$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: vYvB2zWLjcMX9EGloZDR2MpL0alFr0uaVJYtp8IljVU= Subject key identifier: 18:FE:F6:D7:71:76:8C:7E:0A:66:87:AE:A6:D2:E3:9F:EB:D7:BE:32 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 583A87A1051B5747E6D54D2CC4611CE10641FA92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 0430 Signing time: Mon 20 May 2024 12:30:54 +0000 Manifest this update: Mon 20 May 2024 12:25:54 +0000 Manifest next update: Thu 23 May 2024 23:27:54 +0000 Files and hashes: 1: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: d21nkqKNv5xyttY+/cUw+zcdicPj0j+8sC72WIulJgg=) 2: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: AyYMf9ry9I7VPYy4qKkUyb1Om7gBlYgG6ZINPCBMVDU=) 3: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: asHbWzSQkdA+CCtXwMc1F0vHRvR8c5CILXc3m+Jrzwk=) 4: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: r7/aCHJu98Oir0ybpcnGFzAM60PLWSuw65bBx7Rdbys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 21:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3a:87:a1:05:1b:57:47:e6:d5:4d:2c:c4:61:1c:e1:06:41:fa:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: May 20 12:25:54 2024 GMT Not After : May 23 23:27:54 2024 GMT Subject: CN=18FEF6D771768C7E0A6687AEA6D2E39FEBD7BE32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fb:28:48:a7:df:43:da:74:71:44:c2:c4:e8: c3:f4:e2:53:86:47:77:b7:9c:6a:b0:df:35:6d:47: 3f:30:3f:92:91:f3:43:91:50:e1:b0:f5:0c:c4:b5: e8:02:5c:71:de:41:7c:4a:2f:d3:84:ff:8f:ed:85: 0f:19:ed:d2:1b:78:26:de:ac:ad:4d:28:9a:4a:4b: c1:99:e2:bd:ee:1f:ae:71:ba:46:5e:a4:5d:3a:36: bc:cc:ca:c1:71:6e:e7:9e:62:81:dc:c0:b8:dc:89: b0:b6:37:d7:ec:15:94:3d:85:a2:bd:50:51:c5:64: ad:1d:0c:d6:d1:0f:b2:ac:3d:c6:6c:39:9e:3e:a2: 60:5d:8d:8f:31:46:6e:6c:2a:9b:75:b4:fc:c4:bf: 7f:30:2a:f8:46:89:6e:b0:af:d9:3c:d4:84:f5:dd: 41:bf:dc:a1:32:f8:72:ce:56:b7:b3:70:4e:aa:14: c6:55:04:20:82:cc:1c:01:28:7a:69:1f:17:39:cd: 0f:d2:b0:50:84:fe:6b:fb:06:a7:1d:e5:6f:90:d9: 47:49:36:22:5d:80:cb:da:2a:9c:1c:d3:47:f8:50: ae:d0:cc:33:75:e3:09:09:bd:4f:80:35:4b:3a:84: 35:9a:b3:d5:b7:26:62:50:fb:67:7e:74:55:31:ef: 24:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FE:F6:D7:71:76:8C:7E:0A:66:87:AE:A6:D2:E3:9F:EB:D7:BE:32 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0e:59:b3:3a:b3:da:fa:d1:fe:87:22:f4:11:3d:21:9a:f5: 87:2b:88:4d:2f:40:b1:09:28:b9:13:1b:19:c0:49:51:0c:c8: 4e:86:6a:b1:ea:4e:f9:75:d3:cd:e0:f7:1f:1b:d6:fe:95:58: e8:f6:a2:93:3a:49:ca:10:70:f0:e7:36:da:c6:e6:0d:3c:3e: 34:aa:ea:53:27:ff:c1:d0:43:8b:87:6d:23:07:5b:3b:59:87: 83:c8:9d:05:37:14:33:99:1f:8c:07:be:ff:73:17:3d:24:c5: 22:90:e4:b8:a4:87:dc:9b:83:2f:29:47:c7:31:75:52:69:d7: 29:c5:73:e4:78:26:8c:95:57:9e:ca:3c:57:e4:7f:5c:c3:bd: 72:16:69:db:62:bc:7a:e7:9b:40:51:78:c0:99:1d:97:80:76: 77:45:99:40:81:e2:b0:a3:c9:f0:99:d0:ad:6e:52:e0:4f:9b: 5c:6f:c3:7a:09:6a:16:3b:d3:4c:a6:56:47:07:37:15:b0:40: 94:8b:be:8b:ca:ac:f1:af:79:d8:78:c8:c9:ba:43:77:a3:33: 13:b8:74:45:be:60:6a:30:51:22:a5:25:ca:85:22:32:6d:31: 25:22:be:58:e1:26:ad:b9:e8:27:ba:e4:87:f2:46:f2:39:0f: 06:8f:5a:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDqHoQUbV0fm1U0sxGEc4QZB+pIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNDA1MjAxMjI1NTRaFw0yNDA1MjMyMzI3NTRaMDMxMTAvBgNV BAMTKDE4RkVGNkQ3NzE3NjhDN0UwQTY2ODdBRUE2RDJFMzlGRUJEN0JFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+yhIp99D2nRxRMLE6MP04lOG R3e3nGqw3zVtRz8wP5KR80ORUOGw9QzEtegCXHHeQXxKL9OE/4/thQ8Z7dIbeCbe rK1NKJpKS8GZ4r3uH65xukZepF06NrzMysFxbueeYoHcwLjcibC2N9fsFZQ9haK9 UFHFZK0dDNbRD7KsPcZsOZ4+omBdjY8xRm5sKpt1tPzEv38wKvhGiW6wr9k81IT1 3UG/3KEy+HLOVrezcE6qFMZVBCCCzBwBKHppHxc5zQ/SsFCE/mv7Bqcd5W+Q2UdJ NiJdgMvaKpwc00f4UK7QzDN14wkJvU+ANUs6hDWas9W3JmJQ+2d+dFUx7yShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGP7213F2jH4KZoeuptLjn+vXvjIwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoOWbM6s9r60f6HIvQRPSGa9YcriE0vQLEJ KLkTGxnASVEMyE6GarHqTvl1083g9x8b1v6VWOj2opM6ScoQcPDnNtrG5g08PjSq 6lMn/8HQQ4uHbSMHWztZh4PInQU3FDOZH4wHvv9zFz0kxSKQ5Likh9ybgy8pR8cx dVJp1ynFc+R4JoyVV57KPFfkf1zDvXIWadtivHrnm0BReMCZHZeAdndFmUCB4rCj yfCZ0K1uUuBPm1xvw3oJahY700ymVkcHNxWwQJSLvovKrPGvedh4yMm6Q3ejMxO4 dEW+YGowUSKlJcqFIjJtMSUivljhJq256Ce65IfyRvI5DwaPWlc= -----END CERTIFICATE-----Generated at Mon May 20 13:08:23 2024 by rpki-client on console-fra.rpki-client.org