$ rpki-client -vvf repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft File: C2E929DFB05F81B91880BC808154365AECAC27D2.mft (raw, json) Hash identifier: DtwOnKA4XdnVHkXkgmtRtGyTya+dx8sjv+9HgIT6OSY= Subject key identifier: 4A:31:2C:83:DA:D7:25:41:43:6F:AC:AF:8D:FE:42:A0:3E:FF:7C:25 Authority key identifier: C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 Certificate issuer: /CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Certificate serial: 3233E2BC0062ABAE1A77EB5B44FF071F3425129C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft Manifest number: 55 Signing time: Tue 28 May 2024 15:31:29 +0000 Manifest this update: Tue 28 May 2024 15:26:29 +0000 Manifest next update: Fri 31 May 2024 20:30:29 +0000 Files and hashes: 1: C2E929DFB05F81B91880BC808154365AECAC27D2.crl (hash: HNch7XIqKdyVcn95/81e6NtZqkYiKEcngZTEwoV0ynk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:33:e2:bc:00:62:ab:ae:1a:77:eb:5b:44:ff:07:1f:34:25:12:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Validity Not Before: May 28 15:26:29 2024 GMT Not After : May 31 20:30:29 2024 GMT Subject: CN=4A312C83DAD72541436FACAF8DFE42A03EFF7C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:03:d3:7b:97:18:59:be:f6:23:bc:7d:ec:7d: 42:40:21:43:13:f7:e8:4f:80:1a:5c:10:17:19:5f: c9:c5:c0:99:cd:b3:f7:1a:a7:29:46:51:35:6c:e0: 5c:e3:f5:65:09:cf:e0:bf:b0:b2:54:a3:32:eb:e9: 41:42:fa:36:83:b6:7c:be:14:96:95:55:5d:13:8a: 5e:52:73:ab:9d:c2:1c:24:00:64:81:44:be:86:f6: 1a:98:bd:be:e4:06:88:ea:bc:c2:37:07:52:db:2f: 34:65:11:66:c7:6e:b2:8f:8d:da:b0:94:0d:78:87: f4:09:75:29:98:3c:e1:00:86:4d:89:43:72:32:07: e5:d4:af:d2:c1:47:c7:ef:75:8f:4a:54:6d:cb:f6: 20:68:93:b0:76:f3:87:b0:d3:f1:09:0d:75:4c:4c: 98:48:01:7e:69:6e:e7:9c:9b:0e:8f:7c:dc:34:e5: d2:8c:87:b3:c8:ec:8d:61:41:ac:4d:fd:39:e1:cc: 77:e4:d5:13:30:43:be:25:6b:0a:af:be:16:7f:b1: 6b:77:87:1e:73:97:6a:90:fc:14:76:83:bf:62:78: 87:6f:a1:8d:f9:44:f0:60:b9:16:24:74:31:88:01: 9c:8d:95:f1:98:f1:46:81:8e:ef:cb:23:e3:06:79: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:31:2C:83:DA:D7:25:41:43:6F:AC:AF:8D:FE:42:A0:3E:FF:7C:25 X509v3 Authority Key Identifier: keyid:C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:19:b0:6a:58:73:29:26:3d:ab:5e:f9:36:38:6f:37:24:65: 4d:1e:65:4e:ee:07:16:a1:98:49:41:19:a1:b4:b0:f8:90:f9: 02:45:d1:f0:3e:ef:29:bf:1b:fe:b8:f6:58:b8:1d:cc:50:20: 17:ce:12:fd:6f:3f:0f:23:3b:89:ef:e7:a1:f9:c2:45:7a:b7: 0b:28:eb:5d:36:b8:ea:a4:d8:1d:ba:05:28:b5:d5:26:84:2a: 49:d4:04:e2:14:be:57:4a:75:3b:b1:a8:c5:e6:a0:54:4f:df: 09:46:c1:a8:c3:38:68:26:3e:ca:82:92:64:8c:0a:e7:0e:9f: 15:79:9e:25:ca:62:6e:f5:50:31:fb:e8:64:42:38:4c:ef:8e: 8c:c0:2f:fd:73:e6:39:55:55:bd:24:59:e2:9e:03:f1:d9:a0: ee:d9:00:fc:06:56:75:76:bb:18:8b:d9:eb:5a:7a:0f:2d:61: e4:c3:2f:5e:cb:ac:7c:3c:d5:cd:84:32:3b:f2:73:a5:e3:cc: fa:a8:66:fa:38:a0:83:d4:0c:49:59:14:e6:e3:ce:99:c6:95: b2:7b:fe:bc:83:96:14:c0:d3:78:67:65:a1:f8:95:18:0c:c9: b5:7f:96:1b:a9:f2:51:e2:d1:e0:e2:3d:02:df:4d:6d:ac:95: 5a:20:f9:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjPivABiq64ad+tbRP8HHzQlEpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFF Q0FDMjdEMjAeFw0yNDA1MjgxNTI2MjlaFw0yNDA1MzEyMDMwMjlaMDMxMTAvBgNV BAMTKDRBMzEyQzgzREFENzI1NDE0MzZGQUNBRjhERkU0MkEwM0VGRjdDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNA9N7lxhZvvYjvH3sfUJAIUMT 9+hPgBpcEBcZX8nFwJnNs/capylGUTVs4Fzj9WUJz+C/sLJUozLr6UFC+jaDtny+ FJaVVV0Til5Sc6udwhwkAGSBRL6G9hqYvb7kBojqvMI3B1LbLzRlEWbHbrKPjdqw lA14h/QJdSmYPOEAhk2JQ3IyB+XUr9LBR8fvdY9KVG3L9iBok7B284ew0/EJDXVM TJhIAX5pbuecmw6PfNw05dKMh7PI7I1hQaxN/TnhzHfk1RMwQ74lawqvvhZ/sWt3 hx5zl2qQ/BR2g79ieIdvoY35RPBguRYkdDGIAZyNlfGY8UaBju/LI+MGeWu9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSjEsg9rXJUFDb6yvjf5CoD7/fCUwHwYDVR0j BBgwFoAUwukp37BfgbkYgLyAgVQ2WuysJ9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDZmZmFkMi0yMGJjLTQyNDYtODI5My00NDY2NmNlMWNmZTAvMC9DMkU5MjlERkIw NUY4MUI5MTg4MEJDODA4MTU0MzY1QUVDQUMyN0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFFQ0FD MjdEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2 NUFFQ0FDMjdEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4ZsGpYcykmPate+TY4bzckZU0eZU7uBxah mElBGaG0sPiQ+QJF0fA+7ym/G/649li4HcxQIBfOEv1vPw8jO4nv56H5wkV6twso 6102uOqk2B26BSi11SaEKknUBOIUvldKdTuxqMXmoFRP3wlGwajDOGgmPsqCkmSM CucOnxV5niXKYm71UDH76GRCOEzvjozAL/1z5jlVVb0kWeKeA/HZoO7ZAPwGVnV2 uxiL2etaeg8tYeTDL17LrHw81c2EMjvyc6XjzPqoZvo4oIPUDElZFObjzpnGlbJ7 /ryDlhTA03hnZaH4lRgMybV/lhup8lHi0eDiPQLfTW2slVog+cE= -----END CERTIFICATE-----Generated at Tue May 28 17:49:09 2024 by rpki-client on console-fra.rpki-client.org