$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: iBmc6rcJ+vqoEyz6/mW9LcuP42fWuRcWZx1IIw661g8= Subject key identifier: 7A:E8:10:49:C7:3C:54:57:80:FE:C8:99:CB:A5:43:68:7C:5F:E6:00 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 0B7889D5D8C2F6BEF7679BFC1F0981EAACBE5309 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 02A7 Signing time: Wed 08 May 2024 18:31:48 +0000 Manifest this update: Wed 08 May 2024 18:26:48 +0000 Manifest next update: Sun 12 May 2024 04:59:48 +0000 Files and hashes: 1: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: UBpYgOgna8q1z7EE1XvVVlZs9tAu1iNsVPfrnRifuA4=) 2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: 2v/e8pZGfh01NCUDSkHZRtnFbJ6H6cU7Yzu2u9dK07E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:78:89:d5:d8:c2:f6:be:f7:67:9b:fc:1f:09:81:ea:ac:be:53:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: May 8 18:26:48 2024 GMT Not After : May 12 04:59:48 2024 GMT Subject: CN=7AE81049C73C545780FEC899CBA543687C5FE600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:59:e0:82:07:09:5e:68:90:19:13:36:50: 0c:f3:01:a4:15:02:11:ef:39:d5:ad:0a:89:86:d4: 92:d2:e5:2e:60:d5:aa:f7:79:68:f3:13:d8:e2:a1: 3b:f8:04:cc:bb:84:66:49:e6:97:f1:65:88:94:a0: 06:ab:c2:04:87:f0:d3:90:fc:4f:5f:96:ef:aa:a3: ac:fe:b1:e2:df:c7:34:df:55:10:3c:34:f0:e0:41: b9:7c:c9:d1:19:e0:98:96:00:bf:03:f8:3b:5b:65: 29:e0:72:0d:a7:73:eb:f9:c6:5a:18:a5:f8:7a:43: 1f:d9:d6:55:ea:c1:bb:e4:6a:1d:1f:33:7d:37:82: 43:4a:81:4f:d1:10:25:73:00:81:eb:1d:07:83:b4: fa:eb:84:8b:33:ed:8d:04:ff:16:d7:08:37:75:e7: c1:ba:80:44:ad:09:49:d5:d4:f7:a1:d0:66:20:c5: cd:ec:78:29:de:39:c2:31:5e:dc:e3:98:0d:fa:18: f5:8e:71:2a:4e:21:ce:c9:5e:d3:fc:4a:43:03:66: cd:61:d3:c2:fd:f8:68:0a:8f:b3:50:f4:ab:1e:bc: 96:c0:37:57:7b:e5:7e:e2:3d:54:4a:76:1f:1d:45: eb:63:50:7c:99:67:a1:3c:99:72:de:8e:60:94:24: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E8:10:49:C7:3C:54:57:80:FE:C8:99:CB:A5:43:68:7C:5F:E6:00 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ca:c3:4e:0c:be:b6:13:0b:a9:ed:bb:25:9f:0a:24:94:f8: ce:ee:8f:4e:06:ec:6d:fc:94:15:88:69:4b:f1:06:67:06:41: 79:c3:6a:f8:17:25:5e:09:2b:b7:63:57:a6:98:48:d8:f0:5e: 97:24:04:74:20:f2:da:ad:f2:49:64:2b:7e:f9:78:b3:06:1e: c3:50:1a:2b:46:75:09:27:3e:e3:1b:94:12:bb:20:6a:06:f1: 57:bc:67:a9:d5:c0:2e:61:80:b6:17:31:64:3c:3a:06:1a:a3: bc:ee:74:70:0f:fe:62:55:a2:fb:f6:6c:27:b8:24:49:54:67: bc:a3:f5:a4:2e:1d:b8:2b:06:96:28:6b:0f:09:56:c1:5f:9b: 5d:1b:c1:77:dc:1e:b3:e0:f0:f2:5e:65:5f:90:43:77:bb:83: a7:82:90:ba:9e:3f:0b:bd:9b:74:5d:42:92:06:4b:c9:64:31: 34:d0:48:a6:ee:58:38:e8:e5:49:1d:3f:8b:d4:ac:dd:09:b6: b1:d5:5d:cc:26:62:f3:79:2d:0a:0c:fa:5c:f3:ea:9c:db:b2: 42:ed:37:e8:57:29:a0:43:5b:45:64:67:4f:25:50:4c:1e:10: cc:45:38:ac:90:b9:4e:a2:52:85:70:2b:01:8f:a9:38:f8:5f: fa:8b:d7:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3iJ1djC9r73Z5v8HwmB6qy+UwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNDA1MDgxODI2NDhaFw0yNDA1MTIwNDU5NDhaMDMxMTAvBgNV BAMTKDdBRTgxMDQ5QzczQzU0NTc4MEZFQzg5OUNCQTU0MzY4N0M1RkU2MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRt1ngggcJXmiQGRM2UAzzAaQV AhHvOdWtComG1JLS5S5g1ar3eWjzE9jioTv4BMy7hGZJ5pfxZYiUoAarwgSH8NOQ /E9flu+qo6z+seLfxzTfVRA8NPDgQbl8ydEZ4JiWAL8D+DtbZSngcg2nc+v5xloY pfh6Qx/Z1lXqwbvkah0fM303gkNKgU/RECVzAIHrHQeDtPrrhIsz7Y0E/xbXCDd1 58G6gEStCUnV1Peh0GYgxc3seCneOcIxXtzjmA36GPWOcSpOIc7JXtP8SkMDZs1h 08L9+GgKj7NQ9KsevJbAN1d75X7iPVRKdh8dRetjUHyZZ6E8mXLejmCUJFZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeugQScc8VFeA/siZy6VDaHxf5gAwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/Kw04MvrYTC6ntuyWfCiSU+M7uj04G7G38 lBWIaUvxBmcGQXnDavgXJV4JK7djV6aYSNjwXpckBHQg8tqt8klkK375eLMGHsNQ GitGdQknPuMblBK7IGoG8Ve8Z6nVwC5hgLYXMWQ8OgYao7zudHAP/mJVovv2bCe4 JElUZ7yj9aQuHbgrBpYoaw8JVsFfm10bwXfcHrPg8PJeZV+QQ3e7g6eCkLqePwu9 m3RdQpIGS8lkMTTQSKbuWDjo5UkdP4vUrN0JtrHVXcwmYvN5LQoM+lzz6pzbskLt N+hXKaBDW0VkZ08lUEweEMxFOKyQuU6iUoVwKwGPqTj4X/qL12M= -----END CERTIFICATE-----Generated at Wed May 8 21:02:07 2024 by rpki-client on console-fra.rpki-client.org