$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft File: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json) Hash identifier: 6OqpijSKyE7Q9bpMtvcEn7cpBOTenULjZELpMMD4BF0= Subject key identifier: 18:D2:E6:FC:13:DF:18:42:EF:68:DB:96:DD:76:9C:09:DD:BD:11:BE Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Certificate issuer: /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Certificate serial: 6F2AD194D71FBAE728BBF240ABEC7AAEF7800F61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft Manifest number: 2C Signing time: Sun 19 May 2024 22:21:22 +0000 Manifest this update: Sun 19 May 2024 22:16:22 +0000 Manifest next update: Thu 23 May 2024 03:07:22 +0000 Files and hashes: 1: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: aZ67xnZ2GmpS5x3v6wGoZHaJnKpkTD7bioQ4/2mf/9I=) 2: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: ZbQ5h+D7KWHKTaLqNVBTvWdsaPdTGknuVi8PbUPp1vs=) 3: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: 7l+KDkpftZ1olZ/l9vZxZiSFCmqzAQeP2WLVDLagbJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2a:d1:94:d7:1f:ba:e7:28:bb:f2:40:ab:ec:7a:ae:f7:80:0f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Validity Not Before: May 19 22:16:22 2024 GMT Not After : May 23 03:07:22 2024 GMT Subject: CN=18D2E6FC13DF1842EF68DB96DD769C09DDBD11BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:86:09:98:b7:4e:8b:bc:af:9d:01:6f:67:e9: 05:69:bf:b6:1e:6f:fe:9a:19:10:42:5b:e6:a2:db: ce:6a:0f:ad:bd:10:10:9e:7d:b7:17:98:12:eb:3a: 60:ba:25:ac:c6:c6:3f:d3:49:59:bf:c9:e9:9a:08: 38:26:cf:21:d9:a1:e3:8e:be:8c:bf:b2:99:60:d2: 31:7f:c6:f3:cc:77:5f:e0:a2:0f:ef:8e:cd:44:4f: c9:eb:cc:1f:7a:55:0a:6f:38:e5:df:82:8e:d9:df: 04:f7:24:46:a0:17:82:2a:24:5b:4e:a4:8b:12:46: 8b:90:1a:12:e9:d2:f0:3b:52:9d:21:e9:17:df:96: 5f:68:0b:93:88:5c:ed:f4:0e:e7:0b:92:46:66:e0: 5e:66:77:8c:61:0f:97:e6:89:54:f6:d1:a1:b6:09: ad:57:3e:31:42:bd:4f:e5:e8:ed:0f:82:f4:7c:f1: c7:29:6f:a5:85:f4:ce:cd:63:ca:4c:43:75:02:e8: 7d:61:cb:55:f3:7b:40:2c:cd:9c:88:31:6d:97:dd: 4c:59:cd:72:66:c5:12:5a:a2:2d:31:f8:41:d9:55: e8:9b:a6:e9:fb:d8:ab:1c:a3:74:a6:db:46:9f:ec: 65:29:e0:e6:9f:fd:77:07:d2:35:ef:bb:fd:fb:34: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D2:E6:FC:13:DF:18:42:EF:68:DB:96:DD:76:9C:09:DD:BD:11:BE X509v3 Authority Key Identifier: keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f9:15:49:a3:fe:91:fe:f1:b6:c7:fb:ae:75:68:4d:1c:2c: c2:2a:cd:a9:04:fd:a6:ca:06:f9:49:2d:88:c6:5e:7e:82:40: 7c:eb:bf:42:87:7a:2b:7d:99:de:43:79:3a:3e:ac:d2:03:b8: b4:1b:c2:22:72:5d:9e:5b:cf:8b:e9:cc:9c:47:98:8b:8a:cf: 14:0f:eb:44:aa:21:4d:bb:79:12:a8:86:58:21:35:a2:ef:88: 88:d3:4f:b5:6c:69:1a:91:b0:7e:d8:63:61:80:52:13:3e:18: 84:8c:6c:ed:f9:c0:ad:05:59:32:cd:37:f6:cf:c7:7a:33:fd: 0a:ec:9a:63:19:be:2a:a1:d5:17:b7:59:00:b3:6e:e5:db:ef: 09:cb:2e:0d:57:5f:72:a8:ba:f6:8f:c6:32:0c:c7:03:ee:0d: a6:87:f1:00:dc:0a:75:fa:f4:85:8e:17:53:63:21:ed:29:4e: 34:15:ff:97:39:06:e6:3f:1c:4b:b8:1b:bb:8f:6d:52:0f:22: 00:fe:b5:3d:d8:8d:50:36:f6:31:ba:f8:36:82:7e:c1:4d:51: 5c:2f:f4:c1:f1:cd:de:d9:82:b3:aa:85:72:97:7f:2a:ca:e2: 28:f4:e5:22:f7:2a:8b:53:1d:27:84:9e:7c:f4:67:46:ef:b6: 4c:ea:b3:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbyrRlNcfuucou/JAq+x6rveAD2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlC MUNEODgzMjAeFw0yNDA1MTkyMjE2MjJaFw0yNDA1MjMwMzA3MjJaMDMxMTAvBgNV BAMTKDE4RDJFNkZDMTNERjE4NDJFRjY4REI5NkRENzY5QzA5RERCRDExQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShgmYt06LvK+dAW9n6QVpv7Ye b/6aGRBCW+ai285qD629EBCefbcXmBLrOmC6JazGxj/TSVm/yemaCDgmzyHZoeOO voy/splg0jF/xvPMd1/gog/vjs1ET8nrzB96VQpvOOXfgo7Z3wT3JEagF4IqJFtO pIsSRouQGhLp0vA7Up0h6Rffll9oC5OIXO30DucLkkZm4F5md4xhD5fmiVT20aG2 Ca1XPjFCvU/l6O0PgvR88ccpb6WF9M7NY8pMQ3UC6H1hy1Xze0AszZyIMW2X3UxZ zXJmxRJaoi0x+EHZVeibpun72Ksco3Sm20af7GUp4Oaf/XcH0jXvu/37NKG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGNLm/BPfGELvaNuW3XacCd29Eb4wHwYDVR0j BBgwFoAU9dcex3kiqQgPF8Ohb75fabHNiDIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWU4MzY3My0wOTZhLTQ0MGMtYjI3YS05YmU2NGIxM2I0ZTUvMC9GNUQ3MUVDNzc5 MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIxQ0Q4ODMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlCMUNE ODgzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVG NjlCMUNEODgzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv5FUmj/pH+8bbH+651aE0cLMIqzakE/abK BvlJLYjGXn6CQHzrv0KHeit9md5DeTo+rNIDuLQbwiJyXZ5bz4vpzJxHmIuKzxQP 60SqIU27eRKohlghNaLviIjTT7VsaRqRsH7YY2GAUhM+GISMbO35wK0FWTLNN/bP x3oz/QrsmmMZviqh1Re3WQCzbuXb7wnLLg1XX3KouvaPxjIMxwPuDaaH8QDcCnX6 9IWOF1NjIe0pTjQV/5c5BuY/HEu4G7uPbVIPIgD+tT3YjVA29jG6+DaCfsFNUVwv 9MHxzd7ZgrOqhXKXfyrK4ij05SL3KotTHSeEnnz0Z0bvtkzqs3E= -----END CERTIFICATE-----Generated at Sun May 19 22:56:04 2024 by rpki-client on console-ams.rpki-client.org