$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: KuiOW8ysekdydZHPQGbt2mRO61Wqhq5EaUfcfVAn1MA= Subject key identifier: F9:72:AA:2B:D1:91:A5:0E:CD:45:4F:31:2C:A0:A3:71:F8:C6:6B:EF Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 27A80433F40578790C579E36740AD75BEA314B9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 0432 Signing time: Sat 18 May 2024 10:20:36 +0000 Manifest this update: Sat 18 May 2024 10:15:36 +0000 Manifest next update: Tue 21 May 2024 20:00:36 +0000 Files and hashes: 1: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: YtAbNo8WeYwYmQdaBgXy8i6RWkZ2yFu96hGcXuWjLfo=) 2: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: m0OyRcGhRSLMpJuESy/IfYraD1kkUhEWkOCA2Hwna6I=) 3: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: Gyd51aWvCECrbLFTWDuBQ+qibcUQentdAoxkugpbywI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a8:04:33:f4:05:78:79:0c:57:9e:36:74:0a:d7:5b:ea:31:4b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: May 18 10:15:36 2024 GMT Not After : May 21 20:00:36 2024 GMT Subject: CN=F972AA2BD191A50ECD454F312CA0A371F8C66BEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:f6:33:3f:b6:23:00:37:be:98:e3:d0:a7: df:3b:21:7c:ca:90:a1:b6:87:fd:61:1c:e7:c7:30: c9:a8:7c:e4:d1:05:9d:56:d4:26:1c:64:ec:49:ad: 43:33:1d:13:22:d1:4c:fa:68:9e:c1:02:9e:be:ec: 46:8e:ef:25:4d:a8:49:19:24:fe:ec:f8:93:37:c8: 9b:f4:70:30:1f:69:f8:6f:cd:78:fb:94:b7:a5:01: d1:a1:ce:2a:74:3f:9c:34:0b:ff:66:a8:4c:ea:dd: 49:68:0c:e7:dc:d8:27:7b:d6:07:38:4f:32:a2:a4: c9:21:f4:bc:d1:47:fd:67:5b:e4:0b:97:df:c0:5a: 83:91:9f:42:6b:13:5a:f2:ba:0c:66:1e:63:33:8e: 76:a6:a2:29:1a:4e:7c:71:62:f7:fc:7c:a3:48:15: 56:a9:fa:7d:7c:4c:b1:cb:0f:6a:58:df:0d:97:42: cd:a4:08:bc:67:ed:10:c5:a9:0e:2c:35:52:cf:53: 44:f5:64:2f:83:38:96:b0:f2:0d:92:91:1e:9a:2b: 8c:0b:85:c4:36:b7:36:e8:86:25:df:7e:d3:05:58: 8b:08:87:0b:0a:0d:a9:78:57:01:7a:9d:9d:4e:ed: 95:98:72:a0:e2:05:d4:6e:60:a9:75:a9:5a:97:88: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:72:AA:2B:D1:91:A5:0E:CD:45:4F:31:2C:A0:A3:71:F8:C6:6B:EF X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:f8:50:c7:b3:04:11:ec:fc:05:5d:6d:cf:38:17:f7:f1:3f: 31:d7:d4:d8:c1:e1:c0:b9:73:53:68:ae:c1:b6:66:15:b5:9b: 2c:c6:a5:1a:43:63:91:01:c6:63:89:cf:77:a9:3a:10:0c:32: c9:a6:b2:fb:c9:1f:20:53:f1:5a:6f:12:36:69:be:d1:d3:dc: 25:ea:ad:a3:e2:38:95:40:6e:4e:13:da:86:d5:5e:6d:1f:ec: ef:08:da:8c:36:05:bd:f4:46:ec:ad:5a:a4:dd:f3:a7:4f:b3: 34:88:c0:28:02:e8:f0:12:eb:0b:40:35:01:30:44:8c:8f:4d: 22:4e:14:8a:b5:46:c5:7e:e8:e1:23:77:e4:31:5e:c3:00:d6: e9:31:30:c3:9f:2c:60:8f:3b:b1:99:52:f3:69:20:9b:b5:52: e3:35:ea:7f:05:f2:55:37:99:b6:22:8d:d8:39:3c:f4:14:2b: 77:8f:6d:e0:83:f9:16:a8:fc:31:ab:a6:3e:62:ad:0f:98:0f: 91:2b:4c:2c:14:22:38:15:ee:65:f8:97:a7:08:7d:fa:d1:01: 59:3c:5b:30:51:a9:97:f2:16:65:d2:11:fa:02:5b:12:06:04: 41:62:8d:34:d2:2f:c9:63:13:83:45:89:34:97:27:27:d7:c9: 2d:a2:35:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6gEM/QFeHkMV542dArXW+oxS50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNDA1MTgxMDE1MzZaFw0yNDA1MjEyMDAwMzZaMDMxMTAvBgNV BAMTKEY5NzJBQTJCRDE5MUE1MEVDRDQ1NEYzMTJDQTBBMzcxRjhDNjZCRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSvYzP7YjADe+mOPQp987IXzK kKG2h/1hHOfHMMmofOTRBZ1W1CYcZOxJrUMzHRMi0Uz6aJ7BAp6+7EaO7yVNqEkZ JP7s+JM3yJv0cDAfafhvzXj7lLelAdGhzip0P5w0C/9mqEzq3UloDOfc2Cd71gc4 TzKipMkh9LzRR/1nW+QLl9/AWoORn0JrE1ryugxmHmMzjnamoikaTnxxYvf8fKNI FVap+n18TLHLD2pY3w2XQs2kCLxn7RDFqQ4sNVLPU0T1ZC+DOJaw8g2SkR6aK4wL hcQ2tzbohiXfftMFWIsIhwsKDal4VwF6nZ1O7ZWYcqDiBdRuYKl1qVqXiKMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+XKqK9GRpQ7NRU8xLKCjcfjGa+8wHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMD4UMezBBHs/AVdbc84F/fxPzHX1NjB4cC5 c1NorsG2ZhW1myzGpRpDY5EBxmOJz3epOhAMMsmmsvvJHyBT8VpvEjZpvtHT3CXq raPiOJVAbk4T2obVXm0f7O8I2ow2Bb30RuytWqTd86dPszSIwCgC6PAS6wtANQEw RIyPTSJOFIq1RsV+6OEjd+QxXsMA1ukxMMOfLGCPO7GZUvNpIJu1UuM16n8F8lU3 mbYijdg5PPQUK3ePbeCD+Rao/DGrpj5irQ+YD5ErTCwUIjgV7mX4l6cIffrRAVk8 WzBRqZfyFmXSEfoCWxIGBEFijTTSL8ljE4NFiTSXJyfXyS2iNec= -----END CERTIFICATE-----Generated at Sat May 18 11:25:22 2024 by rpki-client on console-ams.rpki-client.org