$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft File: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft (raw, json) Hash identifier: C1ZUeuAWoEtdGYMCwgrT/dusIrsYmMtMoMl1mto5FsM= Subject key identifier: 04:EF:1B:5F:CC:24:B9:C6:02:16:D8:F3:8F:D0:A0:26:2D:5D:59:44 Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 Certificate issuer: /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Certificate serial: 23BEE3C72E39FFB370E683E9BA7EF1F989357D66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft Manifest number: 0125 Signing time: Sat 18 May 2024 02:11:51 +0000 Manifest this update: Sat 18 May 2024 02:06:51 +0000 Manifest next update: Tue 21 May 2024 06:05:51 +0000 Files and hashes: 1: 3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (hash: oJEFqaMFMo78kr1npS3ZjHZL2rtf/xk2Bseql9PkyRU=) 2: B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl (hash: 8oJGrwjE4RN4CHYhZ50aMZvQdMJycwI6VCfnZgh0mIA=) 3: 3130332e3138382e3235332e302f32342d3234203d3e20313439373337.roa (hash: YhTrW66adFthR0IefdRJ8E51+cDhVzxqdg4nPy2KBzw=) 4: 3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (hash: t8aG55RbMcqjxnaTHmZPqaZDl4lrVMlqNWSnzULjb0A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:be:e3:c7:2e:39:ff:b3:70:e6:83:e9:ba:7e:f1:f9:89:35:7d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2 Validity Not Before: May 18 02:06:51 2024 GMT Not After : May 21 06:05:51 2024 GMT Subject: CN=04EF1B5FCC24B9C60216D8F38FD0A0262D5D5944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:bf:e5:6c:42:52:3e:e1:e8:42:a3:05:57: ba:0e:ab:d3:73:b3:b5:63:ae:68:c1:5b:d3:ff:70: 55:d9:1c:90:a6:7a:49:a4:35:67:be:0b:6d:30:00: fa:dc:33:1c:14:60:99:dd:ea:b7:13:82:03:38:17: fd:45:bd:8d:5f:9d:d2:e9:2d:33:27:88:b0:98:9f: 12:84:90:34:76:ae:01:29:ed:99:72:8d:fa:37:07: f2:22:9e:be:47:43:82:d8:7b:5f:14:1a:28:79:36: f3:62:f7:25:13:64:06:31:72:3c:26:87:e0:ba:77: a3:fa:ab:66:56:ab:18:85:f2:ef:ee:2a:a8:55:03: 08:34:ce:27:87:ea:77:a1:19:7a:01:54:60:c4:bf: 10:97:ec:99:0a:6a:cc:77:27:37:dd:06:ba:a0:e6: f0:15:86:b8:c2:68:f6:6e:c6:57:4a:33:d2:2c:70: bf:42:7c:25:66:14:9d:ba:10:24:62:b3:e5:27:a9: 25:d5:6d:dc:6f:3d:3a:3a:ed:ab:8d:4d:10:1b:ed: 7e:12:f0:b5:00:b1:dd:95:b0:24:ac:3c:e0:6e:a8: 2a:12:01:57:35:97:28:79:24:45:8f:41:7f:64:2a: d5:37:d9:5f:f0:af:6e:4f:84:74:6b:1e:24:60:ad: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EF:1B:5F:CC:24:B9:C6:02:16:D8:F3:8F:D0:A0:26:2D:5D:59:44 X509v3 Authority Key Identifier: keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f2:ba:e6:b3:e7:dc:31:b7:d1:e6:73:39:06:48:c8:27:ef: ab:7c:2f:fd:ab:84:95:c7:de:28:18:3e:e6:53:98:67:c0:0c: 6d:f5:40:53:6c:3f:23:c7:e8:44:53:7d:eb:cf:a1:ac:86:e0: 8b:ff:f2:74:50:48:c4:c9:aa:f3:b1:47:3e:28:39:8a:fc:72: 68:bb:35:d9:05:8d:53:2d:ce:2f:85:71:82:d2:86:6b:85:3b: d2:bd:27:9e:73:8a:5f:95:c5:1e:26:5b:b5:5a:5a:50:17:e1: 5e:fb:bf:82:14:11:ff:33:b6:a4:48:35:0a:fa:1b:41:a9:4c: 51:62:76:98:5c:1f:70:7d:f5:b1:ec:af:c7:67:f4:4a:bb:35: 15:39:a3:9e:ef:69:cc:e6:3a:48:6b:d5:0c:45:20:c5:5d:e7: b9:90:36:10:51:36:a1:57:32:ab:ec:b0:8f:74:5e:f9:ce:16: 55:41:df:0d:2f:a5:4b:78:d4:36:77:0f:2a:68:2d:d8:8d:99: 11:8c:d5:69:88:76:77:40:8c:fd:0c:78:c3:ab:55:7e:fa:c7: a8:8d:73:a9:3a:10:76:22:49:4a:2f:9c:40:96:e0:39:8b:62: e9:4a:a7:2e:f2:87:86:e3:2f:73:0c:e4:eb:58:ba:ab:7a:67: dd:b1:ef:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI77jxy45/7Nw5oPpun7x+Yk1fWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5 ODI1NERCMjAeFw0yNDA1MTgwMjA2NTFaFw0yNDA1MjEwNjA1NTFaMDMxMTAvBgNV BAMTKDA0RUYxQjVGQ0MyNEI5QzYwMjE2RDhGMzhGRDBBMDI2MkQ1RDU5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXlb/lbEJSPuHoQqMFV7oOq9Nz s7VjrmjBW9P/cFXZHJCmekmkNWe+C20wAPrcMxwUYJnd6rcTggM4F/1FvY1fndLp LTMniLCYnxKEkDR2rgEp7Zlyjfo3B/Iinr5HQ4LYe18UGih5NvNi9yUTZAYxcjwm h+C6d6P6q2ZWqxiF8u/uKqhVAwg0zieH6nehGXoBVGDEvxCX7JkKasx3JzfdBrqg 5vAVhrjCaPZuxldKM9IscL9CfCVmFJ26ECRis+UnqSXVbdxvPTo67auNTRAb7X4S 8LUAsd2VsCSsPOBuqCoSAVc1lyh5JEWPQX9kKtU32V/wr25PhHRrHiRgrTfDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBO8bX8wkucYCFtjzj9CgJi1dWUQwHwYDVR0j BBgwFoAUtel7cfr6JP+PorGjNVjYCpglTbIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWVkMDk4Yi00OWIxLTRmNTMtYjc1YS0yNzNlMTFjMjUxNDkvMC9CNUU5N0I3MUZB RkEyNEZGOEZBMkIxQTMzNTU4RDgwQTk4MjU0REIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4MEE5ODI1 NERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFlZDA5OGItNDliMS00ZjUzLWI3 NWEtMjczZTExYzI1MTQ5LzAvQjVFOTdCNzFGQUZBMjRGRjhGQTJCMUEzMzU1OEQ4 MEE5ODI1NERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXyuuaz59wxt9HmczkGSMgn76t8L/2rhJXH 3igYPuZTmGfADG31QFNsPyPH6ERTfevPoayG4Iv/8nRQSMTJqvOxRz4oOYr8cmi7 NdkFjVMtzi+FcYLShmuFO9K9J55zil+VxR4mW7VaWlAX4V77v4IUEf8ztqRINQr6 G0GpTFFidphcH3B99bHsr8dn9Eq7NRU5o57vaczmOkhr1QxFIMVd57mQNhBRNqFX MqvssI90XvnOFlVB3w0vpUt41DZ3DypoLdiNmRGM1WmIdndAjP0MeMOrVX76x6iN c6k6EHYiSUovnECW4DmLYulKpy7yh4bjL3MM5OtYuqt6Z92x75o= -----END CERTIFICATE-----Generated at Sat May 18 04:02:39 2024 by rpki-client on console-ams.rpki-client.org