$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft File: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft (raw, json) Hash identifier: GU0V53tFgRLdTZIcUkacKm2DJ9RV4cfASenweajNknI= Subject key identifier: 61:22:3B:92:7A:75:8D:B6:C0:C3:DC:3A:3D:37:26:1E:DB:9F:49:3B Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B Certificate issuer: /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Certificate serial: 0286895E25CD1679558FEF8FA19846E97DE9739A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft Manifest number: 012B Signing time: Sat 18 May 2024 00:01:12 +0000 Manifest this update: Fri 17 May 2024 23:56:12 +0000 Manifest next update: Tue 21 May 2024 04:45:12 +0000 Files and hashes: 1: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: XXxYzdDJN7beDsCAVogZnoKqobBPchgEznsNd2kNNyo=) 2: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl (hash: louHOt8VDSxX60rW6Ax+ZGBqXQBFir7y4UPzjihMBI8=) 3: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: JCV2/sbML8tsgvSv6VikxzjFbAq1DccTbgG7lV+HYwQ=) 4: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: S7oTczC4SBHdcQyw/kSxOjZDmDBrdI4OEYoVk/hE3wI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 04:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:86:89:5e:25:cd:16:79:55:8f:ef:8f:a1:98:46:e9:7d:e9:73:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Validity Not Before: May 17 23:56:12 2024 GMT Not After : May 21 04:45:12 2024 GMT Subject: CN=61223B927A758DB6C0C3DC3A3D37261EDB9F493B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:42:6c:e2:c8:92:e1:0e:12:60:f5:7d:92: c8:59:4d:cb:54:d1:0f:c7:96:84:c9:8d:8b:4c:bc: 65:6f:20:e0:5e:77:15:bb:76:52:82:9e:41:34:73: 49:ba:78:ef:d0:56:5c:9b:a0:96:76:89:87:71:db: 94:41:12:be:5a:3d:e2:77:35:ef:58:49:70:3a:51: 2b:db:ca:65:eb:d4:88:a8:1f:36:a0:6e:e8:16:51: 7f:ee:08:7d:20:17:33:ae:0d:03:e0:27:8d:a9:41: 2e:78:6b:27:c5:d2:8b:dc:47:8c:54:8b:84:44:15: d6:17:af:1a:16:8e:a1:7b:34:35:cf:3a:15:87:35: 74:c3:4d:b5:d9:78:93:d2:cd:8b:b0:94:cd:38:e0: 01:b5:17:07:85:43:e1:c7:30:5a:80:d7:28:12:a4: df:27:40:1a:29:3f:75:9e:05:5b:c1:6d:79:34:7f: 50:7f:9f:04:d9:47:53:2b:9a:fe:fe:54:0a:76:6d: 57:4b:f9:f5:25:9a:8f:8f:32:db:f9:10:50:b5:f8: 0e:0d:ca:f4:04:74:b6:3b:46:0a:8c:a1:c0:f5:4c: 00:e9:3e:8c:96:f9:fa:2a:e9:8b:1e:34:19:b8:82: 6c:3f:5f:e0:93:46:fd:a5:a5:c8:2f:1d:94:3e:4d: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:22:3B:92:7A:75:8D:B6:C0:C3:DC:3A:3D:37:26:1E:DB:9F:49:3B X509v3 Authority Key Identifier: keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7b:ad:ff:96:23:17:9c:86:90:9c:5d:bd:51:8b:9b:63:38: ce:a9:5f:62:44:a8:23:8f:5b:be:5a:93:ac:08:9e:66:42:f3: 64:d9:a5:ad:0c:60:04:f9:c0:6a:b1:f1:1a:bc:a8:55:db:1e: fd:9d:02:bb:ac:0f:d5:3f:a2:8b:00:e5:ab:d4:74:26:98:87: 2f:15:fc:7f:1c:57:fd:a9:e8:ce:ea:59:43:3b:06:0f:83:6c: c2:85:3b:06:85:99:b8:1d:0c:39:4e:19:3b:c6:6a:20:7d:cf: 9d:43:0d:bb:be:58:da:7d:0a:8b:c9:f2:0a:aa:50:b9:f4:63: bd:49:8a:3a:83:61:3a:c9:0e:e9:1b:3c:25:36:49:02:a2:50: fd:d7:99:47:83:11:7c:0d:06:9b:da:75:50:5c:58:94:dd:4b: b0:77:ed:7d:35:21:c7:5c:9b:e9:80:70:07:19:d4:eb:8f:0c: cd:00:f4:30:d9:82:a1:33:98:d9:44:56:01:42:28:54:c1:41: ca:4d:f8:55:7c:42:d0:76:66:c0:83:19:d8:cc:69:5f:9a:2c: 19:b9:bb:2d:4a:66:74:23:26:b3:98:98:1b:5c:25:24:ff:cc: d1:bf:89:8e:f4:cf:5d:21:d9:2f:8a:19:13:52:b8:26:de:42: ab:66:2c:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoaJXiXNFnlVj++PoZhG6X3pc5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1 N0IxRTM1QjAeFw0yNDA1MTcyMzU2MTJaFw0yNDA1MjEwNDQ1MTJaMDMxMTAvBgNV BAMTKDYxMjIzQjkyN0E3NThEQjZDMEMzREMzQTNEMzcyNjFFREI5RjQ5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCkJs4siS4Q4SYPV9kshZTctU 0Q/HloTJjYtMvGVvIOBedxW7dlKCnkE0c0m6eO/QVlyboJZ2iYdx25RBEr5aPeJ3 Ne9YSXA6USvbymXr1IioHzagbugWUX/uCH0gFzOuDQPgJ42pQS54ayfF0ovcR4xU i4REFdYXrxoWjqF7NDXPOhWHNXTDTbXZeJPSzYuwlM044AG1FweFQ+HHMFqA1ygS pN8nQBopP3WeBVvBbXk0f1B/nwTZR1Mrmv7+VAp2bVdL+fUlmo+PMtv5EFC1+A4N yvQEdLY7RgqMocD1TADpPoyW+foq6YseNBm4gmw/X+CTRv2lpcgvHZQ+TTc3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYSI7knp1jbbAw9w6PTcmHtufSTswHwYDVR0j BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix RTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFC MkQ1N0IxRTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKR7rf+WIxechpCcXb1Ri5tjOM6pX2JEqCOP W75ak6wInmZC82TZpa0MYAT5wGqx8Rq8qFXbHv2dArusD9U/oosA5avUdCaYhy8V /H8cV/2p6M7qWUM7Bg+DbMKFOwaFmbgdDDlOGTvGaiB9z51DDbu+WNp9CovJ8gqq ULn0Y71JijqDYTrJDukbPCU2SQKiUP3XmUeDEXwNBpvadVBcWJTdS7B37X01Icdc m+mAcAcZ1OuPDM0A9DDZgqEzmNlEVgFCKFTBQcpN+FV8QtB2ZsCDGdjMaV+aLBm5 uy1KZnQjJrOYmBtcJST/zNG/iY70z10h2S+KGRNSuCbeQqtmLNo= -----END CERTIFICATE-----Generated at Sat May 18 01:29:14 2024 by rpki-client on console-fra.rpki-client.org