$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json) Hash identifier: tETLd+1LBvptrZx531k86tekidwbKURmg0MU4lRxHrY= Subject key identifier: E3:2D:02:2B:B3:26:8A:70:9E:07:5D:79:9D:91:33:B5:28:6F:98:EA Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98 Certificate serial: 405247E7515A456F73AC84C38733B2D8EB4E70B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft Manifest number: 02B1 Signing time: Sat 25 May 2024 10:31:14 +0000 Manifest this update: Sat 25 May 2024 10:26:14 +0000 Manifest next update: Tue 28 May 2024 17:04:14 +0000 Files and hashes: 1: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: LsgeWTaSqSBqJwyxCQJow9KzoN4us6XJolFoqM+yhK8=) 2: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: FOSZ+k6IqzBm76C73GTLsw0OmxxmYyfgYE1jH8pKN7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 09:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:52:47:e7:51:5a:45:6f:73:ac:84:c3:87:33:b2:d8:eb:4e:70:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98 Validity Not Before: May 25 10:26:14 2024 GMT Not After : May 28 17:04:14 2024 GMT Subject: CN=E32D022BB3268A709E075D799D9133B5286F98EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:58:8f:72:ec:68:89:21:a7:04:ee:7c:29: 82:fe:ad:99:db:b3:99:6e:19:1e:5e:ab:7f:8e:26: aa:d9:a9:74:83:c9:db:da:1e:de:7f:65:28:17:00: b5:f4:c3:be:32:64:0a:87:48:d0:54:3c:c7:d2:b0: c6:16:12:98:81:db:5c:20:03:91:fc:1a:31:79:8f: b0:cd:45:24:c1:17:71:62:b2:9e:ba:e6:52:9d:77: 17:6e:e5:c2:72:3d:6d:14:04:59:4a:94:b9:67:9e: ca:a7:38:af:a2:d7:cd:65:3e:37:e2:44:16:c7:6d: a8:49:2b:86:df:a9:ce:d9:7b:49:ef:b9:a9:ab:07: b1:ed:e7:71:89:8a:8e:49:7a:3a:0a:23:4c:9d:d7: 52:6a:93:9e:84:53:2f:67:22:ba:ae:94:3f:af:4e: ed:5f:7f:08:67:f7:45:b0:b0:15:a1:92:f4:f7:0d: 75:8b:02:8b:dd:e7:3f:b8:7e:7c:69:10:a4:14:5e: d8:73:3b:21:fc:65:c4:09:7f:a0:05:c1:68:1d:e2: 2f:09:5f:ad:3a:6c:28:c5:68:f7:7a:9e:17:55:91: 21:73:b1:52:1d:05:84:5b:3a:8e:ec:b8:d2:37:68: 99:7f:6e:85:09:29:a8:8e:6b:5c:a0:38:54:f8:fc: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:02:2B:B3:26:8A:70:9E:07:5D:79:9D:91:33:B5:28:6F:98:EA X509v3 Authority Key Identifier: keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:55:44:cf:9c:ee:7b:6f:4a:9a:9e:fd:e9:bc:cf:34:8b:3e: 79:87:5a:00:cb:79:97:be:59:f7:ec:8f:f1:c9:c9:9c:59:98: 28:cd:c9:20:1d:54:73:7a:fa:23:ca:0b:bc:86:68:26:b8:0a: 35:23:5c:bf:8f:dc:38:78:33:02:53:e8:e9:1a:4d:04:f8:67: 11:6b:97:4a:95:e8:50:9b:ba:d1:02:0c:6f:f6:a5:e3:93:ba: 4c:42:9a:38:31:56:e4:e1:67:0b:78:f0:a6:79:4f:64:68:51: 60:62:40:97:0b:15:5d:6d:f1:3c:1c:42:11:35:9a:c8:be:b6: 87:79:98:b6:3e:52:9a:d9:be:5a:dc:1d:b0:63:9f:30:64:98: 3c:b4:34:d1:9e:71:70:e6:9e:45:28:41:30:af:e2:9c:40:d8: 8a:5e:b1:51:eb:a0:f4:ca:27:55:ae:5b:8b:ce:dc:73:67:8a: 4b:a3:4d:c6:87:38:6e:25:a8:79:e5:67:3a:4f:f8:45:cd:e9: 37:b8:8d:5b:47:bb:4b:91:8b:11:6b:ca:dc:d6:59:f2:f5:32: 32:f1:29:29:37:ac:e8:c8:1c:7d:39:d9:3a:db:27:d9:dc:11: fa:5a:fc:c0:a3:db:6a:fe:01:73:cb:50:a1:05:51:5b:b4:0e: 39:39:51:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFJH51FaRW9zrITDhzOy2OtOcLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlG MDA3RkE5ODAeFw0yNDA1MjUxMDI2MTRaFw0yNDA1MjgxNzA0MTRaMDMxMTAvBgNV BAMTKEUzMkQwMjJCQjMyNjhBNzA5RTA3NUQ3OTlEOTEzM0I1Mjg2Rjk4RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDafViPcuxoiSGnBO58KYL+rZnb s5luGR5eq3+OJqrZqXSDydvaHt5/ZSgXALX0w74yZAqHSNBUPMfSsMYWEpiB21wg A5H8GjF5j7DNRSTBF3Fisp665lKddxdu5cJyPW0UBFlKlLlnnsqnOK+i181lPjfi RBbHbahJK4bfqc7Ze0nvuamrB7Ht53GJio5JejoKI0yd11Jqk56EUy9nIrqulD+v Tu1ffwhn90WwsBWhkvT3DXWLAovd5z+4fnxpEKQUXthzOyH8ZcQJf6AFwWgd4i8J X606bCjFaPd6nhdVkSFzsVIdBYRbOo7suNI3aJl/boUJKaiOa1ygOFT4/LzVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4y0CK7MminCeB115nZEztShvmOowHwYDVR0j BBgwFoAUMFP/p6ASOwMvyUWCgQY8ifAH+pgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmRiNGNiOC1mYWVhLTQ1MzAtYjI5ZS0wYjdhNGFmZmMzMTYvMC8zMDUzRkZBN0Ew MTIzQjAzMkZDOTQ1ODI4MTA2M0M4OUYwMDdGQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlGMDA3 RkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkYjRjYjgtZmFlYS00NTMwLWIy OWUtMGI3YTRhZmZjMzE2LzAvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjND ODlGMDA3RkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZVRM+c7ntvSpqe/em8zzSLPnmHWgDLeZe+ Wffsj/HJyZxZmCjNySAdVHN6+iPKC7yGaCa4CjUjXL+P3Dh4MwJT6OkaTQT4ZxFr l0qV6FCbutECDG/2peOTukxCmjgxVuThZwt48KZ5T2RoUWBiQJcLFV1t8TwcQhE1 msi+tod5mLY+UprZvlrcHbBjnzBkmDy0NNGecXDmnkUoQTCv4pxA2IpesVHroPTK J1WuW4vO3HNnikujTcaHOG4lqHnlZzpP+EXN6Te4jVtHu0uRixFrytzWWfL1MjLx KSk3rOjIHH052TrbJ9ncEfpa/MCj22r+AXPLUKEFUVu0Djk5UVc= -----END CERTIFICATE-----Generated at Sat May 25 11:20:04 2024 by rpki-client on console-fra.rpki-client.org