$ rpki-client -vvf repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft File: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft (raw, json) Hash identifier: V0UAaPG/7EW8bLKvJryNI5ElCQ7gZ3p0jXf1kdVM0ZQ= Subject key identifier: 57:5A:52:F7:49:13:91:86:6C:9C:39:D4:A5:B8:7E:15:C3:80:8F:22 Authority key identifier: 95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 Certificate issuer: /CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Certificate serial: 565F6A0FFF5DF09684BDE159CCECD747BDA775BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft Manifest number: 042E Signing time: Sat 18 May 2024 07:41:54 +0000 Manifest this update: Sat 18 May 2024 07:36:54 +0000 Manifest next update: Tue 21 May 2024 12:26:54 +0000 Files and hashes: 1: 323030313a6466333a623938303a3a2f34382d3438203d3e203137353338.roa (hash: TPb9sPuiNvRLuDGDwtPWdoqzKN3tFVPD5c0Ec8szSFw=) 2: 95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl (hash: FcJpjJat9A/3+XXOlzN8GTN25gj3qvvC7mYsWFSoMwo=) 3: 3130332e3135312e39392e302f32342d3234203d3e203137353338.roa (hash: dthX6KCsa5SBHytTXuYP8cR/gxsChjNKaGwIvw51LyY=) 4: 3130332e3135312e39382e302f32342d3234203d3e203137353338.roa (hash: /bHrMl0W07beZ0CaZOhv2DYItyxoNBXk7HdPKk6F5XE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 12:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5f:6a:0f:ff:5d:f0:96:84:bd:e1:59:cc:ec:d7:47:bd:a7:75:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95D9136845FAFA0795735D4A9B0FF9F746461AB3 Validity Not Before: May 18 07:36:54 2024 GMT Not After : May 21 12:26:54 2024 GMT Subject: CN=575A52F7491391866C9C39D4A5B87E15C3808F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:ad:bd:24:9c:3a:a0:35:4c:40:82:0c:83: c0:d6:40:bb:ec:42:a0:37:a8:a0:bf:5a:5c:ff:f7: e8:5e:54:04:5d:c6:5d:da:2d:48:23:7e:ef:ea:7f: 8a:67:94:45:ba:ba:d5:0c:1b:6c:f2:28:33:8d:10: fa:ec:c8:dc:93:b7:42:cc:f0:62:aa:f3:6e:4e:4f: a0:62:99:96:a2:f2:3d:c4:5b:c4:02:95:09:1f:aa: 9c:ef:65:31:9f:89:cd:b3:76:ec:ff:4c:f8:0f:39: a7:95:1e:cb:0e:77:92:d5:b7:42:fc:68:31:0c:f1: 0b:df:de:05:38:3f:90:6b:73:18:51:90:6e:32:10: bc:c3:c3:c2:d1:5f:47:73:33:fd:ad:fd:6e:52:a7: 1f:c0:7a:9c:e6:60:2f:05:51:31:ef:2b:13:65:01: 11:94:00:e9:90:57:2e:4e:29:b4:51:c6:0e:8e:78: d2:23:65:e3:e0:97:3e:5d:41:3d:d3:a5:a9:61:23: 2b:60:80:75:b7:b1:bb:a4:62:a1:c3:2d:b6:f8:2d: 9d:22:41:2d:00:33:66:44:f4:69:95:c9:16:90:63: bb:ee:a1:60:c4:c5:5a:9f:27:a4:0a:7f:57:01:ca: 2b:68:7d:d8:77:74:4a:f5:a3:5f:0b:2a:d3:6f:2d: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5A:52:F7:49:13:91:86:6C:9C:39:D4:A5:B8:7E:15:C3:80:8F:22 X509v3 Authority Key Identifier: keyid:95:D9:13:68:45:FA:FA:07:95:73:5D:4A:9B:0F:F9:F7:46:46:1A:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95D9136845FAFA0795735D4A9B0FF9F746461AB3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3785e65-51e2-4b1b-82f9-e753ad4b240f/0/95D9136845FAFA0795735D4A9B0FF9F746461AB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:19:d3:61:a6:cd:18:e8:76:99:fe:43:40:68:5d:e7:4b:a0: 07:05:3b:be:21:ca:e4:fe:ca:b5:4d:3a:5b:84:19:a3:1a:55: 95:60:45:35:b0:27:ce:54:30:a6:94:a8:90:16:7a:ad:03:40: ea:d4:eb:f3:62:06:bc:dd:24:34:65:34:66:03:7a:40:5f:b8: 71:27:59:21:81:cf:a5:a1:eb:f5:2f:9a:9c:9b:16:d2:44:39: 1d:eb:11:73:86:9f:f7:e7:19:1b:6b:e8:0a:15:90:16:92:c6: a0:99:45:b5:31:1a:ee:38:34:db:d8:be:3d:e7:db:48:01:0b: 21:8a:28:9a:54:a2:95:94:55:7b:7e:fd:f5:28:6d:dc:d6:6d: 8c:53:9e:a6:bf:9b:00:da:8d:51:2f:3c:d2:ec:c5:f4:d2:c2: 78:e2:55:a9:f2:a4:33:7d:e1:18:b9:47:c8:1e:8e:ba:c5:41: 23:14:36:58:2a:57:42:43:10:20:76:e4:a8:48:ba:6e:66:b9: c1:1e:ed:aa:83:03:bc:9e:e1:ea:e6:31:32:63:b6:63:c2:a4: 39:3b:7d:a3:43:a5:db:4f:78:05:56:6f:48:c8:d3:ac:14:ed: 41:72:c8:3a:73:f1:17:48:67:11:ca:9f:d2:f8:c4:51:63:3d: 23:61:ab:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVl9qD/9d8JaEveFZzOzXR72ndbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0 NjQ2MUFCMzAeFw0yNDA1MTgwNzM2NTRaFw0yNDA1MjExMjI2NTRaMDMxMTAvBgNV BAMTKDU3NUE1MkY3NDkxMzkxODY2QzlDMzlENEE1Qjg3RTE1QzM4MDhGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbq29JJw6oDVMQIIMg8DWQLvs QqA3qKC/Wlz/9+heVARdxl3aLUgjfu/qf4pnlEW6utUMG2zyKDONEPrsyNyTt0LM 8GKq825OT6BimZai8j3EW8QClQkfqpzvZTGfic2zduz/TPgPOaeVHssOd5LVt0L8 aDEM8Qvf3gU4P5BrcxhRkG4yELzDw8LRX0dzM/2t/W5Spx/AepzmYC8FUTHvKxNl ARGUAOmQVy5OKbRRxg6OeNIjZePglz5dQT3TpalhIytggHW3sbukYqHDLbb4LZ0i QS0AM2ZE9GmVyRaQY7vuoWDExVqfJ6QKf1cByitofdh3dEr1o18LKtNvLf8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV1pS90kTkYZsnDnUpbh+FcOAjyIwHwYDVR0j BBgwFoAUldkTaEX6+geVc11Kmw/590ZGGrMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc4NWU2NS01MWUyLTRiMWItODJmOS1lNzUzYWQ0YjI0MGYvMC85NUQ5MTM2ODQ1 RkFGQTA3OTU3MzVENEE5QjBGRjlGNzQ2NDYxQUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5Rjc0NjQ2 MUFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3ODVlNjUtNTFlMi00YjFiLTgy ZjktZTc1M2FkNGIyNDBmLzAvOTVEOTEzNjg0NUZBRkEwNzk1NzM1RDRBOUIwRkY5 Rjc0NjQ2MUFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0Z02GmzRjodpn+Q0BoXedLoAcFO74hyuT+ yrVNOluEGaMaVZVgRTWwJ85UMKaUqJAWeq0DQOrU6/NiBrzdJDRlNGYDekBfuHEn WSGBz6Wh6/UvmpybFtJEOR3rEXOGn/fnGRtr6AoVkBaSxqCZRbUxGu44NNvYvj3n 20gBCyGKKJpUopWUVXt+/fUobdzWbYxTnqa/mwDajVEvPNLsxfTSwnjiVanypDN9 4Ri5R8gejrrFQSMUNlgqV0JDECB25KhIum5mucEe7aqDA7ye4ermMTJjtmPCpDk7 faNDpdtPeAVWb0jI06wU7UFyyDpz8RdIZxHKn9L4xFFjPSNhq/U= -----END CERTIFICATE-----Generated at Sat May 18 08:05:07 2024 by rpki-client on console-fra.rpki-client.org