$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: X2+omVRBzCPwyWCEneWJMrMCqeLYBytRZXSWYUWBU9U= Subject key identifier: 3F:50:AD:C8:29:1B:5C:3A:6C:99:D9:A8:62:C8:C3:41:DF:DB:E5:89 Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 46807B6B17B19E2D26E3725FE8F6F70499305B8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 0432 Signing time: Fri 17 May 2024 14:11:31 +0000 Manifest this update: Fri 17 May 2024 14:06:31 +0000 Manifest next update: Mon 20 May 2024 14:59:31 +0000 Files and hashes: 1: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: rMOWT+Ye0Pphv7CiiFxcHimLa3gi4O0yl02xPpOb4zM=) 2: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: Qk76lywncAUELb9e9NXFItMnlnOHKxZQx54Ih58eX8k=) 3: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: k6kjxnUOvp5tKn1MaLVGkrEOLzoNw0mR6lPda79oQhI=) 4: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: jC0+G4xeOcPd0TrKGJ/PhjPMB67VoNLolJB1jocV+Fk=) 5: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: eJZjzb14zV1PQKLbOV/L1TCcIV167ZB/pkSPExweCCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 14:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:80:7b:6b:17:b1:9e:2d:26:e3:72:5f:e8:f6:f7:04:99:30:5b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: May 17 14:06:31 2024 GMT Not After : May 20 14:59:31 2024 GMT Subject: CN=3F50ADC8291B5C3A6C99D9A862C8C341DFDBE589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:28:01:5c:3e:0a:fd:73:27:58:97:64:f1:63: c2:61:49:8f:81:4f:f6:6d:94:c0:f3:c0:07:50:13: 65:62:0e:37:c4:5e:79:64:84:fa:8c:66:83:39:1f: 0d:6e:03:0e:9c:52:b0:b9:cf:38:ad:9d:b8:9e:05: 38:c8:4f:ef:7e:65:23:84:cb:6f:2d:af:bf:22:55: ee:c3:53:83:6d:d9:9e:d5:e5:3a:d4:de:d0:1e:de: 0c:2a:3b:1e:1c:99:03:6b:19:cf:bc:08:01:f5:14: 2e:9c:e8:60:74:7f:dd:42:58:b7:9d:ed:1e:bc:28: 42:dd:97:fc:ba:69:c8:92:6a:1d:38:71:c2:9c:b9: f7:65:79:af:1c:88:be:f6:6c:8f:0f:2f:14:8e:cc: f6:86:4f:3c:34:1e:69:01:c6:bb:42:f7:2d:9c:ad: c1:14:cd:56:52:e1:4e:ea:fe:1d:df:f7:f7:2d:c8: 20:1a:88:3e:0c:4c:b6:e5:00:93:a4:b2:5e:44:8c: e6:8c:8d:83:a5:44:c0:16:fa:89:91:1b:2b:ed:67: 29:16:f3:8e:76:01:5c:bf:7e:05:cd:84:18:70:4e: 4d:23:d4:e4:e5:0f:57:84:05:02:c1:4e:55:ca:ba: ce:49:e2:28:58:42:56:f2:3d:41:27:0f:61:c2:92: 39:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:50:AD:C8:29:1B:5C:3A:6C:99:D9:A8:62:C8:C3:41:DF:DB:E5:89 X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:fe:fe:a3:aa:9b:24:97:c8:55:ce:a8:a7:d0:37:88:ae:bc: 06:49:ac:09:ad:20:16:d3:ea:51:35:8a:fb:65:a9:62:42:71: af:db:33:95:e6:b2:62:1b:7c:ae:eb:7a:e9:d9:8d:d2:9f:85: ae:73:c6:02:2a:63:0d:3a:fb:8e:3b:a4:49:8f:2d:c4:43:ed: 9a:16:3d:75:1f:5c:27:2e:fe:9c:10:01:ec:8d:d2:83:69:01: 22:d9:96:4e:cf:ad:ac:35:93:ff:ef:45:f4:86:2a:00:b8:4f: b5:1e:2f:9a:c3:ae:3f:6b:9d:d8:b3:02:ba:bb:5e:80:06:49: 34:8e:25:8e:9a:c6:6d:61:44:d3:ef:72:db:a1:ff:60:0e:9e: ab:60:11:bb:13:14:8d:ab:49:2f:cc:ec:01:60:50:37:d8:dc: d3:81:4e:49:01:fb:11:28:0f:2c:b8:da:ee:8e:77:3c:d0:3c: e4:7c:d3:f6:02:3d:0b:d0:a7:84:1f:12:75:92:0c:86:c8:49: 46:05:b1:c6:47:f0:7d:e9:bd:31:3f:04:04:62:79:c8:0f:ea: 07:60:12:82:c3:82:17:7e:41:17:70:e1:53:4f:b7:4d:a5:f6: 00:85:ed:28:4f:48:99:40:cd:d3:33:a5:95:e7:77:d1:0d:f3: 64:39:03:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURoB7axexni0m43Jf6Pb3BJkwW40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNDA1MTcxNDA2MzFaFw0yNDA1MjAxNDU5MzFaMDMxMTAvBgNV BAMTKDNGNTBBREM4MjkxQjVDM0E2Qzk5RDlBODYyQzhDMzQxREZEQkU1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWKAFcPgr9cydYl2TxY8JhSY+B T/ZtlMDzwAdQE2ViDjfEXnlkhPqMZoM5Hw1uAw6cUrC5zzitnbieBTjIT+9+ZSOE y28tr78iVe7DU4Nt2Z7V5TrU3tAe3gwqOx4cmQNrGc+8CAH1FC6c6GB0f91CWLed 7R68KELdl/y6aciSah04ccKcufdlea8ciL72bI8PLxSOzPaGTzw0HmkBxrtC9y2c rcEUzVZS4U7q/h3f9/ctyCAaiD4MTLblAJOksl5EjOaMjYOlRMAW+omRGyvtZykW 8452AVy/fgXNhBhwTk0j1OTlD1eEBQLBTlXKus5J4ihYQlbyPUEnD2HCkjlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP1CtyCkbXDpsmdmoYsjDQd/b5YkwHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABL+/qOqmySXyFXOqKfQN4iuvAZJrAmtIBbT 6lE1ivtlqWJCca/bM5XmsmIbfK7reunZjdKfha5zxgIqYw06+447pEmPLcRD7ZoW PXUfXCcu/pwQAeyN0oNpASLZlk7Praw1k//vRfSGKgC4T7UeL5rDrj9rndizArq7 XoAGSTSOJY6axm1hRNPvctuh/2AOnqtgEbsTFI2rSS/M7AFgUDfY3NOBTkkB+xEo Dyy42u6OdzzQPOR80/YCPQvQp4QfEnWSDIbISUYFscZH8H3pvTE/BARiecgP6gdg EoLDghd+QRdw4VNPt02l9gCF7ShPSJlAzdMzpZXnd9EN82Q5A14= -----END CERTIFICATE-----Generated at Fri May 17 15:21:31 2024 by rpki-client on console-ams.rpki-client.org