$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft File: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft (raw, json) Hash identifier: jbvfIvT97v2F5HerF6LKMsS5nhipwEE/Ry95vYhAeqI= Subject key identifier: 16:84:84:8C:09:7B:82:7E:BC:E3:7E:79:7D:54:32:B6:ED:74:8E:90 Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Certificate serial: 198174697082274165545EEDD49AB70CF7C01090 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft Manifest number: 02A5 Signing time: Sat 01 Jun 2024 16:01:16 +0000 Manifest this update: Sat 01 Jun 2024 15:56:16 +0000 Manifest next update: Tue 04 Jun 2024 17:05:16 +0000 Files and hashes: 1: CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl (hash: dNCgrl3w1O/ucWkHhlvcxxrZYraUjmXUq8Ts22DugLk=) 2: 3130332e3137302e3233342e302f32332d3234203d3e20313338383535.roa (hash: dOSwIab4DipRsGMw2fmXCp8oC5CSGZ+c+pbbDEgoGbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 10:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:81:74:69:70:82:27:41:65:54:5e:ed:d4:9a:b7:0c:f7:c0:10:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4 Validity Not Before: Jun 1 15:56:16 2024 GMT Not After : Jun 4 17:05:16 2024 GMT Subject: CN=1684848C097B827EBCE37E797D5432B6ED748E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4e:f7:d6:fb:82:30:95:c0:17:4c:54:07:86: c9:14:e6:79:58:57:ff:f6:a0:3d:79:24:49:80:7a: f9:0c:dc:62:e2:7c:e0:44:90:66:e9:b0:f1:83:fc: 94:6e:3e:13:ca:02:1d:aa:0e:e8:e5:9b:ff:20:8b: 55:df:31:40:be:8d:c8:d7:a1:7d:ac:a8:11:2d:d2: 32:37:ef:ea:8e:03:0d:9d:3a:90:eb:99:6e:7c:4f: 55:2b:ca:e0:6d:f2:51:10:34:f8:45:86:9f:52:d9: 6f:e7:9b:71:76:1e:5a:0f:6d:c5:dd:7d:b3:31:b2: 0b:78:1a:ac:09:46:ba:b7:1d:0b:fd:24:e7:01:b8: f3:3f:64:62:b2:c4:99:a0:ef:2f:ba:99:2c:ec:60: 5d:df:56:25:5c:a6:07:bb:65:50:9f:d4:30:f5:7b: 31:95:e4:d1:fc:38:e0:85:85:9e:30:2f:97:88:73: 21:f9:e0:ea:88:82:e6:b6:eb:db:70:d0:9d:4a:2a: 53:bf:b4:76:1c:fd:70:ae:27:83:8d:5a:e9:42:c9: 89:f6:c3:81:11:a4:77:5e:52:e9:3b:c3:d1:bc:53: e1:c4:37:61:77:1b:9f:7f:90:70:b7:71:13:e9:3a: c6:c1:93:92:15:46:83:b5:6c:3c:ce:dd:11:b9:b2: 61:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:84:84:8C:09:7B:82:7E:BC:E3:7E:79:7D:54:32:B6:ED:74:8E:90 X509v3 Authority Key Identifier: keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:40:1a:1a:3a:b5:bd:13:2e:a8:ec:ae:7a:21:00:79:fd:8c: 33:f5:8e:58:85:56:cc:c3:bb:0e:94:e7:e1:b7:55:55:03:e0: 71:10:46:cc:e8:19:a0:71:7b:31:bb:ba:80:43:4e:fc:8c:f8: 4c:2a:73:ca:d5:c2:2a:43:4e:18:95:1d:46:91:22:8f:76:6e: 91:47:0a:e1:13:ae:4c:6e:62:26:73:a4:dc:d3:ec:72:ae:4d: af:2a:7a:54:0e:5b:ce:3d:44:3f:d3:0b:0e:05:f7:f9:68:07: 12:7b:07:8d:3c:54:73:a8:6c:07:fd:d6:c2:36:9a:14:7c:2c: f9:d8:34:a2:4d:9c:2e:d9:39:61:39:1b:e6:52:44:76:78:5d: ed:e0:66:d7:89:b2:2a:12:23:d7:95:4e:bf:93:84:5d:27:8a: d3:08:4f:56:e5:50:68:97:8b:bf:62:0f:9c:60:92:de:b4:46: 91:cd:e6:48:48:5a:fa:ac:49:e4:34:c2:0f:72:5e:40:c3:d6: fc:ee:1f:d0:aa:b7:70:da:07:ea:1a:67:0d:4e:35:53:8c:24: 2f:3e:2d:c9:a9:0e:20:3e:49:c0:28:c5:a3:8a:f7:1d:ee:c1: f4:cf:d5:a1:99:69:e3:dd:e0:c7:84:cb:e8:34:5a:79:f4:78: 6e:ce:fe:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYF0aXCCJ0FlVF7t1Jq3DPfAEJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFD ODRFQ0VENDAeFw0yNDA2MDExNTU2MTZaFw0yNDA2MDQxNzA1MTZaMDMxMTAvBgNV BAMTKDE2ODQ4NDhDMDk3QjgyN0VCQ0UzN0U3OTdENTQzMkI2RUQ3NDhFOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTvfW+4IwlcAXTFQHhskU5nlY V//2oD15JEmAevkM3GLifOBEkGbpsPGD/JRuPhPKAh2qDujlm/8gi1XfMUC+jcjX oX2sqBEt0jI37+qOAw2dOpDrmW58T1UryuBt8lEQNPhFhp9S2W/nm3F2HloPbcXd fbMxsgt4GqwJRrq3HQv9JOcBuPM/ZGKyxJmg7y+6mSzsYF3fViVcpge7ZVCf1DD1 ezGV5NH8OOCFhZ4wL5eIcyH54OqIgua269tw0J1KKlO/tHYc/XCuJ4ONWulCyYn2 w4ERpHdeUuk7w9G8U+HEN2F3G59/kHC3cRPpOsbBk5IVRoO1bDzO3RG5smHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFoSEjAl7gn684355fVQytu10jpAwHwYDVR0j BBgwFoAUzXwmfFiuL1GBf6pSArC/kchOztQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTQ0ZDU3Ni0zODE4LTQ5ZDYtODY2Mi1mOGRmODlhYjI4NjMvMC9DRDdDMjY3QzU4 QUUyRjUxODE3RkFBNTIwMkIwQkY5MUM4NEVDRUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJGOTFDODRF Q0VENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE0NGQ1NzYtMzgxOC00OWQ2LTg2 NjItZjhkZjg5YWIyODYzLzAvQ0Q3QzI2N0M1OEFFMkY1MTgxN0ZBQTUyMDJCMEJG OTFDODRFQ0VENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFAGho6tb0TLqjsrnohAHn9jDP1jliFVszD uw6U5+G3VVUD4HEQRszoGaBxezG7uoBDTvyM+Ewqc8rVwipDThiVHUaRIo92bpFH CuETrkxuYiZzpNzT7HKuTa8qelQOW849RD/TCw4F9/loBxJ7B408VHOobAf91sI2 mhR8LPnYNKJNnC7ZOWE5G+ZSRHZ4Xe3gZteJsioSI9eVTr+ThF0nitMIT1blUGiX i79iD5xgkt60RpHN5khIWvqsSeQ0wg9yXkDD1vzuH9Cqt3DaB+oaZw1ONVOMJC8+ LcmpDiA+ScAoxaOK9x3uwfTP1aGZaePd4MeEy+g0Wnn0eG7O/mE= -----END CERTIFICATE-----Generated at Sat Jun 1 16:24:13 2024 by rpki-client on console-fra.rpki-client.org