$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft File: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft (raw, json) Hash identifier: xYnw1+E7lcRDgVzVKve5zn5DV5fiJPF4PCTHjqNrymg= Subject key identifier: 5C:67:E8:A7:F7:E4:5C:70:45:43:A4:9D:C7:FF:57:70:42:62:C6:0F Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E Certificate issuer: /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Certificate serial: 133DA47B2E730BC8CD140E60EB32F436EE092E5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft Manifest number: 0131 Signing time: Sat 18 May 2024 10:30:33 +0000 Manifest this update: Sat 18 May 2024 10:25:33 +0000 Manifest next update: Tue 21 May 2024 18:21:33 +0000 Files and hashes: 1: 65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl (hash: W1Uoux7I0IdkeGcyqZaop7r8NlXTm9ER0ujG8/UvwJU=) 2: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: OYg7qAhuryoyd0ZPI/hBmw2iC9UdebHt/rrBQ3eUY0k=) 3: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: 38zyMiXyq6nG2TpP3RHQtTZp/Prc/SSkc2ejtqKw9zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3d:a4:7b:2e:73:0b:c8:cd:14:0e:60:eb:32:f4:36:ee:09:2e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E Validity Not Before: May 18 10:25:33 2024 GMT Not After : May 21 18:21:33 2024 GMT Subject: CN=5C67E8A7F7E45C704543A49DC7FF57704262C60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:bf:28:a0:30:03:3c:0e:46:ce:3a:d0:a0: 5b:38:96:a9:5a:71:cb:22:5d:bc:4d:c4:ae:a0:e7: 76:0d:3f:e9:8d:bb:31:d6:8c:0d:dd:b2:a3:f5:97: 07:08:72:c7:44:4e:31:ab:e2:ba:d3:d4:8a:6a:a3: d1:47:d7:c6:8c:ef:3f:1b:25:ef:77:da:13:a0:70: f6:b1:0c:57:1f:39:7c:c3:a3:fc:2d:3c:38:ad:5d: 37:10:96:f9:61:7a:ed:31:2f:48:e3:f9:0a:99:8a: 6d:4c:84:f8:64:6c:fe:af:5f:2a:42:66:67:9a:c3: d1:59:12:bc:2e:cd:62:89:46:03:e7:8d:a8:59:06: 8f:ca:8f:81:42:68:80:eb:2d:54:2c:15:f5:98:87: df:22:a7:0b:ef:0e:b1:14:4e:2c:87:d6:54:83:4e: 1f:8e:06:bc:33:2b:53:fa:42:0b:18:c8:32:b4:cd: 28:be:e5:84:4a:f5:db:62:bf:a7:7d:d8:40:35:e6: 04:de:18:d8:de:06:85:51:fd:17:19:a5:55:90:36: 7f:e1:88:f2:04:47:8f:7a:30:bb:7f:a2:6f:1e:a2: c8:f5:f4:d1:74:83:de:69:67:ee:af:69:b6:76:43: 5f:f7:d0:5d:cc:6b:87:13:db:ca:8c:57:e5:48:79: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:67:E8:A7:F7:E4:5C:70:45:43:A4:9D:C7:FF:57:70:42:62:C6:0F X509v3 Authority Key Identifier: keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f7:5f:cc:b8:eb:76:18:98:32:7f:af:24:a5:cd:e8:3d:d0: 95:3e:d1:41:08:90:f7:a2:a6:62:b5:f4:df:0b:0f:a4:9e:3d: 60:91:f2:4d:4f:5f:01:e5:ff:d7:82:6a:f9:d3:4f:5e:2c:19: c1:19:98:f8:dd:35:13:87:7b:0f:d4:bf:c5:d1:79:da:f9:cf: 2d:63:32:22:5a:64:59:98:99:d5:c5:4b:f1:ce:49:af:f1:5c: f7:73:4c:9a:c1:a5:8d:6c:74:26:e8:34:46:2f:46:3b:7b:14: 5f:dd:20:17:4c:1c:27:5b:c1:87:8c:b4:fd:79:6b:9d:09:02: fc:23:53:df:03:0b:1e:b9:98:20:32:f1:82:78:88:48:01:01: 72:d7:2e:ce:75:4a:c5:65:d7:a4:be:56:f9:3b:6f:71:a4:47: e7:e0:95:86:90:57:2e:4b:95:f3:2e:e8:ca:4f:20:1a:35:40: 54:3e:f3:dd:de:f9:d7:3d:b3:af:45:df:48:73:5a:fc:6c:03: 0c:6b:24:e3:de:c4:0e:39:90:fc:78:71:88:9c:a9:d2:a2:a2: 2c:39:61:d3:4f:4c:b3:91:56:5a:be:45:59:c2:d7:da:be:98: 75:f9:ff:68:60:52:bf:34:62:5f:5c:01:49:cf:c2:27:e6:fb: a5:81:10:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEz2key5zC8jNFA5g6zL0Nu4JLlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB REMyODIzRTAeFw0yNDA1MTgxMDI1MzNaFw0yNDA1MjExODIxMzNaMDMxMTAvBgNV BAMTKDVDNjdFOEE3RjdFNDVDNzA0NTQzQTQ5REM3RkY1NzcwNDI2MkM2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92L8ooDADPA5GzjrQoFs4lqla ccsiXbxNxK6g53YNP+mNuzHWjA3dsqP1lwcIcsdETjGr4rrT1Ipqo9FH18aM7z8b Je932hOgcPaxDFcfOXzDo/wtPDitXTcQlvlheu0xL0jj+QqZim1MhPhkbP6vXypC Zmeaw9FZErwuzWKJRgPnjahZBo/Kj4FCaIDrLVQsFfWYh98ipwvvDrEUTiyH1lSD Th+OBrwzK1P6QgsYyDK0zSi+5YRK9dtiv6d92EA15gTeGNjeBoVR/RcZpVWQNn/h iPIER496MLt/om8eosj19NF0g95pZ+6vabZ2Q1/30F3Ma4cT28qMV+VIeefBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXGfop/fkXHBFQ6Sdx/9XcEJixg8wHwYDVR0j BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0 QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy ODIzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZE OUVBREMyODIzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP3X8y463YYmDJ/rySlzeg90JU+0UEIkPei pmK19N8LD6SePWCR8k1PXwHl/9eCavnTT14sGcEZmPjdNROHew/Uv8XRedr5zy1j MiJaZFmYmdXFS/HOSa/xXPdzTJrBpY1sdCboNEYvRjt7FF/dIBdMHCdbwYeMtP15 a50JAvwjU98DCx65mCAy8YJ4iEgBAXLXLs51SsVl16S+Vvk7b3GkR+fglYaQVy5L lfMu6MpPIBo1QFQ+893e+dc9s69F30hzWvxsAwxrJOPexA45kPx4cYicqdKioiw5 YdNPTLORVlq+RVnC19q+mHX5/2hgUr80Yl9cAUnPwifm+6WBEGo= -----END CERTIFICATE-----Generated at Sat May 18 11:25:22 2024 by rpki-client on console-ams.rpki-client.org