$ rpki-client -vvf repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft File: 65E29AACDF8556B440C4D7180F51C447FFE5238F.mft (raw, json) Hash identifier: T0IVFSDO57+nn6MgtCSN75vk+slKHcSY+IDFTHWNpkY= Subject key identifier: C6:D5:10:F7:0C:FB:BF:6C:D3:3B:C3:8D:2D:B5:91:D6:16:63:E9:F4 Authority key identifier: 65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F Certificate issuer: /CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Certificate serial: 0A169423B35140BF4DC01B7D6772C9C26DBA2510 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft Manifest number: E1 Signing time: Sat 18 May 2024 16:51:12 +0000 Manifest this update: Sat 18 May 2024 16:46:12 +0000 Manifest next update: Wed 22 May 2024 04:09:12 +0000 Files and hashes: 1: 3130332e35382e3139382e302f32342d3234203d3e20313530343937.roa (hash: /Ux4bH4UZz9dx66Mb2gfl9DFMvVojYP/7dnQIDUE0Z4=) 2: 65E29AACDF8556B440C4D7180F51C447FFE5238F.crl (hash: hJ9nUbDp08dH1V6K1cJNu7L1W+Ez6yhOt/ypzejIw5U=) 3: 3130332e35382e3139392e302f32342d3234203d3e20313530343937.roa (hash: UqE8wYyqUXeGPa3EMzkPS7pYukOnCWBf1vVFJOuR7n0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:16:94:23:b3:51:40:bf:4d:c0:1b:7d:67:72:c9:c2:6d:ba:25:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65E29AACDF8556B440C4D7180F51C447FFE5238F Validity Not Before: May 18 16:46:12 2024 GMT Not After : May 22 04:09:12 2024 GMT Subject: CN=C6D510F70CFBBF6CD33BC38D2DB591D61663E9F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a6:a2:8e:ba:14:ef:b1:e6:d3:8e:d8:4f:38: 2b:ae:8d:0c:08:2b:f7:12:ba:25:bb:23:c8:a1:36: be:7c:96:41:3c:00:19:3d:f9:fd:f6:ee:c4:9f:91: 36:79:82:29:aa:a5:4a:f9:84:b5:17:d3:04:b0:c9: 3b:b0:ae:5e:49:0e:77:39:48:13:23:8f:80:c3:82: d4:57:38:b4:b2:64:25:00:d9:ea:79:7f:fc:35:65: 59:62:cb:b4:08:59:f8:af:44:0f:a3:ab:97:cb:4b: 07:e9:b8:af:3e:db:a3:f0:22:75:ec:21:70:93:9e: 67:56:b6:d1:e8:31:70:a9:1d:da:1a:d2:5e:17:cb: 0c:d2:c0:27:f9:52:8f:3b:2d:73:a2:c2:06:cb:8a: 55:b8:0e:d1:9e:7c:a4:20:4e:ce:d7:e2:6a:52:23: 35:56:14:5f:ad:7f:af:05:91:b4:c5:14:de:6f:c0: a9:c7:4b:7b:03:86:79:80:54:25:93:1f:47:2e:b2: b5:1b:a9:db:1c:65:45:f6:dd:94:b6:ba:57:1a:a8: 42:88:66:75:2e:c3:b8:80:e5:64:80:2a:13:34:ab: e3:1d:02:12:b3:76:c8:83:3f:1b:a7:d5:48:5c:fb: 48:44:4c:6c:d1:c2:ed:2d:c3:d0:45:2a:27:0a:a1: 2e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D5:10:F7:0C:FB:BF:6C:D3:3B:C3:8D:2D:B5:91:D6:16:63:E9:F4 X509v3 Authority Key Identifier: keyid:65:E2:9A:AC:DF:85:56:B4:40:C4:D7:18:0F:51:C4:47:FF:E5:23:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65E29AACDF8556B440C4D7180F51C447FFE5238F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8ce2008-84b7-4bef-94b9-bb3fdb17b238/0/65E29AACDF8556B440C4D7180F51C447FFE5238F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:06:0a:05:fa:3d:5b:58:73:a7:92:11:1f:14:ba:4c:1e:94: 34:a5:e8:57:de:57:84:27:74:4b:e6:70:8c:1f:28:a3:9c:69: 97:e6:35:e8:6b:51:4e:37:87:b2:b5:c3:16:d6:6c:38:da:ff: a7:85:f0:13:3c:b6:25:a1:0b:df:eb:3b:5f:48:8f:9c:e9:5d: 2b:a6:fd:ef:0e:a3:6d:2e:c5:68:45:3c:79:cb:86:c6:6a:f9: 9b:db:99:a4:a5:0d:a6:a5:ab:ba:2e:5c:b6:52:ee:60:23:a8: cf:54:27:b4:65:b5:cb:b5:55:64:e4:04:a9:2b:9f:bd:e3:4e: ce:6a:36:44:a4:79:eb:be:fa:f6:f9:7c:b7:1d:18:6e:a7:c5: b9:d5:ec:6b:1e:34:23:6c:a1:51:88:2e:f2:9a:ec:c1:28:dc: 9f:bc:de:02:44:d8:1e:dc:1a:37:df:3a:a6:dd:0a:06:bf:3c: a5:22:df:c2:19:b2:bb:1d:9c:89:a3:4b:e0:48:bd:12:94:54: 04:b4:02:8c:32:f2:c4:d2:80:16:58:92:a3:d4:87:c2:f1:00: 37:e6:b2:4e:65:d9:0e:b2:49:e5:3b:34:68:99:a6:fc:e7:56: df:76:04:3f:4f:c4:77:70:0b:6e:62:f4:e9:45:e9:80:3d:47: 74:82:32:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChaUI7NRQL9NwBt9Z3LJwm26JRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdG RkU1MjM4RjAeFw0yNDA1MTgxNjQ2MTJaFw0yNDA1MjIwNDA5MTJaMDMxMTAvBgNV BAMTKEM2RDUxMEY3MENGQkJGNkNEMzNCQzM4RDJEQjU5MUQ2MTY2M0U5RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1pqKOuhTvsebTjthPOCuujQwI K/cSuiW7I8ihNr58lkE8ABk9+f327sSfkTZ5gimqpUr5hLUX0wSwyTuwrl5JDnc5 SBMjj4DDgtRXOLSyZCUA2ep5f/w1ZVliy7QIWfivRA+jq5fLSwfpuK8+26PwInXs IXCTnmdWttHoMXCpHdoa0l4XywzSwCf5Uo87LXOiwgbLilW4DtGefKQgTs7X4mpS IzVWFF+tf68FkbTFFN5vwKnHS3sDhnmAVCWTH0cusrUbqdscZUX23ZS2ulcaqEKI ZnUuw7iA5WSAKhM0q+MdAhKzdsiDPxun1Uhc+0hETGzRwu0tw9BFKicKoS6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxtUQ9wz7v2zTO8ONLbWR1hZj6fQwHwYDVR0j BBgwFoAUZeKarN+FVrRAxNcYD1HER//lI48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGNlMjAwOC04NGI3LTRiZWYtOTRiOS1iYjNmZGIxN2IyMzgvMC82NUUyOUFBQ0RG ODU1NkI0NDBDNEQ3MTgwRjUxQzQ0N0ZGRTUyMzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0NDdGRkU1 MjM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhjZTIwMDgtODRiNy00YmVmLTk0 YjktYmIzZmRiMTdiMjM4LzAvNjVFMjlBQUNERjg1NTZCNDQwQzRENzE4MEY1MUM0 NDdGRkU1MjM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQGCgX6PVtYc6eSER8UukwelDSl6FfeV4Qn dEvmcIwfKKOcaZfmNehrUU43h7K1wxbWbDja/6eF8BM8tiWhC9/rO19Ij5zpXSum /e8Oo20uxWhFPHnLhsZq+ZvbmaSlDaalq7ouXLZS7mAjqM9UJ7Rltcu1VWTkBKkr n73jTs5qNkSkeeu++vb5fLcdGG6nxbnV7GseNCNsoVGILvKa7MEo3J+83gJE2B7c GjffOqbdCga/PKUi38IZsrsdnImjS+BIvRKUVAS0Aowy8sTSgBZYkqPUh8LxADfm sk5l2Q6ySeU7NGiZpvznVt92BD9PxHdwC25i9OlF6YA9R3SCMmE= -----END CERTIFICATE-----Generated at Sat May 18 18:21:12 2024 by rpki-client on console-ams.rpki-client.org