$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: BYbsfTPRS/Q75ZYB+dDXcJC6HuBYetUJgXorXnZW4dg= Subject key identifier: B9:8B:44:CF:64:08:96:85:BF:6A:64:FF:E1:CF:80:7F:CD:20:23:A6 Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 5EE569B5CEEE586BE87E101F257CD3012FC5096F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 0160 Signing time: Sat 18 May 2024 15:00:03 +0000 Manifest this update: Sat 18 May 2024 14:55:03 +0000 Manifest next update: Tue 21 May 2024 20:22:03 +0000 Files and hashes: 1: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: B22oYPyMT/OSdCCpI9b5ZjNciq4f5rM/63hoAKd4Eh4=) 2: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: hTCn80C0rLC+NdPXu3YaEECwcZVRYJe62Xoxof3kcZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e5:69:b5:ce:ee:58:6b:e8:7e:10:1f:25:7c:d3:01:2f:c5:09:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: May 18 14:55:03 2024 GMT Not After : May 21 20:22:03 2024 GMT Subject: CN=B98B44CF64089685BF6A64FFE1CF807FCD2023A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:42:57:fd:c5:ee:a9:ec:41:84:d6:08:6d: 51:1f:62:5b:ec:d2:2a:12:20:f6:13:d6:ef:c5:83: 1b:a5:2a:cb:33:bc:1c:ea:bd:28:17:be:2e:b1:33: 5a:69:d3:70:73:15:d0:31:7b:25:f6:35:52:29:32: 12:c5:2d:d0:c1:f4:d9:be:3b:b9:39:39:a2:77:3f: 28:4c:4d:a4:5e:22:d1:c3:d7:7d:63:f6:6a:27:3b: a7:35:df:ca:56:92:92:0e:4a:11:d1:7b:32:99:02: c3:98:3f:70:b0:75:3d:21:f8:9c:cd:b2:65:88:5f: 09:77:25:d1:ab:82:9f:94:11:15:7e:42:48:0d:61: 4f:15:3b:83:31:b7:6a:72:2b:58:ac:8b:f2:5a:64: ac:1a:80:5a:23:31:45:b2:58:fc:49:2b:90:11:2e: 19:cc:b0:1e:3f:91:e0:2f:31:6b:69:45:8f:0c:92: 8e:56:8a:a6:2a:a8:48:5c:7d:8e:3a:62:d8:8f:65: 93:59:9a:f5:b5:8f:40:3a:43:c4:0d:06:fd:e1:76: bf:c2:27:10:72:69:eb:a4:08:80:31:81:fd:10:8f: 57:e4:98:d7:bb:f5:23:fe:89:0e:07:da:2b:f4:64: 5b:81:0d:7c:94:0c:9d:bc:9f:2b:9c:35:7c:2f:26: 1f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8B:44:CF:64:08:96:85:BF:6A:64:FF:E1:CF:80:7F:CD:20:23:A6 X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:12:74:46:e9:f8:c2:f1:b3:5e:54:37:20:c5:7a:ef:0d:5f: 4c:bd:44:fa:9b:3f:52:f5:f6:e4:66:17:f7:ca:93:b1:39:41: 94:49:d3:f0:f7:6d:81:6a:f5:60:02:e4:fc:ab:6b:49:f0:c3: dd:83:1a:df:5a:40:8c:e3:12:9d:a8:e8:c4:8e:1f:4d:67:63: e2:83:96:de:c1:6d:33:09:92:5f:a5:14:29:96:97:4a:44:78: 33:99:3f:33:c2:a6:fa:00:99:cb:c4:6e:96:df:15:d7:31:ea: 56:1b:36:b9:be:89:b9:5d:68:17:c2:0d:16:a4:72:6d:7d:78: 66:d1:31:9d:8c:d9:3c:c1:be:7c:3d:bd:ae:a6:39:41:55:dc: d6:46:c9:5e:d6:11:36:aa:0e:bf:51:47:38:92:15:2a:51:2b: ea:86:10:80:de:3a:aa:5e:bd:39:90:73:6b:ff:93:f3:ae:4a: 56:05:23:16:0a:ff:57:0d:c8:34:4c:3d:3b:1c:6a:fd:cf:e6: 64:86:9a:38:39:a7:ab:be:83:94:78:15:10:7b:7e:14:4d:dd: 4b:93:91:e4:cb:35:b0:d7:0d:f2:cd:17:a1:24:40:b8:d9:c2: 0e:72:18:66:61:bb:c5:5c:51:4c:8f:cb:71:bf:e7:63:0c:f1: 86:3b:b9:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXuVptc7uWGvofhAfJXzTAS/FCW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNDA1MTgxNDU1MDNaFw0yNDA1MjEyMDIyMDNaMDMxMTAvBgNV BAMTKEI5OEI0NENGNjQwODk2ODVCRjZBNjRGRkUxQ0Y4MDdGQ0QyMDIzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGUJX/cXuqexBhNYIbVEfYlvs 0ioSIPYT1u/FgxulKsszvBzqvSgXvi6xM1pp03BzFdAxeyX2NVIpMhLFLdDB9Nm+ O7k5OaJ3PyhMTaReItHD131j9monO6c138pWkpIOShHRezKZAsOYP3CwdT0h+JzN smWIXwl3JdGrgp+UERV+QkgNYU8VO4Mxt2pyK1isi/JaZKwagFojMUWyWPxJK5AR LhnMsB4/keAvMWtpRY8Mko5WiqYqqEhcfY46YtiPZZNZmvW1j0A6Q8QNBv3hdr/C JxByaeukCIAxgf0Qj1fkmNe79SP+iQ4H2iv0ZFuBDXyUDJ28nyucNXwvJh8LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuYtEz2QIloW/amT/4c+Af80gI6YwHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAISdEbp+MLxs15UNyDFeu8NX0y9RPqbP1L1 9uRmF/fKk7E5QZRJ0/D3bYFq9WAC5Pyra0nww92DGt9aQIzjEp2o6MSOH01nY+KD lt7BbTMJkl+lFCmWl0pEeDOZPzPCpvoAmcvEbpbfFdcx6lYbNrm+ibldaBfCDRak cm19eGbRMZ2M2TzBvnw9va6mOUFV3NZGyV7WETaqDr9RRziSFSpRK+qGEIDeOqpe vTmQc2v/k/OuSlYFIxYK/1cNyDRMPTscav3P5mSGmjg5p6u+g5R4FRB7fhRN3UuT keTLNbDXDfLNF6EkQLjZwg5yGGZhu8VcUUyPy3G/52MM8YY7uVs= -----END CERTIFICATE-----Generated at Sat May 18 15:57:29 2024 by rpki-client on console-ams.rpki-client.org