$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: Gdg0J1ZJQ7d6WzZPSvJ7pE5GiPkNQUuzt80JYnzemIM= Subject key identifier: 82:F5:D4:E5:8B:EC:A5:7B:99:D1:5C:A8:00:80:E0:86:90:9A:84:ED Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 37A94E01E7EFD1F31206D20BDDD5C3237BAA61D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 02AC Signing time: Mon 27 May 2024 09:00:50 +0000 Manifest this update: Mon 27 May 2024 08:55:50 +0000 Manifest next update: Thu 30 May 2024 13:36:50 +0000 Files and hashes: 1: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: 92PUeRgr/PdQEUP4i2ZvRoG4s2iOoHixbIIhUgrJ6ts=) 2: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: QAGSVy/LT4vipXzxoYbTcvAFLz1YLPpml23Pt48AD5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 13:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a9:4e:01:e7:ef:d1:f3:12:06:d2:0b:dd:d5:c3:23:7b:aa:61:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: May 27 08:55:50 2024 GMT Not After : May 30 13:36:50 2024 GMT Subject: CN=82F5D4E58BECA57B99D15CA80080E086909A84ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:91:65:a7:ed:6c:64:e2:03:be:58:9c:b7: 17:76:ce:76:b2:75:b3:95:8e:bc:f5:6c:91:39:b0: 55:d8:8a:9f:f5:70:4a:c5:ca:ec:2d:c5:7c:10:d2: 6c:25:02:08:02:3c:a1:57:ef:62:7d:7e:52:24:35: da:26:73:14:9b:a5:0b:4f:5d:2e:11:ca:bc:a0:0d: 6b:d9:ad:ab:42:34:25:20:52:4f:1f:69:ef:a7:59: 3f:ba:f9:28:1d:d8:f3:6a:ed:fb:d3:1a:7c:f3:86: f3:3f:7b:68:84:2f:9c:1d:e4:bb:59:a9:78:5c:4e: 49:ec:7e:94:e4:c5:0e:73:43:64:de:c4:96:d8:23: 19:0e:9c:c6:65:0c:7f:f5:1e:92:ee:e9:0c:d8:44: ac:7c:90:1d:68:d0:3d:01:fd:1a:5c:b6:cd:bf:d2: a6:de:2b:83:f0:88:c8:b0:47:96:d3:6f:89:1d:03: 69:ac:c0:fb:2a:47:6a:d1:86:cb:68:d9:5d:a9:3f: 7a:a7:17:1e:3a:22:07:9a:41:58:9b:7c:e9:26:f7: 16:ea:21:cf:b9:0f:39:dc:c1:a5:43:58:e5:87:fd: da:fb:8e:b7:ad:00:29:8d:fb:fb:4f:14:26:36:fa: 2f:34:ca:3b:aa:44:07:26:28:f3:f3:0f:80:21:38: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F5:D4:E5:8B:EC:A5:7B:99:D1:5C:A8:00:80:E0:86:90:9A:84:ED X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:cf:72:05:46:95:7d:64:0a:67:87:15:d8:06:b3:95:c8:65: b4:03:4b:c7:8a:ab:4b:a1:92:c4:aa:8e:b1:4a:82:8e:75:f0: 3a:73:57:64:bb:e3:10:a6:9c:c7:51:50:59:b6:6a:ad:6c:3b: 00:ab:a4:52:45:66:35:e0:b4:f3:c5:fa:10:46:54:b5:d9:be: 2c:09:ad:a1:8f:6a:92:b5:4a:e5:64:f4:a0:6e:b7:c0:53:fe: 5b:e2:aa:a0:a6:fb:6b:3b:90:ab:64:a0:1a:3a:c3:e5:56:8e: 75:57:87:19:72:c8:78:a4:b0:de:4a:b0:17:75:52:e5:81:d2: ad:1d:82:be:56:1c:75:74:9e:e8:02:8f:75:e2:b2:b9:4a:ad: ab:98:7c:5a:2b:27:ff:48:c9:3e:7b:89:b0:2e:bf:12:a5:36: 44:93:96:88:67:8c:52:7a:7c:7c:56:cb:64:19:bb:1c:45:11: 9f:08:01:6a:49:13:6b:62:ca:2c:df:ab:f5:92:28:9c:83:27: ea:bb:08:3a:74:96:42:da:f1:94:77:82:c4:07:f0:0c:51:ca: 3d:64:47:29:6b:0a:34:ab:3e:2a:4b:79:e7:14:1a:70:3d:ab: 25:b1:f3:6c:49:78:c1:50:90:e8:78:b3:b8:2c:0a:8d:cd:85: 82:53:1f:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6lOAefv0fMSBtIL3dXDI3uqYdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNDA1MjcwODU1NTBaFw0yNDA1MzAxMzM2NTBaMDMxMTAvBgNV BAMTKDgyRjVENEU1OEJFQ0E1N0I5OUQxNUNBODAwODBFMDg2OTA5QTg0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY3ZFlp+1sZOIDvlictxd2znay dbOVjrz1bJE5sFXYip/1cErFyuwtxXwQ0mwlAggCPKFX72J9flIkNdomcxSbpQtP XS4RyrygDWvZratCNCUgUk8fae+nWT+6+Sgd2PNq7fvTGnzzhvM/e2iEL5wd5LtZ qXhcTknsfpTkxQ5zQ2TexJbYIxkOnMZlDH/1HpLu6QzYRKx8kB1o0D0B/Rpcts2/ 0qbeK4PwiMiwR5bTb4kdA2mswPsqR2rRhsto2V2pP3qnFx46IgeaQVibfOkm9xbq Ic+5DzncwaVDWOWH/dr7jretACmN+/tPFCY2+i80yjuqRAcmKPPzD4AhOMfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvXU5YvspXuZ0VyoAIDghpCahO0wHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMzPcgVGlX1kCmeHFdgGs5XIZbQDS8eKq0uh ksSqjrFKgo518DpzV2S74xCmnMdRUFm2aq1sOwCrpFJFZjXgtPPF+hBGVLXZviwJ raGPapK1SuVk9KBut8BT/lviqqCm+2s7kKtkoBo6w+VWjnVXhxlyyHiksN5KsBd1 UuWB0q0dgr5WHHV0nugCj3XisrlKrauYfForJ/9IyT57ibAuvxKlNkSTlohnjFJ6 fHxWy2QZuxxFEZ8IAWpJE2tiyizfq/WSKJyDJ+q7CDp0lkLa8ZR3gsQH8AxRyj1k RylrCjSrPipLeecUGnA9qyWx82xJeMFQkOh4s7gsCo3NhYJTH2Q= -----END CERTIFICATE-----Generated at Mon May 27 11:21:35 2024 by rpki-client on console-ams.rpki-client.org