$ rpki-client -vvf repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft File: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft (raw, json) Hash identifier: bXT5qRMiuynjf1q9AHRmq5H5aWtPOelqYbMYoJG46Ik= Subject key identifier: 61:F5:56:22:64:97:C5:82:D3:8C:D6:EE:14:B6:BA:F9:C1:93:FA:77 Authority key identifier: E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F Certificate issuer: /CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Certificate serial: 1219772E3997FA0EBA67201FC8CB732E2493DEAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft Manifest number: 17 Signing time: Wed 29 May 2024 07:31:40 +0000 Manifest this update: Wed 29 May 2024 07:26:40 +0000 Manifest next update: Sat 01 Jun 2024 13:39:40 +0000 Files and hashes: 1: E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl (hash: un5xW7V70JkgAoDK2DlmZrxRc1s7WAZz//ajx7UUn2U=) 2: 323030313a6466333a313934303a3a2f34382d3438203d3e20313431393230.roa (hash: gRca+21F1oZ4V6wuKEkPHof1bYiR8BuqCfdoeBLbAPs=) 3: 3130332e3136352e3134382e302f32342d3234203d3e20313431393230.roa (hash: QCU/U4xg/9v57D9cmgDWzhWRAskhiglG08TQuaD6bic=) 4: 3130332e3136352e3134392e302f32342d3234203d3e20313431393230.roa (hash: R97ZMvJGq3wevnUFZa7iCAAm+25aeK+jt1k66UcmeGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:19:77:2e:39:97:fa:0e:ba:67:20:1f:c8:cb:73:2e:24:93:de:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4CEC11F244BF0DABEC136F839FD537B2DBBED0F Validity Not Before: May 29 07:26:40 2024 GMT Not After : Jun 1 13:39:40 2024 GMT Subject: CN=61F556226497C582D38CD6EE14B6BAF9C193FA77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:cd:c7:c3:9a:2e:5c:ef:fa:b0:35:80:63: b4:a3:2e:10:f6:3b:9c:07:d9:61:6e:c7:6f:fd:82: 0b:06:aa:00:7e:8f:fe:0a:7f:6c:45:49:2a:52:84: 2d:e3:33:c8:b9:72:ab:6d:0b:cb:69:95:ec:eb:47: 72:10:70:c9:9a:f8:e3:58:5c:df:da:e0:f2:3f:58: fe:b4:4c:48:03:ca:c2:0e:3a:33:d6:bf:84:c6:e0: bd:c8:48:56:06:9e:e4:a6:84:03:1d:f7:95:e6:c2: 29:af:8a:1f:07:b1:a0:21:17:e1:13:cd:a8:66:3c: 6a:f1:ae:87:a8:9f:42:a9:f5:86:5d:f3:9b:c9:e3: e1:7e:66:83:b4:0d:3f:34:36:4e:2b:eb:e5:7c:85: 61:55:e1:5e:d4:bc:52:f0:a5:17:bd:1e:73:48:28: a4:94:ab:78:f7:7a:7a:2f:20:5b:d9:76:d5:9f:45: 6a:3c:ce:2f:e0:76:a3:48:36:6b:9e:fe:44:ff:d5: c5:fe:57:23:f6:f4:b6:be:ca:69:29:70:15:32:b9: f1:d1:a7:13:1d:e8:97:43:49:93:af:4e:00:f1:92: e6:96:10:ec:1f:48:59:f8:ca:91:f1:7a:fd:e1:a1: a3:fc:cb:7b:7a:a4:06:b7:b4:82:96:c8:64:b4:b1: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F5:56:22:64:97:C5:82:D3:8C:D6:EE:14:B6:BA:F9:C1:93:FA:77 X509v3 Authority Key Identifier: keyid:E4:CE:C1:1F:24:4B:F0:DA:BE:C1:36:F8:39:FD:53:7B:2D:BB:ED:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32f3f5d9-cfb8-4123-a2b1-b0b5299f9c6e/0/E4CEC11F244BF0DABEC136F839FD537B2DBBED0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1d:e0:8a:bb:0f:39:e7:66:57:dd:cd:84:3b:be:c3:e2:ed: a1:c4:61:2d:0e:01:16:a8:1f:80:ea:93:d7:10:81:e6:d4:38: 51:33:c4:b5:24:cc:d6:56:7f:4a:c5:11:37:f0:f5:c9:ac:9d: 2d:9d:02:e5:13:b3:09:2e:08:4a:99:e8:c4:50:cc:75:76:64: 5c:fc:a3:fb:63:99:70:dc:01:25:0a:94:90:50:5c:c5:54:76: 60:bb:e6:0f:61:94:52:7f:7d:ac:d7:f0:a8:00:03:c2:13:97: 45:e3:25:5b:1d:19:11:b0:c5:d9:85:b2:65:19:35:26:3b:7e: e6:6c:97:d1:35:85:a2:0f:41:4e:1c:3b:02:f1:d7:32:3a:87: 5f:cd:42:d8:5b:56:99:52:b8:f5:77:b8:a9:eb:20:b6:3c:c9: ce:23:37:c5:f6:16:a9:f7:b8:81:39:30:d8:de:13:74:64:07: 29:13:0d:a4:68:3c:b8:53:63:f0:2f:1c:8e:e1:34:c4:e6:c5: 4b:e7:88:df:84:3c:e5:8e:8f:bf:3e:95:40:18:cd:04:54:3f: c7:f8:ab:0f:fc:7a:a5:da:85:e5:4d:9a:22:b3:2d:13:87:7b: ed:b3:d8:d6:d5:31:ec:2c:53:8e:a5:a4:71:bd:3f:5a:47:5f: f5:31:7d:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEhl3LjmX+g66ZyAfyMtzLiST3qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0Iy REJCRUQwRjAeFw0yNDA1MjkwNzI2NDBaFw0yNDA2MDExMzM5NDBaMDMxMTAvBgNV BAMTKDYxRjU1NjIyNjQ5N0M1ODJEMzhDRDZFRTE0QjZCQUY5QzE5M0ZBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHs3Hw5ouXO/6sDWAY7SjLhD2 O5wH2WFux2/9ggsGqgB+j/4Kf2xFSSpShC3jM8i5cqttC8tplezrR3IQcMma+ONY XN/a4PI/WP60TEgDysIOOjPWv4TG4L3ISFYGnuSmhAMd95Xmwimvih8HsaAhF+ET zahmPGrxroeon0Kp9YZd85vJ4+F+ZoO0DT80Nk4r6+V8hWFV4V7UvFLwpRe9HnNI KKSUq3j3enovIFvZdtWfRWo8zi/gdqNINmue/kT/1cX+VyP29La+ymkpcBUyufHR pxMd6JdDSZOvTgDxkuaWEOwfSFn4ypHxev3hoaP8y3t6pAa3tIKWyGS0sa2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYfVWImSXxYLTjNbuFLa6+cGT+ncwHwYDVR0j BBgwFoAU5M7BHyRL8Nq+wTb4Of1Tey277Q8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmYzZjVkOS1jZmI4LTQxMjMtYTJiMS1iMGI1Mjk5ZjljNmUvMC9FNENFQzExRjI0 NEJGMERBQkVDMTM2RjgzOUZENTM3QjJEQkJFRDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUzN0IyREJC RUQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJmM2Y1ZDktY2ZiOC00MTIzLWEy YjEtYjBiNTI5OWY5YzZlLzAvRTRDRUMxMUYyNDRCRjBEQUJFQzEzNkY4MzlGRDUz N0IyREJCRUQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFod4Iq7DznnZlfdzYQ7vsPi7aHEYS0OARao H4Dqk9cQgebUOFEzxLUkzNZWf0rFETfw9cmsnS2dAuUTswkuCEqZ6MRQzHV2ZFz8 o/tjmXDcASUKlJBQXMVUdmC75g9hlFJ/fazX8KgAA8ITl0XjJVsdGRGwxdmFsmUZ NSY7fuZsl9E1haIPQU4cOwLx1zI6h1/NQthbVplSuPV3uKnrILY8yc4jN8X2Fqn3 uIE5MNjeE3RkBykTDaRoPLhTY/AvHI7hNMTmxUvniN+EPOWOj78+lUAYzQRUP8f4 qw/8eqXaheVNmiKzLROHe+2z2NbVMewsU46lpHG9P1pHX/UxfSU= -----END CERTIFICATE-----Generated at Wed May 29 09:15:13 2024 by rpki-client on console-fra.rpki-client.org