$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: l/zYDD6GE/LIV+U7acdpDCUWVeBgLndR7DgHF48CQTE= Subject key identifier: 6C:72:25:9E:E0:00:96:1E:2D:17:63:DC:30:E2:5A:81:49:6A:9D:F8 Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 29672ED928E6B0FF9AE985BB46FA10E8AC860291 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: 27 Signing time: Fri 17 May 2024 07:21:08 +0000 Manifest this update: Fri 17 May 2024 07:16:08 +0000 Manifest next update: Mon 20 May 2024 18:41:08 +0000 Files and hashes: 1: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: zmnVOS+d5LJAXHw5GwsDoKIhHTTtua7PUSkU2XdgdYg=) 2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: qMyKS1I2GK/+YsURzXS0LTlzRZzHxK4OiGK7dEmFlak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 16:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:67:2e:d9:28:e6:b0:ff:9a:e9:85:bb:46:fa:10:e8:ac:86:02:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: May 17 07:16:08 2024 GMT Not After : May 20 18:41:08 2024 GMT Subject: CN=6C72259EE000961E2D1763DC30E25A81496A9DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b1:85:7e:16:1e:c3:a4:c0:37:f9:60:75:c2: cd:7a:ac:7d:df:03:56:32:24:ed:7c:33:d4:f6:b3: d4:aa:33:bc:24:74:1e:70:25:db:d0:a8:10:89:52: 14:49:07:9b:44:df:cd:ed:d5:9d:6d:e3:d1:2a:44: e7:9b:d7:93:47:d7:26:fd:56:d4:1e:37:d4:b0:f1: 18:d0:16:26:f7:41:d8:43:4d:7f:62:42:35:22:c0: 64:ff:79:59:a9:47:6c:e6:e4:51:64:c0:73:9c:cc: e9:22:21:b3:3b:d9:78:da:3e:76:c2:80:88:39:4c: d8:32:2d:33:a1:9e:ac:39:5f:02:99:02:3c:f0:7b: 3e:4d:57:2b:79:25:ad:ec:dc:a5:e7:a6:87:31:b3: 07:70:e8:f7:71:5b:e1:1f:7b:49:db:50:d4:2f:15: c4:48:96:ed:e4:51:e9:a9:6d:80:cf:10:de:e5:37: 37:b0:1f:61:79:f0:15:bc:75:24:dc:f8:96:51:d0: e3:f5:68:d9:65:6b:23:ae:fd:44:db:93:8f:e4:9e: ca:1e:11:cf:d2:f6:b0:61:17:a3:b7:a3:3b:cc:52: 6a:53:63:c3:a7:aa:67:e7:c7:40:05:d0:d9:71:81: a9:bb:67:a0:0b:b9:f3:6a:7e:6d:34:c9:08:ed:83: d7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:72:25:9E:E0:00:96:1E:2D:17:63:DC:30:E2:5A:81:49:6A:9D:F8 X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ee:9c:95:66:38:92:dc:60:69:fe:bc:85:10:94:a8:41:02: 8b:30:76:91:3c:bf:4f:27:92:be:d7:bf:79:3b:dc:ca:cb:32: 30:5c:9a:3d:03:1b:af:4d:a4:f0:e7:6d:f7:50:c4:42:b0:a2: 40:e3:a8:2d:56:c8:39:76:2d:71:11:4a:d6:ed:6d:a0:c2:bc: a1:14:3c:b4:48:d6:2d:25:fc:bc:8c:12:63:b7:7f:7a:9a:14: 53:4b:7f:29:69:c9:e6:51:6d:7a:52:8b:5b:93:a8:3d:a5:f0: cb:be:74:92:e5:98:40:0e:fc:81:66:4b:ea:56:db:84:60:e8: 94:a3:63:54:91:26:02:8d:63:68:69:b2:bf:b7:1f:6a:7a:33: 3a:25:e8:09:48:d8:63:5a:71:fc:67:3b:28:4c:a0:3b:66:82: a1:f2:05:14:17:71:3d:1e:58:ac:bc:71:c0:96:ed:48:1f:a2: 73:d9:2e:89:34:03:7c:4e:7c:80:93:0e:3b:a4:4c:87:cf:80: ac:8e:64:a0:34:b4:c8:46:e1:4d:13:53:ba:e0:3a:70:09:71: cf:00:34:75:cc:9d:26:ef:eb:8f:cb:2e:44:39:b0:ea:09:86: 47:11:21:c1:a5:97:1f:55:41:e4:01:f2:af:ab:5c:a3:84:6a: ca:4e:01:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWcu2SjmsP+a6YW7RvoQ6KyGApEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNDA1MTcwNzE2MDhaFw0yNDA1MjAxODQxMDhaMDMxMTAvBgNV BAMTKDZDNzIyNTlFRTAwMDk2MUUyRDE3NjNEQzMwRTI1QTgxNDk2QTlERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvsYV+Fh7DpMA3+WB1ws16rH3f A1YyJO18M9T2s9SqM7wkdB5wJdvQqBCJUhRJB5tE383t1Z1t49EqROeb15NH1yb9 VtQeN9Sw8RjQFib3QdhDTX9iQjUiwGT/eVmpR2zm5FFkwHOczOkiIbM72XjaPnbC gIg5TNgyLTOhnqw5XwKZAjzwez5NVyt5Ja3s3KXnpocxswdw6PdxW+Efe0nbUNQv FcRIlu3kUempbYDPEN7lNzewH2F58BW8dSTc+JZR0OP1aNllayOu/UTbk4/knsoe Ec/S9rBhF6O3ozvMUmpTY8Onqmfnx0AF0Nlxgam7Z6ALufNqfm00yQjtg9dvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbHIlnuAAlh4tF2PcMOJagUlqnfgwHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjunJVmOJLcYGn+vIUQlKhBAoswdpE8v08n kr7Xv3k73MrLMjBcmj0DG69NpPDnbfdQxEKwokDjqC1WyDl2LXERStbtbaDCvKEU PLRI1i0l/LyMEmO3f3qaFFNLfylpyeZRbXpSi1uTqD2l8Mu+dJLlmEAO/IFmS+pW 24Rg6JSjY1SRJgKNY2hpsr+3H2p6Mzol6AlI2GNacfxnOyhMoDtmgqHyBRQXcT0e WKy8ccCW7UgfonPZLok0A3xOfICTDjukTIfPgKyOZKA0tMhG4U0TU7rgOnAJcc8A NHXMnSbv64/LLkQ5sOoJhkcRIcGllx9VQeQB8q+rXKOEaspOAYE= -----END CERTIFICATE-----Generated at Fri May 17 08:51:02 2024 by rpki-client on console-ams.rpki-client.org