$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: zX9fW8PYAQPyWiY4dG+zyMGCI9VqEYYz5a/GFtv1LrE= Subject key identifier: EA:22:87:EF:38:7A:41:18:E6:E1:08:21:07:F7:1B:21:DC:D7:C1:1E Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 0C0778BA3F0AE4BC9642B504DE65EEAB6C0D3C7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 02B3 Signing time: Sun 26 May 2024 05:30:58 +0000 Manifest this update: Sun 26 May 2024 05:25:58 +0000 Manifest next update: Wed 29 May 2024 17:26:58 +0000 Files and hashes: 1: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: 4dingvmU/NdMnvr74C9tjzEmXgY1x15xtZ9BxH4AGTA=) 2: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: vQHXwA344Pp/iKj5lZNlXEhLUE22nOyVTmzGR/5sqgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 14:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:07:78:ba:3f:0a:e4:bc:96:42:b5:04:de:65:ee:ab:6c:0d:3c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: May 26 05:25:58 2024 GMT Not After : May 29 17:26:58 2024 GMT Subject: CN=EA2287EF387A4118E6E1082107F71B21DCD7C11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:88:b2:c3:69:2d:90:86:ef:e3:bd:f8:8f:c5: 17:ad:a5:a7:ee:9d:63:6b:d3:85:99:20:4b:a9:50: 68:a2:51:08:e7:ad:90:bf:e5:7d:ee:ec:b8:52:90: 8f:a3:de:63:a5:a1:a0:f1:54:42:72:67:c4:a8:05: 54:c0:12:31:64:a2:d8:ab:de:bc:8b:d4:2d:f0:5e: 65:54:97:b8:5c:8a:ee:26:34:04:a4:a0:2c:fb:8f: 21:b5:7e:47:7b:e8:d3:2c:34:0a:23:04:97:31:e2: e7:9a:81:48:b9:7c:f1:96:02:90:d7:e6:6a:c5:e8: a3:ee:07:5b:84:1c:87:e2:50:ba:07:52:c6:70:39: aa:73:8d:24:47:c8:d7:6a:b3:72:7f:a4:e1:4c:6c: 3a:7f:4a:35:f7:1d:27:29:8d:eb:7b:bb:8b:7c:16: 44:a0:32:b5:a4:78:38:dc:f5:c5:85:90:fb:26:ac: cc:ac:01:8d:14:14:59:68:6b:03:f9:cd:91:dd:66: 61:6a:93:70:c8:2f:92:7b:ea:d7:9e:71:d3:78:7d: 67:2d:d4:11:7a:45:28:b0:af:93:03:db:4d:3f:8e: 1c:1c:92:25:cb:fd:cf:8b:4b:75:fb:01:e5:17:16: e2:5f:51:4b:c7:07:bf:7e:9c:63:cf:0b:cc:81:29: 36:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:22:87:EF:38:7A:41:18:E6:E1:08:21:07:F7:1B:21:DC:D7:C1:1E X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:be:48:d1:42:db:c0:5e:41:f0:bc:b9:df:b4:83:65:a7:12: 64:48:27:2c:72:e6:0c:17:bf:d5:fc:a9:2c:10:de:6a:c1:e4: e5:cc:21:16:28:35:1b:e0:fc:37:c9:0a:52:3b:9b:99:9c:5f: e3:65:49:34:fe:51:c7:55:c5:af:a7:2c:28:65:1c:0d:3a:eb: 72:36:24:30:f1:26:b0:7b:78:ad:c5:f0:41:9a:fe:19:fd:71: 86:58:e3:64:6c:f4:c8:58:cb:db:bb:3b:78:f1:9b:0e:e0:68: f7:f7:8b:19:e3:df:57:4c:05:1c:32:a8:90:a9:b3:77:b5:67: ae:70:46:d4:60:00:9d:9a:75:a3:91:90:9c:8b:a8:4a:f0:10: 27:fb:b6:8f:c6:79:05:71:b6:ce:db:18:19:16:42:ce:bc:9d: ee:c4:92:f6:69:e7:17:1b:0a:55:05:f7:45:f9:d3:30:ac:af: 87:e6:45:6e:32:4c:f2:92:9a:09:16:a6:54:21:13:6b:79:c3: 95:d5:86:ee:2e:3c:b2:69:a5:a1:9b:a1:97:ea:a0:b2:6a:a9: 55:9f:98:ae:86:ad:16:e7:b2:fb:75:70:cf:e4:1d:a0:9a:7e: 99:7c:5b:2d:9a:ec:99:26:a1:bc:f1:cd:92:3a:06:4c:9a:84: a8:de:d8:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAd4uj8K5LyWQrUE3mXuq2wNPHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNDA1MjYwNTI1NThaFw0yNDA1MjkxNzI2NThaMDMxMTAvBgNV BAMTKEVBMjI4N0VGMzg3QTQxMThFNkUxMDgyMTA3RjcxQjIxRENEN0MxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHiLLDaS2Qhu/jvfiPxRetpafu nWNr04WZIEupUGiiUQjnrZC/5X3u7LhSkI+j3mOloaDxVEJyZ8SoBVTAEjFkotir 3ryL1C3wXmVUl7hciu4mNASkoCz7jyG1fkd76NMsNAojBJcx4ueagUi5fPGWApDX 5mrF6KPuB1uEHIfiULoHUsZwOapzjSRHyNdqs3J/pOFMbDp/SjX3HScpjet7u4t8 FkSgMrWkeDjc9cWFkPsmrMysAY0UFFloawP5zZHdZmFqk3DIL5J76teecdN4fWct 1BF6RSiwr5MD200/jhwckiXL/c+LS3X7AeUXFuJfUUvHB79+nGPPC8yBKTYJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6iKH7zh6QRjm4QghB/cbIdzXwR4wHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACO+SNFC28BeQfC8ud+0g2WnEmRIJyxy5gwX v9X8qSwQ3mrB5OXMIRYoNRvg/DfJClI7m5mcX+NlSTT+UcdVxa+nLChlHA0663I2 JDDxJrB7eK3F8EGa/hn9cYZY42Rs9MhYy9u7O3jxmw7gaPf3ixnj31dMBRwyqJCp s3e1Z65wRtRgAJ2adaORkJyLqErwECf7to/GeQVxts7bGBkWQs68ne7EkvZp5xcb ClUF90X50zCsr4fmRW4yTPKSmgkWplQhE2t5w5XVhu4uPLJppaGboZfqoLJqqVWf mK6GrRbnsvt1cM/kHaCafpl8Wy2a7JkmobzxzZI6BkyahKje2BE= -----END CERTIFICATE-----Generated at Sun May 26 10:56:35 2024 by rpki-client on console-ams.rpki-client.org