$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: rjKi2sqyIti6J7HJCBKhNuNSHDbhLd4LTsg+euFN2fY= Subject key identifier: 82:75:81:F3:1D:DD:24:DD:59:28:36:EA:FE:26:EB:1E:7E:B7:30:60 Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 48A68B7BB8C9BF4A139BA88838DA0C35C0C915E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 6A Signing time: Wed 29 May 2024 12:41:34 +0000 Manifest this update: Wed 29 May 2024 12:36:34 +0000 Manifest next update: Sat 01 Jun 2024 23:24:34 +0000 Files and hashes: 1: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: wZMBl01B2j24HEXZVHepNxswEE/ZRsEuwR+SvRyWLDs=) 2: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: Ckz43RBGnZqWC1YWZccZLQekboncx3BDpeUFTrImALk=) 3: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: hhhMabECIf6b6KedCfSDtqrQOqdzxljt0BiPGpjJpuQ=) 4: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: acmarVRT+aZhSzv5rW+MCIXl7Yab0Dk4NzeFIcQJFeI=) 5: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: 8a8A6V0FcfmmyOYXgK2irg2uOmMtjlrbnM0bhaK28ss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 14:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a6:8b:7b:b8:c9:bf:4a:13:9b:a8:88:38:da:0c:35:c0:c9:15:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: May 29 12:36:34 2024 GMT Not After : Jun 1 23:24:34 2024 GMT Subject: CN=827581F31DDD24DD592836EAFE26EB1E7EB73060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:46:c9:8d:45:40:5c:78:d4:3f:b4:30:8c:8c: 5d:0d:ba:be:7a:01:b5:5b:df:14:ab:39:ff:b0:bb: 56:ff:a9:2a:be:de:b3:3a:a8:6d:87:b2:a8:43:ac: 6e:9e:1e:14:74:44:71:15:18:a2:1c:5c:ad:22:5e: c8:e3:22:43:1b:05:36:54:ce:f5:80:03:2f:13:d0: b0:42:1e:aa:2d:ee:03:f7:d9:3a:0e:21:7f:04:1d: 9f:45:cd:c2:9f:21:08:7a:57:fc:cd:e2:7b:ce:2b: 3a:2d:0a:d2:6f:5f:44:c8:7c:47:6a:42:e9:97:73: 4a:b0:2b:26:f9:31:ab:86:f8:64:57:a4:8b:c6:f9: a4:da:7b:8e:a0:ce:d1:90:5d:ad:4b:0e:cb:c6:35: f2:30:7d:97:99:96:a2:11:37:f2:d9:9c:fe:69:89: b0:72:23:b8:12:b5:67:ee:55:2e:b3:26:30:8d:55: 2d:4a:d8:80:e4:50:58:cd:22:36:39:73:43:c2:62: e7:a6:40:0a:6c:7a:d6:03:cf:f2:7b:12:d6:e4:e9: 2f:79:e8:e0:55:69:b6:ba:ed:82:08:02:b9:13:57: 72:93:b7:eb:80:69:b1:c7:ea:01:88:b8:64:87:fc: de:e1:68:b2:07:bf:b6:56:56:91:29:04:33:51:a0: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:75:81:F3:1D:DD:24:DD:59:28:36:EA:FE:26:EB:1E:7E:B7:30:60 X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2f:8f:cb:94:01:ff:4a:66:a3:1c:04:8a:fa:7d:74:81:37: 68:b1:1d:00:3c:7e:c1:a7:b8:80:b3:83:29:08:1e:71:a8:fe: f7:eb:93:5c:79:92:ef:df:19:15:b7:13:6b:0c:d4:5b:ad:41: 66:37:78:f8:25:b4:b9:61:aa:fc:ff:80:a2:f5:2d:5e:f9:a7: 7b:50:6f:ed:5c:c5:5d:94:3d:b3:62:13:d1:0e:64:a4:8a:ff: 3f:42:fd:50:e3:74:e1:6e:20:20:ed:c6:54:de:ad:cc:e5:70: c5:d5:8f:64:e6:a3:eb:06:04:46:55:b9:3a:63:9f:ca:81:f5: ad:a4:05:35:0d:b2:4b:e8:99:14:bd:de:41:6f:5f:f8:5b:6f: ec:bd:bd:71:71:22:dd:8b:56:75:c3:72:af:ed:5f:e8:19:e7: 6b:a8:cf:21:f4:72:01:48:df:8d:9a:d0:b7:b4:54:28:28:bf: 01:67:7b:4c:f6:7f:d6:aa:64:2d:47:c2:55:e6:ac:7e:c6:28: 6d:ba:3a:f2:47:9a:4d:be:9e:ef:cf:bd:cc:fc:80:2c:51:ca: 71:9e:4c:80:5d:a0:9b:59:28:15:44:e6:3f:94:83:eb:54:92: ff:d9:29:c6:86:42:d4:af:3e:a4:de:32:aa:3c:1c:d1:b3:10: 9c:ac:8d:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSKaLe7jJv0oTm6iIONoMNcDJFeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNDA1MjkxMjM2MzRaFw0yNDA2MDEyMzI0MzRaMDMxMTAvBgNV BAMTKDgyNzU4MUYzMURERDI0REQ1OTI4MzZFQUZFMjZFQjFFN0VCNzMwNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRsmNRUBceNQ/tDCMjF0Nur56 AbVb3xSrOf+wu1b/qSq+3rM6qG2HsqhDrG6eHhR0RHEVGKIcXK0iXsjjIkMbBTZU zvWAAy8T0LBCHqot7gP32ToOIX8EHZ9FzcKfIQh6V/zN4nvOKzotCtJvX0TIfEdq QumXc0qwKyb5MauG+GRXpIvG+aTae46gztGQXa1LDsvGNfIwfZeZlqIRN/LZnP5p ibByI7gStWfuVS6zJjCNVS1K2IDkUFjNIjY5c0PCYuemQApsetYDz/J7Etbk6S95 6OBVaba67YIIArkTV3KTt+uAabHH6gGIuGSH/N7haLIHv7ZWVpEpBDNRoHBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgnWB8x3dJN1ZKDbq/ibrHn63MGAwHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAvj8uUAf9KZqMcBIr6fXSBN2ixHQA8fsGn uICzgykIHnGo/vfrk1x5ku/fGRW3E2sM1FutQWY3ePgltLlhqvz/gKL1LV75p3tQ b+1cxV2UPbNiE9EOZKSK/z9C/VDjdOFuICDtxlTerczlcMXVj2Tmo+sGBEZVuTpj n8qB9a2kBTUNskvomRS93kFvX/hbb+y9vXFxIt2LVnXDcq/tX+gZ52uozyH0cgFI 342a0Le0VCgovwFne0z2f9aqZC1HwlXmrH7GKG26OvJHmk2+nu/Pvcz8gCxRynGe TIBdoJtZKBVE5j+Ug+tUkv/ZKcaGQtSvPqTeMqo8HNGzEJysjYs= -----END CERTIFICATE-----Generated at Wed May 29 13:49:13 2024 by rpki-client on console-ams.rpki-client.org