$ rpki-client -vvf repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft File: 27575AEBC443417C31FDF4A1DDFE016557A835F4.mft (raw, json) Hash identifier: jsRs5iFRDqC1PqjGOwBTLkaIUgQfuDOcPiwNLwLC8LM= Subject key identifier: 38:41:80:90:8C:FD:BC:C8:E6:2B:B0:D2:18:D0:16:7A:6C:25:DB:97 Authority key identifier: 27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 Certificate issuer: /CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Certificate serial: 3B56B646503AA81FDCCF7FFCD8FA49B58D1BA148 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft Manifest number: F5 Signing time: Sun 19 May 2024 01:01:20 +0000 Manifest this update: Sun 19 May 2024 00:56:20 +0000 Manifest next update: Wed 22 May 2024 03:50:20 +0000 Files and hashes: 1: 27575AEBC443417C31FDF4A1DDFE016557A835F4.crl (hash: aHV1gmuMXOK5WjtDGlusQnUthNSPo4idOy+ql68/WTs=) 2: 3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (hash: t6c32N0QT/bsU0NYwtRjJI6v1NVu0ZeDhgW7YJmSdJk=) 3: 3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (hash: wQHD+4mw8J6xuOSmjLqZRgUk9TNM/lskkFYI3WRdSWs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:56:b6:46:50:3a:a8:1f:dc:cf:7f:fc:d8:fa:49:b5:8d:1b:a1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27575AEBC443417C31FDF4A1DDFE016557A835F4 Validity Not Before: May 19 00:56:20 2024 GMT Not After : May 22 03:50:20 2024 GMT Subject: CN=384180908CFDBCC8E62BB0D218D0167A6C25DB97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:cd:89:52:e4:c1:3f:93:36:45:f6:ea:c5: b8:01:9d:6f:b5:88:c9:4d:f1:20:82:be:ff:86:d4: 06:c8:12:18:ce:92:01:e1:49:8e:0e:9f:89:3d:57: 53:23:e8:9e:dd:27:ec:4f:04:1b:9e:87:0c:35:44: 1c:17:68:0f:b5:c0:42:a5:d8:b4:d1:7b:86:c2:7b: 8b:87:a8:01:d2:92:12:e6:79:0f:38:62:79:6d:e3: e2:5c:b3:c6:c8:7a:83:2e:c3:11:1f:85:11:8b:b1: e9:83:36:69:02:2b:4c:21:42:8f:96:5c:19:d0:05: 82:5c:8e:63:08:24:30:ad:ca:e0:16:86:ea:ba:a5: d8:7e:f7:61:de:08:77:56:1a:c2:81:54:e2:77:c4: ad:0a:64:ef:74:af:75:2c:3a:6f:3d:63:6c:04:93: b1:29:bf:57:fc:de:50:cd:66:72:1b:95:e3:f9:27: ef:08:99:ac:91:77:da:7b:7c:e0:1b:60:2e:94:d6: 07:60:a8:23:48:ae:73:3c:87:ee:4c:c2:f8:47:b6: ec:65:e7:e3:da:d3:94:c9:7b:cd:36:58:69:ec:9b: 55:f0:36:c6:91:b8:a5:38:c5:03:6a:49:21:b7:75: 3a:eb:39:78:f1:c8:66:16:c6:96:80:db:2f:6f:6c: c9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:41:80:90:8C:FD:BC:C8:E6:2B:B0:D2:18:D0:16:7A:6C:25:DB:97 X509v3 Authority Key Identifier: keyid:27:57:5A:EB:C4:43:41:7C:31:FD:F4:A1:DD:FE:01:65:57:A8:35:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27575AEBC443417C31FDF4A1DDFE016557A835F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/27575AEBC443417C31FDF4A1DDFE016557A835F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:a0:06:55:9c:b7:f0:4d:41:c6:2e:3d:9b:75:74:ab:1b:1b: fc:10:d7:25:d1:9b:bb:c2:4f:c2:0b:ba:a5:da:02:62:d1:f8: 10:1e:47:5d:7c:b2:6e:73:b9:9d:fd:cf:38:ed:4b:2e:d5:30: 4a:34:1c:1c:40:26:e2:64:08:76:ef:a0:a7:56:47:63:d2:86: 58:cd:b3:8f:b1:b8:c0:9d:25:a7:94:b7:0e:b8:e5:16:86:25: c5:41:9a:09:db:a3:fc:5c:5a:c8:2a:5e:b8:11:cb:8b:9a:e7: f2:96:56:0c:a6:40:9a:90:3c:ee:01:82:1a:e4:2b:ca:78:c2: 27:66:3c:6e:d2:11:95:74:5a:ef:23:8c:73:57:a6:c7:1e:63: 83:c1:f2:f2:99:4e:7a:59:c0:4f:de:18:0c:7f:db:a2:0d:a6: 60:a3:72:45:8f:94:a5:d1:99:e3:e9:4b:b3:bc:15:b9:18:16: af:c6:e5:7c:f3:bd:6c:83:29:fa:b0:41:31:07:11:14:b7:f4: 6f:ab:04:54:f3:71:b6:fb:b1:1c:64:94:e4:a2:e6:a4:dc:07: b9:a8:17:72:74:ee:e3:3f:ec:38:a8:5f:b0:b9:ee:f3:60:15: a8:2b:a8:c3:4e:b4:dc:95:01:5f:cc:a8:ce:26:dd:7e:2e:6c: 90:e6:3d:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO1a2RlA6qB/cz3/82PpJtY0boUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1 N0E4MzVGNDAeFw0yNDA1MTkwMDU2MjBaFw0yNDA1MjIwMzUwMjBaMDMxMTAvBgNV BAMTKDM4NDE4MDkwOENGREJDQzhFNjJCQjBEMjE4RDAxNjdBNkMyNURCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbM2JUuTBP5M2RfbqxbgBnW+1 iMlN8SCCvv+G1AbIEhjOkgHhSY4On4k9V1Mj6J7dJ+xPBBuehww1RBwXaA+1wEKl 2LTRe4bCe4uHqAHSkhLmeQ84Ynlt4+Jcs8bIeoMuwxEfhRGLsemDNmkCK0whQo+W XBnQBYJcjmMIJDCtyuAWhuq6pdh+92HeCHdWGsKBVOJ3xK0KZO90r3UsOm89Y2wE k7Epv1f83lDNZnIbleP5J+8ImayRd9p7fOAbYC6U1gdgqCNIrnM8h+5MwvhHtuxl 5+Pa05TJe802WGnsm1XwNsaRuKU4xQNqSSG3dTrrOXjxyGYWxpaA2y9vbMlvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOEGAkIz9vMjmK7DSGNAWemwl25cwHwYDVR0j BBgwFoAUJ1da68RDQXwx/fSh3f4BZVeoNfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzZiNTk3Yy05NTQ3LTRjMWUtYWM4Ny0zYTQzNGEzMDBhNjcvMC8yNzU3NUFFQkM0 NDM0MTdDMzFGREY0QTFEREZFMDE2NTU3QTgzNUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAxNjU1N0E4 MzVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM2YjU5N2MtOTU0Ny00YzFlLWFj ODctM2E0MzRhMzAwYTY3LzAvMjc1NzVBRUJDNDQzNDE3QzMxRkRGNEExRERGRTAx NjU1N0E4MzVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMugBlWct/BNQcYuPZt1dKsbG/wQ1yXRm7vC T8ILuqXaAmLR+BAeR118sm5zuZ39zzjtSy7VMEo0HBxAJuJkCHbvoKdWR2PShljN s4+xuMCdJaeUtw645RaGJcVBmgnbo/xcWsgqXrgRy4ua5/KWVgymQJqQPO4Bghrk K8p4widmPG7SEZV0Wu8jjHNXpsceY4PB8vKZTnpZwE/eGAx/26INpmCjckWPlKXR mePpS7O8FbkYFq/G5XzzvWyDKfqwQTEHERS39G+rBFTzcbb7sRxklOSi5qTcB7mo F3J07uM/7DioX7C57vNgFagrqMNOtNyVAV/MqM4m3X4ubJDmPUI= -----END CERTIFICATE-----Generated at Sun May 19 01:44:54 2024 by rpki-client on console-ams.rpki-client.org