$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: HqObK+8G0bVsZrboKxgOkfcWOr5ljcHuKKFyPKzqCrY= Subject key identifier: 2F:F6:04:5A:8F:6E:44:C7:C5:44:92:C6:3C:36:BC:A2:69:22:F1:A6 Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 3C30D94D7C56F7769660D9AB61AE5B480C0A6058 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 52 Signing time: Tue 28 May 2024 11:52:00 +0000 Manifest this update: Tue 28 May 2024 11:47:00 +0000 Manifest next update: Fri 31 May 2024 23:02:00 +0000 Files and hashes: 1: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: jGqb5rLMkyZmA3tuDb3dtsUxMReTDzTDwNpqw7knJMs=) 2: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: 00Medh3iJDdM+GaZSfxwXYeXsE2k/jJy5x2ACG+4emI=) 3: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: 2e3QgDlhYOehP7JMHixNNgkTFaMcLEB73HdIACQiL5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:30:d9:4d:7c:56:f7:76:96:60:d9:ab:61:ae:5b:48:0c:0a:60:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: May 28 11:47:00 2024 GMT Not After : May 31 23:02:00 2024 GMT Subject: CN=2FF6045A8F6E44C7C54492C63C36BCA26922F1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1e:13:85:ce:d0:5c:81:02:8e:a2:5c:11:75: 50:eb:63:ec:ab:0f:cd:8a:74:8c:cc:3b:81:20:a5: 68:e9:7b:f5:a3:8c:e0:21:1a:cc:6e:96:93:57:e2: b0:f8:6f:c0:7a:e7:57:a3:d2:0f:a0:6e:2f:48:4c: b9:a2:e4:2d:42:a7:22:48:99:ad:a4:be:2c:01:0f: d7:36:a3:a3:9b:1f:27:fe:10:a3:f9:b0:21:43:1a: 5b:ed:5e:8c:d7:1c:0f:d1:30:16:fb:cd:55:98:5c: 6c:49:d1:69:f8:0f:15:fe:7a:44:7e:63:fd:8d:c8: 22:82:b5:e3:e9:a4:d5:8e:49:53:ad:b4:cc:65:ec: e1:49:c1:5e:75:c9:e5:4e:5c:2e:0b:68:6d:0b:0b: 20:7b:8d:95:e3:ea:9c:85:e5:2e:02:c9:d8:db:56: 2f:0f:3d:ab:d2:1b:a0:f3:56:c6:f9:ac:8d:9f:d6: 01:f1:2e:fe:b4:9c:7f:99:d7:27:22:98:17:9e:63: 47:42:ba:db:56:1e:ad:85:a5:7f:dc:c2:ee:fd:53: 62:8d:e3:77:5f:fd:a6:18:c9:96:f2:04:df:52:44: 04:4e:77:7a:e6:58:e6:e5:7c:28:99:78:04:46:a8: cf:a0:82:ec:e3:0f:3b:c4:46:fa:56:a5:de:b4:c6: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F6:04:5A:8F:6E:44:C7:C5:44:92:C6:3C:36:BC:A2:69:22:F1:A6 X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d2:2f:7d:fd:35:6d:30:60:57:b9:b0:3d:ee:59:34:9d:d6: eb:81:c5:51:f1:34:05:39:e8:67:85:df:aa:d8:23:e2:b9:9d: 60:9a:46:78:a0:07:b5:90:3e:9d:34:8c:6b:6f:1d:8d:24:c9: 1a:a3:d2:df:f4:05:bf:bf:6e:6a:96:5f:95:e2:d4:02:39:a8: 42:7d:79:d9:c6:a9:cf:c6:54:d7:f4:77:e8:41:78:89:27:d8: 36:22:d9:7b:53:fb:8c:4d:b0:13:80:95:a8:53:cd:20:e4:1d: 2b:57:38:32:4c:e9:0a:02:8d:ca:79:44:3a:fe:8c:8e:ad:09: a2:44:b5:9b:45:32:6c:69:1e:5b:65:2d:7d:da:d7:ab:fc:c7: 63:15:85:68:c0:31:c7:14:fb:a7:2f:1e:df:72:0a:1a:23:42: 07:6c:a9:05:fe:2d:3c:9c:69:85:1d:07:77:83:62:fc:eb:6a: 8b:7f:4a:3c:c6:c9:8f:22:2f:88:a9:55:4c:a7:d9:66:69:5c: 2e:f0:39:e2:36:8c:ce:92:65:40:e3:78:b0:b0:b4:f6:10:23: 1b:04:88:25:35:0c:1c:11:22:81:4f:1b:d1:e8:20:88:9a:13: b5:6c:f4:f1:58:e0:28:82:4b:b7:35:3f:3a:bb:c6:a3:a1:82: 00:02:9a:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDDZTXxW93aWYNmrYa5bSAwKYFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNDA1MjgxMTQ3MDBaFw0yNDA1MzEyMzAyMDBaMDMxMTAvBgNV BAMTKDJGRjYwNDVBOEY2RTQ0QzdDNTQ0OTJDNjNDMzZCQ0EyNjkyMkYxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhHhOFztBcgQKOolwRdVDrY+yr D82KdIzMO4EgpWjpe/WjjOAhGsxulpNX4rD4b8B651ej0g+gbi9ITLmi5C1CpyJI ma2kviwBD9c2o6ObHyf+EKP5sCFDGlvtXozXHA/RMBb7zVWYXGxJ0Wn4DxX+ekR+ Y/2NyCKCtePppNWOSVOttMxl7OFJwV51yeVOXC4LaG0LCyB7jZXj6pyF5S4Cydjb Vi8PPavSG6DzVsb5rI2f1gHxLv60nH+Z1ycimBeeY0dCuttWHq2FpX/cwu79U2KN 43df/aYYyZbyBN9SRAROd3rmWOblfCiZeARGqM+gguzjDzvERvpWpd60xh5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL/YEWo9uRMfFRJLGPDa8omki8aYwHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbSL339NW0wYFe5sD3uWTSd1uuBxVHxNAU5 6GeF36rYI+K5nWCaRnigB7WQPp00jGtvHY0kyRqj0t/0Bb+/bmqWX5Xi1AI5qEJ9 ednGqc/GVNf0d+hBeIkn2DYi2XtT+4xNsBOAlahTzSDkHStXODJM6QoCjcp5RDr+ jI6tCaJEtZtFMmxpHltlLX3a16v8x2MVhWjAMccU+6cvHt9yChojQgdsqQX+LTyc aYUdB3eDYvzraot/SjzGyY8iL4ipVUyn2WZpXC7wOeI2jM6SZUDjeLCwtPYQIxsE iCU1DBwRIoFPG9HoIIiaE7Vs9PFY4CiCS7c1Pzq7xqOhggACmjw= -----END CERTIFICATE-----Generated at Tue May 28 13:23:27 2024 by rpki-client on console-fra.rpki-client.org