$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft File: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft (raw, json) Hash identifier: CSBFL5a4PQ9Lms+bJ6Zq0uyvXslQHCAvoO74yVUFHD0= Subject key identifier: CF:7F:79:B1:38:0D:D5:81:CC:40:B3:D0:79:5D:64:1E:36:59:EA:B9 Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 Certificate issuer: /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Certificate serial: 6CF669DA20CE59C8992E86A000885435AEE6A07D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft Manifest number: 042F Signing time: Sun 19 May 2024 00:21:51 +0000 Manifest this update: Sun 19 May 2024 00:16:51 +0000 Manifest next update: Wed 22 May 2024 04:55:51 +0000 Files and hashes: 1: E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl (hash: 9706S5GeFFrzlCABM30HwjFogvHAHJzKUin7t8UaxIE=) 2: 3130332e3133302e36302e302f32342d3234203d3e20313338303739.roa (hash: evc/UpwdT3gTClNncvGMlQTNbD6X2VVV/aczvt6xJGI=) 3: 3130332e3133302e36302e302f32332d3233203d3e20313338303739.roa (hash: S0jz9/CvwZquCQdr3zzMug2f9bRerKc/cchjpAQ98O8=) 4: 3130332e3133302e36332e302f32342d3234203d3e20313338303739.roa (hash: 6g3BJiRYJrqvKlrMmXjkPJLXetMt/jSearNW8mZPwLc=) 5: 3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (hash: xlQEc7JlyT3ZUMA5NVkIbOhgP9f5RcyMscr102/e71o=) 6: 3130332e3133302e36312e302f32342d3234203d3e20313338303739.roa (hash: grVncX0giRBJ34nO2ApdqdxcJFtYWBEBC4pmSc/wPyA=) 7: 3130332e3133302e36302e302f32322d3232203d3e20313338303739.roa (hash: 8tGJB+mBb7pJEjFKzOgFUizirJ+hMgkUkUVdT/0gOAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f6:69:da:20:ce:59:c8:99:2e:86:a0:00:88:54:35:ae:e6:a0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52 Validity Not Before: May 19 00:16:51 2024 GMT Not After : May 22 04:55:51 2024 GMT Subject: CN=CF7F79B1380DD581CC40B3D0795D641E3659EAB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:1e:c6:2b:5a:0b:24:ab:84:a4:8b:fa:34: 1c:35:55:65:07:e9:6e:1a:38:63:0a:c1:13:65:01: 34:b6:9e:a9:25:91:db:10:a3:8c:6f:58:08:72:9c: c6:d9:98:0f:30:51:17:74:08:af:59:d1:75:68:46: 93:c4:97:d2:39:4e:a8:2f:09:63:28:c6:77:fe:f6: d3:a5:82:1b:bd:e2:93:2a:53:3a:26:74:44:1d:22: db:59:4c:0b:14:63:28:c9:c9:da:dc:1c:68:5e:f8: 09:e0:c4:9f:29:2c:40:85:ee:e9:fc:e4:e5:10:eb: 78:2d:24:92:34:1d:01:1d:23:37:af:4b:d4:94:4d: 1f:91:3c:e5:3e:53:90:c2:bd:0a:4b:d9:eb:5b:00: b1:cd:ae:51:d4:4e:7c:aa:70:53:a3:95:23:90:ae: d2:4e:c7:d9:5d:a1:c5:23:52:43:94:58:fa:76:92: ed:3f:80:81:22:66:11:4b:e8:10:8f:99:bf:aa:ac: 3f:26:cf:ba:63:a4:87:21:bf:54:fe:15:46:3a:fb: 0a:a0:5d:10:7f:c8:51:a0:97:a5:e2:43:ab:da:22: c8:36:38:dd:01:47:20:f9:98:09:f6:c8:41:0c:a4: b4:c5:48:46:f3:5d:f8:1a:86:f3:bf:d7:b9:f3:59: 30:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7F:79:B1:38:0D:D5:81:CC:40:B3:D0:79:5D:64:1E:36:59:EA:B9 X509v3 Authority Key Identifier: keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:fd:7f:57:4f:e1:19:99:99:00:6e:e0:fd:b9:66:e8:8c:c5: 62:33:b6:ae:59:0e:05:ad:e1:6d:c5:52:d1:03:96:d3:e6:c3: 41:14:76:35:91:1a:35:8f:2d:ce:29:94:15:63:90:40:6c:ac: 68:1a:83:94:14:21:f0:e5:91:03:dc:df:75:bc:75:aa:f8:44: 52:46:76:56:b4:ef:23:c4:dd:3f:34:4d:bf:0a:e0:2d:3b:38: 34:d4:f2:ca:3f:c3:44:33:79:3a:4b:22:d8:38:0a:3e:45:ad: 06:ab:25:b7:ae:b3:99:15:ce:be:7f:02:06:91:05:11:ca:69: 28:87:c7:7a:f4:51:89:5d:a0:6d:59:27:f8:7e:50:99:89:f9: 30:e0:53:9e:0f:21:da:75:98:02:25:bf:1b:e0:51:07:a6:be: 6e:d6:b5:95:77:da:35:57:77:5e:ad:8e:02:fb:f0:fd:05:0d: c0:8e:b9:ac:21:e3:a1:a7:f4:d2:9e:8c:60:b1:2e:a3:56:b0: cc:c5:f5:95:d5:09:98:53:ff:57:6c:83:85:61:75:6b:5c:26: 44:51:ae:b2:12:16:0d:15:d8:a4:57:44:57:8c:73:0e:64:3f: 23:d1:19:86:9a:d6:f8:27:c3:f2:29:5c:ec:aa:29:6a:9d:f5: f5:64:39:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbPZp2iDOWciZLoagAIhUNa7moH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVE Q0YwOEY1MjAeFw0yNDA1MTkwMDE2NTFaFw0yNDA1MjIwNDU1NTFaMDMxMTAvBgNV BAMTKENGN0Y3OUIxMzgwREQ1ODFDQzQwQjNEMDc5NUQ2NDFFMzY1OUVBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLdh7GK1oLJKuEpIv6NBw1VWUH 6W4aOGMKwRNlATS2nqklkdsQo4xvWAhynMbZmA8wURd0CK9Z0XVoRpPEl9I5Tqgv CWMoxnf+9tOlghu94pMqUzomdEQdIttZTAsUYyjJydrcHGhe+AngxJ8pLECF7un8 5OUQ63gtJJI0HQEdIzevS9SUTR+RPOU+U5DCvQpL2etbALHNrlHUTnyqcFOjlSOQ rtJOx9ldocUjUkOUWPp2ku0/gIEiZhFL6BCPmb+qrD8mz7pjpIchv1T+FUY6+wqg XRB/yFGgl6XiQ6vaIsg2ON0BRyD5mAn2yEEMpLTFSEbzXfgahvO/17nzWTCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz395sTgN1YHMQLPQeV1kHjZZ6rkwHwYDVR0j BBgwFoAU4XpeuUFW3iP83I8pshD83tzwj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTJhM2YyOC04MjczLTRkZDUtODdmYy0xZWYwMGFjYWM5YjYvMC9FMTdBNUVCOTQx NTZERTIzRkNEQzhGMjlCMjEwRkNERURDRjA4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZDREVEQ0Yw OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTEyYTNmMjgtODI3My00ZGQ1LTg3 ZmMtMWVmMDBhY2FjOWI2LzAvRTE3QTVFQjk0MTU2REUyM0ZDREM4RjI5QjIxMEZD REVEQ0YwOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj9f1dP4RmZmQBu4P25ZuiMxWIztq5ZDgWt 4W3FUtEDltPmw0EUdjWRGjWPLc4plBVjkEBsrGgag5QUIfDlkQPc33W8dar4RFJG dla07yPE3T80Tb8K4C07ODTU8so/w0QzeTpLItg4Cj5FrQarJbeus5kVzr5/AgaR BRHKaSiHx3r0UYldoG1ZJ/h+UJmJ+TDgU54PIdp1mAIlvxvgUQemvm7WtZV32jVX d16tjgL78P0FDcCOuawh46Gn9NKejGCxLqNWsMzF9ZXVCZhT/1dsg4VhdWtcJkRR rrISFg0V2KRXRFeMcw5kPyPRGYaa1vgnw/IpXOyqKWqd9fVkOb0= -----END CERTIFICATE-----Generated at Sun May 19 00:59:09 2024 by rpki-client on console-fra.rpki-client.org