$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: GN/j/DI+TCy99PBzWSJQhcyAislNYxJL4cVCtTL59ik= Subject key identifier: 5E:14:35:EB:03:CE:B7:0B:BC:30:54:4B:B7:BE:6C:FC:E1:D2:59:45 Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 5562B8DC329E791B4626DE28B25F995C9F7BDC80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 0427 Signing time: Thu 02 May 2024 01:50:45 +0000 Manifest this update: Thu 02 May 2024 01:45:45 +0000 Manifest next update: Sun 05 May 2024 04:46:45 +0000 Files and hashes: 1: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: Yk4G03GQNoIZbipugEEDdD1uis4DOd7NkdJuPgusSGY=) 2: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: hjl7Kv/vQThlTKQrrqM0/+Sv0iKCOA2ysme498ebLMQ=) 3: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: AwK6OuX79/KlF+8PETnzxa0MieD2vFc2KXSFkcSMPpU=) 4: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 5AsJP/y4L1wuWQ7JbC6ov+eOub5b4P0fq+E5OhPcklk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 May 2024 04:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:62:b8:dc:32:9e:79:1b:46:26:de:28:b2:5f:99:5c:9f:7b:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: May 2 01:45:45 2024 GMT Not After : May 5 04:46:45 2024 GMT Subject: CN=5E1435EB03CEB70BBC30544BB7BE6CFCE1D25945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:fa:cb:c5:bf:71:77:07:23:46:5d:35:6b: d4:2b:fa:80:ea:9a:ab:c8:3c:ab:90:26:b5:c2:26: 12:c4:58:c9:91:56:0e:ad:d9:62:cd:f7:86:a1:58: c4:2c:6a:c9:a4:a1:c1:20:17:17:73:c6:fc:f5:22: 09:b8:a5:fd:9a:2b:4b:98:86:0f:c9:2c:18:ad:0a: 4b:bc:9e:7b:3b:1f:f2:75:c9:a1:0f:10:6b:f1:12: 68:31:91:8b:bb:7f:9d:39:8f:e6:37:28:ff:c6:1a: 4b:f9:4c:29:8e:9d:cf:6d:9d:6d:bd:9f:9c:c1:c3: b5:f9:36:26:d5:6c:64:bd:76:ca:4c:cf:f1:cc:1c: 4d:bb:f2:44:80:14:e1:e1:2a:95:bc:72:e3:c8:3c: b7:24:33:d5:34:1f:c5:0e:e2:96:a2:cb:62:ed:67: 0a:54:13:b3:a2:99:cd:87:0c:b5:df:50:f9:57:3c: d7:a4:a4:aa:fe:c3:a1:d7:27:c3:c5:39:59:7f:ab: 1f:c2:1c:6a:0e:6e:c8:74:c6:de:bf:e6:3c:33:17: 44:5b:41:ad:16:68:5f:82:12:0e:6f:e1:79:72:23: 8f:6c:a4:bc:e1:34:5e:9d:db:00:a0:cd:f6:7b:3b: ae:30:b9:7e:88:9d:dd:9b:b3:92:c4:18:94:d1:c2: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:14:35:EB:03:CE:B7:0B:BC:30:54:4B:B7:BE:6C:FC:E1:D2:59:45 X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:27:02:e1:a9:eb:48:e9:60:ae:6e:95:3f:7a:6d:ce:a8:58: 67:09:2c:f0:90:70:c2:5e:84:c8:24:5f:ff:00:c1:2f:fb:a3: 9e:94:4d:7a:98:21:e2:93:af:8d:18:65:ea:de:1f:73:eb:f1: 95:f6:53:3c:1e:62:b5:66:b5:cd:5c:de:6f:64:43:15:a3:02: 74:5a:e4:25:b3:29:24:0b:ee:b7:b1:4a:13:23:61:b8:ec:44: 99:0a:4c:30:1e:2d:1f:30:2b:9e:9d:96:c5:a7:01:09:22:ca: 64:72:1b:8d:34:0a:96:5a:69:77:72:67:8e:da:68:ae:00:93: 92:3a:b0:2e:db:7b:2d:cd:90:46:68:de:bb:c1:52:94:92:c5: 66:56:af:13:76:36:d1:c3:dd:d6:a1:5c:3f:9a:d8:96:6f:af: 46:6e:cc:8f:b0:6a:a4:a7:18:b5:b9:45:19:41:0d:6c:8e:d5: a6:3d:99:6c:90:70:6e:e1:3a:25:06:2c:01:d2:ce:0e:24:b7: 09:fb:fa:f5:fe:19:3f:0e:c7:a1:54:f2:09:4c:13:9a:0d:6d: d3:b5:25:f4:10:bc:f9:7c:b9:b7:b7:cb:b0:a1:f2:37:40:f1: 27:c9:0c:4f:28:53:b1:68:0e:96:f4:9a:81:fa:f2:96:73:c2: 75:d4:2d:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWK43DKeeRtGJt4osl+ZXJ973IAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNDA1MDIwMTQ1NDVaFw0yNDA1MDUwNDQ2NDVaMDMxMTAvBgNV BAMTKDVFMTQzNUVCMDNDRUI3MEJCQzMwNTQ0QkI3QkU2Q0ZDRTFEMjU5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujPrLxb9xdwcjRl01a9Qr+oDq mqvIPKuQJrXCJhLEWMmRVg6t2WLN94ahWMQsasmkocEgFxdzxvz1Igm4pf2aK0uY hg/JLBitCku8nns7H/J1yaEPEGvxEmgxkYu7f505j+Y3KP/GGkv5TCmOnc9tnW29 n5zBw7X5NibVbGS9dspMz/HMHE278kSAFOHhKpW8cuPIPLckM9U0H8UO4paiy2Lt ZwpUE7Oimc2HDLXfUPlXPNekpKr+w6HXJ8PFOVl/qx/CHGoObsh0xt6/5jwzF0Rb Qa0WaF+CEg5v4XlyI49spLzhNF6d2wCgzfZ7O64wuX6Ind2bs5LEGJTRwsrVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXhQ16wPOtwu8MFRLt75s/OHSWUUwHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGInAuGp60jpYK5ulT96bc6oWGcJLPCQcMJe hMgkX/8AwS/7o56UTXqYIeKTr40YZereH3Pr8ZX2UzweYrVmtc1c3m9kQxWjAnRa 5CWzKSQL7rexShMjYbjsRJkKTDAeLR8wK56dlsWnAQkiymRyG400CpZaaXdyZ47a aK4Ak5I6sC7bey3NkEZo3rvBUpSSxWZWrxN2NtHD3dahXD+a2JZvr0ZuzI+waqSn GLW5RRlBDWyO1aY9mWyQcG7hOiUGLAHSzg4ktwn7+vX+GT8Ox6FU8glME5oNbdO1 JfQQvPl8ube3y7Ch8jdA8SfJDE8oU7FoDpb0moH68pZzwnXULYk= -----END CERTIFICATE-----Generated at Thu May 2 03:10:52 2024 by rpki-client on console-ams.rpki-client.org