$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft File: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft (raw, json) Hash identifier: PIbwqDHzdkXLCgaLoDFR7Si7tpwSN9s8wQur3mtEIh0= Subject key identifier: 37:E6:EC:99:05:38:A5:C6:95:48:9A:F4:2C:4C:2C:4A:FA:96:53:20 Authority key identifier: E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F Certificate issuer: /CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Certificate serial: 2CD2E95209F4B9E28F679C5858153FA136E6BAAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft Manifest number: D0 Signing time: Sun 19 May 2024 23:00:44 +0000 Manifest this update: Sun 19 May 2024 22:55:44 +0000 Manifest next update: Thu 23 May 2024 09:35:44 +0000 Files and hashes: 1: E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl (hash: JSmDIpXv4RL7NbJNYY7+qPEYx8TdCGZRuXXno69iJSo=) 2: 3130332e3137322e3234332e302f32342d3234203d3e20313437303836.roa (hash: t0mUR/zp3XH1m2fJiPnmnqzWHnodGZoiDzslttEx9xw=) 3: 3130332e3137322e3234322e302f32342d3234203d3e20313437303836.roa (hash: 0BDZfjN5jJdVoqvf+B7Xrs+R9mL9Zk/6v6BQQD2LVbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d2:e9:52:09:f4:b9:e2:8f:67:9c:58:58:15:3f:a1:36:e6:ba:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F Validity Not Before: May 19 22:55:44 2024 GMT Not After : May 23 09:35:44 2024 GMT Subject: CN=37E6EC990538A5C695489AF42C4C2C4AFA965320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3f:e9:91:a9:dd:b0:2e:19:5d:dc:47:bd:d6: e1:14:86:cd:7d:07:49:2c:90:02:27:5d:ae:10:3c: 46:51:0b:97:39:94:1d:93:0c:5f:6e:94:ba:5a:06: 1c:51:e5:50:fb:51:2d:dd:51:90:d3:1d:bd:a6:d0: 91:dd:96:6a:dd:b8:43:12:5b:90:e8:a6:c3:e0:6b: 50:6c:82:5f:74:69:b0:c8:68:cb:34:9e:fd:0c:5f: 3e:a9:d2:14:3f:e9:d5:83:af:5e:17:1b:b4:78:01: ae:0f:86:84:3a:64:c0:19:78:8a:e8:cd:bc:5a:51: d0:47:04:a3:9c:2c:87:94:a3:c3:0c:81:f9:31:45: 9e:eb:db:6b:f4:82:32:73:e7:b3:58:f4:55:72:74: a9:02:dc:cd:dc:ca:f5:15:7c:7f:82:e6:27:0b:3a: f6:82:81:07:1e:d3:f8:90:02:6f:59:c0:ff:65:a0: 27:b1:8b:64:28:f3:6c:7c:df:a7:98:0a:29:46:a2: 1b:f1:ac:ad:de:bf:55:15:82:bc:d7:df:de:7e:eb: 1c:3f:e0:8a:e0:06:98:a0:49:db:14:6d:17:75:99: 3e:2a:d3:85:bc:00:ba:48:f1:62:6e:05:9e:dd:4d: 2d:2b:3c:af:67:c8:83:23:bc:e8:59:f4:f3:7d:90: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E6:EC:99:05:38:A5:C6:95:48:9A:F4:2C:4C:2C:4A:FA:96:53:20 X509v3 Authority Key Identifier: keyid:E2:AE:EC:7D:F8:97:A9:D6:E4:F0:D1:D1:C4:31:2A:03:FA:F5:75:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6d8f97-c806-4799-85e0-8ccf18dbbb31/0/E2AEEC7DF897A9D6E4F0D1D1C4312A03FAF5756F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:1f:f3:ee:31:fa:03:ef:d4:3c:53:3e:78:73:c4:d4:80:a5: 95:df:ca:fb:16:79:33:70:35:37:8e:7d:3e:9f:93:e8:27:37: 10:a1:4a:06:7e:df:26:9f:c2:06:8a:f0:3b:0e:1a:13:d0:76: be:e5:e0:67:98:11:3b:1c:88:ed:73:0a:09:d5:b7:31:fa:9d: 09:31:0c:22:b5:39:14:e6:12:30:90:77:32:cb:07:8e:01:bc: f7:48:10:29:6b:43:40:b0:09:bd:42:a3:50:f8:31:80:91:ed: 97:d5:ea:7f:c4:18:7b:e8:05:c4:2a:4c:09:a2:d9:bd:a6:a7: 70:15:2b:22:12:69:79:a1:d6:cd:39:62:34:1f:72:21:09:f7: ef:fd:d8:8d:14:5a:46:91:4d:19:4e:92:a0:70:ef:b3:fd:92: 77:7e:bf:4d:36:3d:b3:19:2c:33:d3:d2:00:76:70:b6:a7:8d: 20:0e:cf:77:03:14:e8:fe:36:3d:5b:c9:f1:70:0f:cb:32:7a: de:76:be:3e:61:45:b2:8a:b8:e6:08:8e:34:c1:64:ac:20:ee: 77:97:96:2a:a4:c4:69:9c:0e:09:22:9a:8d:b6:5a:e4:75:3a: 63:44:36:40:88:6b:c6:c9:1d:40:cc:78:65:03:f8:81:e4:56: 06:81:9a:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULNLpUgn0ueKPZ5xYWBU/oTbmuq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNG QUY1NzU2RjAeFw0yNDA1MTkyMjU1NDRaFw0yNDA1MjMwOTM1NDRaMDMxMTAvBgNV BAMTKDM3RTZFQzk5MDUzOEE1QzY5NTQ4OUFGNDJDNEMyQzRBRkE5NjUzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXP+mRqd2wLhld3Ee91uEUhs19 B0kskAInXa4QPEZRC5c5lB2TDF9ulLpaBhxR5VD7US3dUZDTHb2m0JHdlmrduEMS W5DopsPga1Bsgl90abDIaMs0nv0MXz6p0hQ/6dWDr14XG7R4Aa4PhoQ6ZMAZeIro zbxaUdBHBKOcLIeUo8MMgfkxRZ7r22v0gjJz57NY9FVydKkC3M3cyvUVfH+C5icL OvaCgQce0/iQAm9ZwP9loCexi2Qo82x836eYCilGohvxrK3ev1UVgrzX395+6xw/ 4IrgBpigSdsUbRd1mT4q04W8ALpI8WJuBZ7dTS0rPK9nyIMjvOhZ9PN9kBM7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN+bsmQU4pcaVSJr0LEwsSvqWUyAwHwYDVR0j BBgwFoAU4q7sffiXqdbk8NHRxDEqA/r1dW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZkOGY5Ny1jODA2LTQ3OTktODVlMC04Y2NmMThkYmJiMzEvMC9FMkFFRUM3REY4 OTdBOUQ2RTRGMEQxRDFDNDMxMkEwM0ZBRjU3NTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJBMDNGQUY1 NzU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2ZDhmOTctYzgwNi00Nzk5LTg1 ZTAtOGNjZjE4ZGJiYjMxLzAvRTJBRUVDN0RGODk3QTlENkU0RjBEMUQxQzQzMTJB MDNGQUY1NzU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQf8+4x+gPv1DxTPnhzxNSApZXfyvsWeTNw NTeOfT6fk+gnNxChSgZ+3yafwgaK8DsOGhPQdr7l4GeYETsciO1zCgnVtzH6nQkx DCK1ORTmEjCQdzLLB44BvPdIEClrQ0CwCb1Co1D4MYCR7ZfV6n/EGHvoBcQqTAmi 2b2mp3AVKyISaXmh1s05YjQfciEJ9+/92I0UWkaRTRlOkqBw77P9knd+v002PbMZ LDPT0gB2cLanjSAOz3cDFOj+Nj1byfFwD8syet52vj5hRbKKuOYIjjTBZKwg7neX liqkxGmcDgkimo22WuR1OmNENkCIa8bJHUDMeGUD+IHkVgaBmgA= -----END CERTIFICATE-----Generated at Sun May 19 23:42:08 2024 by rpki-client on console-fra.rpki-client.org