$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json) Hash identifier: 0m01OE1H+0GagHtlwWt0fHT+JnbmUalRjbyChaqjLW8= Subject key identifier: 86:4D:FA:34:BE:FD:E1:A5:B4:AB:C9:6E:2F:7B:A6:E6:17:65:A3:62 Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 57ED76BD17632307620F10865C71C9FE787F419A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft Manifest number: 14 Signing time: Wed 26 Jun 2024 00:40:32 +0000 Manifest this update: Wed 26 Jun 2024 00:35:32 +0000 Manifest next update: Sat 29 Jun 2024 04:40:32 +0000 Files and hashes: 1: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: J1v3QmxTH9iYBI1Cw0AzV0qr71UiwRc0UVYyylLtbak=) 2: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: 4IsdwZuqWrtsTBy7qNoDqeWfulmbeoj4TPAyRDs8m28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Jun 2024 00:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ed:76:bd:17:63:23:07:62:0f:10:86:5c:71:c9:fe:78:7f:41:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Jun 26 00:35:32 2024 GMT Not After : Jun 29 04:40:32 2024 GMT Subject: CN=864DFA34BEFDE1A5B4ABC96E2F7BA6E61765A362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1e:d6:b8:47:f8:bb:0b:89:b7:7d:c7:c3:b3: 22:2f:c6:de:af:94:ca:ad:ad:f6:78:c8:55:6d:57: d1:3b:64:4a:9c:cd:5c:35:76:41:a3:94:0d:70:48: 75:19:fc:45:80:34:e5:a5:9b:06:14:e0:42:e0:25: ce:61:dc:a4:1a:24:7a:73:b6:cf:69:57:9b:c1:b6: b1:d9:27:8c:0b:a7:3c:07:59:d9:31:52:79:18:67: f6:a5:36:aa:c8:cf:81:66:03:db:11:30:65:be:a5: 44:05:0b:53:f9:0e:90:b8:90:19:90:52:ef:53:65: 72:27:19:bc:40:06:7d:71:77:75:bf:1d:7f:bc:41: 24:db:e3:af:45:7e:0a:75:2e:d3:33:c9:70:51:48: 43:a0:24:49:d5:b2:00:9c:d9:6d:24:48:ec:83:78: e4:df:98:db:bf:aa:be:61:d4:b4:1e:c9:a3:92:1b: fc:16:45:a1:a4:d8:6a:ad:be:1b:19:4c:63:ea:89: 87:42:24:14:3b:fe:9e:ea:66:5c:fc:d2:21:bf:6a: 92:95:71:e9:f7:bb:09:b1:23:84:a9:08:55:ae:fd: 3d:c6:68:70:22:58:b0:8f:d9:19:2d:78:a6:b7:04: 69:6f:f2:f3:c1:3c:dd:ac:90:ed:ff:50:01:a7:6c: ab:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4D:FA:34:BE:FD:E1:A5:B4:AB:C9:6E:2F:7B:A6:E6:17:65:A3:62 X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e2:f4:04:17:3c:62:97:ac:00:78:a2:5d:84:58:94:e2:9d: c6:d8:a1:dc:22:a4:82:a0:19:8a:75:ff:f1:f1:58:d0:28:e3: eb:4e:fd:b9:72:6f:44:5f:5a:df:00:05:92:ad:fd:3b:62:6a: 72:6c:91:7e:03:66:8f:ad:85:09:b5:0e:1c:ca:de:f4:c2:79: 2c:b6:4e:d6:99:1e:4e:56:60:f3:71:de:53:fc:a0:6d:91:9a: 4a:5b:aa:47:a6:1f:6b:d7:8c:5a:a8:25:b3:ca:e8:32:76:54: f2:f8:e1:e6:e2:27:44:34:08:b6:d7:72:f6:00:62:b3:07:aa: b1:95:37:48:84:d8:92:49:e1:4a:3b:d0:f1:3c:a7:69:41:31: 2a:76:80:08:12:ff:0c:12:c5:83:31:8f:56:c5:92:b0:f1:ba: 1a:ce:8c:e6:4c:a3:9c:d9:b7:77:8e:11:f2:83:1c:9f:b0:cd: b7:dd:cd:26:ca:b4:ce:80:6f:5f:6b:35:a6:c5:e6:d3:38:3b: 5e:42:d0:00:ad:c4:e0:13:d4:da:63:f6:90:67:10:5e:16:37: 0a:5f:c5:33:81:08:76:6e:ce:6a:14:de:4e:ee:01:e8:a2:4e: a2:69:87:86:b8:6a:b0:4d:b5:f1:df:88:90:14:9b:bd:b0:5e: 15:19:c4:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+12vRdjIwdiDxCGXHHJ/nh/QZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNDA2MjYwMDM1MzJaFw0yNDA2MjkwNDQwMzJaMDMxMTAvBgNV BAMTKDg2NERGQTM0QkVGREUxQTVCNEFCQzk2RTJGN0JBNkU2MTc2NUEzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHta4R/i7C4m3fcfDsyIvxt6v lMqtrfZ4yFVtV9E7ZEqczVw1dkGjlA1wSHUZ/EWANOWlmwYU4ELgJc5h3KQaJHpz ts9pV5vBtrHZJ4wLpzwHWdkxUnkYZ/alNqrIz4FmA9sRMGW+pUQFC1P5DpC4kBmQ Uu9TZXInGbxABn1xd3W/HX+8QSTb469Ffgp1LtMzyXBRSEOgJEnVsgCc2W0kSOyD eOTfmNu/qr5h1LQeyaOSG/wWRaGk2GqtvhsZTGPqiYdCJBQ7/p7qZlz80iG/apKV cen3uwmxI4SpCFWu/T3GaHAiWLCP2RkteKa3BGlv8vPBPN2skO3/UAGnbKv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhk36NL794aW0q8luL3um5hdlo2IwHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJE N0VFRUUwMTYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzi9AQXPGKXrAB4ol2EWJTincbYodwipIKg GYp1//HxWNAo4+tO/blyb0RfWt8ABZKt/TtianJskX4DZo+thQm1DhzK3vTCeSy2 TtaZHk5WYPNx3lP8oG2RmkpbqkemH2vXjFqoJbPK6DJ2VPL44ebiJ0Q0CLbXcvYA YrMHqrGVN0iE2JJJ4Uo70PE8p2lBMSp2gAgS/wwSxYMxj1bFkrDxuhrOjOZMo5zZ t3eOEfKDHJ+wzbfdzSbKtM6Ab19rNabF5tM4O15C0ACtxOAT1Npj9pBnEF4WNwpf xTOBCHZuzmoU3k7uAeiiTqJph4a4arBNtfHfiJAUm72wXhUZxIo= -----END CERTIFICATE-----Generated at Wed Jun 26 02:07:45 2024 by rpki-client on console-ams.rpki-client.org