$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: OCegStbXtgnel1an/2P7a9I8nq7cCXvNvY5sVjAiujU= Subject key identifier: 70:9F:5F:A3:56:71:E0:F1:CF:16:47:48:B5:9B:B2:CF:FA:26:E3:A3 Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 0632395496B6085553DC8BBE1613A70619B06EF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 0157 Signing time: Wed 29 May 2024 04:01:16 +0000 Manifest this update: Wed 29 May 2024 03:56:16 +0000 Manifest next update: Sat 01 Jun 2024 15:13:16 +0000 Files and hashes: 1: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: ZGjjFyt0GzxEcJzOZrG3gFU//79+XUk9L4Ck7Ntxpv4=) 2: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: IJ5NWLmOqxYjQ30gBO4gJ/gPUq053shI211A95GivQE=) 3: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: GXXC5Ffnn0Ug8Hyod+2iSu7waBOy5QymAc3hnetRIz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:32:39:54:96:b6:08:55:53:dc:8b:be:16:13:a7:06:19:b0:6e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: May 29 03:56:16 2024 GMT Not After : Jun 1 15:13:16 2024 GMT Subject: CN=709F5FA35671E0F1CF164748B59BB2CFFA26E3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:32:51:d6:9b:b0:09:1d:fd:ae:34:eb:3b: 5c:57:8b:4f:91:82:26:d5:62:10:5d:3f:b1:80:35: 7f:a9:93:54:85:3b:b3:f4:9b:93:6c:8c:70:b6:52: 61:7c:ba:ad:e3:c2:b2:d1:65:1b:a8:07:93:15:1f: bd:4a:39:74:cd:32:46:cb:4e:8a:b0:c7:e1:aa:c6: 98:68:4f:7f:b3:6e:79:48:07:8d:04:30:8b:10:91: 2d:63:cb:65:ac:d4:e9:b0:3b:b0:cd:4a:66:d6:aa: 20:9c:58:4b:73:a5:26:0f:b9:db:f4:56:cb:f6:49: 42:b2:86:b0:8e:88:90:26:a5:14:7d:18:9b:ab:24: f0:d1:e4:ba:3e:03:63:8f:4d:e1:53:47:01:c4:34: 14:0d:76:ab:43:11:f4:1e:3c:40:59:ee:0d:c5:de: de:22:27:7f:b9:0a:48:76:3c:c9:09:af:4a:39:5d: 71:34:b6:ea:fd:53:07:7b:55:39:ff:b0:e0:be:bf: cc:4a:7b:96:d0:39:8f:a2:f6:b9:cd:92:93:f5:6b: 6f:eb:dd:8e:cd:c4:05:a7:47:5a:f3:37:59:4c:48: 76:eb:49:df:f4:67:02:e9:6e:d1:64:7f:10:14:c3: 3c:07:c2:e3:3c:74:d2:45:27:4b:1b:18:c7:4c:d9: 19:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9F:5F:A3:56:71:E0:F1:CF:16:47:48:B5:9B:B2:CF:FA:26:E3:A3 X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:06:ab:41:c8:90:3a:f1:29:8c:31:b1:04:fd:9c:81:10:6e: b8:4a:7f:35:18:e7:8d:08:e8:02:f5:74:c0:dc:45:0f:da:f3: 70:0c:c7:55:89:53:06:23:4b:8b:05:5c:bf:a7:25:da:e0:96: 65:fb:23:fe:18:e6:5f:53:3a:39:f7:35:18:5f:a1:d7:91:c8: de:e4:95:8f:d3:74:ff:74:37:57:03:12:43:72:78:5e:78:ba: ce:7b:8d:ba:3f:bd:1d:72:a2:e6:68:cb:6b:f5:9a:9f:e8:9b: 27:21:ef:ab:5f:d9:f4:db:f0:4b:c9:a4:c0:c8:89:7d:f2:cb: 49:68:65:07:40:4b:dc:3b:b1:57:88:b4:e0:ed:3a:34:bc:df: 0f:2c:cd:26:2e:98:09:ee:58:3a:d5:9b:33:60:31:8f:cb:f5: 80:b6:be:d4:99:a5:75:b8:10:18:b4:71:77:40:5c:ea:03:33: 91:3b:8f:1f:cd:94:15:8e:ac:9a:a8:0e:d7:c1:f8:7a:b3:e3: 3d:f1:60:ab:65:c7:b8:c7:eb:c6:a5:52:2f:83:66:71:c9:36: 9a:25:80:b0:62:0f:0b:ff:97:79:79:c0:82:3c:63:a0:32:f9: e2:ef:be:55:22:86:a7:bf:4b:fb:24:a0:2e:5b:52:e0:24:62: e5:05:4f:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBjI5VJa2CFVT3Iu+FhOnBhmwbvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNDA1MjkwMzU2MTZaFw0yNDA2MDExNTEzMTZaMDMxMTAvBgNV BAMTKDcwOUY1RkEzNTY3MUUwRjFDRjE2NDc0OEI1OUJCMkNGRkEyNkUzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMjJR1puwCR39rjTrO1xXi0+R gibVYhBdP7GANX+pk1SFO7P0m5NsjHC2UmF8uq3jwrLRZRuoB5MVH71KOXTNMkbL Toqwx+GqxphoT3+zbnlIB40EMIsQkS1jy2Ws1OmwO7DNSmbWqiCcWEtzpSYPudv0 Vsv2SUKyhrCOiJAmpRR9GJurJPDR5Lo+A2OPTeFTRwHENBQNdqtDEfQePEBZ7g3F 3t4iJ3+5Ckh2PMkJr0o5XXE0tur9Uwd7VTn/sOC+v8xKe5bQOY+i9rnNkpP1a2/r 3Y7NxAWnR1rzN1lMSHbrSd/0ZwLpbtFkfxAUwzwHwuM8dNJFJ0sbGMdM2Rm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcJ9fo1Zx4PHPFkdItZuyz/om46MwHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4Gq0HIkDrxKYwxsQT9nIEQbrhKfzUY540I 6AL1dMDcRQ/a83AMx1WJUwYjS4sFXL+nJdrglmX7I/4Y5l9TOjn3NRhfodeRyN7k lY/TdP90N1cDEkNyeF54us57jbo/vR1youZoy2v1mp/omych76tf2fTb8EvJpMDI iX3yy0loZQdAS9w7sVeItODtOjS83w8szSYumAnuWDrVmzNgMY/L9YC2vtSZpXW4 EBi0cXdAXOoDM5E7jx/NlBWOrJqoDtfB+Hqz4z3xYKtlx7jH68alUi+DZnHJNpol gLBiDwv/l3l5wII8Y6Ay+eLvvlUihqe/S/skoC5bUuAkYuUFT64= -----END CERTIFICATE-----Generated at Wed May 29 06:10:48 2024 by rpki-client on console-ams.rpki-client.org