$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json) Hash identifier: zqbS8VQqBQmx1gktKqOYJeRYkjwzqR+JaTMYBk0tRDU= Subject key identifier: 47:33:AC:13:FE:EA:B0:49:0C:9A:D7:2C:A2:95:D1:DE:B4:84:FA:CA Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Certificate serial: 6A5C403F87195C9C4675186B87EFE9EB98217347 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft Manifest number: 5A Signing time: Fri 17 May 2024 21:01:53 +0000 Manifest this update: Fri 17 May 2024 20:56:53 +0000 Manifest next update: Tue 21 May 2024 08:40:53 +0000 Files and hashes: 1: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: gGHNzf32uFaEh1CLmYZaUNXAGSrCj3MqhzHy43LlXXI=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: sg5hp2m5+p+2ECnJuP0FhUrnMxG5A7fpn6eEPtxz13c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5c:40:3f:87:19:5c:9c:46:75:18:6b:87:ef:e9:eb:98:21:73:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Validity Not Before: May 17 20:56:53 2024 GMT Not After : May 21 08:40:53 2024 GMT Subject: CN=4733AC13FEEAB0490C9AD72CA295D1DEB484FACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:91:b7:67:b5:27:b5:08:98:59:65:9b:58:f7: 91:a5:4a:0d:ee:be:04:0f:f4:af:de:a1:72:06:ac: a0:88:9a:74:2a:92:ed:f8:4d:19:5e:7f:47:07:05: c7:86:78:18:2e:c1:1f:9a:e3:83:65:45:b1:bf:a5: 92:90:b6:13:86:6b:17:89:e5:f2:ea:a7:84:36:7e: c9:46:af:94:b5:74:57:fd:64:28:a3:85:df:ef:ac: 00:ef:65:45:28:f3:a9:bd:55:5a:40:e4:f6:38:54: 9e:7d:81:be:4e:45:16:30:3c:9c:96:8b:4c:d0:6f: 70:33:23:cd:ad:95:8e:c8:df:ce:ed:14:74:5b:37: 15:67:a8:a8:9f:0c:be:b2:c3:37:e8:b7:a0:47:86: 5f:93:15:e2:3a:a3:56:16:ac:66:5c:42:ea:49:9c: b8:f2:03:29:1f:9d:57:ff:e1:11:8a:5f:7b:0a:37: 94:6c:be:24:79:51:ba:bb:1e:db:26:64:83:3f:1d: a8:a8:31:fd:d5:f3:92:a3:33:0f:32:ac:99:8b:c8: 5d:13:70:50:6d:82:ad:99:18:c9:ad:f6:3a:9c:a6: c5:fb:52:ae:df:de:db:75:73:3d:57:61:2d:24:04: 90:7b:87:55:ef:49:bf:ca:8f:71:61:4d:2b:a0:1c: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:33:AC:13:FE:EA:B0:49:0C:9A:D7:2C:A2:95:D1:DE:B4:84:FA:CA X509v3 Authority Key Identifier: keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9c:b2:d8:5a:7a:77:55:5e:7d:3a:c5:7e:36:82:f7:75:a2: a2:97:60:16:72:45:93:52:eb:d0:67:a6:e8:66:c1:e1:73:cc: cf:2f:1c:13:9e:0a:3a:b5:ce:fb:31:21:c9:13:d0:ac:3b:6b: 49:c9:9b:9f:60:21:65:41:24:74:5a:47:34:3c:1a:9e:17:b6: bf:16:b5:46:08:18:e7:e2:a1:96:22:5e:b4:12:af:57:5d:85: b4:85:41:ff:aa:67:af:b6:93:8f:ea:25:0b:1a:62:aa:23:9b: 6c:09:82:bc:4e:00:b6:a7:8f:f6:b4:cb:c1:d8:36:81:52:99: f1:40:c1:63:01:17:4f:ef:d0:65:30:ac:9c:a4:61:0d:71:e0: d8:61:12:bd:2f:4b:af:b1:e7:ca:14:74:ba:7c:a0:4f:83:63: 41:73:6e:23:a9:f1:1f:17:cf:b8:f2:64:0c:5c:53:75:83:20: da:9e:24:08:c1:04:d8:5b:c0:21:cf:36:ca:5a:75:a6:62:a8: 08:47:78:b1:79:0e:77:f0:7c:b4:ce:82:4a:5d:a9:3e:0c:a4: 60:94:06:b5:11:b8:b3:e4:35:d8:08:b0:0e:65:44:6a:c6:8d: 01:1d:f2:17:9c:46:dd:1e:d6:bc:e4:e7:0f:a5:db:8a:96:a4: 85:80:3d:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUalxAP4cZXJxGdRhrh+/p65ghc0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZE NDBGQjhDMjAeFw0yNDA1MTcyMDU2NTNaFw0yNDA1MjEwODQwNTNaMDMxMTAvBgNV BAMTKDQ3MzNBQzEzRkVFQUIwNDkwQzlBRDcyQ0EyOTVEMURFQjQ4NEZBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkbdntSe1CJhZZZtY95GlSg3u vgQP9K/eoXIGrKCImnQqku34TRlef0cHBceGeBguwR+a44NlRbG/pZKQthOGaxeJ 5fLqp4Q2fslGr5S1dFf9ZCijhd/vrADvZUUo86m9VVpA5PY4VJ59gb5ORRYwPJyW i0zQb3AzI82tlY7I387tFHRbNxVnqKifDL6ywzfot6BHhl+TFeI6o1YWrGZcQupJ nLjyAykfnVf/4RGKX3sKN5RsviR5Ubq7HtsmZIM/HaioMf3V85KjMw8yrJmLyF0T cFBtgq2ZGMmt9jqcpsX7Uq7f3tt1cz1XYS0kBJB7h1XvSb/Kj3FhTSugHF2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURzOsE/7qsEkMmtcsopXR3rSE+sowHwYDVR0j BBgwFoAUV1w5hl064j3MwyKtCNFCT9QPuMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTFkOWFiYy00OTg3LTRkYmMtOTc2ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVE M0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZCOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZENDBG QjhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQy NEZENDBGQjhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKScsthaendVXn06xX42gvd1oqKXYBZyRZNS 69BnpuhmweFzzM8vHBOeCjq1zvsxIckT0Kw7a0nJm59gIWVBJHRaRzQ8Gp4Xtr8W tUYIGOfioZYiXrQSr1ddhbSFQf+qZ6+2k4/qJQsaYqojm2wJgrxOALanj/a0y8HY NoFSmfFAwWMBF0/v0GUwrJykYQ1x4NhhEr0vS6+x58oUdLp8oE+DY0FzbiOp8R8X z7jyZAxcU3WDINqeJAjBBNhbwCHPNspadaZiqAhHeLF5DnfwfLTOgkpdqT4MpGCU BrURuLPkNdgIsA5lRGrGjQEd8hecRt0e1rzk5w+l24qWpIWAPUM= -----END CERTIFICATE-----Generated at Fri May 17 21:38:07 2024 by rpki-client on console-fra.rpki-client.org