a3:cc:fe:94:5a:69:d7:b3:21:b9:72:83: 69:2b:a7:e2:45:20:2d:41:32:44:d9:97:58:7e:fb:7a:ae:f0: 28:fe:e2:f2:cb:4e:2d:e6:41:2d:2d:6b:ed:01:05:ae:78:9c: 81:99:be:e7:c6:44:b0:77:f0:f2:c0:de:e2:a6:e6:aa:98:4c: b6:f3:b8:d8:48:7f:b2:32:37:06:16:bf:42:f0:39:a9:53:e5: a1:63:96:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfi4/EnMwPlGogHX6CUyySLxZAg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNDA1MjAwMDM2NTRaFw0yNDA1MjMwNTQzNTRaMDMxMTAvBgNV BAMTKEUyRjYzNUU2NUY1NDA5RjBBMDM5MDZCNTNFRkJGNjIxNzdDRTUyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGX4LLJHFeYK4pUsiyP5NTe1J AmE9zrvD1kgx++hZF2Hag0RUlXlLGTFwp1+8UPimxxHKKitlukdbVZARIcJDxleY QLte5FlJ9qN3JzTW+32He3I2UTFtGWGeDhw5gnK5cs8oAZPkzgHfFJDt+oBr5p4V 3Dt0JNO6q+/OSKGM+pNPDIqi7TOvf1UlAUXGNKXX0T0jFJVvWpG6bG87p51HgWae stj+dwnumQRCJ66IRJ6POtj4BX1a42HvnWIxulrWj8IrP1keD3y3Ya/MPlWeI7Gy vlc02nFL8IZ73URQ3SDRwf7eTb3C99yFHLh32fZ6iwNgwmO9Xhr+PgmTygstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4vY15l9UCfCgOQa1Pvv2IXfOUrQwHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQD4JQzbufqgVq63cTWzOdze3tW3gtMVqH6 c+D0nANNDn6v0N+byJHyIm4auBIbt9Mx5vkC6eBnXjTYR1xWRtWmPu+RCiGgznND 5dzoklv3LpkuxRdVVM/lkdJ8OFHABt3g4GDpwLcbNdkTDQu1f4Nb8DXegXC/znU8 2d36ow6Mh3M0nVAfEL5AV9IdkV2Cll5x7wF6GmbAv6GAyTFob7vWG6my2t68/KPM /pRaadezIblyg2krp+JFIC1BMkTZl1h++3qu8Cj+4vLLTi3mQS0ta+0BBa54nIGZ vufGRLB38PLA3uKm5qqYTLbzuNhIf7IyNwYWv0LwOalT5aFjlic= -----END CERTIFICATE-----Generated at Mon May 20 01:39:12 2024 by rpki-client on console-fra.rpki-client.org