$ rpki-client -vvf repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft File: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft (raw, json) Hash identifier: rjqGdJL+PXZh9CESI0j6b3xR6tGFmF3KM+CCQxry/UM= Subject key identifier: 35:B2:76:BF:75:C2:53:51:8F:42:09:A7:18:4E:28:80:FD:57:FA:37 Authority key identifier: 71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 Certificate issuer: /CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Certificate serial: 0BF52BF5007901A11BDC60BD3BC408DE185F07D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft Manifest number: 02EF Signing time: Wed 29 May 2024 12:11:04 +0000 Manifest this update: Wed 29 May 2024 12:06:04 +0000 Manifest next update: Sat 01 Jun 2024 16:38:04 +0000 Files and hashes: 1: 71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl (hash: AgyL2/VH6qjuey23V/5nx4o3hI5ZyB4sNgaDfaXuoQw=) 2: 3130332e3130372e3138372e302f32342d3234203d3e20313337333030.roa (hash: WSTz5ogr3h2jPOJvkikKcIkFynOkdUVZnpcINI4dCbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 14:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f5:2b:f5:00:79:01:a1:1b:dc:60:bd:3b:c4:08:de:18:5f:07:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71E51A9B65D8A123513A350F0D99F98D6C9B72E2 Validity Not Before: May 29 12:06:04 2024 GMT Not After : Jun 1 16:38:04 2024 GMT Subject: CN=35B276BF75C253518F4209A7184E2880FD57FA37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:e8:1d:20:fb:97:25:7c:24:d7:9c:af:58: 86:1e:7e:bb:90:ad:1e:5f:a3:8d:3e:4f:ce:26:25: 86:18:e1:2d:c8:77:ce:99:d5:6a:d0:69:93:f0:b4: 98:16:b6:03:59:19:83:30:8c:ac:9e:2b:53:4d:03: 12:eb:83:31:4d:4d:10:71:0d:dd:4c:64:af:17:40: e1:34:10:de:2c:a2:70:ad:fe:1e:41:db:60:63:cb: 1d:61:d4:62:56:81:5d:49:ea:1b:9b:ee:f2:03:bb: c8:12:17:02:47:84:66:5c:04:b5:25:13:9e:ad:6f: 83:eb:20:bd:0b:87:f2:da:86:3b:48:50:56:dc:a4: 57:01:42:05:0e:32:da:05:1c:d3:a5:89:bb:2c:85: 4c:64:04:8e:89:d4:8d:87:2e:e0:a1:4d:b5:63:41: 66:6d:0e:96:9d:6a:8b:2d:55:e9:21:9b:a5:85:dc: 54:02:87:88:f7:8f:60:d8:7d:e7:5a:af:e1:bf:8a: 3e:3e:e4:af:9a:31:58:e3:27:13:19:2e:ae:26:29: e2:03:03:d0:48:77:ad:00:cb:f9:de:86:61:4c:f2: 16:84:04:b6:ae:c9:64:5a:b1:7c:39:8f:f3:30:d6: 74:68:b8:70:a4:f7:ba:b3:d4:4c:9f:81:49:71:f5: 0d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B2:76:BF:75:C2:53:51:8F:42:09:A7:18:4E:28:80:FD:57:FA:37 X509v3 Authority Key Identifier: keyid:71:E5:1A:9B:65:D8:A1:23:51:3A:35:0F:0D:99:F9:8D:6C:9B:72:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd48bd04-f787-414a-a501-5138a6d6b3e1/0/71E51A9B65D8A123513A350F0D99F98D6C9B72E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:b9:10:97:79:2a:d9:f4:75:b8:3e:96:7f:44:f0:2a:d3:6a: 0b:76:69:46:3e:80:86:da:3e:78:bf:fe:82:78:6b:6f:3a:37: 78:13:40:dc:8b:e7:14:fe:f7:77:f4:2f:15:52:27:03:3d:26: ad:94:f0:b4:14:1a:37:e3:2c:38:3e:65:43:94:3e:87:05:95: 72:15:54:20:9e:4d:b9:f3:46:78:cb:34:19:39:d0:b6:59:b0: f2:ca:c5:01:f0:d5:55:57:f7:09:b9:f8:d4:fa:7f:81:e7:b3: 14:ba:e6:d7:08:a9:f7:e9:e7:0d:eb:18:4b:33:73:c8:3d:02: a4:bb:0f:25:e0:8c:f6:3c:4c:24:b4:55:57:48:59:9a:4a:1f: ab:2a:40:65:94:91:d8:cb:b2:78:c8:58:de:af:b1:57:a1:f1: c2:ea:33:65:21:71:3a:72:52:95:58:2c:f8:8a:2f:08:2b:a6: 71:05:4c:57:66:80:80:e6:9b:b6:d8:2d:0e:a4:13:18:be:56: 83:e8:57:40:12:66:17:5d:d1:1f:69:46:36:49:28:39:2f:59: 2a:d0:9a:31:a6:10:99:53:3a:20:d6:fe:45:6a:87:0a:d8:64: 5a:fb:2d:59:c0:be:76:a2:a5:96:2a:3c:16:f8:e8:79:1a:9d: 3c:8e:a0:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/Ur9QB5AaEb3GC9O8QI3hhfB9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2 QzlCNzJFMjAeFw0yNDA1MjkxMjA2MDRaFw0yNDA2MDExNjM4MDRaMDMxMTAvBgNV BAMTKDM1QjI3NkJGNzVDMjUzNTE4RjQyMDlBNzE4NEUyODgwRkQ1N0ZBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjOgdIPuXJXwk15yvWIYefruQ rR5fo40+T84mJYYY4S3Id86Z1WrQaZPwtJgWtgNZGYMwjKyeK1NNAxLrgzFNTRBx Dd1MZK8XQOE0EN4sonCt/h5B22Bjyx1h1GJWgV1J6hub7vIDu8gSFwJHhGZcBLUl E56tb4PrIL0Lh/LahjtIUFbcpFcBQgUOMtoFHNOlibsshUxkBI6J1I2HLuChTbVj QWZtDpadaostVekhm6WF3FQCh4j3j2DYfedar+G/ij4+5K+aMVjjJxMZLq4mKeID A9BId60Ay/nehmFM8haEBLauyWRasXw5j/Mw1nRouHCk97qz1EyfgUlx9Q1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNbJ2v3XCU1GPQgmnGE4ogP1X+jcwHwYDVR0j BBgwFoAUceUam2XYoSNROjUPDZn5jWybcuIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDQ4YmQwNC1mNzg3LTQxNGEtYTUwMS01MTM4YTZkNmIzZTEvMC83MUU1MUE5QjY1 RDhBMTIzNTEzQTM1MEYwRDk5Rjk4RDZDOUI3MkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5OEQ2QzlC NzJFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ0OGJkMDQtZjc4Ny00MTRhLWE1 MDEtNTEzOGE2ZDZiM2UxLzAvNzFFNTFBOUI2NUQ4QTEyMzUxM0EzNTBGMEQ5OUY5 OEQ2QzlCNzJFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW5EJd5Ktn0dbg+ln9E8CrTagt2aUY+gIba Pni//oJ4a286N3gTQNyL5xT+93f0LxVSJwM9Jq2U8LQUGjfjLDg+ZUOUPocFlXIV VCCeTbnzRnjLNBk50LZZsPLKxQHw1VVX9wm5+NT6f4HnsxS65tcIqffp5w3rGEsz c8g9AqS7DyXgjPY8TCS0VVdIWZpKH6sqQGWUkdjLsnjIWN6vsVeh8cLqM2UhcTpy UpVYLPiKLwgrpnEFTFdmgIDmm7bYLQ6kExi+VoPoV0ASZhdd0R9pRjZJKDkvWSrQ mjGmEJlTOiDW/kVqhwrYZFr7LVnAvnaipZYqPBb46HkanTyOoFE= -----END CERTIFICATE-----Generated at Wed May 29 13:49:13 2024 by rpki-client on console-ams.rpki-client.org