$ rpki-client -vvf repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft File: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft (raw, json) Hash identifier: xEJxWb+vAWUCK//Qi5L9gzfvraniGIUxUudlRxKXhwU= Subject key identifier: 42:71:9D:03:2B:45:7B:4A:DD:29:8F:66:3D:76:6A:90:BC:CD:6E:73 Authority key identifier: C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D Certificate issuer: /CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Certificate serial: 020D18FE00D964531D22460C141E900D3AE2CAD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft Manifest number: 0436 Signing time: Sun 19 May 2024 12:41:24 +0000 Manifest this update: Sun 19 May 2024 12:36:24 +0000 Manifest next update: Wed 22 May 2024 17:39:24 +0000 Files and hashes: 1: C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl (hash: gzeSDBkvd63d7I9kexjFfoa9r0dUXaOGgyEmcn3grsI=) 2: 3130332e3131322e3232332e302f32342d3234203d3e20313337333338.roa (hash: djkCwwJdC/5nurMIA6cyQ2Cgpy0m2gmgp/rO/BHqErs=) 3: 323030313a6466343a626430303a3a2f34382d3438203d3e20313337333338.roa (hash: PnRI3Uu+JJ725MbQ+YhLq+LyDVoJx2rKHUBvIMC1/UY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0d:18:fe:00:d9:64:53:1d:22:46:0c:14:1e:90:0d:3a:e2:ca:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C509602E8492E1EF2F7A2B99A4C6BF4FF306945D Validity Not Before: May 19 12:36:24 2024 GMT Not After : May 22 17:39:24 2024 GMT Subject: CN=42719D032B457B4ADD298F663D766A90BCCD6E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:1f:c8:56:2b:0c:21:81:43:98:12:91:2b: 91:78:1e:c3:4f:33:af:58:ee:79:e4:90:75:76:94: 53:03:87:d5:e8:ab:83:fa:3c:ec:e4:b4:1b:1d:3a: f2:86:44:7a:ff:e6:fb:3a:44:a5:0f:bd:71:ac:b2: ea:22:06:59:ff:5e:83:0f:25:85:87:39:e7:8c:7b: 57:5e:69:01:db:74:ea:46:d2:86:b2:5d:ab:56:9e: 9a:4a:33:2b:8a:53:cc:eb:ad:4a:c9:6b:52:ac:19: 7f:21:a4:c5:b8:b0:65:88:d1:89:93:aa:91:d7:04: d7:21:ee:07:ac:f1:4b:46:b8:82:8c:ec:ce:9a:3b: 7d:a8:fc:dd:0a:3a:b7:92:8b:91:ce:3c:fe:ae:93: 22:b7:1b:f9:73:6c:7f:0b:e6:d9:83:75:2a:d4:ae: 9f:52:88:a0:21:3c:0b:ad:fe:12:e7:5c:74:1c:45: 85:b9:c5:27:1a:24:ca:f9:71:8a:1a:25:0d:c1:40: 82:39:88:a1:1c:5d:47:6d:2f:33:eb:e6:ae:c6:b3: d2:fe:9d:fa:54:2e:6a:53:da:e0:b8:8d:03:e6:b0: 9d:6e:c0:81:3b:65:c1:89:44:42:bd:72:a9:de:d0: 57:08:69:3f:e0:e0:dc:c5:00:2d:a4:85:b4:75:f0: 84:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:71:9D:03:2B:45:7B:4A:DD:29:8F:66:3D:76:6A:90:BC:CD:6E:73 X509v3 Authority Key Identifier: keyid:C5:09:60:2E:84:92:E1:EF:2F:7A:2B:99:A4:C6:BF:4F:F3:06:94:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2d6d0df-c21e-491c-b116-4a1d9a2c74be/0/C509602E8492E1EF2F7A2B99A4C6BF4FF306945D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e7:d0:8d:7b:43:18:10:2a:9c:0f:79:32:2e:c6:18:6f:3d: 68:0e:b0:b6:45:a0:f6:18:c0:94:bc:f9:53:76:3a:a5:70:37: 87:c3:46:d6:f4:6f:51:f4:dd:75:2e:8c:c6:d3:24:c6:83:5b: ce:c5:a6:c5:5f:7f:6b:d6:a0:37:71:29:06:42:75:e9:db:b1: 9b:56:bb:97:26:51:cf:d6:a6:db:d4:d3:de:85:98:35:f4:f8: 92:5c:24:9e:ad:65:18:d7:f4:26:c7:9f:7e:62:e7:7e:b3:10: 6a:b7:cb:30:53:45:fb:69:11:b8:da:28:60:5f:98:55:82:4b: a6:15:f3:0a:0e:1c:e1:02:40:cd:6c:31:79:0f:7a:14:90:98: db:31:16:06:87:14:c8:b9:bf:20:38:7e:63:95:17:ef:d1:a4: db:68:e3:31:fe:9f:bb:2c:0c:a4:59:a6:61:73:91:2e:a1:84: 4a:7a:c1:63:6e:32:e6:1f:8c:37:84:93:a9:cd:61:c0:c4:3a: cd:b3:77:51:05:9e:29:33:5d:37:af:9b:3c:01:8b:0a:2c:b7: ee:57:1b:6b:35:6c:9e:07:9c:aa:65:91:b2:a5:97:b1:5c:b9: a6:ef:69:23:fd:8c:40:81:d7:1f:bb:6b:74:ca:ad:65:29:14: 33:4f:57:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAg0Y/gDZZFMdIkYMFB6QDTriytQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZG MzA2OTQ1RDAeFw0yNDA1MTkxMjM2MjRaFw0yNDA1MjIxNzM5MjRaMDMxMTAvBgNV BAMTKDQyNzE5RDAzMkI0NTdCNEFERDI5OEY2NjNENzY2QTkwQkNDRDZFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/x/IVisMIYFDmBKRK5F4HsNP M69Y7nnkkHV2lFMDh9Xoq4P6POzktBsdOvKGRHr/5vs6RKUPvXGssuoiBln/XoMP JYWHOeeMe1deaQHbdOpG0oayXatWnppKMyuKU8zrrUrJa1KsGX8hpMW4sGWI0YmT qpHXBNch7ges8UtGuIKM7M6aO32o/N0KOreSi5HOPP6ukyK3G/lzbH8L5tmDdSrU rp9SiKAhPAut/hLnXHQcRYW5xScaJMr5cYoaJQ3BQII5iKEcXUdtLzPr5q7Gs9L+ nfpULmpT2uC4jQPmsJ1uwIE7ZcGJREK9cqne0FcIaT/g4NzFAC2khbR18ISvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQnGdAytFe0rdKY9mPXZqkLzNbnMwHwYDVR0j BBgwFoAUxQlgLoSS4e8veiuZpMa/T/MGlF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmQ2ZDBkZi1jMjFlLTQ5MWMtYjExNi00YTFkOWEyYzc0YmUvMC9DNTA5NjAyRTg0 OTJFMUVGMkY3QTJCOTlBNEM2QkY0RkYzMDY5NDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJGNEZGMzA2 OTQ1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDJkNmQwZGYtYzIxZS00OTFjLWIx MTYtNGExZDlhMmM3NGJlLzAvQzUwOTYwMkU4NDkyRTFFRjJGN0EyQjk5QTRDNkJG NEZGMzA2OTQ1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnn0I17QxgQKpwPeTIuxhhvPWgOsLZFoPYY wJS8+VN2OqVwN4fDRtb0b1H03XUujMbTJMaDW87FpsVff2vWoDdxKQZCdenbsZtW u5cmUc/WptvU096FmDX0+JJcJJ6tZRjX9CbHn35i536zEGq3yzBTRftpEbjaKGBf mFWCS6YV8woOHOECQM1sMXkPehSQmNsxFgaHFMi5vyA4fmOVF+/RpNto4zH+n7ss DKRZpmFzkS6hhEp6wWNuMuYfjDeEk6nNYcDEOs2zd1EFnikzXTevmzwBiwost+5X G2s1bJ4HnKplkbKll7FcuabvaSP9jECB1x+7a3TKrWUpFDNPV44= -----END CERTIFICATE-----Generated at Sun May 19 13:18:10 2024 by rpki-client on console-fra.rpki-client.org