$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: /3nGiWhzxWLztOEFf4w7SSQxozbxoCe4MomEENvpLfc= Subject key identifier: 8E:ED:0B:C4:8A:00:14:BE:22:21:CF:40:BA:8B:D3:31:DD:F0:E7:58 Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 2CA3C97A71BFF3EBEC9A566B9D8E611C42E494A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 0431 Signing time: Sat 18 May 2024 09:40:37 +0000 Manifest this update: Sat 18 May 2024 09:35:37 +0000 Manifest next update: Tue 21 May 2024 21:32:37 +0000 Files and hashes: 1: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: S/IQ6/p8jFfJ9ee5AubUKIh7kblnktplc/ZFUgxkeUA=) 2: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: Z+EwWewoO8F89T061Joh0UZH1b2vNQ0ncfVR8xkIVTo=) 3: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: HNkX+k69ZMRC2/2wfH50LpXjQJX2Cnh15NH27/9vlP0=) 4: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: EFSq05dlwvlOTgjlLEIGwaehuKInKSBUzsGR1WC9hNk=) 5: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: X0ZViTLo6gLoiZWyKI9b9TcYlyOZhugYNAG2ECv+AUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a3:c9:7a:71:bf:f3:eb:ec:9a:56:6b:9d:8e:61:1c:42:e4:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: May 18 09:35:37 2024 GMT Not After : May 21 21:32:37 2024 GMT Subject: CN=8EED0BC48A0014BE2221CF40BA8BD331DDF0E758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:e1:83:37:33:ee:23:7d:42:b6:dd:91:49: 7a:3c:10:6a:b9:b7:ac:2e:25:87:54:42:a1:83:49: 60:aa:03:78:5c:72:ff:b3:03:da:6b:f0:95:19:1b: 0d:85:da:52:0e:e8:d4:44:df:e3:07:99:70:b6:bf: 32:a7:0b:e8:0f:a4:bd:0d:f6:16:00:c6:34:58:69: 29:e1:90:96:46:3e:1f:ac:15:eb:d0:17:b2:67:bb: 1a:41:ed:85:f2:c6:0c:17:c0:1d:1f:37:4b:28:83: de:26:04:f5:1e:6e:a9:36:5e:99:f4:9c:b8:ab:6e: 6f:eb:9a:3e:ad:0b:4a:51:96:d1:dc:73:65:52:8f: 82:0a:ed:ff:56:f3:08:35:e1:1b:8b:1b:8c:f2:da: c8:73:d9:ef:d5:95:80:f2:b2:38:e4:b2:b8:66:fe: 18:34:7c:e8:d2:24:4a:30:00:08:85:5e:7d:ec:69: f8:8f:8a:b6:a4:e4:9b:67:75:89:c5:3b:6a:d4:c5: c3:c4:40:f1:f1:5a:98:2e:ae:f1:fe:e4:20:c5:ca: ef:e2:86:2f:7d:0d:d2:dc:fc:67:f4:4e:19:27:ee: f3:97:54:ee:38:f8:17:b9:57:13:e8:19:19:aa:b5: 27:f1:21:48:30:96:42:3c:1a:00:8f:d5:3d:58:6e: 85:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:ED:0B:C4:8A:00:14:BE:22:21:CF:40:BA:8B:D3:31:DD:F0:E7:58 X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:39:7d:56:21:ad:f7:c0:e2:33:9d:8d:bb:89:56:fd:60:43: fa:d3:e1:2e:bb:f9:6d:01:e3:55:2d:e6:f3:29:7b:3b:6a:94: 0e:ca:d1:98:88:bb:f7:e0:79:53:6c:5f:fc:60:02:47:c4:aa: 6f:c2:2d:da:5a:2c:d1:04:a2:86:44:f7:71:c8:dd:86:19:7a: fd:fa:4e:88:49:29:26:3f:61:2a:af:76:b5:b9:54:6e:06:2d: 70:71:61:1b:66:88:7d:a7:8f:35:c0:fa:fe:46:6b:8f:20:72: df:03:75:23:2b:ff:6b:ef:74:70:b0:5d:1f:fb:bc:2b:84:5b: 3b:0c:16:0b:8e:7c:d4:d5:d8:6e:f9:fb:ba:6e:50:ad:8b:48: 05:a9:3f:b6:24:f8:6c:f6:f2:5c:33:d9:e5:48:6c:b6:d5:47: 01:af:19:44:ed:14:31:e3:34:74:ac:28:a9:46:80:22:36:47: 40:61:7c:cb:18:8a:37:8e:c2:57:81:4f:5e:0a:36:08:62:86: 28:78:2d:f0:c4:30:8d:e3:ad:26:98:4c:aa:d8:ef:73:df:47: 9e:d7:14:25:c4:9d:38:7f:b4:98:1f:1d:55:bd:ec:99:32:46: dd:fe:62:96:b8:0f:80:ba:09:ea:61:68:56:65:68:a3:16:df: 44:f2:a6:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKPJenG/8+vsmlZrnY5hHELklKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNDA1MTgwOTM1MzdaFw0yNDA1MjEyMTMyMzdaMDMxMTAvBgNV BAMTKDhFRUQwQkM0OEEwMDE0QkUyMjIxQ0Y0MEJBOEJEMzMxRERGMEU3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0uGDNzPuI31Ctt2RSXo8EGq5 t6wuJYdUQqGDSWCqA3hccv+zA9pr8JUZGw2F2lIO6NRE3+MHmXC2vzKnC+gPpL0N 9hYAxjRYaSnhkJZGPh+sFevQF7JnuxpB7YXyxgwXwB0fN0sog94mBPUebqk2Xpn0 nLirbm/rmj6tC0pRltHcc2VSj4IK7f9W8wg14RuLG4zy2shz2e/VlYDysjjksrhm /hg0fOjSJEowAAiFXn3safiPirak5JtndYnFO2rUxcPEQPHxWpgurvH+5CDFyu/i hi99DdLc/Gf0Thkn7vOXVO44+Be5VxPoGRmqtSfxIUgwlkI8GgCP1T1YboXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUju0LxIoAFL4iIc9AuovTMd3w51gwHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA85fVYhrffA4jOdjbuJVv1gQ/rT4S67+W0B 41Ut5vMpeztqlA7K0ZiIu/fgeVNsX/xgAkfEqm/CLdpaLNEEooZE93HI3YYZev36 TohJKSY/YSqvdrW5VG4GLXBxYRtmiH2njzXA+v5Ga48gct8DdSMr/2vvdHCwXR/7 vCuEWzsMFguOfNTV2G75+7puUK2LSAWpP7Yk+Gz28lwz2eVIbLbVRwGvGUTtFDHj NHSsKKlGgCI2R0BhfMsYijeOwleBT14KNghihih4LfDEMI3jrSaYTKrY73PfR57X FCXEnTh/tJgfHVW97JkyRt3+Ypa4D4C6CephaFZlaKMW30Typu8= -----END CERTIFICATE-----Generated at Sat May 18 10:34:19 2024 by rpki-client on console-fra.rpki-client.org