$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft File: 2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json) Hash identifier: ykwQqtocsrJ6sYyA/uJfrHFT3rjNmFBVVV4SPeKjw7s= Subject key identifier: 64:45:8C:B8:45:A9:64:AA:C4:42:2A:98:34:AF:38:09:33:0B:62:69 Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Certificate issuer: /CN=2993EFF92300988A33773DD8C4B502F74B907112 Certificate serial: 02AE17080D8CD0417DC70E617D3432D4E88C0A01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject info access: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft Manifest number: 010F Signing time: Mon 27 May 2024 23:12:01 +0000 Manifest this update: Mon 27 May 2024 23:07:01 +0000 Manifest next update: Fri 31 May 2024 03:05:01 +0000 Files and hashes: 1: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: ywzQWV1+4aiP9K8sQV6RkQMHStltup7UFLSSLzsFT0I=) 2: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: BNTJTappND2hYtsxl9hf8m8TLnwN20gqS3LUafXzUUU=) 3: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: Sj0FJD82onWa7zyP5We+jYUdfdjCbkRId9K1UzXqRoQ=) 4: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: ruts3lX3R9D8KGjy+IQ3HUpNzdQ0Occ5luXuBET5dcg=) 5: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: U2zGE/2ISu5ljxeRDmIE/J1bfNwdzHL9j/Z2Dw9hINU=) 6: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: tY4xIGeaXMif6YckjPFz11h/hkjOmk7hvJUS+sxWok8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 21:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ae:17:08:0d:8c:d0:41:7d:c7:0e:61:7d:34:32:d4:e8:8c:0a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112 Validity Not Before: May 27 23:07:01 2024 GMT Not After : May 31 03:05:01 2024 GMT Subject: CN=64458CB845A964AAC4422A9834AF3809330B6269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:6c:56:51:81:12:81:27:85:1a:2f:7f:e2: f1:74:ee:f0:2e:5b:e9:c5:36:96:84:7a:82:40:53: 69:53:ae:57:3d:40:49:af:39:27:0a:34:f4:ce:88: 03:4e:92:11:07:84:8d:4f:cd:4d:0b:6b:6f:49:ec: fd:5c:04:7f:1e:c8:b8:60:a5:b7:a4:d4:d7:c9:7d: c0:ff:11:91:1f:ba:b9:ff:ef:c3:f5:80:8a:0f:a4: 3f:2f:9c:3b:2b:4c:15:7e:31:35:cb:83:b5:c3:1d: 68:b4:15:25:80:66:13:11:6e:ff:98:3a:5d:03:f6: 37:73:a8:90:77:ae:fa:03:5a:6f:d0:f8:c8:52:06: 24:fd:4d:c9:3c:92:ac:79:c2:93:5c:e7:5c:ca:7b: 61:b0:96:4d:d1:b6:75:9d:34:64:52:01:93:27:3d: 03:17:a8:b7:e4:cb:e9:52:d6:90:ee:ae:b1:e6:5a: 2c:11:80:43:2e:c7:9e:02:55:0f:87:9a:cf:da:4f: 75:cc:c0:91:46:7e:7f:c3:4f:e9:bc:b3:8f:3e:4c: f2:fd:1c:a6:2b:24:39:f4:c6:04:21:67:68:24:da: ff:30:ef:2c:91:ad:32:ad:08:a2:ec:76:f1:ac:d3: 31:29:92:46:a7:cd:ba:1f:52:0b:2a:b6:52:04:0c: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:45:8C:B8:45:A9:64:AA:C4:42:2A:98:34:AF:38:09:33:0B:62:69 X509v3 Authority Key Identifier: keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:72:30:41:b8:2f:f4:e3:c8:0c:bb:fe:ef:85:d2:06:d9:7a: b7:de:15:40:35:9b:7a:89:96:a1:63:c6:f1:82:c0:c0:d2:cb: 8c:bc:b6:a0:58:cd:01:c6:9f:db:67:35:6a:f9:be:ac:e6:bd: 5e:d3:f0:8d:51:6f:27:13:24:12:25:cd:9c:ac:cd:f4:55:65: 38:ac:d8:dd:dc:3f:ab:03:cc:07:51:fa:fc:d0:0c:60:e9:cd: ee:fc:44:8c:c0:c0:9a:7d:cd:76:b3:39:5c:8c:65:2f:5b:fd: 55:bd:41:a7:95:65:e9:d2:a3:2e:f8:9d:4c:a7:99:86:8b:3e: 27:da:8e:f4:40:f7:e3:f5:c1:88:59:22:50:2c:0e:80:61:0f: 6d:06:23:c4:d6:f6:b4:43:ca:88:02:46:f6:e2:7c:d5:f3:f2: d2:5f:7e:72:af:05:e1:99:59:01:70:ee:19:e6:fa:f3:4a:1c: d7:d0:74:59:cc:5b:b1:13:5d:55:a9:56:ec:55:f2:e1:94:27: 71:09:18:ff:49:00:90:1f:5e:8a:3c:17:ea:74:00:28:a3:04: fe:7c:85:7c:85:07:95:a2:88:84:e4:ba:00:e1:db:5c:cd:23: 98:e3:e6:31:d2:5d:28:70:d7:ce:f1:08:9c:43:d1:e6:96:53: 68:db:b9:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAq4XCA2M0EF9xw5hfTQy1OiMCgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0 QjkwNzExMjAeFw0yNDA1MjcyMzA3MDFaFw0yNDA1MzEwMzA1MDFaMDMxMTAvBgNV BAMTKDY0NDU4Q0I4NDVBOTY0QUFDNDQyMkE5ODM0QUYzODA5MzMwQjYyNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vGxWUYESgSeFGi9/4vF07vAu W+nFNpaEeoJAU2lTrlc9QEmvOScKNPTOiANOkhEHhI1PzU0La29J7P1cBH8eyLhg pbek1NfJfcD/EZEfurn/78P1gIoPpD8vnDsrTBV+MTXLg7XDHWi0FSWAZhMRbv+Y Ol0D9jdzqJB3rvoDWm/Q+MhSBiT9Tck8kqx5wpNc51zKe2Gwlk3RtnWdNGRSAZMn PQMXqLfky+lS1pDurrHmWiwRgEMux54CVQ+Hms/aT3XMwJFGfn/DT+m8s48+TPL9 HKYrJDn0xgQhZ2gk2v8w7yyRrTKtCKLsdvGs0zEpkkanzbofUgsqtlIEDM57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZEWMuEWpZKrEQiqYNK84CTMLYmkwHwYDVR0j BBgwFoAUKZPv+SMAmIozdz3YxLUC90uQcRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMC8yOTkzRUZGOTIz MDA5ODhBMzM3NzNERDhDNEI1MDJGNzRCOTA3MTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0Qjkw NzExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAy Rjc0QjkwNzExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxyMEG4L/TjyAy7/u+F0gbZerfeFUA1m3qJ lqFjxvGCwMDSy4y8tqBYzQHGn9tnNWr5vqzmvV7T8I1RbycTJBIlzZyszfRVZTis 2N3cP6sDzAdR+vzQDGDpze78RIzAwJp9zXazOVyMZS9b/VW9QaeVZenSoy74nUyn mYaLPifajvRA9+P1wYhZIlAsDoBhD20GI8TW9rRDyogCRvbifNXz8tJffnKvBeGZ WQFw7hnm+vNKHNfQdFnMW7ETXVWpVuxV8uGUJ3EJGP9JAJAfXoo8F+p0ACijBP58 hXyFB5WiiITkugDh21zNI5jj5jHSXShw187xCJxD0eaWU2jbuRc= -----END CERTIFICATE-----Generated at Tue May 28 02:06:43 2024 by rpki-client on console-ams.rpki-client.org