$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft File: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft (raw, json) Hash identifier: 6QyFvlp4e1DiMBswUDHNnhJ1PXUI3oKHog9mQUFCt/Q= Subject key identifier: 73:DA:84:FA:86:44:04:B5:A6:0E:0D:45:51:48:80:15:0F:56:F7:18 Authority key identifier: 5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D Certificate issuer: /CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Certificate serial: 4AA8175E290BFE70E6B12A53ED9C8A864B81FD05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft Manifest number: 34 Signing time: Sat 28 Sep 2024 01:01:07 +0000 Manifest this update: Sat 28 Sep 2024 00:56:07 +0000 Manifest next update: Tue 01 Oct 2024 02:29:07 +0000 Files and hashes: 1: 5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl (hash: D+NsV/S7+GnCfdGvD3oV27HacKDvNMn4rZKkIWPd9X0=) 2: 3136302e32322e362e302f32342d3234203d3e20313532373936.roa (hash: cfFwjwKwPSy9Kh5E8D6UCcsgslEuVvz1uyywz0zfoJw=) 3: 3136302e32322e372e302f32342d3234203d3e20313532373936.roa (hash: 4VRZi1K7JmUX+mY4PjGbZVJq7hsS2Sqman/3Bm5DdSM=) 4: 3136302e32322e362e302f32332d3233203d3e20313532373936.roa (hash: gSJ2Tpcz5FhfuBqS7hiPJe0IxJ/V2JVqcWy8oWyRZN0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Sep 2024 10:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a8:17:5e:29:0b:fe:70:e6:b1:2a:53:ed:9c:8a:86:4b:81:fd:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D Validity Not Before: Sep 28 00:56:07 2024 GMT Not After : Oct 1 02:29:07 2024 GMT Subject: CN=73DA84FA864404B5A60E0D45514880150F56F718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:63:09:e4:f7:20:fe:95:05:7f:eb:a1:87: 3e:78:8b:d1:00:7f:43:0c:c8:71:2f:0b:cf:f1:7b: 81:09:84:b0:d6:2f:4d:0e:1d:a0:05:49:eb:50:e4: 5f:c9:5f:4b:9e:02:0b:a1:06:08:32:99:65:65:10: 41:fc:2d:a7:b1:f5:f5:1c:9a:2b:c7:0b:40:12:36: b9:1f:24:b2:07:79:6a:ab:01:eb:bb:83:3c:2b:be: 3b:83:45:41:f5:7f:b0:11:6d:44:72:57:ba:ad:6f: c5:31:f5:d1:71:7b:ee:2b:b4:01:71:67:7f:9b:91: d9:d3:be:a4:28:29:ca:18:7f:d7:10:92:ea:9a:cf: 0b:a2:d2:71:78:5e:cf:bb:61:12:44:36:e0:66:4e: d2:a8:f9:91:3b:5d:03:51:c0:53:23:01:0b:9b:0e: 63:f6:e8:f8:b3:82:ec:5a:f2:2c:f7:df:d4:5b:86: 25:e9:b6:fb:bf:f4:66:ce:55:2b:28:c0:d6:51:bf: bc:b7:d1:f4:e4:88:fa:0e:91:dc:d6:1c:39:a0:56: e5:b1:f5:96:33:4b:31:2f:57:fc:ff:31:6c:eb:25: f7:cc:3c:20:fe:d7:4c:77:d2:c1:9a:64:46:8d:f1: 8f:b0:ff:7d:6b:9b:f6:60:dd:cd:8b:fe:89:fe:9a: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DA:84:FA:86:44:04:B5:A6:0E:0D:45:51:48:80:15:0F:56:F7:18 X509v3 Authority Key Identifier: keyid:5E:32:3F:9D:7D:A8:4D:85:6E:BA:48:C7:6E:9B:36:04:2F:0B:6D:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/0/5E323F9D7DA84D856EBA48C76E9B36042F0B6D7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e3:79:a4:34:52:78:b8:2a:f7:fa:83:e2:c9:cf:37:0b:79: c1:55:48:70:8e:70:b8:87:88:d6:60:14:2a:e2:1d:38:c3:cf: de:89:dd:ec:af:ca:97:ee:b1:28:79:46:ad:20:c0:a5:70:f2: 67:fd:4b:8e:bd:40:47:62:c9:c0:89:ce:1e:be:8e:cb:69:96: e9:c9:1a:12:fc:81:1a:b9:23:32:3d:d2:ec:e4:5e:0d:71:ba: 9e:0f:57:95:15:6f:cb:52:75:cf:e7:29:ba:1b:5a:15:e8:c2: d2:ea:90:fd:27:81:ab:29:e2:64:b4:37:c9:df:23:52:b3:b5: fd:d6:b9:29:7b:44:7f:03:70:e5:68:84:34:86:1e:59:91:7e: 33:8a:6f:87:52:e6:d6:71:31:66:a7:7d:65:c9:b1:15:9b:f2: 55:dd:5b:ce:90:cf:ea:48:11:25:86:11:52:82:3f:9e:d7:21: 3f:eb:0e:f0:ae:42:f5:3a:ef:12:17:d9:b3:f7:35:22:28:56: 1b:19:7b:39:3f:f7:bd:0d:3c:9c:13:94:2c:99:00:70:1d:fd: d8:e6:a0:a9:65:3b:86:a0:b9:a6:63:6b:a3:80:c9:1a:8e:e0: 86:29:ac:f9:c2:36:2d:24:e6:67:67:18:8e:f8:c1:68:58:57: 3f:6c:c9:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqgXXikL/nDmsSpT7ZyKhkuB/QUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQy RjBCNkQ3RDAeFw0yNDA5MjgwMDU2MDdaFw0yNDEwMDEwMjI5MDdaMDMxMTAvBgNV BAMTKDczREE4NEZBODY0NDA0QjVBNjBFMEQ0NTUxNDg4MDE1MEY1NkY3MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+X2MJ5Pcg/pUFf+uhhz54i9EA f0MMyHEvC8/xe4EJhLDWL00OHaAFSetQ5F/JX0ueAguhBggymWVlEEH8Laex9fUc mivHC0ASNrkfJLIHeWqrAeu7gzwrvjuDRUH1f7ARbURyV7qtb8Ux9dFxe+4rtAFx Z3+bkdnTvqQoKcoYf9cQkuqazwui0nF4Xs+7YRJENuBmTtKo+ZE7XQNRwFMjAQub DmP26Pizguxa8iz339RbhiXptvu/9GbOVSsowNZRv7y30fTkiPoOkdzWHDmgVuWx 9ZYzSzEvV/z/MWzrJffMPCD+10x30sGaZEaN8Y+w/31rm/Zg3c2L/on+mpMZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc9qE+oZEBLWmDg1FUUiAFQ9W9xgwHwYDVR0j BBgwFoAUXjI/nX2oTYVuukjHbps2BC8LbX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMC81RTMyM0Y5RDdE QTg0RDg1NkVCQTQ4Qzc2RTlCMzYwNDJGMEI2RDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2MDQyRjBC NkQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzAvNUUzMjNGOUQ3REE4NEQ4NTZFQkE0OEM3NkU5QjM2 MDQyRjBCNkQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPjeaQ0Uni4Kvf6g+LJzzcLecFVSHCOcLiH iNZgFCriHTjDz96J3eyvypfusSh5Rq0gwKVw8mf9S469QEdiycCJzh6+jstplunJ GhL8gRq5IzI90uzkXg1xup4PV5UVb8tSdc/nKbobWhXowtLqkP0ngasp4mS0N8nf I1Kztf3WuSl7RH8DcOVohDSGHlmRfjOKb4dS5tZxMWanfWXJsRWb8lXdW86Qz+pI ESWGEVKCP57XIT/rDvCuQvU67xIX2bP3NSIoVhsZezk/970NPJwTlCyZAHAd/djm oKllO4aguaZja6OAyRqO4IYprPnCNi0k5mdnGI74wWhYVz9syVY= -----END CERTIFICATE-----Generated at Sat Sep 28 02:14:23 2024 by rpki-client on console-fra.rpki-client.org