$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft File: E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft (raw, json) Hash identifier: GiLvlf1d2XqGnp1w5HAAU3TP06QKE3OfwSFCq+OCTMs= Subject key identifier: 2C:35:37:F4:B1:D5:DC:B7:03:88:36:CB:9F:AF:1E:B2:85:34:D1:E7 Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 Certificate issuer: /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Certificate serial: 19E2EDC8337FFE3E84D39B155732D150517791F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft Manifest number: 0151 Signing time: Sun 19 May 2024 01:11:28 +0000 Manifest this update: Sun 19 May 2024 01:06:28 +0000 Manifest next update: Wed 22 May 2024 05:29:28 +0000 Files and hashes: 1: E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl (hash: 7DxMnVSNPmVNX2nJ6pxVR0x+ah2kBDFgWVD9MPj4vN0=) 2: 3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (hash: dBdAEMMIZQBHG9D050LJZcl9yacI+k3OYS4/Q2exWpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e2:ed:c8:33:7f:fe:3e:84:d3:9b:15:57:32:d1:50:51:77:91:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81 Validity Not Before: May 19 01:06:28 2024 GMT Not After : May 22 05:29:28 2024 GMT Subject: CN=2C3537F4B1D5DCB7038836CB9FAF1EB28534D1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:e6:6e:9a:d0:84:49:b8:17:53:98:8a:73: 08:65:98:e9:0d:44:1c:85:26:9b:cf:37:fb:6c:0a: 04:92:62:7f:7b:9d:79:56:11:5c:97:46:70:fd:14: 3d:18:03:1f:81:9f:ef:a8:2c:2a:cc:75:82:c7:4f: 3c:2f:ec:68:71:4b:a9:94:e8:36:3f:0c:a5:a3:37: 4e:ee:9c:b0:dc:7a:d6:c4:34:4e:6a:58:08:87:02: 5f:9e:d8:87:29:97:d3:43:0a:63:42:50:a5:03:41: c9:b8:51:37:53:1e:8d:32:35:21:4b:53:eb:8f:eb: 7d:02:49:2b:54:a1:80:1b:82:67:92:4d:63:fe:25: 57:6a:d2:e8:6e:92:06:59:fa:55:3a:ca:bb:2a:56: 6f:45:91:e6:e3:7b:98:4d:39:f8:88:8f:d1:6f:6a: f6:03:bb:93:3c:0e:76:a8:ec:99:7d:11:0e:35:2d: f0:71:f9:99:f1:6f:36:5b:b6:68:4a:95:9b:32:0b: f4:a9:a3:b6:00:f4:77:49:cf:cc:db:91:23:05:fd: e1:f3:45:69:da:29:fe:ae:72:bd:df:ad:57:df:0c: 85:a7:be:c0:55:1a:d5:ab:ef:47:3f:cb:43:0b:16: 4f:51:d3:0a:6d:2a:06:9d:92:56:39:bb:52:13:e1: 44:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:35:37:F4:B1:D5:DC:B7:03:88:36:CB:9F:AF:1E:B2:85:34:D1:E7 X509v3 Authority Key Identifier: keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:58:39:25:8d:b3:d8:15:f5:e0:a0:c9:76:3f:fb:19:f5:6e: ef:16:83:d6:2a:70:6a:c3:46:79:10:23:17:bc:6e:f8:b0:95: c7:d7:e0:83:70:b2:88:7d:ab:1d:ea:b3:fb:a7:b8:37:1c:71: 95:c1:6f:88:a3:e1:c4:2d:d0:0a:76:6e:69:45:60:d6:5c:db: fe:c1:13:fe:b8:94:85:4a:ae:e8:c0:56:3f:d4:d7:8c:aa:ea: 36:f1:a6:d2:07:8d:00:cc:65:8f:e3:d4:ea:7f:98:b6:08:5c: bb:b4:f5:eb:40:64:8e:83:51:5f:35:48:63:0a:4a:13:37:ae: 02:f9:8d:cd:86:8b:88:07:06:f0:c7:ac:dd:27:cc:80:3a:82: 3a:ea:94:95:a6:0c:34:39:02:2b:cb:1b:a5:41:2e:55:26:7f: 69:9f:ea:8d:93:4f:99:ba:8b:57:02:51:eb:f4:4d:8b:33:52: 9a:cf:38:18:2d:ba:25:da:6f:d1:10:53:b6:5a:52:00:d9:a8: d5:cf:97:c9:51:9f:b2:10:ba:3d:03:a0:db:13:bb:69:83:13: 46:84:1d:bb:0a:81:e9:71:ca:8a:ea:66:73:3d:90:f0:76:e7: 8d:fb:a1:0b:8f:12:a7:f7:10:6c:0a:23:b0:d6:8d:5f:28:e4: 6f:cc:aa:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGeLtyDN//j6E05sVVzLRUFF3kfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3 QjQxMUE4MTAeFw0yNDA1MTkwMTA2MjhaFw0yNDA1MjIwNTI5MjhaMDMxMTAvBgNV BAMTKDJDMzUzN0Y0QjFENURDQjcwMzg4MzZDQjlGQUYxRUIyODUzNEQxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYP+ZumtCESbgXU5iKcwhlmOkN RByFJpvPN/tsCgSSYn97nXlWEVyXRnD9FD0YAx+Bn++oLCrMdYLHTzwv7GhxS6mU 6DY/DKWjN07unLDcetbENE5qWAiHAl+e2Icpl9NDCmNCUKUDQcm4UTdTHo0yNSFL U+uP630CSStUoYAbgmeSTWP+JVdq0uhukgZZ+lU6yrsqVm9Fkebje5hNOfiIj9Fv avYDu5M8Dnao7Jl9EQ41LfBx+ZnxbzZbtmhKlZsyC/Spo7YA9HdJz8zbkSMF/eHz RWnaKf6ucr3frVffDIWnvsBVGtWr70c/y0MLFk9R0wptKgadklY5u1IT4URHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULDU39LHV3LcDiDbLn68esoU00ecwHwYDVR0j BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3 N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx MUE4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAwMTAyZDAtNzE0Zi00YjUyLTli ZTUtZGVkMTZlZGZlNGEyLzAvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4 NzY3QjQxMUE4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRYOSWNs9gV9eCgyXY/+xn1bu8Wg9YqcGrD RnkQIxe8bviwlcfX4INwsoh9qx3qs/unuDcccZXBb4ij4cQt0Ap2bmlFYNZc2/7B E/64lIVKrujAVj/U14yq6jbxptIHjQDMZY/j1Op/mLYIXLu09etAZI6DUV81SGMK ShM3rgL5jc2Gi4gHBvDHrN0nzIA6gjrqlJWmDDQ5AivLG6VBLlUmf2mf6o2TT5m6 i1cCUev0TYszUprPOBgtuiXab9EQU7ZaUgDZqNXPl8lRn7IQuj0DoNsTu2mDE0aE HbsKgelxyorqZnM9kPB25437oQuPEqf3EGwKI7DWjV8o5G/MqtU= -----END CERTIFICATE-----Generated at Sun May 19 01:44:54 2024 by rpki-client on console-ams.rpki-client.org