$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: jSd+q+FuLT2LJNj5viETt77Iz8WLTzfvwYWjoK+T/FI= Subject key identifier: 04:E6:D3:1E:5F:0E:27:9F:40:DD:54:EF:23:52:B0:6F:FB:B8:E2:3C Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 09AF73F09FD84496DFD5AA2546AA8AD65405E090 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 47 Signing time: Sat 18 May 2024 03:20:00 +0000 Manifest this update: Sat 18 May 2024 03:15:00 +0000 Manifest next update: Tue 21 May 2024 07:12:00 +0000 Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: KkHrN0r4DkG0hfOHVIJoIinDb4jXbRRRNcpoqkH/d0s=) 2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: qDk1BoDy5dd0XFe5dQa48RlhJE7gApAHEa+WgGksrEs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:af:73:f0:9f:d8:44:96:df:d5:aa:25:46:aa:8a:d6:54:05:e0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: May 18 03:15:00 2024 GMT Not After : May 21 07:12:00 2024 GMT Subject: CN=04E6D31E5F0E279F40DD54EF2352B06FFBB8E23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:c5:89:96:15:e4:67:5c:99:08:9e:94:0b: 21:42:c7:68:44:a9:07:c0:7b:de:81:a6:ef:f9:c2: a6:e7:f7:05:85:ca:69:46:8f:87:12:db:50:f8:af: 3a:e3:f5:24:02:c6:1b:3d:98:71:60:a2:32:37:a6: 56:76:ac:ff:bc:fb:2e:4e:91:5b:de:aa:4f:d6:3c: 04:70:99:6d:ea:0d:a4:79:be:b1:a1:e5:80:4f:8c: 8f:75:49:1f:48:d4:22:01:2d:d9:3a:dd:11:fc:1e: 9d:b2:1c:e9:3e:18:c8:f5:a5:12:e9:21:00:db:35: 57:9a:87:7c:8e:c2:a7:1b:11:48:58:47:6c:49:92: 2d:f2:c2:bb:52:0b:c0:cc:cf:f0:ff:ec:95:e5:bf: cf:20:3e:db:8e:95:e4:cc:58:c8:13:40:f6:ad:be: 6e:a5:87:b7:4f:78:de:23:38:c0:70:ea:25:23:bb: 93:80:1e:6a:e1:3a:f7:76:0c:41:05:0f:5b:0d:10: 91:87:05:58:dd:34:72:1e:ae:c8:f1:b0:d0:bb:d7: 68:f7:db:55:d3:8d:27:01:82:3f:29:ad:2c:19:3e: 2a:cb:5b:22:1a:aa:b2:ad:70:c7:95:84:bf:ab:84: c8:2a:11:2e:38:9c:01:d6:fc:fd:1b:45:39:9f:e2: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E6:D3:1E:5F:0E:27:9F:40:DD:54:EF:23:52:B0:6F:FB:B8:E2:3C X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b2:04:61:b5:23:d2:80:15:76:09:24:8f:2d:45:ec:d5:30: be:1e:82:07:07:07:c3:77:47:cc:3b:b7:f9:09:45:62:29:48: df:13:db:e8:e0:49:aa:80:81:64:60:3a:1a:fd:79:b0:bb:62: af:fd:64:f9:3d:b8:26:94:e9:0e:7a:72:7d:b0:dc:ef:fb:cf: c1:97:53:65:62:7f:f9:22:d0:0b:6d:48:27:15:7b:72:78:48: f9:a7:bd:d0:5b:c1:ec:e2:1b:4e:c0:06:24:75:75:b1:2e:2e: 6a:ad:88:55:11:97:d5:9b:3e:c1:89:c4:45:f6:56:7d:b3:b4: 50:3c:0b:cf:a6:5f:8a:02:5a:3b:a1:f7:ce:8e:8f:52:9e:11: 07:9b:b9:2b:6d:08:e7:b2:9d:d3:a5:7e:87:27:99:f5:50:5d: ae:6e:d9:b0:5a:c7:f7:1e:61:23:30:fa:2f:2c:dd:14:3c:f7: 3d:3f:c0:ff:f7:59:c0:51:28:de:04:9c:59:a7:19:4c:b6:b8: 3a:25:46:67:97:08:e3:a0:a9:18:d6:1e:67:ea:12:36:0e:aa: 74:7d:84:43:6b:e2:24:23:bc:22:5b:8d:bd:9a:b3:a5:65:98: c1:94:b0:2e:07:e8:16:69:f9:a1:79:80:e1:60:2a:9d:09:ed: 6c:6f:c3:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCa9z8J/YRJbf1aolRqqK1lQF4JAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNDA1MTgwMzE1MDBaFw0yNDA1MjEwNzEyMDBaMDMxMTAvBgNV BAMTKDA0RTZEMzFFNUYwRTI3OUY0MERENTRFRjIzNTJCMDZGRkJCOEUyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3O8WJlhXkZ1yZCJ6UCyFCx2hE qQfAe96Bpu/5wqbn9wWFymlGj4cS21D4rzrj9SQCxhs9mHFgojI3plZ2rP+8+y5O kVveqk/WPARwmW3qDaR5vrGh5YBPjI91SR9I1CIBLdk63RH8Hp2yHOk+GMj1pRLp IQDbNVeah3yOwqcbEUhYR2xJki3ywrtSC8DMz/D/7JXlv88gPtuOleTMWMgTQPat vm6lh7dPeN4jOMBw6iUju5OAHmrhOvd2DEEFD1sNEJGHBVjdNHIersjxsNC712j3 21XTjScBgj8prSwZPirLWyIaqrKtcMeVhL+rhMgqES44nAHW/P0bRTmf4qKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBObTHl8OJ59A3VTvI1Kwb/u44jwwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuyBGG1I9KAFXYJJI8tRezVML4eggcHB8N3 R8w7t/kJRWIpSN8T2+jgSaqAgWRgOhr9ebC7Yq/9ZPk9uCaU6Q56cn2w3O/7z8GX U2Vif/ki0AttSCcVe3J4SPmnvdBbweziG07ABiR1dbEuLmqtiFURl9WbPsGJxEX2 Vn2ztFA8C8+mX4oCWjuh986Oj1KeEQebuSttCOeyndOlfocnmfVQXa5u2bBax/ce YSMw+i8s3RQ89z0/wP/3WcBRKN4EnFmnGUy2uDolRmeXCOOgqRjWHmfqEjYOqnR9 hENr4iQjvCJbjb2as6VlmMGUsC4H6BZp+aF5gOFgKp0J7Wxvw3Q= -----END CERTIFICATE-----Generated at Sat May 18 04:39:31 2024 by rpki-client on console-fra.rpki-client.org