$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: CTMN7gNel2LuwvucdglhSVlF+JfqARIKHsDW5AIqNas= Subject key identifier: 27:00:84:79:E2:0B:0C:A6:09:05:11:06:00:6B:6C:11:25:5E:AE:37 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 60587315A90818DAB15D011FEF8330E2D520E5CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 015B Signing time: Sat 18 May 2024 14:12:02 +0000 Manifest this update: Sat 18 May 2024 14:07:02 +0000 Manifest next update: Tue 21 May 2024 23:54:02 +0000 Files and hashes: 1: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: qbNLESGXsBmuIIawyviViY2mKnjUHvXQ336xBjUiqGk=) 2: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: uQ3spNQYgvGMDWx9/tmfzo1xX7dsmRx+9WgCT+5X/A4=) 3: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 6JYFCZLJ6iDECMfVgywsRHnbdYELpx7bahvntytR+W8=) 4: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: DyXpABTcR6ftxeuG5nYBymh2ADbl6y3AQYTkphqzjyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:58:73:15:a9:08:18:da:b1:5d:01:1f:ef:83:30:e2:d5:20:e5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: May 18 14:07:02 2024 GMT Not After : May 21 23:54:02 2024 GMT Subject: CN=27008479E20B0CA609051106006B6C11255EAE37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:25:54:ac:21:cc:ee:6f:3a:07:fa:f0:d1: af:3d:93:63:21:60:2d:45:0e:ef:14:da:ce:5f:2d: 18:c5:e6:56:09:c1:35:72:41:40:2d:03:32:4c:54: ef:f2:ac:ff:23:23:e9:e5:ed:11:a5:e8:11:d8:61: 30:5b:77:64:cb:e5:c3:9f:ed:65:f9:b7:0b:dd:f4: 9e:27:f2:21:7a:61:83:3e:4b:4d:8e:5a:4a:bd:51: a3:c9:00:63:bf:96:f4:07:82:86:66:c0:03:31:c0: e9:78:34:37:23:dc:29:38:2f:5b:15:c6:22:80:5c: 79:00:76:c2:a7:ba:db:e0:ec:84:2a:c4:50:3f:f9: 11:f6:10:de:25:3c:69:a8:9f:64:ac:ba:ff:fb:8d: db:1e:79:25:45:c2:6a:da:da:86:b3:d1:ff:04:40: c1:13:20:7a:ab:d4:da:3f:c5:f7:ae:6b:bc:bf:d6: 04:55:73:78:47:75:90:41:28:19:6e:57:63:6c:92: 6a:86:2f:76:53:8a:50:d2:31:f1:e7:f2:b5:b4:89: 53:37:25:cf:2e:e6:9d:0d:c3:49:08:01:55:77:e7: 98:f9:0c:3b:74:c4:92:17:39:93:dc:f5:e2:d3:8f: ce:cb:69:56:47:91:1d:32:44:bd:45:55:fa:bf:6a: d8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:00:84:79:E2:0B:0C:A6:09:05:11:06:00:6B:6C:11:25:5E:AE:37 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c2:a3:ae:b2:9e:25:87:62:60:b9:0c:29:ce:ac:f2:94:ab: 07:3b:72:64:ea:83:86:d3:42:3a:19:27:85:78:53:14:e7:02: 75:12:52:ba:2c:30:45:20:3c:fd:dc:17:e7:9c:d0:d6:d4:63: cd:af:ba:85:3f:f2:09:f6:d9:df:e4:9d:02:9a:72:3f:a3:f7: 7c:40:1f:fe:3c:4e:94:9b:5d:15:ad:13:dd:32:3d:d0:d0:f7: 05:6a:f6:e0:af:34:2a:bd:62:99:e8:75:42:95:05:af:50:85: bc:04:c6:1c:60:ba:f3:c5:62:a9:0b:ff:0e:82:31:23:96:20: 9c:7a:c3:1b:2c:25:ed:c0:61:5d:05:c2:fd:99:7c:2e:f0:50: 1b:33:51:24:a1:79:4e:8a:0b:ab:26:27:dd:10:56:9b:87:69: 0e:d0:1d:95:2f:79:d7:a0:f0:76:b9:b0:c3:0f:0b:e8:d7:03: e1:06:12:c2:e2:69:d1:b1:75:06:b8:26:3d:86:b1:b9:55:78: ce:1a:d3:85:d2:36:ac:fa:ab:ba:ca:d4:ea:9d:68:22:e0:8c: ab:11:38:e6:d1:ee:e6:cf:55:59:6b:d4:b2:94:de:be:4d:cd: 1e:f8:ce:52:ac:41:cd:9d:5a:ef:3d:8f:60:a5:88:8f:09:1a: b8:f1:9a:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFhzFakIGNqxXQEf74Mw4tUg5c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNDA1MTgxNDA3MDJaFw0yNDA1MjEyMzU0MDJaMDMxMTAvBgNV BAMTKDI3MDA4NDc5RTIwQjBDQTYwOTA1MTEwNjAwNkI2QzExMjU1RUFFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNNiVUrCHM7m86B/rw0a89k2Mh YC1FDu8U2s5fLRjF5lYJwTVyQUAtAzJMVO/yrP8jI+nl7RGl6BHYYTBbd2TL5cOf 7WX5twvd9J4n8iF6YYM+S02OWkq9UaPJAGO/lvQHgoZmwAMxwOl4NDcj3Ck4L1sV xiKAXHkAdsKnutvg7IQqxFA/+RH2EN4lPGmon2Ssuv/7jdseeSVFwmra2oaz0f8E QMETIHqr1No/xfeua7y/1gRVc3hHdZBBKBluV2NskmqGL3ZTilDSMfHn8rW0iVM3 Jc8u5p0Nw0kIAVV355j5DDt0xJIXOZPc9eLTj87LaVZHkR0yRL1FVfq/atiZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJwCEeeILDKYJBREGAGtsESVerjcwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzCo66yniWHYmC5DCnOrPKUqwc7cmTqg4bT QjoZJ4V4UxTnAnUSUrosMEUgPP3cF+ec0NbUY82vuoU/8gn22d/knQKacj+j93xA H/48TpSbXRWtE90yPdDQ9wVq9uCvNCq9YpnodUKVBa9QhbwExhxguvPFYqkL/w6C MSOWIJx6wxssJe3AYV0Fwv2ZfC7wUBszUSSheU6KC6smJ90QVpuHaQ7QHZUvedeg 8Ha5sMMPC+jXA+EGEsLiadGxdQa4Jj2GsblVeM4a04XSNqz6q7rK1OqdaCLgjKsR OObR7ubPVVlr1LKU3r5NzR74zlKsQc2dWu89j2CliI8JGrjxmqM= -----END CERTIFICATE-----Generated at Sat May 18 15:57:29 2024 by rpki-client on console-ams.rpki-client.org