$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft File: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft (raw, json) Hash identifier: m43vopmGf5K5UhPZfDYVgzjBAD9I6SRE2yeLYKTDT2c= Subject key identifier: 9D:4C:6E:20:8F:94:5A:3D:22:67:C0:F0:1A:76:BD:94:4F:BB:B0:AE Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 Certificate issuer: /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Certificate serial: 69D8FC87E95EEF09017F04142AE6875B3E599B0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft Manifest number: 0109 Signing time: Fri 17 May 2024 13:41:04 +0000 Manifest this update: Fri 17 May 2024 13:36:04 +0000 Manifest next update: Tue 21 May 2024 01:33:04 +0000 Files and hashes: 1: 5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl (hash: QvKQrrvK+c3QWoqt61qeykEAQpYhrqZ88yNooGBnDic=) 2: 3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (hash: m7mAYTc7iCuKCxV3rw8LcPMvMx67xGzo+y4I7ZdAIog=) 3: 323430353a636534303a3a2f33322d3438203d3e20313339393838.roa (hash: qln4Vk3LqPuSEAyfEFKIbrl7uM6MoBml3amcry/eX+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 23:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d8:fc:87:e9:5e:ef:09:01:7f:04:14:2a:e6:87:5b:3e:59:9b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55 Validity Not Before: May 17 13:36:04 2024 GMT Not After : May 21 01:33:04 2024 GMT Subject: CN=9D4C6E208F945A3D2267C0F01A76BD944FBBB0AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:be:f6:e1:b8:87:03:29:f1:e1:1e:0d:b3:5b: a0:32:6d:ce:63:e0:81:9b:46:19:2a:79:15:f9:09: a8:55:73:4b:4e:93:cc:df:96:91:ea:82:32:43:49: 83:9f:08:73:f0:67:91:48:15:89:49:29:3b:92:3c: b6:c4:f1:b8:78:83:65:1e:aa:60:5b:f3:9d:5f:27: f2:ad:4d:22:c3:10:9d:6c:5d:fa:45:b5:16:4c:6f: b6:53:03:1e:38:90:38:94:90:db:d6:23:59:c9:d0: f6:c8:8d:4e:49:a4:53:00:ca:a2:1e:51:7d:19:33: 26:8c:6c:98:51:9c:d1:f8:b2:14:ad:af:06:b9:64: 94:9e:01:d1:90:de:cb:ea:24:2d:5b:37:de:0f:62: 8b:65:73:c8:68:4e:7e:1d:bd:d2:5c:02:33:bf:89: 6a:3e:a6:c8:b8:54:c7:9c:4e:fe:d1:0e:a3:f5:61: 73:54:0a:d0:b8:c5:af:55:5c:b5:09:93:84:fe:75: 67:04:49:9a:7e:dd:7a:85:98:a8:1c:ed:5c:1b:bd: 82:70:c0:aa:b2:c9:94:6a:cd:a2:6d:6d:a4:43:80: 29:48:48:1d:6d:4e:3f:cb:c0:78:19:8e:4d:ed:52: 4f:77:51:a9:7b:13:c4:6c:ef:78:c6:2f:c4:77:d5: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4C:6E:20:8F:94:5A:3D:22:67:C0:F0:1A:76:BD:94:4F:BB:B0:AE X509v3 Authority Key Identifier: keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f0:c2:17:11:5c:54:ba:d4:0e:94:9c:f3:62:de:20:c2:34: 1f:ae:3a:95:80:17:77:08:06:d3:78:92:e7:68:df:5f:a6:e5: 75:92:f6:ee:b3:bf:a8:99:b6:7b:d2:ac:53:cd:d1:7b:9c:cb: f4:61:94:07:de:1a:b7:26:42:73:05:a9:b3:c7:3c:41:e4:f5: 51:94:0f:83:78:eb:51:3d:82:be:fe:9d:63:d7:3e:26:09:13: c6:e1:95:b4:ec:fc:8e:f4:25:6c:d4:1e:3a:33:e8:a5:f4:6d: 96:ce:a6:bf:bc:e6:d8:04:4f:4a:fa:fc:16:d2:99:58:91:7d: bb:06:d1:6b:98:ed:01:e8:48:a0:75:cb:00:c8:19:eb:56:bc: 80:d6:a8:d9:e7:ca:78:c0:0e:c9:51:b1:19:be:5b:11:80:e7: 8d:20:df:e1:ad:69:6a:7a:88:b8:ed:ac:be:81:5e:8c:b0:ec: 3f:10:f5:2f:ef:5d:a5:3c:65:4f:03:03:74:c0:fd:fa:f5:a7: 83:ec:c3:41:f9:d2:6a:d8:b4:28:90:bd:d1:12:60:77:f7:9b: 2f:89:c2:92:7b:93:25:18:52:d6:bf:29:73:96:75:8d:25:bc: 14:33:16:85:53:44:e2:ee:d2:ff:5e:49:72:98:79:0e:2a:25: a1:b5:25:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadj8h+le7wkBfwQUKuaHWz5ZmwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy RDBENEI1NTAeFw0yNDA1MTcxMzM2MDRaFw0yNDA1MjEwMTMzMDRaMDMxMTAvBgNV BAMTKDlENEM2RTIwOEY5NDVBM0QyMjY3QzBGMDFBNzZCRDk0NEZCQkIwQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvvbhuIcDKfHhHg2zW6Aybc5j 4IGbRhkqeRX5CahVc0tOk8zflpHqgjJDSYOfCHPwZ5FIFYlJKTuSPLbE8bh4g2Ue qmBb851fJ/KtTSLDEJ1sXfpFtRZMb7ZTAx44kDiUkNvWI1nJ0PbIjU5JpFMAyqIe UX0ZMyaMbJhRnNH4shStrwa5ZJSeAdGQ3svqJC1bN94PYotlc8hoTn4dvdJcAjO/ iWo+psi4VMecTv7RDqP1YXNUCtC4xa9VXLUJk4T+dWcESZp+3XqFmKgc7VwbvYJw wKqyyZRqzaJtbaRDgClISB1tTj/LwHgZjk3tUk93Ual7E8Rs73jGL8R31WMtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnUxuII+UWj0iZ8DwGna9lE+7sK4wHwYDVR0j BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1 RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE NEI1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJkNjZkMTAtYjg1Ny00YmVmLTkz OTUtNDVkNWFiMmM0NGY5LzAvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1 QTIyRDBENEI1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHwwhcRXFS61A6UnPNi3iDCNB+uOpWAF3cI BtN4kudo31+m5XWS9u6zv6iZtnvSrFPN0Xucy/RhlAfeGrcmQnMFqbPHPEHk9VGU D4N461E9gr7+nWPXPiYJE8bhlbTs/I70JWzUHjoz6KX0bZbOpr+85tgET0r6/BbS mViRfbsG0WuY7QHoSKB1ywDIGetWvIDWqNnnynjADslRsRm+WxGA540g3+GtaWp6 iLjtrL6BXoyw7D8Q9S/vXaU8ZU8DA3TA/fr1p4Psw0H50mrYtCiQvdESYHf3my+J wpJ7kyUYUta/KXOWdY0lvBQzFoVTROLu0v9eSXKYeQ4qJaG1Jdw= -----END CERTIFICATE-----Generated at Fri May 17 14:07:16 2024 by rpki-client on console-fra.rpki-client.org