$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json) Hash identifier: MhJjB7+1Y2iedHJzLHgUay0S4xAUUDuNoBgKmwfxqYg= Subject key identifier: CA:B2:12:9F:0A:9D:4A:A7:B5:CD:3A:DA:3D:3C:76:0C:38:43:B6:5B Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Certificate serial: 07E7812A10E46741CC54367FD4B4241806104E81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft Manifest number: 02B2 Signing time: Sat 18 May 2024 08:22:04 +0000 Manifest this update: Sat 18 May 2024 08:17:04 +0000 Manifest next update: Tue 21 May 2024 18:43:04 +0000 Files and hashes: 1: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: EKtGUZIRCpNoGmhtlhOhyqc0zqoMHDxaoCUYH4QDF8w=) 2: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: 27Deu9xFfUZ5JdTgV9xOUdCQcixBNIcA9U8WSsto06g=) 3: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: pGDR6rhScn8r5O3Q0Nc/rhXEPBOf1EMfYizva6sFkRQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e7:81:2a:10:e4:67:41:cc:54:36:7f:d4:b4:24:18:06:10:4e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Validity Not Before: May 18 08:17:04 2024 GMT Not After : May 21 18:43:04 2024 GMT Subject: CN=CAB2129F0A9D4AA7B5CD3ADA3D3C760C3843B65B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:b2:4a:07:43:57:b1:c4:d4:88:3b:db:7e: f2:55:14:ea:97:68:cd:30:7f:1c:46:b8:bf:00:c2: 64:d7:36:38:d9:59:7a:10:30:bd:52:f8:82:ae:6d: c6:4e:fd:d2:4d:fc:a7:c8:b6:96:75:a9:7d:7b:f2: 8f:19:85:c0:b6:5f:dc:fe:b9:20:f5:8e:0c:3d:dd: f0:a9:8d:07:7d:b0:cf:9b:93:c7:2f:16:0f:20:64: 61:8c:d2:a3:17:cf:9a:14:89:05:dc:3d:80:c3:17: 38:44:1e:d7:5d:af:7b:c7:c5:53:cc:e7:6c:7b:68: 55:85:fb:93:e3:e4:99:44:bb:7d:95:5b:72:52:2b: 69:5a:0b:98:a8:b2:81:9b:a1:d1:59:fd:6c:de:5e: b3:95:69:a0:79:a9:8a:9c:9d:49:bb:81:58:ed:aa: ca:1d:43:a6:d4:40:7a:e1:e2:76:c7:ec:b2:8a:c6: 38:74:0b:a5:27:cd:59:80:cf:d9:1e:76:83:7a:b2: 17:33:f1:ca:32:83:b2:2e:b8:38:bc:c5:1c:07:ed: f7:b8:b2:8e:8e:ba:fb:a7:28:1d:f2:ea:35:ae:59: 38:24:4f:53:85:4d:f1:65:05:af:e3:88:2a:5a:07: 2f:65:25:73:a6:fd:10:bb:02:48:1e:99:30:74:be: 65:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:12:9F:0A:9D:4A:A7:B5:CD:3A:DA:3D:3C:76:0C:38:43:B6:5B X509v3 Authority Key Identifier: keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3c:6d:dc:3e:f2:9e:50:11:a7:85:2f:8a:a0:ad:d3:9a:b2: ef:30:d3:22:65:28:6b:3d:8c:5d:ff:75:c5:35:d2:69:b9:42: 76:e0:9c:54:fd:e2:f3:ae:97:a2:0b:24:f8:68:10:95:39:5f: 01:2e:3a:f8:5e:3f:03:2c:14:4f:7a:21:66:45:19:4b:86:70: 84:7f:cb:90:92:8f:3a:8c:ee:f7:d8:8f:49:64:38:71:46:5c: f1:7b:b5:93:83:0b:99:73:b0:c3:e1:89:13:b5:d4:71:f9:3a: 7c:3e:f5:a1:90:87:bb:d0:56:a6:45:96:5f:27:b8:c9:57:d4: 63:9b:f3:85:06:f3:92:e8:d2:45:9b:69:08:54:0b:80:91:51: b9:fa:73:28:68:71:68:02:22:79:7a:64:4d:c9:c3:ed:3f:18: ae:26:98:e4:9a:9d:74:bd:24:e5:15:4c:6b:87:16:e3:9f:7f: bb:57:d5:11:1c:56:a8:83:4e:d7:10:74:b2:b3:f1:7c:6d:54: af:e1:a4:fc:80:75:59:a1:7a:a2:33:1e:08:82:4d:86:9f:dd: 8b:64:67:87:60:cd:a7:2e:d1:3c:c7:b0:59:5b:56:77:cf:d1: a2:4d:a0:38:47:b7:55:d7:f6:d2:76:85:5b:77:cf:63:29:92: ac:72:85:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+eBKhDkZ0HMVDZ/1LQkGAYQToEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2 MThEN0QzMDAeFw0yNDA1MTgwODE3MDRaFw0yNDA1MjExODQzMDRaMDMxMTAvBgNV BAMTKENBQjIxMjlGMEE5RDRBQTdCNUNEM0FEQTNEM0M3NjBDMzg0M0I2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtnLJKB0NXscTUiDvbfvJVFOqX aM0wfxxGuL8AwmTXNjjZWXoQML1S+IKubcZO/dJN/KfItpZ1qX178o8ZhcC2X9z+ uSD1jgw93fCpjQd9sM+bk8cvFg8gZGGM0qMXz5oUiQXcPYDDFzhEHtddr3vHxVPM 52x7aFWF+5Pj5JlEu32VW3JSK2laC5iosoGbodFZ/WzeXrOVaaB5qYqcnUm7gVjt qsodQ6bUQHrh4nbH7LKKxjh0C6UnzVmAz9kedoN6shcz8coyg7IuuDi8xRwH7fe4 so6OuvunKB3y6jWuWTgkT1OFTfFlBa/jiCpaBy9lJXOm/RC7AkgemTB0vmUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyrISnwqdSqe1zTraPTx2DDhDtlswHwYDVR0j BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE N0QzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJE Mzg2MThEN0QzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC88bdw+8p5QEaeFL4qgrdOasu8w0yJlKGs9 jF3/dcU10mm5QnbgnFT94vOul6ILJPhoEJU5XwEuOvhePwMsFE96IWZFGUuGcIR/ y5CSjzqM7vfYj0lkOHFGXPF7tZODC5lzsMPhiRO11HH5Onw+9aGQh7vQVqZFll8n uMlX1GOb84UG85Lo0kWbaQhUC4CRUbn6cyhocWgCInl6ZE3Jw+0/GK4mmOSanXS9 JOUVTGuHFuOff7tX1REcVqiDTtcQdLKz8XxtVK/hpPyAdVmheqIzHgiCTYaf3Ytk Z4dgzacu0TzHsFlbVnfP0aJNoDhHt1XX9tJ2hVt3z2MpkqxyhVo= -----END CERTIFICATE-----Generated at Sat May 18 09:08:41 2024 by rpki-client on console-ams.rpki-client.org