$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft File: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft (raw, json) Hash identifier: TAIEzZCluZl8hxAZgCjm68HrGFngM8o0ceJbLnmUc7c= Subject key identifier: 15:13:A0:78:BD:76:A0:F0:D8:84:6E:7F:A5:5A:50:A3:09:FF:D5:5A Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 Certificate issuer: /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Certificate serial: 5B5FDC3EBE7DDBC5975872FD88343648295C6B41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft Manifest number: 0148 Signing time: Sat 18 May 2024 19:31:34 +0000 Manifest this update: Sat 18 May 2024 19:26:34 +0000 Manifest next update: Wed 22 May 2024 05:20:34 +0000 Files and hashes: 1: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl (hash: xun5KAu3Jt6Cp86X8UR79pGuiifrMpfFiFsXuPVpqL4=) 2: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: RDDgBBtE0xos6kwYIBw+I6nY7IgKsTrVh7gyqIHaqoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5f:dc:3e:be:7d:db:c5:97:58:72:fd:88:34:36:48:29:5c:6b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Validity Not Before: May 18 19:26:34 2024 GMT Not After : May 22 05:20:34 2024 GMT Subject: CN=1513A078BD76A0F0D8846E7FA55A50A309FFD55A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f9:32:d9:56:15:23:06:dc:7e:0f:a2:71:38: d5:db:85:26:2d:91:8f:31:87:5f:f3:88:c9:42:14: a1:ca:e8:e2:f7:37:30:27:34:0f:21:02:b2:5c:19: b2:4a:9c:00:fd:d7:13:45:91:f7:32:be:f9:66:1c: b6:f0:5b:5d:cb:4c:89:94:f9:4c:55:b0:e1:00:cb: 3f:29:59:43:c5:0b:25:71:0e:85:44:cb:66:ff:17: 66:f9:22:69:1f:6f:9a:5e:ef:c0:94:a6:bf:6c:4b: f7:c4:0a:b5:63:b0:c1:6a:3a:91:b8:5a:7d:de:6a: 07:99:f2:8c:9c:88:d9:34:fe:f3:83:ed:ce:7a:d5: 7a:fe:a0:e1:3f:27:1c:77:4b:c1:0c:2f:da:8f:94: 69:a6:12:20:df:fb:20:0a:10:39:a9:d7:3f:3a:33: 17:ba:3d:4f:c7:ea:74:34:3d:33:1b:f4:c5:52:86: 94:48:52:fe:85:52:75:2f:2d:f0:28:39:9a:65:d7: 5d:10:9e:c6:72:b5:73:69:d7:e3:35:a4:46:20:23: ee:e9:20:dc:25:55:ff:f7:35:d3:01:e4:69:d2:1f: 24:8c:e4:42:64:20:43:53:eb:df:45:f9:fc:42:b9: f5:cc:f9:d4:1f:3a:cf:d3:a8:48:40:a9:d8:06:97: 9a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:13:A0:78:BD:76:A0:F0:D8:84:6E:7F:A5:5A:50:A3:09:FF:D5:5A X509v3 Authority Key Identifier: keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b8:45:14:4f:0c:58:99:d3:e3:94:18:4d:00:40:c9:6f:ab: a9:40:eb:9c:be:ba:2d:c9:e8:12:ac:d2:ad:5c:25:e6:76:98: cc:cc:1d:26:ee:ff:76:2a:83:22:f2:78:08:62:aa:c5:3f:96: b9:ba:2e:70:4c:02:93:3d:e1:0f:a2:19:ce:7d:12:1f:76:b7: 44:49:a5:27:b6:08:6b:d5:df:4a:c9:3c:6a:e3:25:18:5d:d6: bf:96:de:f9:24:da:18:9d:40:45:3d:45:50:80:fd:16:4d:9b: ca:8f:39:f6:b7:35:4e:1d:3c:21:98:fa:ca:6e:f9:54:7b:b0: 77:f8:19:18:6d:f6:b6:6c:cb:d5:e4:98:19:f2:44:4a:bf:d0: d8:b1:0c:de:fb:32:c1:7d:03:a0:80:16:c8:ab:c6:d3:72:c6: 59:c0:6f:3a:4f:ff:12:10:5b:78:63:c8:6e:ad:ef:41:76:b1: f1:d3:f5:9a:81:e0:7c:52:6f:f7:66:1a:5c:51:f6:01:cd:d2: 79:fa:ba:81:bc:74:2e:d1:c8:54:fa:a2:08:ef:2a:74:80:4a: 2b:7b:aa:90:16:4d:06:31:6f:96:3c:7b:35:e6:1c:cd:4f:6c: b7:e7:41:3c:7f:16:93:14:2f:ab:a0:ca:05:1d:5f:a5:64:27: d2:1a:68:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1/cPr5928WXWHL9iDQ2SClca0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2 NEREOUYyNjAeFw0yNDA1MTgxOTI2MzRaFw0yNDA1MjIwNTIwMzRaMDMxMTAvBgNV BAMTKDE1MTNBMDc4QkQ3NkEwRjBEODg0NkU3RkE1NUE1MEEzMDlGRkQ1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+TLZVhUjBtx+D6JxONXbhSYt kY8xh1/ziMlCFKHK6OL3NzAnNA8hArJcGbJKnAD91xNFkfcyvvlmHLbwW13LTImU +UxVsOEAyz8pWUPFCyVxDoVEy2b/F2b5Imkfb5pe78CUpr9sS/fECrVjsMFqOpG4 Wn3eageZ8oyciNk0/vOD7c561Xr+oOE/Jxx3S8EML9qPlGmmEiDf+yAKEDmp1z86 Mxe6PU/H6nQ0PTMb9MVShpRIUv6FUnUvLfAoOZpl110QnsZytXNp1+M1pEYgI+7p INwlVf/3NdMB5GnSHySM5EJkIENT699F+fxCufXM+dQfOs/TqEhAqdgGl5q9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFROgeL12oPDYhG5/pVpQown/1VowHwYDVR0j BBgwFoAU0ho1l9e169mlR2gPHC7XpGTdnyYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2M1NjA1ZC1mMTdhLTQwMTAtOTI1My0yMTBjNjRmMTQ4YmQvMC9EMjFBMzU5N0Q3 QjVFQkQ5QTU0NzY4MEYxQzJFRDdBNDY0REQ5RjI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2NERE OUYyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3 QTQ2NEREOUYyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+4RRRPDFiZ0+OUGE0AQMlvq6lA65y+ui3J 6BKs0q1cJeZ2mMzMHSbu/3YqgyLyeAhiqsU/lrm6LnBMApM94Q+iGc59Eh92t0RJ pSe2CGvV30rJPGrjJRhd1r+W3vkk2hidQEU9RVCA/RZNm8qPOfa3NU4dPCGY+spu +VR7sHf4GRht9rZsy9XkmBnyREq/0NixDN77MsF9A6CAFsirxtNyxlnAbzpP/xIQ W3hjyG6t70F2sfHT9ZqB4HxSb/dmGlxR9gHN0nn6uoG8dC7RyFT6ogjvKnSASit7 qpAWTQYxb5Y8ezXmHM1PbLfnQTx/FpMUL6ugygUdX6VkJ9IaaLY= -----END CERTIFICATE-----Generated at Sat May 18 20:15:34 2024 by rpki-client on console-ams.rpki-client.org