$ rpki-client -vvf repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft File: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft (raw, json) Hash identifier: CQ46LIPqlqVgDRCW36yEy5SZY4T/sSCrh5e8abvgYZA= Subject key identifier: B4:D3:AC:04:8C:D9:1A:9B:61:97:8D:90:8F:37:27:C3:38:2C:AE:C0 Authority key identifier: E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 Certificate issuer: /CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Certificate serial: 698BBE3547536F0B852FC06E6034BA405148B0AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft Manifest number: 0131 Signing time: Sat 18 May 2024 10:01:53 +0000 Manifest this update: Sat 18 May 2024 09:56:53 +0000 Manifest next update: Tue 21 May 2024 18:16:53 +0000 Files and hashes: 1: 323030313a6466303a323363303a3a2f34382d3438203d3e20313437313235.roa (hash: y2+A+4r5toIeXH7+0VNUMpuWpasJZc2joWj3rA98wSI=) 2: E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl (hash: 3Xk/x88GWcKrVd/EuNwKYHmG2wWtxpqfLGrrgbHA4AI=) 3: 3130332e3137352e3230352e302f32342d3234203d3e20313437313235.roa (hash: 81mp4fQCUnLS4hidcI2ttRQPHStyiHLFmwy/v58nMOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8b:be:35:47:53:6f:0b:85:2f:c0:6e:60:34:ba:40:51:48:b0:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6 Validity Not Before: May 18 09:56:53 2024 GMT Not After : May 21 18:16:53 2024 GMT Subject: CN=B4D3AC048CD91A9B61978D908F3727C3382CAEC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2a:10:fe:d0:fc:2d:01:98:7d:a9:8a:f4:9b: 5b:dc:dc:83:d4:51:c6:d3:4e:7c:5a:e9:6c:f4:de: e5:0a:68:8d:05:1b:1a:74:56:e0:fa:e5:cf:90:1d: c6:0f:14:9c:e4:36:2e:55:51:c9:00:9a:ac:01:20: 48:4d:af:64:12:e4:3c:60:85:54:fd:2b:53:68:3b: 1e:d0:4e:cf:cf:3e:2d:45:cb:47:68:f2:2b:6e:61: 5a:d6:4e:8f:39:f3:39:46:0a:86:03:c5:72:11:fa: 0d:0a:66:c4:6c:be:b9:75:de:a5:0a:bf:b4:3e:66: 4d:27:6d:71:bb:e4:28:b4:53:ef:8f:19:6a:0c:ad: d9:97:fa:c5:b3:88:b8:8b:86:ad:eb:d6:75:b5:0f: e2:78:62:93:08:8e:d0:7f:a9:09:91:c9:2b:18:d5: 65:9a:27:f6:cd:1d:e6:11:22:01:c1:9b:46:5e:1d: a5:ad:2a:98:1a:a9:a6:3a:b7:37:d1:35:8b:75:22: bc:76:89:8b:36:b4:0c:60:d9:b6:33:01:04:15:6d: f6:ec:5e:03:5a:4b:41:da:84:52:e7:aa:8e:5f:87: 09:55:79:f1:e7:78:9a:7f:2f:3e:5b:a2:72:e4:c1: d3:3a:66:35:99:10:b3:29:3d:15:b9:6c:48:fd:07: 49:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D3:AC:04:8C:D9:1A:9B:61:97:8D:90:8F:37:27:C3:38:2C:AE:C0 X509v3 Authority Key Identifier: keyid:E3:1C:BD:E5:C6:F3:3D:AE:3C:A9:7A:01:1E:A4:F4:E6:39:FB:4F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc0201e3-875d-49c4-8e14-99994936d491/0/E31CBDE5C6F33DAE3CA97A011EA4F4E639FB4FF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:64:46:05:b3:0f:26:44:2e:52:38:86:c9:da:75:1d:04:55: aa:9a:38:8a:83:a0:5f:0f:13:d9:db:93:61:11:3e:59:9e:21: 73:b5:f4:3a:68:5d:bf:1e:81:bc:28:e9:48:75:16:40:8c:df: 47:8a:a0:45:8d:d9:b7:87:ea:a2:bd:64:b3:63:c9:ad:0c:52: a0:20:ff:5d:a4:8e:7b:ab:6b:c8:2b:2e:61:06:9b:da:d6:f8: 41:70:cd:aa:8b:77:0a:a4:fc:67:aa:c3:c5:cf:6e:f4:a2:64: 50:f4:68:0d:c7:36:a6:d2:9c:5a:37:0d:d0:d7:9f:34:c8:54: dd:ff:97:d1:f6:d8:7e:fa:29:fb:b9:54:0e:c1:f8:ad:3a:3d: e4:99:13:e1:36:31:f4:20:fd:a7:b8:3d:e1:32:1e:01:62:a2: aa:9e:15:9d:1f:8b:d6:c1:ee:54:82:0b:cf:23:10:59:a2:d7: 52:0e:d6:90:f2:66:b4:31:0c:af:43:ee:41:8d:f2:b8:d5:b6: ab:f9:59:c8:0c:7d:fc:6d:14:4c:11:8a:02:d3:e7:73:0c:e8: 3a:a0:16:ff:6f:f2:c0:06:26:bf:60:93:eb:62:7f:e7:36:9c: c5:91:75:dc:bb:c4:35:69:6d:5f:ea:2a:58:d1:5c:9e:5f:39: 6d:f7:d0:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaYu+NUdTbwuFL8BuYDS6QFFIsK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYz OUZCNEZGNjAeFw0yNDA1MTgwOTU2NTNaFw0yNDA1MjExODE2NTNaMDMxMTAvBgNV BAMTKEI0RDNBQzA0OENEOTFBOUI2MTk3OEQ5MDhGMzcyN0MzMzgyQ0FFQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuKhD+0PwtAZh9qYr0m1vc3IPU UcbTTnxa6Wz03uUKaI0FGxp0VuD65c+QHcYPFJzkNi5VUckAmqwBIEhNr2QS5Dxg hVT9K1NoOx7QTs/PPi1Fy0do8ituYVrWTo858zlGCoYDxXIR+g0KZsRsvrl13qUK v7Q+Zk0nbXG75Ci0U++PGWoMrdmX+sWziLiLhq3r1nW1D+J4YpMIjtB/qQmRySsY 1WWaJ/bNHeYRIgHBm0ZeHaWtKpgaqaY6tzfRNYt1Irx2iYs2tAxg2bYzAQQVbfbs XgNaS0HahFLnqo5fhwlVefHneJp/Lz5bonLkwdM6ZjWZELMpPRW5bEj9B0l7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtNOsBIzZGpthl42QjzcnwzgsrsAwHwYDVR0j BBgwFoAU4xy95cbzPa48qXoBHqT05jn7T/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzAyMDFlMy04NzVkLTQ5YzQtOGUxNC05OTk5NDkzNmQ0OTEvMC9FMzFDQkRFNUM2 RjMzREFFM0NBOTdBMDExRUE0RjRFNjM5RkI0RkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0RTYzOUZC NEZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGMwMjAxZTMtODc1ZC00OWM0LThl MTQtOTk5OTQ5MzZkNDkxLzAvRTMxQ0JERTVDNkYzM0RBRTNDQTk3QTAxMUVBNEY0 RTYzOUZCNEZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtkRgWzDyZELlI4hsnadR0EVaqaOIqDoF8P E9nbk2ERPlmeIXO19DpoXb8egbwo6Uh1FkCM30eKoEWN2beH6qK9ZLNjya0MUqAg /12kjnura8grLmEGm9rW+EFwzaqLdwqk/Geqw8XPbvSiZFD0aA3HNqbSnFo3DdDX nzTIVN3/l9H22H76Kfu5VA7B+K06PeSZE+E2MfQg/ae4PeEyHgFioqqeFZ0fi9bB 7lSCC88jEFmi11IO1pDyZrQxDK9D7kGN8rjVtqv5WcgMffxtFEwRigLT53MM6Dqg Fv9v8sAGJr9gk+tif+c2nMWRddy7xDVpbV/qKljRXJ5fOW330FA= -----END CERTIFICATE-----Generated at Sat May 18 10:26:12 2024 by rpki-client on console-ams.rpki-client.org