$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: JZ14DcDEulmCdP+MH0jPW6GfHYD63p9OM9sL8d8TAFI= Subject key identifier: 37:CC:BA:CC:C1:AD:F5:53:2E:C8:73:10:72:F3:4A:84:CD:75:C7:D4 Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 5EDFCAFA34D442D794BDC769224ADA16495D2A55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 9E Signing time: Tue 28 May 2024 21:21:31 +0000 Manifest this update: Tue 28 May 2024 21:16:31 +0000 Manifest next update: Sat 01 Jun 2024 06:19:31 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: ZUTOx7YNxEInj7Wkz7eXTYYR8S5djP8YvIzTcnFDwLU=) 2: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: wkWxkGCvb2rTempfxb5c6tVP5YHeTQgrEi6mm/Sfr3A=) 3: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: qymRnCgqGDGnMpNtgwJ+nnujYTMmCQvIV72lJ89F3CU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:df:ca:fa:34:d4:42:d7:94:bd:c7:69:22:4a:da:16:49:5d:2a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: May 28 21:16:31 2024 GMT Not After : Jun 1 06:19:31 2024 GMT Subject: CN=37CCBACCC1ADF5532EC8731072F34A84CD75C7D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:41:f3:87:21:49:ad:d7:fe:d3:f6:80:d5:b1: 0d:1f:cb:7f:d7:43:93:ee:f6:8f:9a:03:fe:97:63: 5a:9a:5c:0e:01:c1:bd:13:24:3d:0e:4d:b1:6e:e2: 30:65:82:3b:87:eb:58:88:86:90:04:cb:b7:aa:f2: 00:13:55:07:3e:c5:05:38:ca:2a:b1:09:ec:7b:e2: 4a:e4:20:79:dc:9a:d0:a4:f8:ff:42:09:73:7a:eb: b0:b9:f9:6e:30:3d:de:0c:ae:88:93:86:2f:10:70: 3c:5c:4b:fd:28:0b:e5:6b:08:90:62:b8:fa:7e:3c: e3:00:9e:ff:be:82:45:24:75:19:77:35:d3:7b:23: 2b:16:cf:d5:26:62:d8:c3:17:71:8c:48:73:30:48: 4d:28:45:72:d8:bb:11:e4:60:d3:8d:dd:83:1b:56: 02:84:cc:5d:1f:7d:55:91:13:1f:bb:d8:6f:e1:22: 1b:1b:8f:11:60:5e:6d:10:ae:f2:1d:6f:76:fa:21: a0:5d:65:21:f6:c5:28:39:d1:fd:7d:3f:bc:67:75: 7d:26:1e:ca:44:ce:33:42:48:29:1a:23:6b:c0:9e: e4:fb:31:61:4d:65:45:75:75:42:9c:92:7f:de:92: 87:34:cd:9e:6a:ec:bd:63:0d:17:84:c6:66:cb:32: 13:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CC:BA:CC:C1:AD:F5:53:2E:C8:73:10:72:F3:4A:84:CD:75:C7:D4 X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:eb:f2:92:a4:a2:37:03:62:57:71:15:9e:86:08:af:d4:1b: d9:62:7f:be:f4:cf:d8:f6:98:80:cd:f3:2d:e1:fb:bb:0b:5f: d9:88:49:a6:f1:02:ab:fc:1c:d8:e2:4d:b7:61:b8:70:23:0d: 39:26:c7:be:2c:bf:98:3e:86:25:31:de:b7:8b:d8:fd:8a:cd: 11:b6:25:6d:29:75:1c:0f:c6:e9:30:23:54:61:30:09:48:00: b8:a3:6d:7f:5c:ed:4a:72:92:06:5f:6e:07:5a:71:78:ee:c8: 95:4d:e5:0f:c4:1f:1d:d7:0f:70:b2:3d:57:04:8b:02:15:f6: 52:25:b1:2a:72:e6:31:01:f6:30:c1:c8:e1:cb:85:58:d4:13: a1:61:f9:0b:40:e8:9e:e0:d2:b4:10:0f:e4:26:a1:f3:df:ba: b3:d4:6a:99:30:f5:db:c1:96:3e:4a:5c:9a:f4:49:b8:4e:3d: 27:89:da:35:e6:4c:06:ce:14:8e:0a:94:9c:84:2a:8e:36:d2: 81:23:e5:ea:0f:aa:e2:e5:17:01:f5:28:fa:17:82:bd:be:9d: 59:d8:1c:f0:44:65:6b:30:67:f1:4f:4c:24:47:fc:dd:a7:df: 5e:e2:42:78:96:5d:97:9e:cc:b7:0f:e4:a5:95:68:48:19:94: be:be:09:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXt/K+jTUQteUvcdpIkraFkldKlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNDA1MjgyMTE2MzFaFw0yNDA2MDEwNjE5MzFaMDMxMTAvBgNV BAMTKDM3Q0NCQUNDQzFBREY1NTMyRUM4NzMxMDcyRjM0QTg0Q0Q3NUM3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQfOHIUmt1/7T9oDVsQ0fy3/X Q5Pu9o+aA/6XY1qaXA4Bwb0TJD0OTbFu4jBlgjuH61iIhpAEy7eq8gATVQc+xQU4 yiqxCex74krkIHncmtCk+P9CCXN667C5+W4wPd4MroiThi8QcDxcS/0oC+VrCJBi uPp+POMAnv++gkUkdRl3NdN7IysWz9UmYtjDF3GMSHMwSE0oRXLYuxHkYNON3YMb VgKEzF0ffVWREx+72G/hIhsbjxFgXm0QrvIdb3b6IaBdZSH2xSg50f19P7xndX0m HspEzjNCSCkaI2vAnuT7MWFNZUV1dUKckn/ekoc0zZ5q7L1jDReExmbLMhMtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN8y6zMGt9VMuyHMQcvNKhM11x9QwHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjr8pKkojcDYldxFZ6GCK/UG9lif770z9j2 mIDN8y3h+7sLX9mISabxAqv8HNjiTbdhuHAjDTkmx74sv5g+hiUx3reL2P2KzRG2 JW0pdRwPxukwI1RhMAlIALijbX9c7UpykgZfbgdacXjuyJVN5Q/EHx3XD3CyPVcE iwIV9lIlsSpy5jEB9jDByOHLhVjUE6Fh+QtA6J7g0rQQD+QmofPfurPUapkw9dvB lj5KXJr0SbhOPSeJ2jXmTAbOFI4KlJyEKo420oEj5eoPquLlFwH1KPoXgr2+nVnY HPBEZWswZ/FPTCRH/N2n317iQniWXZeezLcP5KWVaEgZlL6+CZo= -----END CERTIFICATE-----Generated at Tue May 28 21:48:38 2024 by rpki-client on console-fra.rpki-client.org