$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: zNqEXmS8mP5fpxRIlie0rPH7xH6gzKjbklnxUwpee0M= Subject key identifier: BB:E8:5E:41:DB:BE:DC:96:53:B3:98:F3:2C:A0:C0:C6:17:52:C6:1D Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 25693ECF6E3822A1C06633CA165075C8878E6F03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 0435 Signing time: Thu 30 May 2024 05:31:55 +0000 Manifest this update: Thu 30 May 2024 05:26:55 +0000 Manifest next update: Sun 02 Jun 2024 08:35:55 +0000 Files and hashes: 1: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: S2cRmCTnF82DBUIqwgGj0YE0k3UFOJk1wfUK3tYWLEo=) 2: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: ypNOz4KxUwLRSaEa6yvOfXqkwqFHrV4pP9ewa7sfxKw=) 3: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: LnQgI1smw5JzH6ufdCJAT+QoC02bAHRRBAyVIXGLgtQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 08:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:69:3e:cf:6e:38:22:a1:c0:66:33:ca:16:50:75:c8:87:8e:6f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: May 30 05:26:55 2024 GMT Not After : Jun 2 08:35:55 2024 GMT Subject: CN=BBE85E41DBBEDC9653B398F32CA0C0C61752C61D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1b:d1:1e:a8:c9:59:85:95:49:89:a6:27:bb: 1f:67:b6:f0:bc:3e:3f:9f:62:04:e5:2e:9b:9f:7a: 8c:f3:5c:82:ef:aa:46:86:cc:07:db:d4:f4:37:d0: 8d:5c:0c:0f:87:1e:60:dc:f1:3f:fc:15:ee:17:67: 2f:36:31:3f:aa:e5:e8:af:30:63:d0:62:a7:fb:a7: 40:96:1e:3d:6f:4c:41:8b:e9:5c:6e:2f:f0:4b:de: 2a:ca:57:d8:b8:b8:9c:ea:49:52:08:ff:9c:de:34: b5:86:39:55:a5:0d:5e:b8:20:b7:1e:59:f3:be:f5: 4d:62:29:82:91:a1:d0:13:09:0a:ff:39:dc:26:47: 07:a4:65:f6:37:24:e8:38:82:0a:4f:b9:09:f9:1b: ce:a3:ea:04:92:89:92:f1:5c:84:35:1d:ec:25:de: 71:f7:bc:2b:af:c1:e3:79:4b:06:28:4a:33:e8:51: c5:71:d3:9f:21:92:80:4b:cc:09:c3:ec:46:77:4d: c2:df:d8:4e:d8:83:63:cf:cc:6d:a2:47:72:87:cc: 27:d3:dd:d9:99:1d:94:89:7f:48:35:ea:82:d8:66: dd:e7:19:d5:c5:af:8c:2a:7b:88:db:50:9a:04:9e: d8:ca:21:cb:9f:79:6c:37:a2:0c:34:c1:16:3b:66: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E8:5E:41:DB:BE:DC:96:53:B3:98:F3:2C:A0:C0:C6:17:52:C6:1D X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:21:a2:20:91:5f:78:98:7f:8c:fe:22:18:f5:78:e9:36:2a: 56:0f:54:c7:ca:05:2d:70:22:6a:42:4a:3e:3f:3a:03:79:11: a7:00:b6:75:29:65:ca:f1:56:cc:98:e8:6a:81:df:71:fd:2a: 98:6a:1d:24:b1:ff:8a:b3:0e:c2:2f:01:3f:81:9d:db:b3:32: db:3a:2d:c9:07:45:ce:ac:46:ec:8e:7d:9b:fa:15:20:0b:d0: d8:e7:a6:b1:52:cd:03:21:e4:c6:86:97:64:29:1e:9f:d9:c9: 4c:6d:d3:12:ef:fd:16:af:a8:8d:d3:1a:fc:d5:6c:cd:d7:a7: 11:ed:96:9b:a5:a8:48:73:29:bc:21:13:d4:da:ba:3a:31:9d: 27:c8:6d:27:27:ad:61:9b:5a:bc:96:e4:c0:e0:2e:b6:cd:5d: 53:0a:6f:24:a6:90:1f:c2:71:e0:41:9a:09:2a:04:68:49:6e: a0:b9:50:76:2b:e6:0e:eb:6b:e1:fb:ce:4f:42:6f:b9:c5:98: 2b:90:ad:11:e7:06:47:b4:5b:28:1c:bd:9c:36:f5:1f:d4:8d: 7d:7e:58:06:7e:fb:56:1f:8f:8a:9c:d0:df:2c:71:e4:7e:71: 09:bf:73:40:32:9a:a8:cc:0e:79:e1:94:92:b8:66:68:ac:c0: 48:33:f7:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWk+z244IqHAZjPKFlB1yIeObwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNDA1MzAwNTI2NTVaFw0yNDA2MDIwODM1NTVaMDMxMTAvBgNV BAMTKEJCRTg1RTQxREJCRURDOTY1M0IzOThGMzJDQTBDMEM2MTc1MkM2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3G9EeqMlZhZVJiaYnux9ntvC8 Pj+fYgTlLpufeozzXILvqkaGzAfb1PQ30I1cDA+HHmDc8T/8Fe4XZy82MT+q5eiv MGPQYqf7p0CWHj1vTEGL6VxuL/BL3irKV9i4uJzqSVII/5zeNLWGOVWlDV64ILce WfO+9U1iKYKRodATCQr/OdwmRwekZfY3JOg4ggpPuQn5G86j6gSSiZLxXIQ1Hewl 3nH3vCuvweN5SwYoSjPoUcVx058hkoBLzAnD7EZ3TcLf2E7Yg2PPzG2iR3KHzCfT 3dmZHZSJf0g16oLYZt3nGdXFr4wqe4jbUJoEntjKIcufeWw3ogw0wRY7ZtWBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu+heQdu+3JZTs5jzLKDAxhdSxh0wHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFohoiCRX3iYf4z+Ihj1eOk2KlYPVMfKBS1w ImpCSj4/OgN5EacAtnUpZcrxVsyY6GqB33H9KphqHSSx/4qzDsIvAT+BnduzMts6 LckHRc6sRuyOfZv6FSAL0NjnprFSzQMh5MaGl2QpHp/ZyUxt0xLv/RavqI3TGvzV bM3XpxHtlpulqEhzKbwhE9TaujoxnSfIbScnrWGbWryW5MDgLrbNXVMKbySmkB/C ceBBmgkqBGhJbqC5UHYr5g7ra+H7zk9Cb7nFmCuQrRHnBke0WygcvZw29R/UjX1+ WAZ++1Yfj4qc0N8sceR+cQm/c0AymqjMDnnhlJK4ZmiswEgz90c= -----END CERTIFICATE-----Generated at Thu May 30 06:45:23 2024 by rpki-client on console-ams.rpki-client.org