$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: YaJiZV/56joG/uXZMIcXpdHvZbztK9qRIjWAOfZwFrk= Subject key identifier: F0:F9:09:7B:F7:E6:C4:C2:6A:FC:A7:37:AF:78:D3:8E:B6:7A:0F:19 Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 07E9A7A5740C25F6712426C818B76DE062603762 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: 1F Signing time: Sun 19 May 2024 08:50:45 +0000 Manifest this update: Sun 19 May 2024 08:45:45 +0000 Manifest next update: Wed 22 May 2024 15:30:45 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: FdkJ+fWGP5HvGl21FYj0D/VpK3x5vDFR6Q2sKenYSNo=) 2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: eUMvZmbpLoIkGm1iYDIYhIDn7o2e8segTs3wbPzs6ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e9:a7:a5:74:0c:25:f6:71:24:26:c8:18:b7:6d:e0:62:60:37:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: May 19 08:45:45 2024 GMT Not After : May 22 15:30:45 2024 GMT Subject: CN=F0F9097BF7E6C4C26AFCA737AF78D38EB67A0F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:ac:3c:a8:b5:6f:a1:19:20:d3:42:02:ff: 84:26:54:ef:aa:79:83:d8:7d:da:ff:64:2e:b2:bf: 27:3b:72:c5:33:05:ad:80:44:c9:87:d3:75:03:39: fa:5f:f7:e1:8e:fc:ba:a5:a4:ab:e2:91:35:a6:b6: e0:3e:f5:53:d4:f6:58:de:36:37:bd:04:11:fd:ad: 54:3d:c6:e9:05:e9:27:cc:b0:ba:10:df:e3:68:14: b3:a1:c3:9e:4d:a4:28:6f:58:2c:90:ca:ee:b5:b8: e1:3c:0d:77:2c:ba:ef:57:4c:9a:5f:4d:01:65:4a: 20:dc:fe:52:bb:36:eb:74:b1:60:16:44:8b:f6:40: e9:f0:90:23:94:99:b1:32:87:35:14:2f:c9:7c:bd: 28:c3:42:6b:2d:84:bb:0c:cb:c1:12:c0:b1:9e:86: cd:e6:82:18:ea:a2:40:ee:3f:2b:4e:b6:b0:45:7e: 61:a6:80:8d:a6:5c:ac:16:6f:1d:ce:68:3f:59:e4: e7:cf:75:68:27:28:c6:ae:3d:8e:e8:f9:05:26:b3: af:20:19:10:50:08:cf:d1:49:97:44:b0:47:42:59: c5:1b:4c:4d:d3:47:40:8e:a2:55:6d:61:44:e9:6a: 19:ce:c7:dd:a9:41:b5:06:be:ac:a6:d2:ac:0e:2c: 55:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F9:09:7B:F7:E6:C4:C2:6A:FC:A7:37:AF:78:D3:8E:B6:7A:0F:19 X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:39:35:27:c4:79:f6:82:b4:1b:35:b8:12:60:33:47:75:b6: 3c:55:8f:b5:62:6a:59:d4:6e:20:88:dc:33:25:16:93:81:bd: 8a:65:84:52:4c:20:9d:88:26:97:8d:97:1c:02:cc:58:e9:02: 55:92:d5:50:b0:83:94:dc:32:d7:b6:1b:d8:93:01:9a:7c:42: f2:e3:46:2d:b7:f0:dd:0e:4e:46:d7:ed:70:14:f8:4d:62:d4: 40:b5:59:a5:4b:bd:01:a1:6e:0f:b2:e7:f3:ae:fe:50:d1:df: e7:22:77:f9:68:d2:ab:d6:e6:1d:08:9e:69:c9:a6:b5:19:96: ac:0f:4b:b2:f8:a1:1e:f9:dd:18:93:a9:92:8a:bd:f5:20:49: dd:92:eb:e8:05:0d:1a:44:bf:88:14:00:4d:97:9e:cf:c9:da: d6:d5:93:1d:b7:f3:96:6d:e7:b3:9e:1d:49:67:78:e1:3a:63: 5b:39:19:8f:49:78:1a:94:c9:2e:cd:51:60:ef:24:bc:d8:64: f0:c7:2c:bb:8f:88:8b:85:62:76:f4:5a:6d:35:04:3c:1a:1d: 41:30:7e:62:d5:7b:50:f4:19:f9:69:3b:a3:25:4c:82:d9:48: bd:25:be:2b:9e:82:2c:26:32:7b:4f:e5:70:0d:b8:0e:4e:73: 09:97:95:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+mnpXQMJfZxJCbIGLdt4GJgN2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNDA1MTkwODQ1NDVaFw0yNDA1MjIxNTMwNDVaMDMxMTAvBgNV BAMTKEYwRjkwOTdCRjdFNkM0QzI2QUZDQTczN0FGNzhEMzhFQjY3QTBGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf1Kw8qLVvoRkg00IC/4QmVO+q eYPYfdr/ZC6yvyc7csUzBa2ARMmH03UDOfpf9+GO/LqlpKvikTWmtuA+9VPU9lje Nje9BBH9rVQ9xukF6SfMsLoQ3+NoFLOhw55NpChvWCyQyu61uOE8DXcsuu9XTJpf TQFlSiDc/lK7Nut0sWAWRIv2QOnwkCOUmbEyhzUUL8l8vSjDQmsthLsMy8ESwLGe hs3mghjqokDuPytOtrBFfmGmgI2mXKwWbx3OaD9Z5OfPdWgnKMauPY7o+QUms68g GRBQCM/RSZdEsEdCWcUbTE3TR0COolVtYUTpahnOx92pQbUGvqym0qwOLFWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8PkJe/fmxMJq/Kc3r3jTjrZ6DxkwHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAY5NSfEefaCtBs1uBJgM0d1tjxVj7VialnU biCI3DMlFpOBvYplhFJMIJ2IJpeNlxwCzFjpAlWS1VCwg5TcMte2G9iTAZp8QvLj Ri238N0OTkbX7XAU+E1i1EC1WaVLvQGhbg+y5/Ou/lDR3+cid/lo0qvW5h0InmnJ prUZlqwPS7L4oR753RiTqZKKvfUgSd2S6+gFDRpEv4gUAE2Xns/J2tbVkx2385Zt 57OeHUlneOE6Y1s5GY9JeBqUyS7NUWDvJLzYZPDHLLuPiIuFYnb0Wm01BDwaHUEw fmLVe1D0GflpO6MlTILZSL0lviuegiwmMntP5XANuA5OcwmXleA= -----END CERTIFICATE-----Generated at Sun May 19 09:31:53 2024 by rpki-client on console-ams.rpki-client.org