$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft File: E5B2AB049E75667C8F00ECB0EBF617859558571D.mft (raw, json) Hash identifier: TtONbLdhHGN5N3VJBWRZyYozvGX/fdPyfymNWYO8Pwk= Subject key identifier: E9:5E:E6:BF:82:9D:33:AA:7E:67:F6:E0:5D:9C:EC:30:AF:04:9E:90 Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D Certificate issuer: /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Certificate serial: 79015C75949064F1440B766460C1626E84F7EBA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft Manifest number: 63 Signing time: Fri 17 May 2024 17:40:30 +0000 Manifest this update: Fri 17 May 2024 17:35:30 +0000 Manifest next update: Mon 20 May 2024 23:55:30 +0000 Files and hashes: 1: 3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (hash: DHwhB9BzP0jjwAzjgBlAAmWzhX/FFCvXHXO2UG3urP4=) 2: E5B2AB049E75667C8F00ECB0EBF617859558571D.crl (hash: jk6fciaqtgrZTxf69ZYpcrU8EvZ6fulod8IwO2IUZJo=) 3: 3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (hash: PQqp0FJBU6xylD+255dmmPtTfu9t12GC84srT6hbTts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 23:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:01:5c:75:94:90:64:f1:44:0b:76:64:60:c1:62:6e:84:f7:eb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D Validity Not Before: May 17 17:35:30 2024 GMT Not After : May 20 23:55:30 2024 GMT Subject: CN=E95EE6BF829D33AA7E67F6E05D9CEC30AF049E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:2f:d7:d7:e2:89:4e:7e:1d:4b:cd:68:e9: f6:a0:7b:ea:e2:98:a5:5a:a5:ac:7f:4b:70:2e:05: a5:86:0d:0e:3f:4e:dc:18:2a:fa:14:02:88:15:82: f8:ad:cb:20:1c:25:8b:1b:0f:ee:f2:92:d1:25:7b: 67:28:67:84:ec:9a:62:3d:93:01:38:68:c4:0e:b3: 1e:ff:d2:d1:cb:96:94:d2:df:9f:e8:71:48:e8:c1: 48:cf:f8:e7:11:4b:75:71:54:49:e0:15:f7:0c:f0: af:91:b3:75:8c:9a:03:68:7e:e0:4a:b7:dc:92:2b: 46:8a:59:a0:94:02:ea:b0:d6:4f:a4:6d:c5:9b:7c: 4d:de:9c:32:04:5c:20:2f:5d:bf:f3:18:f0:0d:20: 8b:59:3a:7f:4d:6c:d1:28:82:83:d7:ad:b7:36:26: e7:f9:91:ae:e8:b2:28:d2:99:e8:1e:14:d6:bf:5c: 5c:23:a2:bb:c9:50:33:64:78:1b:ba:ac:d3:9e:2d: 2b:af:c0:75:1e:8c:89:08:1b:b5:37:bc:52:c5:87: 0a:a2:66:e0:9c:1c:7a:d2:53:a7:75:06:e2:61:9f: f4:85:d5:43:af:68:94:80:e7:fa:1a:bc:7a:2b:36: 7b:ba:91:f1:fc:78:f9:6b:ba:b3:51:35:f3:85:73: eb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5E:E6:BF:82:9D:33:AA:7E:67:F6:E0:5D:9C:EC:30:AF:04:9E:90 X509v3 Authority Key Identifier: keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:be:84:80:af:07:f1:f9:6c:65:bc:d0:7b:fd:0f:69:2b:de: d7:96:2e:bf:6d:99:02:87:c6:3d:0e:81:80:91:f1:1f:73:97: e1:73:ba:2d:2e:59:8c:b7:8d:cd:0f:23:bf:71:9a:55:4e:0f: 53:9e:e3:75:23:ec:e4:90:a3:0a:ca:19:f0:d0:48:6e:eb:40: ac:aa:5f:0c:23:ed:bd:b6:b8:89:a4:9f:72:e2:bb:76:06:b1: a4:4f:1d:b7:ba:ff:c3:20:3a:9c:10:ad:06:cf:e3:75:52:69: e4:fb:d5:c5:6c:dd:48:f2:e3:eb:a6:7b:86:6f:37:e1:d9:0e: 92:30:c4:72:66:2f:53:1f:ff:84:10:0e:71:79:f2:f4:cf:06: a0:84:f0:c0:3a:0c:66:18:4b:a4:c7:46:83:02:9c:fc:77:5a: 67:fb:6c:44:b8:38:e3:85:b3:80:38:48:af:c7:bd:55:04:fe: df:7b:7a:ce:c3:40:76:63:46:a8:fa:12:2d:9a:ce:02:85:bd: 42:ef:32:49:52:fd:5b:6d:76:5d:62:33:67:c5:68:18:6d:62: f4:a5:5a:79:fb:67:c4:58:d9:92:2d:64:ce:2e:c7:f2:28:6a: 4a:4c:2f:85:63:b1:b2:ca:71:a5:cf:61:92:85:49:78:fa:46: a6:2c:31:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQFcdZSQZPFEC3ZkYMFiboT366gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5 NTU4NTcxRDAeFw0yNDA1MTcxNzM1MzBaFw0yNDA1MjAyMzU1MzBaMDMxMTAvBgNV BAMTKEU5NUVFNkJGODI5RDMzQUE3RTY3RjZFMDVEOUNFQzMwQUYwNDlFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn0i/X1+KJTn4dS81o6fage+ri mKVapax/S3AuBaWGDQ4/TtwYKvoUAogVgvityyAcJYsbD+7yktEle2coZ4TsmmI9 kwE4aMQOsx7/0tHLlpTS35/ocUjowUjP+OcRS3VxVEngFfcM8K+Rs3WMmgNofuBK t9ySK0aKWaCUAuqw1k+kbcWbfE3enDIEXCAvXb/zGPANIItZOn9NbNEogoPXrbc2 Juf5ka7osijSmegeFNa/XFwjorvJUDNkeBu6rNOeLSuvwHUejIkIG7U3vFLFhwqi ZuCcHHrSU6d1BuJhn/SF1UOvaJSA5/oavHorNnu6kfH8ePlrurNRNfOFc+t7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6V7mv4KdM6p+Z/bgXZzsMK8EnpAwHwYDVR0j BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4 NTcxRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIyNmIzZTEtZDdmNi00NjVlLTgz MDItN2Q1MmY1YzM0MGZmLzAvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3 ODU5NTU4NTcxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMa+hICvB/H5bGW80Hv9D2kr3teWLr9tmQKH xj0OgYCR8R9zl+Fzui0uWYy3jc0PI79xmlVOD1Oe43Uj7OSQowrKGfDQSG7rQKyq Xwwj7b22uImkn3Liu3YGsaRPHbe6/8MgOpwQrQbP43VSaeT71cVs3Ujy4+ume4Zv N+HZDpIwxHJmL1Mf/4QQDnF58vTPBqCE8MA6DGYYS6THRoMCnPx3Wmf7bES4OOOF s4A4SK/HvVUE/t97es7DQHZjRqj6Ei2azgKFvULvMklS/Vttdl1iM2fFaBhtYvSl Wnn7Z8RY2ZItZM4ux/IoakpML4VjsbLKcaXPYZKFSXj6RqYsMVE= -----END CERTIFICATE-----Generated at Fri May 17 18:13:30 2024 by rpki-client on console-fra.rpki-client.org