$ rpki-client -vvf repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft File: E2111F10F01C17C4A322DAF5076425FBD824219D.mft (raw, json) Hash identifier: KXa4yQd2YuVRiJGDWj+HL34gZHuu+cNxRhD44naRFZg= Subject key identifier: F2:92:57:BF:07:23:C1:DD:B1:52:8D:F6:08:FD:60:49:1A:B0:31:FC Authority key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Certificate issuer: /CN=E2111F10F01C17C4A322DAF5076425FBD824219D Certificate serial: 4A7568393C1E2837B8D0A8FAC1003782A4D083C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft Manifest number: 03F3 Signing time: Fri 17 May 2024 23:50:58 +0000 Manifest this update: Fri 17 May 2024 23:45:58 +0000 Manifest next update: Tue 21 May 2024 04:23:58 +0000 Files and hashes: 1: E2111F10F01C17C4A322DAF5076425FBD824219D.crl (hash: G+9uKe1+DfbwUtx68j3bYKndZZ1m+aeHZ5RCCbs397I=) 2: 3230332e3136312e32342e302f32312d3234203d3e20313338383233.roa (hash: lo4yxUtNCz4EjKhcrzQOe8Sn1VQNBaKuqAdNxONcvKA=) 3: 323430353a633963303a3a2f33322d3438203d3e20313338383233.roa (hash: ggq3Br/SE+t7Bfg0deVgkMyrozQW941ZJzM+/kDfy/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 04:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:75:68:39:3c:1e:28:37:b8:d0:a8:fa:c1:00:37:82:a4:d0:83:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Validity Not Before: May 17 23:45:58 2024 GMT Not After : May 21 04:23:58 2024 GMT Subject: CN=F29257BF0723C1DDB1528DF608FD60491AB031FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:95:d6:5f:de:28:5d:0e:e1:95:f1:19:cb: fe:df:83:ca:6a:db:40:a1:3a:97:e0:ed:14:b1:74: e4:47:ff:8b:59:68:87:aa:63:77:55:27:e1:a9:13: bb:77:c2:aa:85:1c:a1:a6:e3:a5:27:88:74:05:d8: 05:c8:fa:de:23:60:b8:64:30:ad:1c:aa:ad:c1:b8: 81:4e:e7:c4:2f:16:47:88:51:c8:ba:07:9f:b5:51: 60:39:97:f9:cf:1c:f6:67:01:76:40:9e:90:38:16: 84:e0:b5:2f:3d:c5:a5:e9:f0:64:cc:ef:5b:fc:3b: 3c:c1:33:c3:3c:0e:ad:d2:51:21:8a:17:b5:6a:9b: ec:d4:4f:ce:95:d0:1f:b1:ed:52:23:10:eb:99:c4: 67:e8:4f:5d:5e:ca:e9:6b:a5:21:0f:66:63:c5:a9: 09:2c:da:4c:62:b1:14:07:e4:1a:af:06:df:3b:30: b6:98:47:60:24:af:30:61:87:63:74:82:6e:2e:d5: 41:c1:92:a9:f8:e8:95:24:d6:52:b6:e2:14:6d:35: 45:75:67:22:b8:8e:68:3d:20:30:9d:d6:96:3d:ba: 25:42:6b:32:5d:cb:d8:bd:61:ea:fe:5c:2a:dd:55: de:5c:30:29:b8:e2:e8:6d:8a:5b:84:33:22:78:d6: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:92:57:BF:07:23:C1:DD:B1:52:8D:F6:08:FD:60:49:1A:B0:31:FC X509v3 Authority Key Identifier: keyid:E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:aa:57:be:a5:96:f8:e4:c8:1b:bb:f6:f6:6d:88:d5:4f:c7: 88:f1:d2:b6:c2:7f:df:a0:fe:46:e8:2c:1a:dc:fa:26:4f:e6: b1:01:fa:e6:0f:9a:62:34:16:ce:0f:37:14:4a:40:c6:b9:88: 92:a8:94:eb:8a:a7:73:e4:20:ba:03:c9:02:f8:9b:97:05:76: 51:63:9b:1e:72:0d:56:38:7b:90:9b:f1:ac:dc:ca:fa:66:88: 55:51:d7:ee:32:4b:c7:1f:c5:5a:86:a3:ef:03:ab:77:6b:f1: 7b:29:51:69:3e:9b:84:57:f3:1d:16:83:47:95:29:58:a0:55: 99:f8:2e:1e:2d:65:82:76:8c:04:d2:9d:94:56:7c:10:97:aa: 2e:c5:bf:03:bf:e8:ce:7b:7c:e5:87:cc:7f:4e:6f:e8:35:d5: 75:99:03:79:d4:bc:18:5d:2a:a5:5a:a8:78:82:64:0a:01:5a: 9d:e4:da:95:33:ff:e5:c6:54:ab:eb:90:16:1e:91:31:52:be: ac:d3:cb:ec:8c:f3:b2:cf:86:44:2a:72:43:83:3c:9b:cc:a9: ea:8e:46:f5:bd:99:fe:35:40:b7:50:79:bc:f7:64:3a:5e:62: 22:fb:a0:2f:e3:38:0a:46:fa:28:c5:86:f4:c0:92:ac:0a:58: 5e:a5:fe:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnVoOTweKDe40Kj6wQA3gqTQg8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJE ODI0MjE5RDAeFw0yNDA1MTcyMzQ1NThaFw0yNDA1MjEwNDIzNThaMDMxMTAvBgNV BAMTKEYyOTI1N0JGMDcyM0MxRERCMTUyOERGNjA4RkQ2MDQ5MUFCMDMxRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsApXWX94oXQ7hlfEZy/7fg8pq 20ChOpfg7RSxdORH/4tZaIeqY3dVJ+GpE7t3wqqFHKGm46UniHQF2AXI+t4jYLhk MK0cqq3BuIFO58QvFkeIUci6B5+1UWA5l/nPHPZnAXZAnpA4FoTgtS89xaXp8GTM 71v8OzzBM8M8Dq3SUSGKF7Vqm+zUT86V0B+x7VIjEOuZxGfoT11eyulrpSEPZmPF qQks2kxisRQH5BqvBt87MLaYR2AkrzBhh2N0gm4u1UHBkqn46JUk1lK24hRtNUV1 ZyK4jmg9IDCd1pY9uiVCazJdy9i9Yer+XCrdVd5cMCm44uhtiluEMyJ41lK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8pJXvwcjwd2xUo32CP1gSRqwMfwwHwYDVR0j BBgwFoAU4hEfEPAcF8SjItr1B2Ql+9gkIZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMC9FMjExMUYxMEYw MUMxN0M0QTMyMkRBRjUwNzY0MjVGQkQ4MjQyMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1RkJEODI0 MjE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxNThhZWMtNTI4MS00MmU2LTk3 OWItZmNhNjFkNDdjODQ1LzAvRTIxMTFGMTBGMDFDMTdDNEEzMjJEQUY1MDc2NDI1 RkJEODI0MjE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2qV76llvjkyBu79vZtiNVPx4jx0rbCf9+g /kboLBrc+iZP5rEB+uYPmmI0Fs4PNxRKQMa5iJKolOuKp3PkILoDyQL4m5cFdlFj mx5yDVY4e5Cb8azcyvpmiFVR1+4yS8cfxVqGo+8Dq3dr8XspUWk+m4RX8x0Wg0eV KVigVZn4Lh4tZYJ2jATSnZRWfBCXqi7FvwO/6M57fOWHzH9Ob+g11XWZA3nUvBhd KqVaqHiCZAoBWp3k2pUz/+XGVKvrkBYekTFSvqzTy+yM87LPhkQqckODPJvMqeqO RvW9mf41QLdQebz3ZDpeYiL7oC/jOApG+ijFhvTAkqwKWF6l/uc= -----END CERTIFICATE-----Generated at Sat May 18 01:42:23 2024 by rpki-client on console-ams.rpki-client.org