$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: fUO7nTwvsY8dE4xwfjaF57+GEuWV534YobJKF9NvRws= Subject key identifier: 5A:23:36:7E:FC:5C:5C:25:23:7D:51:0C:6B:DF:6F:E3:FF:74:28:ED Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 5FAD4A401E94E801D1F1CD27F294A50FE9D9F210 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: D5 Signing time: Mon 27 May 2024 17:00:40 +0000 Manifest this update: Mon 27 May 2024 16:55:40 +0000 Manifest next update: Thu 30 May 2024 17:36:40 +0000 Files and hashes: 1: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: QbBhr3fpVeYwwsCJo0qbTSaFzgzIPoi9uPj2EGX0yQE=) 2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 2kAwuTxDjWCw6sX6vuX7ESl/s76ZlSIQ2pRBpS6CjuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 17:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ad:4a:40:1e:94:e8:01:d1:f1:cd:27:f2:94:a5:0f:e9:d9:f2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: May 27 16:55:40 2024 GMT Not After : May 30 17:36:40 2024 GMT Subject: CN=5A23367EFC5C5C25237D510C6BDF6FE3FF7428ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:98:1a:2e:6d:97:5b:dc:1a:8d:f7:10:92: 7f:a7:91:9b:72:e5:e2:3d:1d:13:6a:07:24:4f:6f: e9:30:ee:2f:0a:6a:37:85:fe:be:f6:41:67:b0:76: d6:0c:a0:40:ec:b4:30:ec:a0:bb:d6:e0:39:73:0b: a8:d8:76:d7:a2:3d:22:2f:1e:33:1b:ae:67:aa:ca: 68:7e:b2:09:8b:28:07:31:73:25:6c:5a:1c:0f:7a: e0:e1:3f:ce:4f:ea:c2:7c:cb:4f:cd:7a:1f:e0:8f: 3c:e5:9a:86:7f:f5:f6:62:32:06:0a:7f:44:d6:43: b1:a7:eb:9b:85:52:83:c6:e4:c3:5b:0d:91:25:3a: 88:3c:aa:15:79:4b:86:33:51:97:da:b6:90:5e:89: b7:4e:1a:7d:12:07:ee:8f:f8:01:64:96:47:bc:c9: f6:f5:9d:f6:1a:f0:ba:bc:28:f6:3c:da:7d:b8:d2: e6:bf:ca:46:cb:df:85:d1:b0:e4:43:1d:1f:d4:15: fd:99:0f:f7:5b:4c:25:aa:dd:f6:76:a3:03:6b:12: a2:12:f6:25:3f:ce:04:3b:ef:10:21:26:9f:f8:e0: c9:28:c3:bc:17:72:ce:52:48:8d:89:93:14:eb:18: fc:58:f6:d0:d7:3e:72:fc:c8:db:65:b9:d6:63:5d: 43:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:23:36:7E:FC:5C:5C:25:23:7D:51:0C:6B:DF:6F:E3:FF:74:28:ED X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d2:1c:11:bb:b5:e2:e1:6f:b6:77:c1:7a:67:df:12:6e:62: 1d:30:8e:8d:45:4f:eb:5b:fc:7e:dc:18:cc:97:c4:ac:d4:aa: 73:26:40:99:79:97:45:93:20:e2:05:a5:7b:9f:c0:92:a2:d4: fe:e0:57:b8:b5:79:b4:b3:d8:c6:e9:65:79:85:21:4f:55:a9: fc:f4:bb:b7:4b:45:cb:7b:aa:10:c7:eb:90:49:e7:e7:2d:17: 90:0f:d8:e7:b8:e9:78:03:f9:67:42:26:f4:42:e1:e6:99:ed: ed:3f:74:b9:76:63:35:95:36:5c:c2:a3:c5:ea:d7:c1:db:c8: 6f:2b:18:99:0a:b8:9f:30:bf:b4:1b:30:fc:3d:c0:91:d8:40: 56:96:f5:82:e6:8f:98:6c:a8:17:d5:7e:39:e4:0d:a6:02:3a: 25:1f:87:c7:ea:e1:ea:ed:a8:64:93:73:8b:8f:65:d0:f3:05: 58:54:26:fc:61:83:54:c8:8a:8e:e2:11:03:91:f3:a1:72:d1: 97:75:ed:23:0c:49:63:a3:bf:1b:ff:74:4b:bf:e1:93:31:df: 34:9c:42:e3:ba:91:9d:80:fc:c9:35:a7:f8:43:8b:c8:d9:68: 59:4b:24:f2:d6:7e:f0:54:37:9a:70:68:8f:24:9d:fd:cb:95: e1:6d:c9:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX61KQB6U6AHR8c0n8pSlD+nZ8hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNDA1MjcxNjU1NDBaFw0yNDA1MzAxNzM2NDBaMDMxMTAvBgNV BAMTKDVBMjMzNjdFRkM1QzVDMjUyMzdENTEwQzZCREY2RkUzRkY3NDI4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4e5gaLm2XW9wajfcQkn+nkZty 5eI9HRNqByRPb+kw7i8KajeF/r72QWewdtYMoEDstDDsoLvW4DlzC6jYdteiPSIv HjMbrmeqymh+sgmLKAcxcyVsWhwPeuDhP85P6sJ8y0/Neh/gjzzlmoZ/9fZiMgYK f0TWQ7Gn65uFUoPG5MNbDZElOog8qhV5S4YzUZfatpBeibdOGn0SB+6P+AFklke8 yfb1nfYa8Lq8KPY82n240ua/ykbL34XRsORDHR/UFf2ZD/dbTCWq3fZ2owNrEqIS 9iU/zgQ77xAhJp/44Mkow7wXcs5SSI2JkxTrGPxY9tDXPnL8yNtludZjXUPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWiM2fvxcXCUjfVEMa99v4/90KO0wHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDSHBG7teLhb7Z3wXpn3xJuYh0wjo1FT+tb /H7cGMyXxKzUqnMmQJl5l0WTIOIFpXufwJKi1P7gV7i1ebSz2MbpZXmFIU9Vqfz0 u7dLRct7qhDH65BJ5+ctF5AP2Oe46XgD+WdCJvRC4eaZ7e0/dLl2YzWVNlzCo8Xq 18HbyG8rGJkKuJ8wv7QbMPw9wJHYQFaW9YLmj5hsqBfVfjnkDaYCOiUfh8fq4ert qGSTc4uPZdDzBVhUJvxhg1TIio7iEQOR86Fy0Zd17SMMSWOjvxv/dEu/4ZMx3zSc QuO6kZ2A/Mk1p/hDi8jZaFlLJPLWfvBUN5pwaI8knf3LleFtyRg= -----END CERTIFICATE-----Generated at Mon May 27 19:01:05 2024 by rpki-client on console-ams.rpki-client.org