$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft File: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft (raw, json) Hash identifier: hGgW22+1vAWcPGxOXmbFrdgMPjK8Q1JBFrgoHDNDUtU= Subject key identifier: E2:53:CC:22:E9:66:12:6F:48:03:33:0F:E9:3B:72:35:A3:49:6B:98 Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 Certificate issuer: /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Certificate serial: 33CDABC462DDD7C284F6ADF80B151446A3CD324E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft Manifest number: 03C4 Signing time: Mon 24 Jun 2024 07:10:42 +0000 Manifest this update: Mon 24 Jun 2024 07:05:42 +0000 Manifest next update: Thu 27 Jun 2024 16:10:42 +0000 Files and hashes: 1: 20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl (hash: /TWmjiS0xFn//XArObx5Ly2/5lpHl0f3s1vYtM0WW3M=) 2: 3130332e3136322e302e302f32332d3233203d3e20313431363334.roa (hash: KFxW0gPMs4+pdWA4vcyh9FBsR3TMOo4p13QBisamM7k=) 3: 3130332e3136322e302e302f32342d3234203d3e20313431363334.roa (hash: /ONHtrCBqjzNiGOuviZyi00S1mCDeEHTyDcebl2X/j0=) 4: 3130332e3136322e312e302f32342d3234203d3e20313431363334.roa (hash: S2Fs0AtHWBfJkt6oNGUbQpmjILFaX/4qlfpvbSDrD6M=) 5: 3130332e3136322e312e302f32342d3234203d3e2036393339.roa (hash: aV3ZPEDkk9pkPeRsaffKFxqQrrWxvO7+4mI9TdYcewg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Jun 2024 16:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cd:ab:c4:62:dd:d7:c2:84:f6:ad:f8:0b:15:14:46:a3:cd:32:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9 Validity Not Before: Jun 24 07:05:42 2024 GMT Not After : Jun 27 16:10:42 2024 GMT Subject: CN=E253CC22E966126F4803330FE93B7235A3496B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:a9:48:1e:94:85:37:fb:ea:45:98:e9:28: a1:b4:cc:33:40:a8:54:07:dc:45:36:92:62:fd:a2: b7:bf:8f:e1:99:19:e0:35:ab:b4:b1:12:a5:61:41: b4:af:1e:98:f3:ab:d7:5c:30:0c:94:38:8b:1f:a3: b6:85:58:a5:e4:8b:01:e5:7e:75:70:75:11:50:27: ab:74:e8:d9:75:3e:a6:e3:19:f7:b0:4a:55:7a:4b: 63:6b:c9:97:5a:3d:f3:6c:c0:1a:e6:e8:49:b2:00: 73:34:79:aa:ec:0a:84:cc:a5:76:6c:d1:de:4b:69: 92:14:ac:2e:62:32:cc:a7:fa:20:00:5a:f0:50:ef: 2d:75:76:9d:85:37:e4:58:df:9e:3b:74:89:75:7c: 34:97:18:8f:9f:c7:d6:c5:8d:e2:51:5d:1d:f6:5a: bf:cf:94:54:33:79:d9:c1:2b:6e:40:21:09:ff:19: e9:c8:e7:73:f7:5a:6b:1f:60:81:80:2c:b6:20:eb: 44:06:e4:ae:c4:57:de:58:b7:e2:97:da:1b:f8:50: 6a:d1:42:6e:7c:ed:35:ae:7d:ff:44:69:47:b4:73: 6b:84:00:02:c0:21:01:0f:a5:99:43:95:9c:83:52: e3:ae:e0:43:53:7d:b6:9b:3a:54:f8:05:d0:bf:0a: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:53:CC:22:E9:66:12:6F:48:03:33:0F:E9:3B:72:35:A3:49:6B:98 X509v3 Authority Key Identifier: keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:77:82:ee:fa:2d:0d:8e:f3:0e:84:6c:1c:df:fc:7c:84:e3: 68:cf:88:18:2c:35:ec:05:7a:ea:2d:71:3f:1d:6b:17:34:29: b5:8a:08:5b:31:a1:2a:d2:1b:42:f9:fa:4a:03:0d:72:ca:6c: 2e:d8:c8:95:29:4e:7f:fb:6a:ab:dc:67:de:ed:f0:14:34:52: d5:65:35:ab:f3:5a:1f:35:75:00:a6:aa:d7:e7:5c:56:07:51: 10:66:d7:72:5e:d5:fe:9d:1d:94:79:16:56:80:b8:a5:d4:7e: 44:d8:cc:f9:c1:ae:7c:cc:da:f1:37:6d:82:da:e6:9f:e7:e3: c8:0f:cd:46:8f:99:7b:5d:92:18:d1:33:f0:57:22:2c:b4:4e: 68:33:46:4e:04:16:61:5a:1f:37:b6:f9:97:cb:2b:12:2f:58: a9:39:ae:e3:42:83:fb:21:ee:9f:03:44:b6:c3:e9:db:c5:d4: 32:ba:a3:b7:58:97:87:75:7e:b0:c5:2e:39:42:f6:d5:fb:7f: 72:1e:a6:77:76:be:ee:7d:6c:3b:3a:9d:a4:22:d9:b8:32:0e: a3:94:e0:e7:e0:0e:eb:a4:f0:c6:aa:22:25:b9:bf:76:e7:67: f7:06:b2:01:f6:d1:89:85:5d:01:d3:3f:34:29:49:a3:f6:3a: fe:79:a3:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM82rxGLd18KE9q34CxUURqPNMk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0Qy ODlBQkZGOTAeFw0yNDA2MjQwNzA1NDJaFw0yNDA2MjcxNjEwNDJaMDMxMTAvBgNV BAMTKEUyNTNDQzIyRTk2NjEyNkY0ODAzMzMwRkU5M0I3MjM1QTM0OTZCOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyC6lIHpSFN/vqRZjpKKG0zDNA qFQH3EU2kmL9ore/j+GZGeA1q7SxEqVhQbSvHpjzq9dcMAyUOIsfo7aFWKXkiwHl fnVwdRFQJ6t06Nl1PqbjGfewSlV6S2NryZdaPfNswBrm6EmyAHM0earsCoTMpXZs 0d5LaZIUrC5iMsyn+iAAWvBQ7y11dp2FN+RY3547dIl1fDSXGI+fx9bFjeJRXR32 Wr/PlFQzednBK25AIQn/GenI53P3WmsfYIGALLYg60QG5K7EV95Yt+KX2hv4UGrR Qm587TWuff9EaUe0c2uEAALAIQEPpZlDlZyDUuOu4ENTfbabOlT4BdC/Cuh9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4lPMIulmEm9IAzMP6TtyNaNJa5gwHwYDVR0j BBgwFoAUILFclfozUUAtYOlorR2ezSiav/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTQxOTNjNC00YWJkLTRlMmMtYTFkMC0xYjVjZTMyZTQyMGIvMC8yMEIxNUM5NUZB MzM1MTQwMkQ2MEU5NjhBRDFEOUVDRDI4OUFCRkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0QyODlB QkZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx ZDAtMWI1Y2UzMmU0MjBiLzAvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlF Q0QyODlBQkZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALR3gu76LQ2O8w6EbBzf/HyE42jPiBgsNewF euotcT8daxc0KbWKCFsxoSrSG0L5+koDDXLKbC7YyJUpTn/7aqvcZ97t8BQ0UtVl NavzWh81dQCmqtfnXFYHURBm13Je1f6dHZR5FlaAuKXUfkTYzPnBrnzM2vE3bYLa 5p/n48gPzUaPmXtdkhjRM/BXIiy0TmgzRk4EFmFaHze2+ZfLKxIvWKk5ruNCg/sh 7p8DRLbD6dvF1DK6o7dYl4d1frDFLjlC9tX7f3Iepnd2vu59bDs6naQi2bgyDqOU 4OfgDuuk8MaqIiW5v3bnZ/cGsgH20YmFXQHTPzQpSaP2Ov55o8g= -----END CERTIFICATE-----Generated at Mon Jun 24 09:14:52 2024 by rpki-client on console-fra.rpki-client.org