$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: x5/sWLuy/dvXTJrcqoUGeFq2Ej/AdvHKWemguChCC/8= Subject key identifier: 97:1A:82:17:79:A0:54:BF:81:E2:A9:C2:36:29:6F:18:B0:3D:8D:8A Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 581CDFE278C7E5357B7AF7C52F1A44DD17A675B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 042E Signing time: Thu 16 May 2024 19:21:06 +0000 Manifest this update: Thu 16 May 2024 19:16:06 +0000 Manifest next update: Mon 20 May 2024 04:46:06 +0000 Files and hashes: 1: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: 7UfD0VRHrbGwWvxNgNu6GcX+RkJMsHGn7cdI7m3Og78=) 2: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: 5wX6jJnWnnHHzX/VqvKgJiAHR72Di5B+DPg8BQumtqM=) 3: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: +nDtlT3xAOTXpOYO31IZulCWcoaWoP+VdiSKh3LmXZc=) 4: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: xPu4MaJ1Ex5OsGN/PlkQZBoAFEGuQn4DnsRDSiEV2xA=) 5: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: e5ewcFJRxzK/0Z2sEt56z3/VqQWmBHyaNNJjnsuTHZQ=) 6: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: BAGby26QuMGdhlsFVIJFaU/A0uhykz9x2Q/LGf52CB0=) 7: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: Va4tPC22bM2R773KoBcoI7/GU5r/BBlbCAG8dUnwIf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 20:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1c:df:e2:78:c7:e5:35:7b:7a:f7:c5:2f:1a:44:dd:17:a6:75:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: May 16 19:16:06 2024 GMT Not After : May 20 04:46:06 2024 GMT Subject: CN=971A821779A054BF81E2A9C236296F18B03D8D8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:97:89:57:51:18:08:74:c4:d5:b4:c3:59: f5:07:3a:a3:62:e8:5f:ea:19:3a:93:19:40:00:c5: e1:03:20:c4:0f:62:9f:bd:b2:c7:0f:fd:e2:44:1b: 8d:67:3a:3b:43:11:9a:34:a2:a9:26:1f:4e:22:41: fd:15:25:37:97:f8:63:b3:1b:5d:27:72:44:51:14: b1:66:a4:ff:8c:e7:17:8a:47:91:b0:67:19:1b:d0: ad:ba:4e:03:ac:5d:20:90:cd:a1:a1:94:97:37:5e: 51:23:d7:7c:7a:6e:e8:50:87:c9:6a:2a:3a:c4:d9: 1e:15:d9:bf:9a:16:09:a6:e2:93:ad:4c:27:5b:52: e0:b3:21:f5:70:3c:6d:bd:b5:a8:f4:23:97:46:8f: 9a:d3:32:28:d8:f2:ea:f7:14:0c:28:ae:ce:40:f2: c1:74:df:7e:10:58:d6:ee:d3:c4:6b:17:df:4a:f3: ef:58:ac:4d:1e:27:2e:5a:ea:1c:c8:fc:29:da:92: 94:d2:60:f5:e1:f1:b1:73:2e:d1:d3:f2:e0:e0:90: 43:10:1f:61:be:bb:53:d6:eb:cb:e1:f0:2e:19:54: f8:d1:3c:0a:6c:98:f1:31:51:39:93:4e:b8:f2:76: 10:36:5e:e8:70:9b:4e:37:82:45:43:6f:b4:ec:ab: 8f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1A:82:17:79:A0:54:BF:81:E2:A9:C2:36:29:6F:18:B0:3D:8D:8A X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:79:04:42:6b:b9:59:81:b4:a8:83:29:8a:09:80:a0:f0:43: df:31:c3:45:56:13:e1:b9:7b:44:f7:22:4a:3e:80:30:84:74: 64:22:e0:31:29:54:e8:d8:36:72:77:a8:bc:38:7f:1c:3d:a4: ee:7a:b6:f7:7b:6a:ba:94:03:dd:92:39:b7:7c:88:ef:67:c2: dc:42:a1:3e:68:9a:bf:15:ad:d7:06:b0:a6:15:9c:c7:c1:a8: 82:ae:ee:0f:24:3d:02:fb:1a:60:cd:d1:2e:56:99:3a:1e:56: d1:63:71:4a:60:65:18:fd:08:a3:f5:09:92:7b:29:d0:25:bc: 6d:51:a1:a8:55:13:28:db:8c:f2:61:ac:b5:d4:a1:cc:17:a1: 83:dc:e3:c0:2f:96:83:62:5e:d4:e2:00:b6:b9:21:d5:02:7d: 90:5f:8b:20:c8:d3:a6:ec:86:31:8f:1b:fa:a9:2c:5f:e1:2a: f9:db:d4:6b:49:31:ed:41:31:22:17:aa:a9:b6:4b:3a:8c:a2: 6d:f6:72:67:cd:5a:38:b9:b2:16:55:0d:89:8d:e9:31:d8:3c: d2:fd:1d:45:95:1d:7d:3f:19:5a:e3:c0:a0:eb:4d:5a:6e:08: 33:ae:38:d0:f5:de:9e:a0:83:34:5e:1e:57:b3:51:da:4f:b4: 4f:b5:d6:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBzf4njH5TV7evfFLxpE3RemdbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNDA1MTYxOTE2MDZaFw0yNDA1MjAwNDQ2MDZaMDMxMTAvBgNV BAMTKDk3MUE4MjE3NzlBMDU0QkY4MUUyQTlDMjM2Mjk2RjE4QjAzRDhEOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBWZeJV1EYCHTE1bTDWfUHOqNi 6F/qGTqTGUAAxeEDIMQPYp+9sscP/eJEG41nOjtDEZo0oqkmH04iQf0VJTeX+GOz G10nckRRFLFmpP+M5xeKR5GwZxkb0K26TgOsXSCQzaGhlJc3XlEj13x6buhQh8lq KjrE2R4V2b+aFgmm4pOtTCdbUuCzIfVwPG29taj0I5dGj5rTMijY8ur3FAwors5A 8sF0334QWNbu08RrF99K8+9YrE0eJy5a6hzI/CnakpTSYPXh8bFzLtHT8uDgkEMQ H2G+u1PW68vh8C4ZVPjRPApsmPExUTmTTrjydhA2Xuhwm043gkVDb7Tsq48JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlxqCF3mgVL+B4qnCNilvGLA9jYowHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZ5BEJruVmBtKiDKYoJgKDwQ98xw0VWE+G5 e0T3Iko+gDCEdGQi4DEpVOjYNnJ3qLw4fxw9pO56tvd7arqUA92SObd8iO9nwtxC oT5omr8VrdcGsKYVnMfBqIKu7g8kPQL7GmDN0S5WmToeVtFjcUpgZRj9CKP1CZJ7 KdAlvG1RoahVEyjbjPJhrLXUocwXoYPc48AvloNiXtTiALa5IdUCfZBfiyDI06bs hjGPG/qpLF/hKvnb1GtJMe1BMSIXqqm2SzqMom32cmfNWji5shZVDYmN6THYPNL9 HUWVHX0/GVrjwKDrTVpuCDOuOND13p6ggzReHlezUdpPtE+11jE= -----END CERTIFICATE-----Generated at Thu May 16 20:24:20 2024 by rpki-client on console-ams.rpki-client.org