$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: 14uk8uy01b66RKzgcxrW5KoELn851sjdwwtN0XZkL44= Subject key identifier: 76:00:E2:F5:EC:83:00:83:8D:33:7E:DD:1E:E9:72:39:37:A0:84:21 Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 54CE3A239E8896BC2F48C4A624B520B548E7C911 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: C5 Signing time: Sat 18 May 2024 05:30:58 +0000 Manifest this update: Sat 18 May 2024 05:25:58 +0000 Manifest next update: Tue 21 May 2024 13:12:58 +0000 Files and hashes: 1: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: kert8DjZFZG3h4rCknF6lI82qh6y9UTKORk1t7qqQVA=) 2: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: wqjblhIuvAMPwPaIwFtObEssF7KIl5fdywAhszOgrIw=) 3: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: V1vAvYcPoT9tnrl1lm/YCwvlB11NyE1VypP/Iz2XT+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 13:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ce:3a:23:9e:88:96:bc:2f:48:c4:a6:24:b5:20:b5:48:e7:c9:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: May 18 05:25:58 2024 GMT Not After : May 21 13:12:58 2024 GMT Subject: CN=7600E2F5EC8300838D337EDD1EE9723937A08421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:5c:9a:5c:54:5d:17:11:76:0d:ec:21:59: 5d:6f:d1:83:1d:d7:57:2f:92:87:a2:28:f4:ab:6a: 4e:2b:cf:40:66:f7:59:69:9e:bd:ef:bc:e8:31:08: be:a5:ad:99:7e:bd:c5:18:11:91:ab:96:79:56:86: b3:29:fc:70:7c:30:4d:59:2a:5e:27:9e:48:74:19: 2e:1c:04:48:74:f7:ec:e8:59:46:de:f8:f6:9e:79: ca:32:38:ee:9d:af:b8:4f:ed:7d:fe:05:7a:6f:d0: 2e:49:b3:17:00:5c:77:c9:a0:9a:ef:e1:dd:24:d9: ef:22:cb:31:d8:ad:9a:12:ca:79:45:53:7c:9b:62: ec:c1:1c:ad:7a:d9:60:97:b8:b0:23:b5:8f:d2:d7: 86:57:16:f5:f4:20:9e:cf:94:ad:70:4e:54:bc:2d: 58:fb:ad:07:d6:09:a8:e3:f7:f0:17:15:26:e5:f3: 7c:69:ba:39:72:a4:f6:10:5e:f5:71:96:3f:12:c7: 42:f5:76:f3:4c:db:70:42:ec:9e:eb:eb:dc:ff:42: e3:d5:d1:ef:01:98:fe:c7:30:6d:24:50:50:75:07: 47:d6:39:44:ec:53:72:5b:ed:1f:7b:74:af:04:82: bb:d4:5d:a2:06:c0:fe:8e:15:bc:5f:9a:d3:8d:c5: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:00:E2:F5:EC:83:00:83:8D:33:7E:DD:1E:E9:72:39:37:A0:84:21 X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:65:a9:41:8b:9d:82:1c:ab:70:79:4c:01:a4:54:3d:51:3b: 84:d9:da:ff:58:1d:5a:ad:7c:e8:42:2a:30:90:d0:69:d9:2c: 12:7b:a3:71:dd:ab:0b:44:e2:99:48:43:ca:8a:76:8a:60:8c: a2:7d:93:c5:3f:59:6e:95:96:4d:6f:ce:62:9d:4a:5f:9a:1e: 91:79:62:4b:c8:0d:fa:d1:da:ae:3c:73:c7:02:b4:3c:8f:3c: d5:38:5f:4f:37:e3:5c:03:22:78:6e:30:f8:3e:fd:f0:7d:43: d4:bd:49:81:cf:eb:a3:6d:e4:fc:95:34:e7:73:de:86:b1:2d: 1d:96:81:1b:16:eb:23:fc:2d:ce:b3:d6:e3:8e:cb:3d:5a:50: 07:09:dd:3b:01:01:84:40:e4:bf:59:fa:21:b6:5a:d2:17:bd: 63:94:af:69:1d:8e:02:ff:75:08:df:5a:4e:48:ad:f5:f5:d4: d1:5d:f6:85:e9:55:0c:67:21:46:58:76:8e:2e:ab:19:40:7b: 09:b0:e5:53:fb:b8:97:b4:9c:81:bf:4c:d9:9c:b5:f3:ca:54: b8:7f:dd:6b:72:8c:16:06:9e:c8:3a:77:e9:6c:a3:5b:1c:f6: 74:28:cb:c7:4e:66:8d:7c:4a:72:8c:97:ac:d4:06:87:15:e1: 9a:9c:e0:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVM46I56IlrwvSMSmJLUgtUjnyREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNDA1MTgwNTI1NThaFw0yNDA1MjExMzEyNThaMDMxMTAvBgNV BAMTKDc2MDBFMkY1RUM4MzAwODM4RDMzN0VERDFFRTk3MjM5MzdBMDg0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+FyaXFRdFxF2DewhWV1v0YMd 11cvkoeiKPSrak4rz0Bm91lpnr3vvOgxCL6lrZl+vcUYEZGrlnlWhrMp/HB8ME1Z Kl4nnkh0GS4cBEh09+zoWUbe+PaeecoyOO6dr7hP7X3+BXpv0C5JsxcAXHfJoJrv 4d0k2e8iyzHYrZoSynlFU3ybYuzBHK162WCXuLAjtY/S14ZXFvX0IJ7PlK1wTlS8 LVj7rQfWCajj9/AXFSbl83xpujlypPYQXvVxlj8Sx0L1dvNM23BC7J7r69z/QuPV 0e8BmP7HMG0kUFB1B0fWOUTsU3Jb7R97dK8EgrvUXaIGwP6OFbxfmtONxX87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdgDi9eyDAIONM37dHulyOTeghCEwHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAllqUGLnYIcq3B5TAGkVD1RO4TZ2v9YHVqt fOhCKjCQ0GnZLBJ7o3HdqwtE4plIQ8qKdopgjKJ9k8U/WW6Vlk1vzmKdSl+aHpF5 YkvIDfrR2q48c8cCtDyPPNU4X08341wDInhuMPg+/fB9Q9S9SYHP66Nt5PyVNOdz 3oaxLR2WgRsW6yP8Lc6z1uOOyz1aUAcJ3TsBAYRA5L9Z+iG2WtIXvWOUr2kdjgL/ dQjfWk5IrfX11NFd9oXpVQxnIUZYdo4uqxlAewmw5VP7uJe0nIG/TNmctfPKVLh/ 3WtyjBYGnsg6d+lso1sc9nQoy8dOZo18SnKMl6zUBocV4Zqc4KE= -----END CERTIFICATE-----Generated at Sat May 18 07:18:45 2024 by rpki-client on console-fra.rpki-client.org