$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: NA4T4w6cyzTRRjEI52yMCYgLSsRL8xYYkJCRY9U0QOk= Subject key identifier: D3:30:09:83:77:CA:1E:BA:1F:5B:60:AF:AB:C4:D9:E4:5D:D8:5D:32 Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 3C9B9D66F139999D4335D21C07FC45132DEF1441 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: 15 Signing time: Wed 26 Jun 2024 01:30:34 +0000 Manifest this update: Wed 26 Jun 2024 01:25:34 +0000 Manifest next update: Sat 29 Jun 2024 06:56:34 +0000 Files and hashes: 1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: oZcKTmYCJqDy9qRd0DlVW5dVuhLNvdkEUxYoj4jIWDo=) 2: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: o/UEd47uuvjpCm/tH76MH5loGEWj29DLDy3WcGgx0Kw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Jun 2024 22:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9b:9d:66:f1:39:99:9d:43:35:d2:1c:07:fc:45:13:2d:ef:14:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Jun 26 01:25:34 2024 GMT Not After : Jun 29 06:56:34 2024 GMT Subject: CN=D330098377CA1EBA1F5B60AFABC4D9E45DD85D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:ab:9f:e0:dd:82:b5:b1:b9:47:6d:88:43: 33:4d:d6:22:2a:3f:3e:7f:ac:1c:ae:54:40:a5:cb: 46:ee:b6:67:ee:e8:e9:c1:4e:9d:be:08:86:0d:9a: bc:41:65:8f:1a:7c:7d:99:56:b9:f7:68:0b:29:e8: 1a:c9:01:d1:7d:00:2d:89:54:9c:8a:2e:36:01:49: 99:e3:f9:18:f0:7b:fa:80:f3:56:81:cc:c4:2b:c8: f1:e0:0d:b8:7c:8d:87:6e:14:de:05:17:b8:38:fb: 7f:cd:b3:b8:dc:ea:ed:f2:32:8a:9e:2f:1e:6d:7b: c3:e4:98:f0:39:90:e2:82:7d:c6:1b:83:66:5b:58: 69:89:61:e6:5b:e3:bb:47:ae:52:d4:64:59:65:c6: ca:34:27:5b:e6:cc:54:bb:60:08:88:d3:70:cc:ff: db:3e:23:38:a7:7d:36:bd:d6:04:96:05:c1:aa:5b: 67:03:b0:d6:77:e4:cf:28:a5:3f:d0:8a:a4:99:82: 99:af:da:e7:e7:7b:7c:12:34:ba:90:86:80:a6:df: 14:c1:e3:b6:98:f6:dc:29:f9:2d:8b:00:5f:ef:7e: e6:75:13:77:e9:10:dc:ee:86:c0:70:cf:22:09:9d: 03:ac:99:9e:d8:3e:2d:46:d4:8d:c6:53:4c:d8:1a: 6d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:30:09:83:77:CA:1E:BA:1F:5B:60:AF:AB:C4:D9:E4:5D:D8:5D:32 X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a0:c2:02:14:af:8c:ab:d8:c0:5b:25:f2:0e:27:f0:4f:e5: 0d:74:21:02:df:60:ac:e5:7d:4b:30:8c:7c:0a:25:44:f3:ce: 64:22:47:37:9e:ae:13:4c:34:5f:74:61:9d:1e:e1:1a:38:87: e5:1d:cb:ac:8d:1c:2c:51:b1:7e:57:cf:0b:ec:2d:52:23:34: 17:ec:95:22:8b:85:b8:d4:89:53:86:f2:8a:48:8d:43:3f:81: 35:2c:39:25:20:5a:be:51:df:de:12:61:f7:71:84:d7:97:26: e2:df:84:11:75:ee:15:68:3e:ab:d8:a7:64:b1:3f:2c:1f:28: 18:c0:4f:dc:2b:63:ab:8a:7c:9a:8d:4a:c4:3f:e6:99:54:59: 3c:0f:47:61:60:aa:c7:e7:49:5e:b8:3d:ba:4a:00:f9:a1:60: 83:4e:a5:18:c2:38:d9:28:d1:cb:12:89:2b:fd:f0:99:6b:a5: 66:d7:9b:df:d4:49:e6:bf:a6:e4:83:b9:3e:c1:27:d0:da:cb: d5:59:53:32:43:fb:ec:f9:ac:b2:c8:cc:9a:4f:c8:63:df:8b: e0:9f:43:19:71:61:34:71:03:a7:ef:c9:b9:49:27:26:00:15: b0:9a:ac:8b:b4:15:32:b4:ee:5d:44:64:d6:95:b7:e9:30:93: cf:e4:1c:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJudZvE5mZ1DNdIcB/xFEy3vFEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNDA2MjYwMTI1MzRaFw0yNDA2MjkwNjU2MzRaMDMxMTAvBgNV BAMTKEQzMzAwOTgzNzdDQTFFQkExRjVCNjBBRkFCQzREOUU0NUREODVEMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CKuf4N2CtbG5R22IQzNN1iIq Pz5/rByuVECly0butmfu6OnBTp2+CIYNmrxBZY8afH2ZVrn3aAsp6BrJAdF9AC2J VJyKLjYBSZnj+Rjwe/qA81aBzMQryPHgDbh8jYduFN4FF7g4+3/Ns7jc6u3yMoqe Lx5te8PkmPA5kOKCfcYbg2ZbWGmJYeZb47tHrlLUZFllxso0J1vmzFS7YAiI03DM /9s+IzinfTa91gSWBcGqW2cDsNZ35M8opT/QiqSZgpmv2ufne3wSNLqQhoCm3xTB 47aY9twp+S2LAF/vfuZ1E3fpENzuhsBwzyIJnQOsmZ7YPi1G1I3GU0zYGm3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0zAJg3fKHrofW2Cvq8TZ5F3YXTIwHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSgwgIUr4yr2MBbJfIOJ/BP5Q10IQLfYKzl fUswjHwKJUTzzmQiRzeerhNMNF90YZ0e4Ro4h+Udy6yNHCxRsX5XzwvsLVIjNBfs lSKLhbjUiVOG8opIjUM/gTUsOSUgWr5R394SYfdxhNeXJuLfhBF17hVoPqvYp2Sx PywfKBjAT9wrY6uKfJqNSsQ/5plUWTwPR2FgqsfnSV64PbpKAPmhYINOpRjCONko 0csSiSv98JlrpWbXm9/USea/puSDuT7BJ9Day9VZUzJD++z5rLLIzJpPyGPfi+Cf QxlxYTRxA6fvyblJJyYAFbCarIu0FTK07l1EZNaVt+kwk8/kHEI= -----END CERTIFICATE-----Generated at Wed Jun 26 02:07:45 2024 by rpki-client on console-ams.rpki-client.org