$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: jRfFbO6JEyZvErU5WQxgkBiDpfvjQlwtKF+2YY6nZ4s= Subject key identifier: 11:CF:ED:9C:13:6D:4B:40:2A:E4:92:19:AF:DA:A4:13:84:B2:D3:B3 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 02FFCE7E236C6A0268799CE91A8B548CDFBFFF30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: 1A Signing time: Thu 27 Jun 2024 11:01:56 +0000 Manifest this update: Thu 27 Jun 2024 10:56:56 +0000 Manifest next update: Sun 30 Jun 2024 21:21:56 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: Yid8frpvCMkMf1ma76Hg9B9Pe7bRisQmq2+wHrZy8PM=) 2: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: MsBNdsUJEwF6roFhs8Ql+wMmNYj2G7J9BKW0GedZvGU=) 3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: yRf7DT4SMWKJd5i4r1s4nhb5FSivER/9Py910m3Jd4o=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: A6lmT+4re8NJP6RZrWP6uSLhDKlk3n2nKGBixAMUJac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 17:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ff:ce:7e:23:6c:6a:02:68:79:9c:e9:1a:8b:54:8c:df:bf:ff:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Jun 27 10:56:56 2024 GMT Not After : Jun 30 21:21:56 2024 GMT Subject: CN=11CFED9C136D4B402AE49219AFDAA41384B2D3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:5e:bc:6c:bd:b9:9d:c1:d3:36:1e:99:22: 2e:a0:32:30:ee:a7:a7:5b:7c:1f:93:28:2d:d9:a6: 6f:4c:3f:3e:41:26:60:eb:f6:72:d8:23:8c:5b:65: cc:12:03:11:8f:20:ad:be:e5:3c:e8:7a:eb:d4:01: b1:cf:95:34:87:cc:54:14:81:4e:da:ee:e7:35:4c: 54:40:d2:e3:67:9b:d7:8a:76:fa:ad:36:a3:2b:cc: 98:0a:b0:3c:13:08:87:b2:54:a4:ee:a0:c0:29:ed: 56:37:42:d4:72:79:93:65:af:cc:ce:33:f5:a4:19: f7:f6:ba:7b:1a:91:44:a8:ce:6a:13:43:b1:5a:01: 33:07:96:84:71:41:94:d9:67:c5:75:8c:5c:ab:85: fc:5e:bc:cf:ef:7c:af:f3:4e:ad:ab:9f:10:ae:0c: b5:ff:bf:19:e2:82:1a:95:a7:cf:38:a2:d5:62:e2: 45:65:d2:70:55:ea:d2:57:ea:0d:ea:f5:66:e8:9c: ea:bb:2c:8b:c9:31:10:10:f6:a4:fd:1d:31:28:90: a4:44:78:76:d6:93:f1:04:6d:51:14:9f:67:f4:2d: d9:a1:5e:dc:54:50:7b:02:4a:cf:de:a2:2d:e0:cb: 2f:d5:95:0c:28:a5:a6:e3:6b:12:e1:67:ac:21:11: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CF:ED:9C:13:6D:4B:40:2A:E4:92:19:AF:DA:A4:13:84:B2:D3:B3 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:79:d8:92:9c:f7:0b:4e:62:91:5b:b6:e9:44:ea:fc:cd:20: d8:c9:72:30:7c:7e:65:5d:82:f3:c2:9f:6e:b6:77:db:27:fc: 42:72:ba:f1:ca:c7:f7:e2:f5:02:82:9e:07:92:a7:ed:7b:ad: 1d:b6:4e:b5:ba:5f:5c:19:14:c5:bb:8d:8b:35:51:1f:45:e6: a0:ff:88:6b:0d:49:3f:ca:1c:96:a2:7b:e7:8c:7b:ec:6b:e8: af:25:b7:85:5c:ee:b0:68:7f:cc:ee:5a:3f:dc:c5:00:bd:fe: 27:a4:c2:6d:aa:a1:80:ca:6b:cf:5e:45:68:bf:e7:06:fe:13: 5d:ab:c9:99:b7:e2:db:8c:53:2f:1a:45:1b:43:52:22:4a:67: e6:68:fc:fe:31:a8:25:91:96:fb:74:ac:89:28:02:12:c3:b1: 8d:ae:87:6c:64:69:0d:98:f9:34:6c:80:66:57:0c:5d:ae:ee: 29:22:e4:82:4c:b7:4a:52:56:60:90:be:3d:59:f9:7f:3b:3f: 04:af:df:3e:03:a5:74:0b:53:3f:35:d9:e1:a2:de:f4:f0:87: 0e:1a:c7:71:cf:2a:ab:d2:1c:28:3f:ac:c6:f9:c5:e0:f6:43: 4f:9d:f0:4b:c8:96:36:e2:16:12:0c:2f:92:e2:20:53:94:13: 8a:70:dd:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAv/OfiNsagJoeZzpGotUjN+//zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNDA2MjcxMDU2NTZaFw0yNDA2MzAyMTIxNTZaMDMxMTAvBgNV BAMTKDExQ0ZFRDlDMTM2RDRCNDAyQUU0OTIxOUFGREFBNDEzODRCMkQzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFS168bL25ncHTNh6ZIi6gMjDu p6dbfB+TKC3Zpm9MPz5BJmDr9nLYI4xbZcwSAxGPIK2+5TzoeuvUAbHPlTSHzFQU gU7a7uc1TFRA0uNnm9eKdvqtNqMrzJgKsDwTCIeyVKTuoMAp7VY3QtRyeZNlr8zO M/WkGff2unsakUSozmoTQ7FaATMHloRxQZTZZ8V1jFyrhfxevM/vfK/zTq2rnxCu DLX/vxnighqVp884otVi4kVl0nBV6tJX6g3q9WbonOq7LIvJMRAQ9qT9HTEokKRE eHbWk/EEbVEUn2f0LdmhXtxUUHsCSs/eoi3gyy/VlQwopabjaxLhZ6whES3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEc/tnBNtS0Aq5JIZr9qkE4Sy07MwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI552JKc9wtOYpFbtulE6vzNINjJcjB8fmVd gvPCn262d9sn/EJyuvHKx/fi9QKCngeSp+17rR22TrW6X1wZFMW7jYs1UR9F5qD/ iGsNST/KHJaie+eMe+xr6K8lt4Vc7rBof8zuWj/cxQC9/iekwm2qoYDKa89eRWi/ 5wb+E12ryZm34tuMUy8aRRtDUiJKZ+Zo/P4xqCWRlvt0rIkoAhLDsY2uh2xkaQ2Y +TRsgGZXDF2u7iki5IJMt0pSVmCQvj1Z+X87PwSv3z4DpXQLUz812eGi3vTwhw4a x3HPKqvSHCg/rMb5xeD2Q0+d8EvIljbiFhIML5LiIFOUE4pw3RU= -----END CERTIFICATE-----Generated at Thu Jun 27 18:23:02 2024 by rpki-client on console-fra.rpki-client.org