$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: xEu75AbuFnjsM4qXRLhZ1Lys1CxgpP3i1HJuHZyGJSY= Subject key identifier: CB:63:D3:CF:55:A3:88:B8:63:B7:60:3B:B3:7C:71:AA:A2:79:83:A9 Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 3BE3482CA08E497748D804FEF28317FFCFD775A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 03EF Signing time: Tue 28 May 2024 21:41:35 +0000 Manifest this update: Tue 28 May 2024 21:36:35 +0000 Manifest next update: Fri 31 May 2024 22:35:35 +0000 Files and hashes: 1: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: WIllEz4mJJy2xpARsj1PQ417LJ4zS6tSiAO5kbXnNC8=) 2: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: nz2AEU8nn9AMM02S13QC6wiAWu/J78Mx5UkS49jdfKk=) 3: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: /4S8d6m7jX0GR4TalIVSPa6sqOSraNgZKAKOG7IlQ1U=) 4: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: nLaASs9tLnFtsMmTK6mYdWM74LCdJ+9HtBpIw1GZ1DI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 22:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e3:48:2c:a0:8e:49:77:48:d8:04:fe:f2:83:17:ff:cf:d7:75:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: May 28 21:36:35 2024 GMT Not After : May 31 22:35:35 2024 GMT Subject: CN=CB63D3CF55A388B863B7603BB37C71AAA27983A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:d3:e1:84:58:23:c9:59:88:a9:13:47:ba: 93:ec:78:6e:39:0a:be:c9:62:48:da:b6:4b:b9:a3: ff:5c:4e:1d:ac:5e:7e:1e:bd:ec:92:da:c4:8e:a8: 7e:54:36:ed:8e:0f:81:03:41:ff:4a:75:5e:63:ad: f7:e6:90:02:c0:ca:4d:f5:de:71:e0:fe:6f:93:b5: 0c:f7:90:38:25:27:5a:53:e1:80:40:ca:05:d9:28: 10:0e:88:12:04:fd:23:0a:93:d0:a5:82:2e:ff:15: 17:72:c1:3b:a3:5b:1e:6c:ac:66:f8:39:07:b3:98: 11:99:5c:c7:bf:a9:d6:02:48:39:79:63:05:a1:5e: 3c:ef:7e:01:d5:ae:39:d4:58:27:44:1e:06:e5:10: a6:de:81:a6:c3:a6:8a:29:c8:48:1b:27:9e:b6:9d: 28:07:c8:36:08:26:5d:5b:de:63:15:9c:74:0a:4b: 2d:89:30:7e:ba:d6:61:80:65:b6:fe:c6:b1:ac:0a: fc:ee:1d:7a:2c:a6:f9:2e:a1:7a:ea:89:c7:37:c5: 7d:2e:4b:98:f4:ce:72:5d:d6:e6:fc:fe:6b:7f:db: a5:27:07:c6:cb:af:e6:a6:6e:a7:fa:74:75:f6:90: 17:15:b7:f3:be:e9:52:26:10:2d:67:eb:06:5f:77: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:63:D3:CF:55:A3:88:B8:63:B7:60:3B:B3:7C:71:AA:A2:79:83:A9 X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d5:17:64:35:eb:c9:73:bf:75:6e:62:b0:cc:2c:ac:f9:d9: e5:fd:8c:a9:f9:a1:4c:88:65:ea:de:37:94:af:81:c3:c3:a1: 95:c7:c6:6b:24:c7:7d:54:d2:c2:62:53:db:25:6b:ad:c9:a2: de:5e:8d:9b:d3:c3:46:a1:dd:32:d2:2e:ef:6f:d0:67:49:84: d0:42:10:17:c4:f6:af:6a:59:17:5d:0e:59:c0:ce:4f:a6:3d: 82:be:e1:ae:02:8e:4d:3a:40:bc:14:e4:b7:e4:b4:d5:8c:ab: 2d:0c:a9:2a:ee:bf:7f:a9:df:53:83:da:d1:db:37:c3:73:a5: c9:c0:a0:e9:1a:90:3e:22:33:d1:5a:b9:df:47:8c:f4:89:74: 2c:e3:4e:e2:cf:11:d1:f7:96:24:b2:56:cd:4b:0f:1f:a5:d9: 9f:12:ac:19:11:15:18:21:b9:30:7b:e5:22:bb:ca:fe:31:14: 35:bb:a0:15:49:c1:44:94:e2:84:8d:4f:65:7e:a8:fb:20:c4: c1:c6:68:26:04:1e:43:d9:eb:75:c6:f2:35:60:7f:fd:f0:5a: 83:ad:20:a1:06:df:a6:65:e7:0e:09:97:2f:44:1c:61:89:ee: c2:aa:86:76:2c:2b:30:d3:ce:e3:ee:58:75:d0:58:b8:30:59: 36:14:7b:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+NILKCOSXdI2AT+8oMX/8/XdaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNDA1MjgyMTM2MzVaFw0yNDA1MzEyMjM1MzVaMDMxMTAvBgNV BAMTKENCNjNEM0NGNTVBMzg4Qjg2M0I3NjAzQkIzN0M3MUFBQTI3OTgzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmudPhhFgjyVmIqRNHupPseG45 Cr7JYkjatku5o/9cTh2sXn4eveyS2sSOqH5UNu2OD4EDQf9KdV5jrffmkALAyk31 3nHg/m+TtQz3kDglJ1pT4YBAygXZKBAOiBIE/SMKk9Clgi7/FRdywTujWx5srGb4 OQezmBGZXMe/qdYCSDl5YwWhXjzvfgHVrjnUWCdEHgblEKbegabDpoopyEgbJ562 nSgHyDYIJl1b3mMVnHQKSy2JMH661mGAZbb+xrGsCvzuHXospvkuoXrqicc3xX0u S5j0znJd1ub8/mt/26UnB8bLr+ambqf6dHX2kBcVt/O+6VImEC1n6wZfd9lxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy2PTz1WjiLhjt2A7s3xxqqJ5g6kwHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvVF2Q168lzv3VuYrDMLKz52eX9jKn5oUyI ZereN5SvgcPDoZXHxmskx31U0sJiU9sla63Jot5ejZvTw0ah3TLSLu9v0GdJhNBC EBfE9q9qWRddDlnAzk+mPYK+4a4Cjk06QLwU5LfktNWMqy0MqSruv3+p31OD2tHb N8NzpcnAoOkakD4iM9Faud9HjPSJdCzjTuLPEdH3liSyVs1LDx+l2Z8SrBkRFRgh uTB75SK7yv4xFDW7oBVJwUSU4oSNT2V+qPsgxMHGaCYEHkPZ63XG8jVgf/3wWoOt IKEG36Zl5w4Jly9EHGGJ7sKqhnYsKzDTzuPuWHXQWLgwWTYUe1A= -----END CERTIFICATE-----Generated at Tue May 28 22:49:00 2024 by rpki-client on console-ams.rpki-client.org