$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft File: 35B589224D641562D0CFE2019F733A965FC8E0C7.mft (raw, json) Hash identifier: blGhJ5PMhr2laDylDpqCjEiLotmlWIRP72RQUlyM5z4= Subject key identifier: 5B:9C:70:15:AD:B8:5A:36:B6:89:2B:32:02:EE:11:35:2A:32:55:28 Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Certificate serial: 24FC46D2E7565B1768D70DA35F6BCF577CD526E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft Manifest number: AA Signing time: Sun 19 May 2024 09:20:56 +0000 Manifest this update: Sun 19 May 2024 09:15:56 +0000 Manifest next update: Wed 22 May 2024 11:45:56 +0000 Files and hashes: 1: 3130332e36392e3130362e302f32342d3234203d3e20313437303837.roa (hash: ndujuU6zQqtUrK6Yr3ZoJ+/Bj7YRfo0ShSgMQKBlGwY=) 2: 35B589224D641562D0CFE2019F733A965FC8E0C7.crl (hash: alwx3m3M3tZMyZ/3dLHdlVeiSHLVTizuXGlTf2iZg20=) 3: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (hash: uWPrpCb0k5EiJaHgU3mG4U+ak1Nlnfzs1/52QmaMMlw=) 4: 3130332e36392e3130372e302f32342d3234203d3e20313437303837.roa (hash: /xrMIb1Auprqupsvf+NzVTf+2yjeUFZrWf9ac8JqAMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fc:46:d2:e7:56:5b:17:68:d7:0d:a3:5f:6b:cf:57:7c:d5:26:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Validity Not Before: May 19 09:15:56 2024 GMT Not After : May 22 11:45:56 2024 GMT Subject: CN=5B9C7015ADB85A36B6892B3202EE11352A325528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:15:95:0b:c2:ab:89:3e:3b:36:f0:3f:ac: 17:16:b7:31:3f:b1:2d:27:97:93:de:a4:f3:0b:1e: 5c:f3:3d:60:ea:60:26:e8:96:cb:c9:9f:07:0a:33: dc:91:bd:1e:aa:34:5a:22:7a:81:42:59:7a:62:47: 65:3c:e2:2f:a9:5c:83:03:b2:ee:13:cf:47:c8:3c: bf:0d:31:cb:3a:10:6a:20:dc:bb:bd:fd:c7:93:11: 11:98:63:e9:1a:cd:9e:b0:a2:76:6c:06:bf:b6:27: 8d:29:d7:7d:4b:c8:43:61:31:eb:ad:75:56:b4:8d: bb:eb:4d:2a:fc:23:0f:11:b7:e8:47:87:82:bf:4d: 58:6c:2b:38:85:3e:04:37:ee:23:3c:da:4a:b3:c5: 28:d6:cb:c8:32:82:e4:49:24:6e:e1:ea:4c:c3:5d: 94:5b:30:70:48:6d:44:10:31:df:a0:bb:c2:d8:d7: ef:db:ab:a1:00:e0:ee:b8:2a:a9:46:86:2f:8f:ff: e3:c4:59:13:88:c0:22:65:64:0f:2f:99:f1:1b:7e: 9b:6b:05:b2:2c:a1:77:30:91:ce:7f:78:47:d4:5e: 1f:84:78:14:51:08:61:56:cc:d0:b5:97:91:d1:cc: 0e:e3:43:ae:98:9e:dd:d3:28:d6:92:70:f9:19:f0: 02:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9C:70:15:AD:B8:5A:36:B6:89:2B:32:02:EE:11:35:2A:32:55:28 X509v3 Authority Key Identifier: keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:68:fd:b6:d1:0d:72:46:b3:fa:5b:50:33:6b:3c:8d:02:92: 39:fa:d5:14:30:06:d8:ef:43:64:69:28:43:2c:fb:07:3f:fc: 6f:bb:6b:1b:63:73:92:54:a6:53:87:c0:1b:a1:b2:bd:38:18: da:d6:b0:ea:f6:96:4f:82:56:9f:4b:48:2f:47:77:0c:33:4d: 43:35:f2:52:88:a5:86:54:95:86:79:32:57:ed:22:78:e1:0d: 77:a2:94:92:01:47:54:b7:ed:ba:21:7c:5c:7a:ca:c2:f9:ba: 74:ca:0d:a7:49:9f:0b:13:dc:e9:72:4f:87:09:f3:85:58:eb: c1:21:fc:5f:50:66:ed:81:a9:76:0c:59:38:ac:02:89:d9:4a: 32:26:48:62:f2:7d:56:ff:ea:ae:9f:72:c0:77:bb:e4:f2:42: 96:f7:d6:c7:2f:88:62:86:99:57:1d:04:b4:a9:a8:b5:7c:6c: 99:3d:57:60:40:92:13:f1:3e:b9:71:fc:cb:a0:ea:1e:81:7f: 71:37:35:dd:71:a4:c8:88:06:ee:53:b1:97:13:07:12:db:4b: bc:c2:5b:91:89:1b:b0:94:55:69:e1:3e:1f:cb:e7:54:df:17: a2:4b:f1:a3:d2:e1:03:53:14:bb:e5:7f:9e:e7:f7:ad:d1:25: 20:c6:3e:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJPxG0udWWxdo1w2jX2vPV3zVJuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1 RkM4RTBDNzAeFw0yNDA1MTkwOTE1NTZaFw0yNDA1MjIxMTQ1NTZaMDMxMTAvBgNV BAMTKDVCOUM3MDE1QURCODVBMzZCNjg5MkIzMjAyRUUxMTM1MkEzMjU1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS6xWVC8KriT47NvA/rBcWtzE/ sS0nl5PepPMLHlzzPWDqYCbolsvJnwcKM9yRvR6qNFoieoFCWXpiR2U84i+pXIMD su4Tz0fIPL8NMcs6EGog3Lu9/ceTERGYY+kazZ6wonZsBr+2J40p131LyENhMeut dVa0jbvrTSr8Iw8Rt+hHh4K/TVhsKziFPgQ37iM82kqzxSjWy8gyguRJJG7h6kzD XZRbMHBIbUQQMd+gu8LY1+/bq6EA4O64KqlGhi+P/+PEWROIwCJlZA8vmfEbfptr BbIsoXcwkc5/eEfUXh+EeBRRCGFWzNC1l5HRzA7jQ66Ynt3TKNaScPkZ8ALlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5xwFa24Wja2iSsyAu4RNSoyVSgwHwYDVR0j BBgwFoAUNbWJIk1kFWLQz+IBn3M6ll/I4McwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyZWJkZS02MzExLTQ4OGEtODJiNy05ZDRjMDU1MzA5ODcvMC8zNUI1ODkyMjRE NjQxNTYyRDBDRkUyMDE5RjczM0E5NjVGQzhFMEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1RkM4 RTBDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFlMmViZGUtNjMxMS00ODhhLTgy YjctOWQ0YzA1NTMwOTg3LzAvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNB OTY1RkM4RTBDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZo/bbRDXJGs/pbUDNrPI0Ckjn61RQwBtjv Q2RpKEMs+wc//G+7axtjc5JUplOHwBuhsr04GNrWsOr2lk+CVp9LSC9HdwwzTUM1 8lKIpYZUlYZ5MlftInjhDXeilJIBR1S37bohfFx6ysL5unTKDadJnwsT3OlyT4cJ 84VY68Eh/F9QZu2BqXYMWTisAonZSjImSGLyfVb/6q6fcsB3u+TyQpb31scviGKG mVcdBLSpqLV8bJk9V2BAkhPxPrlx/Mug6h6Bf3E3Nd1xpMiIBu5TsZcTBxLbS7zC W5GJG7CUVWnhPh/L51TfF6JL8aPS4QNTFLvlf57n963RJSDGPgc= -----END CERTIFICATE-----Generated at Sun May 19 10:27:50 2024 by rpki-client on console-ams.rpki-client.org