$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft File: C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json) Hash identifier: I+YIj4D3y+BwakGJYymj5GkmdUEMROsYkUB2FrmoO/E= Subject key identifier: A3:28:40:35:A3:D4:76:D4:C9:43:CC:FD:75:CE:CA:2F:E1:24:F3:05 Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 77DA7502BEFFB00A6716A4FE169A861B0C8C1B54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft Manifest number: 03BB Signing time: Tue 30 Apr 2024 20:41:20 +0000 Manifest this update: Tue 30 Apr 2024 20:36:20 +0000 Manifest next update: Sat 04 May 2024 08:10:20 +0000 Files and hashes: 1: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: 6aACRlZDtPDfbUv4fSt9lM6NKFQcVH4Wsg/EgnefO58=) 2: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: DuW73JDj8eAo/qwakxtcuxsKbF7VuB+MdzhvsS/yZOo=) 3: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: gob+xEPM7WKJN0PLWYhFd0rggbO0AzhOmiiOC3MP3is=) 4: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: LLWVbF1wODphiXMeuEBRIN5JZzs0/nwZFnvCxIPF50I=) 5: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: TYanWHMpregDr4E1iIZzCFBC+NEEhazNFpWOvRWmhsg=) 6: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: gi0af/cQbabaV6AiHGMfP/9tqFkO/i715nyDNUjuW74=) 7: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: ZuvrSecsDpPHhtDYv++FNUvAYFbNWQ7mE+i4fAbhYz0=) 8: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: gGSb6UlTXlbMS7NNsB+MxN8fFYpbgNoMMYZOqkxuIvg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 06:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:da:75:02:be:ff:b0:0a:67:16:a4:fe:16:9a:86:1b:0c:8c:1b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Apr 30 20:36:20 2024 GMT Not After : May 4 08:10:20 2024 GMT Subject: CN=A3284035A3D476D4C943CCFD75CECA2FE124F305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:ce:4b:4e:9a:03:64:4a:cb:0e:bd:cd:d9: 57:ed:fe:c9:8e:83:3c:6a:70:07:e4:28:d0:cb:28: f3:90:98:a3:da:3e:7c:65:b8:cc:0c:03:10:6a:7b: 96:ac:ec:83:8d:a6:c8:aa:bc:dc:a2:50:0d:1e:60: 48:bf:c6:bb:5c:0c:0e:df:3f:ae:f0:59:3e:00:91: 24:d8:af:c5:53:e5:9f:87:13:10:4c:e8:8c:89:fb: 80:bd:39:ee:90:f3:b4:6e:04:81:75:3b:80:3e:1f: ee:09:f0:2f:20:17:76:01:cb:7f:b6:36:2c:6d:de: 63:4d:c5:5b:2d:93:c3:fb:4f:4d:bc:b1:0c:13:01: 27:70:22:a6:41:6c:be:76:4a:5c:25:3a:4f:07:43: 2e:4d:11:b4:2b:d6:63:bb:f4:f0:a2:dd:cb:44:38: b4:ce:f1:1b:75:94:34:b9:9a:2a:4a:ae:65:90:d7: cf:20:98:62:aa:af:2b:d5:73:82:7d:03:5c:ba:9d: 8a:cf:45:c7:c1:2f:7d:a2:5f:10:39:72:fa:b2:f8: c3:71:2a:1d:f9:7b:45:5f:ef:dc:15:e2:8b:fd:b8: 2a:ea:61:d5:48:53:85:d6:93:80:a6:43:9c:bd:ff: 05:30:e1:59:94:f4:f2:45:19:5e:25:ed:ec:a9:85: 61:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:28:40:35:A3:D4:76:D4:C9:43:CC:FD:75:CE:CA:2F:E1:24:F3:05 X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f8:36:77:7a:d4:fa:f4:b6:cd:2d:4a:09:b3:51:c1:52:77: 6c:b0:45:8c:73:8a:f0:b4:35:00:3c:73:92:49:a7:f7:e0:77: 57:79:2f:ea:e9:ba:23:e2:95:96:be:a3:33:51:f6:03:85:04: 1f:f7:2e:a4:fa:88:55:78:90:43:2f:b6:56:1e:ae:72:a1:02: bf:bd:e9:da:2e:52:46:0d:4a:c4:3a:03:9b:fd:db:14:bd:a1: 2d:77:47:8f:99:d8:e4:9a:7e:b9:e3:ab:fb:ea:a6:3f:5e:36: 3a:e1:1a:df:3f:5e:03:36:c6:b7:14:12:d2:d2:d8:0c:5e:bb: 58:3f:d6:b9:23:b6:71:b6:3a:ca:52:f8:8c:05:0b:7c:19:18: ac:c5:1e:c0:52:66:2d:b7:20:51:81:ee:e0:9d:0a:1c:d7:c9: f5:2f:d6:ef:94:44:b2:16:c5:97:87:83:2a:72:f3:65:85:b9: 68:18:5e:50:98:ac:fe:8e:ca:f7:a5:6f:c2:a7:f5:11:57:2c: 9d:ce:28:f1:17:b0:41:fa:08:25:89:bf:ee:60:99:84:9c:5b: 99:f3:25:9b:ef:6a:7a:ea:87:5f:27:bc:6f:94:6a:26:2c:89: e3:6e:7b:ee:60:55:46:10:f7:96:e4:9d:b5:fc:fd:d9:47:47: 37:8f:0a:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9p1Ar7/sApnFqT+FpqGGwyMG1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNDA0MzAyMDM2MjBaFw0yNDA1MDQwODEwMjBaMDMxMTAvBgNV BAMTKEEzMjg0MDM1QTNENDc2RDRDOTQzQ0NGRDc1Q0VDQTJGRTEyNEYzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4KM5LTpoDZErLDr3N2Vft/smO gzxqcAfkKNDLKPOQmKPaPnxluMwMAxBqe5as7IONpsiqvNyiUA0eYEi/xrtcDA7f P67wWT4AkSTYr8VT5Z+HExBM6IyJ+4C9Oe6Q87RuBIF1O4A+H+4J8C8gF3YBy3+2 Nixt3mNNxVstk8P7T028sQwTASdwIqZBbL52SlwlOk8HQy5NEbQr1mO79PCi3ctE OLTO8Rt1lDS5mipKrmWQ188gmGKqryvVc4J9A1y6nYrPRcfBL32iXxA5cvqy+MNx Kh35e0Vf79wV4ov9uCrqYdVIU4XWk4CmQ5y9/wUw4VmU9PJFGV4l7eyphWGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoyhANaPUdtTJQ8z9dc7KL+Ek8wUwHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi ZDktNGFjNGJjNjMwNDE0LzAvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAx MkZGQjQ4ODcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIz4Nnd61Pr0ts0tSgmzUcFSd2ywRYxzivC0 NQA8c5JJp/fgd1d5L+rpuiPilZa+ozNR9gOFBB/3LqT6iFV4kEMvtlYernKhAr+9 6douUkYNSsQ6A5v92xS9oS13R4+Z2OSafrnjq/vqpj9eNjrhGt8/XgM2xrcUEtLS 2Axeu1g/1rkjtnG2OspS+IwFC3wZGKzFHsBSZi23IFGB7uCdChzXyfUv1u+URLIW xZeHgypy82WFuWgYXlCYrP6Oyvelb8Kn9RFXLJ3OKPEXsEH6CCWJv+5gmYScW5nz JZvvanrqh18nvG+UaiYsieNue+5gVUYQ95bknbX8/dlHRzePCg8= -----END CERTIFICATE-----Generated at Tue Apr 30 21:36:09 2024 by rpki-client on console-fra.rpki-client.org