$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: il9C1rXgl/mCKVESadwvgxg05QHp5sPJ556x1C574bI= Subject key identifier: 5E:82:2C:1E:6A:17:63:AB:24:56:23:26:5B:A7:17:F7:3D:B3:E6:B0 Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 6493D31F83BC378CBF2F5A61FC630D738E3E9BC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: 34 Signing time: Thu 26 Sep 2024 09:40:38 +0000 Manifest this update: Thu 26 Sep 2024 09:35:38 +0000 Manifest next update: Sun 29 Sep 2024 15:44:38 +0000 Files and hashes: 1: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: 07PJ0373gHmsJSP7bdaxkwGkQpeo8f9BJOxD0YWQ4qQ=) 2: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: 3IVBZ81optLMyCyyNrJTQnl9+XAz6LBlvMjbkcO9PFg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Sep 2024 12:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:93:d3:1f:83:bc:37:8c:bf:2f:5a:61:fc:63:0d:73:8e:3e:9b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Sep 26 09:35:38 2024 GMT Not After : Sep 29 15:44:38 2024 GMT Subject: CN=5E822C1E6A1763AB245623265BA717F73DB3E6B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5c:37:06:cf:a3:1e:70:bd:91:94:4f:41:97: 06:c9:74:87:23:ea:4e:7d:81:00:60:5a:11:16:2c: c1:ef:16:34:d9:e9:c5:81:2e:23:d1:c4:d3:d9:c6: c6:f0:45:2b:d3:d0:8a:97:88:6d:67:5b:cc:e0:ea: 77:38:77:d2:5f:8b:03:f9:cb:2d:54:35:9b:72:6b: e7:44:70:94:05:4f:7b:f8:f9:76:fb:0e:01:71:f6: 76:c6:38:43:d4:a9:26:fd:6a:20:fe:ea:95:0a:7d: 1e:1b:da:e4:02:fa:e9:e7:3a:cb:a5:cd:07:ab:2d: 90:07:7f:b3:9a:80:55:ae:49:87:69:56:dd:36:5b: cb:95:f8:b5:21:fa:1e:de:8b:f3:d7:86:32:79:58: ef:b3:6f:3e:fc:ee:26:bf:98:0a:1c:65:d8:e7:85: 2f:5f:a8:e8:44:3d:e8:b3:2f:4a:05:98:3e:cc:aa: 1d:68:70:e1:20:73:d3:44:21:7f:2a:c6:e1:53:50: 99:fa:c6:66:61:b7:d5:2a:bc:f7:ea:d0:ad:96:f1: 70:1f:9b:6f:7c:19:3b:22:a1:86:99:34:1a:ee:ae: b6:6d:e5:e1:cd:6a:bf:66:80:f1:a4:f9:65:60:27: 2e:77:b0:0b:e4:44:a1:53:a1:61:b7:d6:bb:aa:f4: 94:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:82:2C:1E:6A:17:63:AB:24:56:23:26:5B:A7:17:F7:3D:B3:E6:B0 X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8e:b3:2b:d8:90:e0:7f:b0:8c:be:22:4f:7b:d2:40:1c:06: fa:06:c1:bf:03:23:c2:15:70:bb:99:2b:47:ee:a7:b7:35:86: 7f:bb:e9:cc:11:6a:a3:8c:7c:2b:64:ef:b1:3f:1d:5e:0e:16: 44:47:8e:fc:d3:e7:f6:8b:17:9a:91:3c:6d:82:a6:1d:7c:16: 87:ca:1f:78:3a:a1:c1:e4:da:f5:0b:a2:0e:ac:e4:13:3e:36: 3e:39:14:a8:62:65:79:05:19:ea:5d:63:cc:53:2b:80:a1:15: 02:58:a9:21:de:20:76:fb:ad:6c:5c:fb:bb:e1:70:1a:76:fe: 79:66:fe:f5:b6:1f:11:5d:3b:bb:46:ae:99:0c:87:4d:d9:af: 24:03:3a:fa:51:2f:ee:9c:5d:fd:a4:7d:34:2f:9e:d8:36:dc: 1e:ac:db:3f:2c:2b:39:86:2b:5b:12:61:f3:36:f1:37:2a:e4: 2e:78:15:f0:f4:ca:a9:79:40:56:65:79:b4:97:b7:55:60:7e: 8a:64:76:3a:94:d7:25:79:2b:d0:a5:fc:6f:88:ca:6a:e5:9f: e5:31:8c:55:c7:17:13:23:08:5b:78:5d:34:87:e9:7c:4e:95: bc:cd:3e:d2:6d:f5:b8:29:60:8e:23:b9:94:87:55:5e:c1:9b: 90:c2:13:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZJPTH4O8N4y/L1ph/GMNc44+m8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNDA5MjYwOTM1MzhaFw0yNDA5MjkxNTQ0MzhaMDMxMTAvBgNV BAMTKDVFODIyQzFFNkExNzYzQUIyNDU2MjMyNjVCQTcxN0Y3M0RCM0U2QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZXDcGz6MecL2RlE9BlwbJdIcj 6k59gQBgWhEWLMHvFjTZ6cWBLiPRxNPZxsbwRSvT0IqXiG1nW8zg6nc4d9JfiwP5 yy1UNZtya+dEcJQFT3v4+Xb7DgFx9nbGOEPUqSb9aiD+6pUKfR4b2uQC+unnOsul zQerLZAHf7OagFWuSYdpVt02W8uV+LUh+h7ei/PXhjJ5WO+zbz787ia/mAocZdjn hS9fqOhEPeizL0oFmD7Mqh1ocOEgc9NEIX8qxuFTUJn6xmZht9UqvPfq0K2W8XAf m298GTsioYaZNBrurrZt5eHNar9mgPGk+WVgJy53sAvkRKFToWG31ruq9JSNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXoIsHmoXY6skViMmW6cX9z2z5rAwHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaOsyvYkOB/sIy+Ik970kAcBvoGwb8DI8IV cLuZK0fup7c1hn+76cwRaqOMfCtk77E/HV4OFkRHjvzT5/aLF5qRPG2Cph18FofK H3g6ocHk2vULog6s5BM+Nj45FKhiZXkFGepdY8xTK4ChFQJYqSHeIHb7rWxc+7vh cBp2/nlm/vW2HxFdO7tGrpkMh03ZryQDOvpRL+6cXf2kfTQvntg23B6s2z8sKzmG K1sSYfM28Tcq5C54FfD0yql5QFZlebSXt1VgfopkdjqU1yV5K9Cl/G+Iymrln+Ux jFXHFxMjCFt4XTSH6XxOlbzNPtJt9bgpYI4juZSHVV7Bm5DCE4M= -----END CERTIFICATE-----Generated at Thu Sep 26 11:33:58 2024 by rpki-client on console-fra.rpki-client.org