$ rpki-client -vvf repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft File: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft (raw, json) Hash identifier: t04eh5py6eW+H4qAhi6K14Ss1n90zmV/IE4L7YhEEY0= Subject key identifier: 76:CF:5E:B8:95:34:68:8D:D0:8A:64:43:6B:7E:13:1A:7D:EE:96:A8 Authority key identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E Certificate issuer: /CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Certificate serial: 0CBF292886E0C40F121ECBDF0691094561F4EC7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft Manifest number: F5 Signing time: Sat 18 May 2024 15:21:06 +0000 Manifest this update: Sat 18 May 2024 15:16:06 +0000 Manifest next update: Tue 21 May 2024 16:35:06 +0000 Files and hashes: 1: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (hash: wufB9pjJCjcpIWEFd5D/L3FQRaJ4amZgHr+JsGGfDqU=) 2: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl (hash: mUuDztdS+l3vJcy5p1UMiAKOW0eMFqWz8zC+dIi2rN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 16:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bf:29:28:86:e0:c4:0f:12:1e:cb:df:06:91:09:45:61:f4:ec:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Validity Not Before: May 18 15:16:06 2024 GMT Not After : May 21 16:35:06 2024 GMT Subject: CN=76CF5EB89534688DD08A64436B7E131A7DEE96A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:96:1a:5a:ec:3f:fb:cc:e9:ee:75:d0:5c:62: 92:55:67:cd:b9:67:bb:fc:01:79:d9:ad:de:5a:b8: 66:37:39:78:f1:e0:a1:c0:16:0f:05:f1:13:2e:b1: 81:77:3b:2a:a2:bf:4f:c8:47:49:8f:81:c5:9b:6e: cd:32:14:2a:61:9c:af:2d:3d:4f:f8:0d:af:28:d5: e7:4f:85:ff:2c:6a:ca:fd:ee:73:f8:77:84:d2:b2: a3:d6:5a:78:be:6f:8d:d4:ec:e4:06:3f:1f:bc:26: a6:2f:c4:86:62:47:ff:82:f3:85:f2:94:ed:20:45: 84:9d:3a:b7:2d:e4:f1:24:a7:ae:f0:7b:ff:6c:1d: 62:90:3b:3c:40:d4:61:32:7d:4c:7a:49:85:6a:1a: ab:1d:ce:bb:70:21:b8:36:dc:c8:64:4f:4a:8d:07: 87:03:74:14:91:38:7e:69:65:2b:18:1f:88:1c:1a: cf:5e:f5:a0:01:38:88:f7:de:e1:5e:a3:29:00:cd: 54:5b:e9:f8:d6:20:a3:b6:d0:99:72:0a:51:55:e3: a9:be:e8:16:23:a3:c8:72:59:5a:c7:c5:4a:0a:32: 5e:4b:fa:c0:ed:73:88:81:ab:b0:da:e0:16:5d:f1: 5f:5b:db:e0:f8:06:a8:a8:f3:d6:9d:b1:50:fd:6e: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CF:5E:B8:95:34:68:8D:D0:8A:64:43:6B:7E:13:1A:7D:EE:96:A8 X509v3 Authority Key Identifier: keyid:53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:01:8e:6c:01:5e:46:2e:4b:1c:16:4e:c2:8a:34:94:ed:38: a6:37:3a:74:32:fe:a1:5a:55:c8:f0:ac:ba:cd:2f:c0:2b:a6: 20:bb:1b:95:be:b2:b7:ce:00:9b:e4:cd:08:fb:5f:b7:6b:ad: fe:62:df:92:21:6e:2a:5a:9c:60:75:a4:80:30:87:09:40:02: c1:45:f5:d9:c3:5f:6b:26:27:a7:e4:9c:b9:af:18:e6:96:bf: 9d:93:78:e3:d6:85:d9:b9:fd:53:2e:52:20:9d:d5:30:9a:48: 15:55:7d:c5:8f:4d:56:b0:6c:91:d9:9f:a1:2d:9f:df:0a:c0: 58:61:66:11:95:6d:6b:f2:57:4b:24:88:1a:3c:a2:70:9b:89: f7:8a:f4:67:fb:f6:ec:11:e7:be:ec:e3:2b:0a:81:c8:94:4b: 8e:07:de:86:93:63:d3:fd:b4:58:08:49:51:5c:04:84:f7:a4: 7e:95:e7:ba:5a:1a:1f:9f:81:79:e1:ef:ad:65:56:c1:ea:aa: d1:a9:f6:55:89:a0:39:96:1f:fa:34:1f:9c:16:de:1d:9c:3e: 47:f3:63:4d:86:46:d1:e0:fd:de:84:c1:40:b8:83:0c:87:e2: 4b:af:cb:19:c7:58:52:62:48:01:f1:90:86:52:02:f8:70:90: 04:e2:6c:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDL8pKIbgxA8SHsvfBpEJRWH07HowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2RDI5 RUJGQjY0RTAeFw0yNDA1MTgxNTE2MDZaFw0yNDA1MjExNjM1MDZaMDMxMTAvBgNV BAMTKDc2Q0Y1RUI4OTUzNDY4OEREMDhBNjQ0MzZCN0UxMzFBN0RFRTk2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDylhpa7D/7zOnuddBcYpJVZ825 Z7v8AXnZrd5auGY3OXjx4KHAFg8F8RMusYF3Oyqiv0/IR0mPgcWbbs0yFCphnK8t PU/4Da8o1edPhf8sasr97nP4d4TSsqPWWni+b43U7OQGPx+8JqYvxIZiR/+C84Xy lO0gRYSdOrct5PEkp67we/9sHWKQOzxA1GEyfUx6SYVqGqsdzrtwIbg23MhkT0qN B4cDdBSROH5pZSsYH4gcGs9e9aABOIj33uFeoykAzVRb6fjWIKO20JlyClFV46m+ 6BYjo8hyWVrHxUoKMl5L+sDtc4iBq7Da4BZd8V9b2+D4Bqio89adsVD9bpeHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUds9euJU0aI3QimRDa34TGn3ulqgwHwYDVR0j BBgwFoAUU7LKMALbjfz1SC+OCamG0p6/tk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjcxZmM2ZC1hYTNiLTRlZDctOGZlYy03NDI3YWEwNjFmOGUvMC81M0IyQ0EzMDAy REI4REZDRjU0ODJGOEUwOUE5ODZEMjlFQkZCNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2RDI5RUJG QjY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3MWZjNmQtYWEzYi00ZWQ3LThm ZWMtNzQyN2FhMDYxZjhlLzAvNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2 RDI5RUJGQjY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0BjmwBXkYuSxwWTsKKNJTtOKY3OnQy/qFa VcjwrLrNL8ArpiC7G5W+srfOAJvkzQj7X7drrf5i35IhbipanGB1pIAwhwlAAsFF 9dnDX2smJ6fknLmvGOaWv52TeOPWhdm5/VMuUiCd1TCaSBVVfcWPTVawbJHZn6Et n98KwFhhZhGVbWvyV0skiBo8onCbifeK9Gf79uwR577s4ysKgciUS44H3oaTY9P9 tFgISVFcBIT3pH6V57paGh+fgXnh761lVsHqqtGp9lWJoDmWH/o0H5wW3h2cPkfz Y02GRtHg/d6EwUC4gwyH4kuvyxnHWFJiSAHxkIZSAvhwkATibDg= -----END CERTIFICATE-----Generated at Sat May 18 15:57:29 2024 by rpki-client on console-ams.rpki-client.org