$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft File: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft (raw, json) Hash identifier: z5Fb3QkAX/dtKujSerI1KQseRykR/yf88S3Po/VNJgg= Subject key identifier: 5B:CA:2F:FE:3B:25:46:AF:B2:B1:F6:97:32:C7:0F:FC:87:92:5E:3B Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Certificate serial: 4BDD710CF54247091292ACA91FA6F7BAA25DCEFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft Manifest number: 020E Signing time: Sun 19 May 2024 20:30:45 +0000 Manifest this update: Sun 19 May 2024 20:25:45 +0000 Manifest next update: Wed 22 May 2024 21:15:45 +0000 Files and hashes: 1: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: VotFyL26pcWZa7EDO7tRbiu4vgOMkHEKOavnpZ+ZxuQ=) 2: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: NvJb/4wQSjtQq1H0caGF3ijTN8kYQyihjTwpPkkEVFo=) 3: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl (hash: s+3bnv81lx4ytmCygABoqEmWo9WcV2/yM5yTcqjx4E0=) 4: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: LUyxeL74Lr1ZmKOFUp3Q1SJ0htwAjH2d+EsqJI+gO4U=) 5: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: y8PryIragPCs1pBiOWrmo1mGII7UOYbCs+BA6DS057E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:dd:71:0c:f5:42:47:09:12:92:ac:a9:1f:a6:f7:ba:a2:5d:ce:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Validity Not Before: May 19 20:25:45 2024 GMT Not After : May 22 21:15:45 2024 GMT Subject: CN=5BCA2FFE3B2546AFB2B1F69732C70FFC87925E3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6e:c3:6e:45:4a:96:75:7c:e0:cb:22:70:8d: 55:77:07:6e:e8:34:f9:2b:f1:58:7a:ed:4a:e2:72: fe:47:18:ee:af:00:b6:d8:e7:2f:1c:af:96:a6:a2: b4:4e:2a:25:d6:1c:b6:8d:38:ad:00:8b:8b:31:e5: 45:f1:52:23:13:3b:f3:a2:cb:fb:2e:de:56:72:2c: 0c:1b:ae:5f:25:fb:20:cf:0b:71:4c:42:60:77:61: e1:e4:70:8c:f1:9e:e2:8c:63:2e:55:4c:b9:d2:83: 26:b9:90:64:78:40:7c:0a:5a:af:e4:39:eb:d4:ce: 97:1b:27:9d:23:42:03:ee:22:86:a7:c0:5d:1e:2f: 14:19:de:d9:03:2e:ac:f9:a5:64:b5:db:21:1e:f3: 79:b9:95:f6:ff:45:e1:f0:74:25:df:c4:31:6d:fd: 5c:56:b3:45:89:95:1f:41:e9:db:aa:78:eb:d9:72: f6:b4:a0:e5:1f:bf:07:ee:72:9b:ee:a2:62:eb:78: eb:f7:bb:4c:06:8c:b4:bd:47:74:71:f8:dd:11:ef: 88:83:63:8b:68:bf:94:23:d7:1a:7f:46:e5:1f:a6: eb:1c:3b:79:2f:d7:86:cf:a2:4d:64:f9:f7:60:35: c3:18:8b:21:ea:90:dd:ca:8f:b4:37:f5:91:c8:53: 29:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CA:2F:FE:3B:25:46:AF:B2:B1:F6:97:32:C7:0F:FC:87:92:5E:3B X509v3 Authority Key Identifier: keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4e:06:ca:a3:87:51:d9:de:23:47:80:af:53:6c:71:89:83: 89:e1:21:57:a8:b1:d3:b6:f0:48:83:21:69:70:73:53:26:5c: f4:2b:c7:24:34:cf:05:04:9c:63:fd:2e:a8:8b:1c:bb:d5:15: 20:5f:20:c1:d3:4b:42:a5:2d:40:5e:9a:9f:b4:fd:51:ab:f0: e2:cb:8c:dc:93:68:33:81:f4:10:f0:ea:4a:7d:65:80:14:52: 14:37:7a:97:a9:3b:c0:c6:c7:33:fc:58:8c:18:e9:a7:0a:1e: 80:f7:95:43:8b:59:5b:99:ed:8b:b0:c6:27:15:65:7d:cb:fa: 58:77:fa:ce:6c:30:0f:b2:09:59:99:10:a7:1a:2d:61:f3:c0: 1a:cf:bc:99:bc:e0:df:69:1d:ed:b0:64:ff:f3:67:3a:c6:63: 9d:95:f8:6c:15:e5:08:0e:d7:d4:d9:aa:11:4c:e4:29:de:4e: e7:ef:8c:21:a2:27:32:17:0e:ab:28:66:56:37:dd:d6:3d:d9: c8:7d:f4:09:b1:47:dd:91:40:25:5f:f8:1f:c5:56:4c:57:50: ee:bb:ad:cc:3d:cf:68:31:01:f3:00:5d:3c:d6:7f:7d:e4:bc: 33:a8:f9:ad:98:bc:49:77:e8:34:aa:39:55:b6:8c:62:6b:d5: 29:58:c1:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS91xDPVCRwkSkqypH6b3uqJdzvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2 RjNGRTBCMzAeFw0yNDA1MTkyMDI1NDVaFw0yNDA1MjIyMTE1NDVaMDMxMTAvBgNV BAMTKDVCQ0EyRkZFM0IyNTQ2QUZCMkIxRjY5NzMyQzcwRkZDODc5MjVFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbsNuRUqWdXzgyyJwjVV3B27o NPkr8Vh67Uricv5HGO6vALbY5y8cr5amorROKiXWHLaNOK0Ai4sx5UXxUiMTO/Oi y/su3lZyLAwbrl8l+yDPC3FMQmB3YeHkcIzxnuKMYy5VTLnSgya5kGR4QHwKWq/k OevUzpcbJ50jQgPuIoanwF0eLxQZ3tkDLqz5pWS12yEe83m5lfb/ReHwdCXfxDFt /VxWs0WJlR9B6duqeOvZcva0oOUfvwfucpvuomLreOv3u0wGjLS9R3Rx+N0R74iD Y4tov5Qj1xp/RuUfpuscO3kv14bPok1k+fdgNcMYiyHqkN3Kj7Q39ZHIUylPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW8ov/jslRq+ysfaXMscP/IeSXjswHwYDVR0j BBgwFoAUoKKlyowgp89toTJcm9XDN28/4LMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjM3NzcxMS0xZTNkLTRlNWEtYTRhYy0wNWExYzUwMmFkMjgvMC9BMEEyQTVDQThD MjBBN0NGNkRBMTMyNUM5QkQ1QzMzNzZGM0ZFMEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2RjNG RTBCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMz Mzc2RjNGRTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpOBsqjh1HZ3iNHgK9TbHGJg4nhIVeosdO2 8EiDIWlwc1MmXPQrxyQ0zwUEnGP9LqiLHLvVFSBfIMHTS0KlLUBemp+0/VGr8OLL jNyTaDOB9BDw6kp9ZYAUUhQ3epepO8DGxzP8WIwY6acKHoD3lUOLWVuZ7YuwxicV ZX3L+lh3+s5sMA+yCVmZEKcaLWHzwBrPvJm84N9pHe2wZP/zZzrGY52V+GwV5QgO 19TZqhFM5CneTufvjCGiJzIXDqsoZlY33dY92ch99AmxR92RQCVf+B/FVkxXUO67 rcw9z2gxAfMAXTzWf33kvDOo+a2YvEl36DSqOVW2jGJr1SlYwbg= -----END CERTIFICATE-----Generated at Sun May 19 22:11:04 2024 by rpki-client on console-fra.rpki-client.org