$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: y4r9wDPKfp5bZaiRLugDdLfnwajYuV698ApJIw73C8c= Subject key identifier: A8:04:E7:E9:F1:25:E9:47:58:E0:FE:30:90:7B:A4:00:67:EB:91:DE Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 3EE779F8DF4231BC08B937D65537B667421733 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 0270 Signing time: Fri 31 May 2024 08:00:32 +0000 Manifest this update: Fri 31 May 2024 07:55:32 +0000 Manifest next update: Mon 03 Jun 2024 12:43:32 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: 08tpyhcTuwgoIFvDsg5CdWrzcL55aavI3QZV7MNwXlM=) 2: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: 9ZkTuEUTk0kS7RWjVuSe87KcFYDL2xZwlRuvdblFhT0=) 3: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: ttU6Rf6vrwRg5hc6BNE9swluqQ5KzO91mBwQOmLuw1c=) 4: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: OwEMbCbWltYHYmuvKKJrfRRaYUVbhagn35w1O5RpKiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 07:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:e7:79:f8:df:42:31:bc:08:b9:37:d6:55:37:b6:67:42:17:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: May 31 07:55:32 2024 GMT Not After : Jun 3 12:43:32 2024 GMT Subject: CN=A804E7E9F125E94758E0FE30907BA40067EB91DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:57:7b:8d:c5:e1:4c:8d:07:df:41:41:ce: e2:c3:77:84:3f:b4:df:6d:a3:f3:52:37:25:8e:ba: 41:00:e2:c6:9b:c3:74:f4:b6:3f:a8:ed:ef:85:30: b4:a1:8b:19:e1:e4:78:dc:64:b1:f8:e3:69:49:fe: 10:c4:73:25:6d:cc:4e:36:e1:85:e2:c4:21:44:7e: 90:59:9a:22:99:f4:b0:a0:4b:54:cf:67:9f:34:40: b6:57:f2:01:9b:29:87:94:8e:8c:7e:73:2b:a1:87: 91:c1:cb:6e:32:8c:2c:27:24:5f:ac:cb:47:ae:51: 83:11:0c:26:19:b1:a1:bf:6f:74:c5:63:ba:d2:0c: 85:9f:e7:e6:60:96:ce:5f:86:20:cd:0b:f6:2a:ec: 03:ee:06:90:c4:d5:7e:1a:60:a3:9b:e5:98:56:16: d1:1c:87:a7:4c:09:f8:25:9f:a6:f7:1f:d3:f5:02: 3a:4d:14:75:e3:7b:bf:c0:e4:c7:33:ab:8a:f5:20: 07:80:b7:67:06:ff:f0:21:63:6f:de:a4:ef:c5:2a: d6:71:b6:b5:be:f6:9c:43:06:f5:d0:3e:26:5d:50: d7:e0:13:6d:f5:37:50:e2:af:d2:b4:11:8a:57:0e: 31:26:7d:e2:a9:9b:b0:d5:ac:0f:e2:9b:0c:65:50: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:04:E7:E9:F1:25:E9:47:58:E0:FE:30:90:7B:A4:00:67:EB:91:DE X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3f:24:0c:e3:6f:ef:e0:a2:44:57:ff:49:c5:fa:72:80:08: b9:c1:16:b0:ec:7c:ad:af:e9:46:89:9e:b2:17:78:40:22:1d: 07:c7:c7:d5:6d:d8:df:cd:96:bd:ac:e2:5e:9b:95:7b:ad:8f: 3a:9a:9c:75:53:49:d4:e7:27:35:2f:48:b4:5c:eb:47:7f:cc: a5:9a:bd:e1:40:d7:3b:87:f0:48:51:04:92:2f:23:ec:94:1c: c0:6a:ca:4d:7d:a1:43:04:50:1a:95:52:e1:06:6c:91:25:d1: 63:39:fe:e3:71:8d:06:9b:3b:f7:4b:dc:9d:9e:ea:14:3b:78: 6f:b9:2d:65:3c:e7:55:fe:c6:e3:ef:fb:e3:f6:c3:ec:32:16: f2:d6:eb:01:0f:d1:bd:f8:12:94:dc:cd:88:73:ed:7c:c9:a5: 83:aa:d7:73:c4:07:d9:b2:6f:34:1a:db:96:e4:b6:74:fe:ab: 79:21:a5:7e:db:b4:ec:04:2f:d7:9b:dc:22:fe:ff:09:85:20: 64:02:bf:9d:32:8a:5a:33:b8:08:81:7e:30:0e:1c:e0:0d:fe: b1:50:9d:5f:45:0e:d2:63:0f:c5:5a:cd:8e:ab:e9:6e:5f:c5: 0e:7f:24:7c:b2:bf:dc:19:59:70:46:c2:c3:57:bb:5b:88:16: 31:64:34:5b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITPud5+N9CMbwIuTfWVTe2Z0IXMzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1QzFEQzdFODc0NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJF NkIzRDhGMB4XDTI0MDUzMTA3NTUzMloXDTI0MDYwMzEyNDMzMlowMzExMC8GA1UE AxMoQTgwNEU3RTlGMTI1RTk0NzU4RTBGRTMwOTA3QkE0MDA2N0VCOTFERTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMvnV3uNxeFMjQffQUHO4sN3hD+0 322j81I3JY66QQDixpvDdPS2P6jt74UwtKGLGeHkeNxksfjjaUn+EMRzJW3MTjbh heLEIUR+kFmaIpn0sKBLVM9nnzRAtlfyAZsph5SOjH5zK6GHkcHLbjKMLCckX6zL R65RgxEMJhmxob9vdMVjutIMhZ/n5mCWzl+GIM0L9irsA+4GkMTVfhpgo5vlmFYW 0RyHp0wJ+CWfpvcf0/UCOk0UdeN7v8DkxzOrivUgB4C3Zwb/8CFjb96k78Uq1nG2 tb72nEMG9dA+Jl1Q1+ATbfU3UOKv0rQRilcOMSZ94qmbsNWsD+KbDGVQdzcCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBSoBOfp8SXpR1jg/jCQe6QAZ+uR3jAfBgNVHSME GDAWgBRcHcfodFepHzWRWvHeP7vMLms9jzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNj ODg0NDJiLWM0OGUtNGJhMC04YWQ3LTU4ZTEyNjNjNmRjNy8wLzVDMURDN0U4NzQ1 N0E5MUYzNTkxNUFGMURFM0ZCQkNDMkU2QjNEOEYuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi81QzFEQzdFODc0NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIz RDhGLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8zYzg4NDQyYi1jNDhlLTRiYTAtOGFk Ny01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0NTdBOTFGMzU5MTVBRjFERTNGQkJD QzJFNkIzRDhGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAfj8kDONv7+CiRFf/ScX6coAIucEWsOx8ra/p Romeshd4QCIdB8fH1W3Y382WvaziXpuVe62POpqcdVNJ1OcnNS9ItFzrR3/MpZq9 4UDXO4fwSFEEki8j7JQcwGrKTX2hQwRQGpVS4QZskSXRYzn+43GNBps790vcnZ7q FDt4b7ktZTznVf7G4+/74/bD7DIW8tbrAQ/RvfgSlNzNiHPtfMmlg6rXc8QH2bJv NBrbluS2dP6reSGlftu07AQv15vcIv7/CYUgZAK/nTKKWjO4CIF+MA4c4A3+sVCd X0UO0mMPxVrNjqvpbl/FDn8kfLK/3BlZcEbCw1e7W4gWMWQ0Ww== -----END CERTIFICATE-----Generated at Fri May 31 08:37:56 2024 by rpki-client on console-fra.rpki-client.org