$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft File: 2D0745D26E59440CB71FAFE996834493DA753248.mft (raw, json) Hash identifier: 7eH2IdjyWKgXBAMOpJFLRGt85MVrGQgxl4sJiCSRRCg= Subject key identifier: A0:CF:0E:72:92:95:85:F6:87:B7:6F:89:18:5E:91:43:10:9A:95:33 Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248 Certificate serial: 2A80D0A036865FBAADCB9832A5C7952D30EE21F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft Manifest number: 0103 Signing time: Mon 20 May 2024 00:20:43 +0000 Manifest this update: Mon 20 May 2024 00:15:43 +0000 Manifest next update: Thu 23 May 2024 11:06:43 +0000 Files and hashes: 1: 2D0745D26E59440CB71FAFE996834493DA753248.crl (hash: CwSFEWQmIyqgLnle50YVDd23bSYTQHvpuUXcTND9pzQ=) 2: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: ADulXqH+XQa/cOCtt/Tm9P2HLNHiHCnpZrAPCXgaUIU=) 3: 3130332e37332e3135392e302f32342d3234203d3e2031333838383836.roa (hash: KJYnAMPOLgD5ML0520D7ts2uKWX9DwccBQLW+v37GLs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:80:d0:a0:36:86:5f:ba:ad:cb:98:32:a5:c7:95:2d:30:ee:21:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248 Validity Not Before: May 20 00:15:43 2024 GMT Not After : May 23 11:06:43 2024 GMT Subject: CN=A0CF0E72929585F687B76F89185E9143109A9533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:c1:3f:4f:1d:96:5d:21:31:f7:5f:f3:64: b5:0b:a6:cb:f1:6d:df:36:fe:e6:2c:94:dd:01:ab: c6:a9:0e:c6:82:9c:60:6d:2a:80:6e:42:24:b9:2f: a2:a5:df:6c:a5:9a:27:d1:17:58:a7:ca:1d:3a:de: e3:23:7f:7d:a5:28:ec:51:b5:c6:de:8a:0e:34:30: 60:d6:29:e2:a2:e2:e4:4d:e4:3a:ff:9d:dd:1e:62: 6e:59:8d:d2:f2:c7:cd:f6:4d:c4:80:42:c6:04:34: e9:36:ab:7d:04:72:5a:bf:4d:d4:8a:90:16:4c:38: 5e:93:bb:3d:9d:b1:1a:c1:a2:01:d2:b4:3a:d9:c5: 6d:d9:1a:d5:4e:6c:f0:83:0f:03:6c:aa:40:03:64: 9b:f9:41:8f:4d:bd:7d:e2:4f:3a:2c:6d:82:f2:06: a5:4f:9a:6e:32:ee:af:da:b8:f3:9f:91:5c:6b:d4: 2e:7f:f6:0b:70:8f:f8:fa:d6:b9:c9:87:4c:f5:95: 1f:27:b6:5d:f8:70:af:a8:1a:ca:35:68:08:13:5d: b0:0e:9b:c3:79:5f:1d:33:06:7f:bc:f1:e9:e0:8e: 45:ad:4f:31:65:41:96:1f:75:61:bb:ee:9a:da:33: dc:61:62:84:8f:08:06:fa:e0:e3:96:b0:d2:fc:bd: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CF:0E:72:92:95:85:F6:87:B7:6F:89:18:5E:91:43:10:9A:95:33 X509v3 Authority Key Identifier: keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b5:2e:77:27:bb:3e:6c:26:9d:41:42:41:b8:eb:33:d0:e3: b0:6a:12:ac:f4:29:73:2c:8b:fa:a5:4d:01:f8:c6:3f:c7:bc: 94:2a:fa:cc:d5:da:2f:48:ec:f1:71:dd:64:27:e1:41:4d:2c: 4f:a2:65:56:69:4c:9d:f5:e7:5d:99:7e:db:a3:e4:34:9b:bf: 1b:30:b0:6d:4d:93:5b:87:79:ba:65:be:84:fe:89:c2:cd:41: 4d:17:aa:46:93:1f:83:1d:00:3c:2c:8d:20:bb:f3:cf:7a:9c: 95:f9:2c:1c:da:07:7f:78:dd:22:d6:29:20:7e:f5:dd:f2:48: b9:1c:21:c0:85:95:b0:b6:d4:86:a7:bc:08:15:77:c2:14:58: 3b:82:a1:7a:87:25:94:cf:ac:37:a9:e1:6b:90:53:a9:d1:7e: 16:9d:46:b1:b1:99:3f:83:d4:47:0b:f2:d0:b8:0e:2f:6c:e7: d6:66:af:0a:bc:7e:95:ed:a0:b6:18:3e:3d:27:93:19:96:13: c1:49:43:33:8d:4f:49:0a:f4:10:be:84:0c:06:38:6d:04:5e: 16:db:3a:ee:45:a9:4d:48:85:93:00:d1:b4:71:a3:e1:95:9d: cb:58:46:9d:b7:99:a3:61:f4:d3:15:d2:6b:55:c0:a4:66:1f: e7:c1:23:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKoDQoDaGX7qty5gypceVLTDuIfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNE QTc1MzI0ODAeFw0yNDA1MjAwMDE1NDNaFw0yNDA1MjMxMTA2NDNaMDMxMTAvBgNV BAMTKEEwQ0YwRTcyOTI5NTg1RjY4N0I3NkY4OTE4NUU5MTQzMTA5QTk1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClMME/Tx2WXSEx91/zZLULpsvx bd82/uYslN0Bq8apDsaCnGBtKoBuQiS5L6Kl32ylmifRF1inyh063uMjf32lKOxR tcbeig40MGDWKeKi4uRN5Dr/nd0eYm5ZjdLyx832TcSAQsYENOk2q30Eclq/TdSK kBZMOF6Tuz2dsRrBogHStDrZxW3ZGtVObPCDDwNsqkADZJv5QY9NvX3iTzosbYLy BqVPmm4y7q/auPOfkVxr1C5/9gtwj/j61rnJh0z1lR8ntl34cK+oGso1aAgTXbAO m8N5Xx0zBn+88engjkWtTzFlQZYfdWG77praM9xhYoSPCAb64OOWsNL8vXgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoM8OcpKVhfaHt2+JGF6RQxCalTMwHwYDVR0j BBgwFoAULQdF0m5ZRAy3H6/ploNEk9p1MkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQwNmNkYi0xNzkxLTQ3OGQtOWQyOC05ZTM3YTZmODA5Y2MvMC8yRDA3NDVEMjZF NTk0NDBDQjcxRkFGRTk5NjgzNDQ5M0RBNzUzMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNEQTc1 MzI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0 OTNEQTc1MzI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGe1Lncnuz5sJp1BQkG46zPQ47BqEqz0KXMs i/qlTQH4xj/HvJQq+szV2i9I7PFx3WQn4UFNLE+iZVZpTJ31512Zftuj5DSbvxsw sG1Nk1uHebplvoT+icLNQU0XqkaTH4MdADwsjSC78896nJX5LBzaB3943SLWKSB+ 9d3ySLkcIcCFlbC21IanvAgVd8IUWDuCoXqHJZTPrDep4WuQU6nRfhadRrGxmT+D 1EcL8tC4Di9s59Zmrwq8fpXtoLYYPj0nkxmWE8FJQzONT0kK9BC+hAwGOG0EXhbb Ou5FqU1IhZMA0bRxo+GVnctYRp23maNh9NMV0mtVwKRmH+fBI2Q= -----END CERTIFICATE-----Generated at Mon May 20 00:45:24 2024 by rpki-client on console-ams.rpki-client.org