$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: aVa3Sh53dXj5oLB0AAxTNQLWi9ZaK001qB9/30qpjWc= Subject key identifier: 8E:7F:47:56:21:1A:48:89:04:23:15:A9:B7:4D:DC:EA:9E:7C:0A:EC Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 1A37B724D845E475241096E16489D49025D03F43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 0186 Signing time: Wed 29 May 2024 05:41:04 +0000 Manifest this update: Wed 29 May 2024 05:36:04 +0000 Manifest next update: Sat 01 Jun 2024 06:26:04 +0000 Files and hashes: 1: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: T4LdME3if+rfVRoKOxAPgevcHIvbc+/uQ8Pead1Ei+I=) 2: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: kaXrUiN10YtO8cMHU2K8Fer3KVF7bZLUJdNjUFhPtfQ=) 3: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: o7pcYSTOExV6f4Mz32EwWDjgPtKRl0MlGnQhCBGCJhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:37:b7:24:d8:45:e4:75:24:10:96:e1:64:89:d4:90:25:d0:3f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: May 29 05:36:04 2024 GMT Not After : Jun 1 06:26:04 2024 GMT Subject: CN=8E7F4756211A4889042315A9B74DDCEA9E7C0AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:c2:4b:fb:f5:63:b1:53:de:96:c3:fe:82: 6d:3d:f2:07:89:f1:2b:3b:34:6f:a8:8b:62:9e:57: 42:59:aa:f2:53:a2:0a:8c:3f:5a:7e:14:0c:ea:c4: 19:6e:07:fd:cc:8c:28:a8:b1:16:e8:b0:ca:1c:7d: 8e:77:ad:52:81:1b:2f:e7:33:4c:08:be:55:38:a1: 3b:84:f1:43:fe:2e:b6:f3:66:5c:c3:32:29:c8:1a: 50:38:e2:7e:bf:5c:c2:03:b8:ae:4a:e7:d0:52:bd: 81:69:95:9c:79:e2:1a:55:8f:0a:6d:d2:c7:26:5a: 38:3a:46:c4:d0:34:01:05:ac:30:45:31:e3:7d:b1: 4d:c8:30:35:9e:53:62:a6:36:6b:98:a8:b1:b6:fd: a3:58:ab:ca:cc:32:1e:b7:05:ae:7c:bc:28:2d:4a: fd:33:f8:35:82:00:78:83:57:bd:b1:64:e3:ec:ee: 4f:d5:5f:cc:bc:97:86:c7:29:f5:4b:7e:fd:d8:f2: 86:1a:7b:c9:7e:14:53:54:8b:a3:fd:6f:c9:7d:7e: f4:a7:46:26:26:07:95:dc:98:b7:92:b9:6c:0b:8c: 66:ec:ff:23:02:25:91:b0:0d:cf:d2:c8:b7:d4:ab: 62:82:68:22:f0:49:31:6e:80:7d:41:9e:8a:a4:e3: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7F:47:56:21:1A:48:89:04:23:15:A9:B7:4D:DC:EA:9E:7C:0A:EC X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:84:29:2c:65:cf:71:5c:f2:d3:e1:d2:b0:c7:4f:dd:77:b3: c2:d4:da:50:55:05:74:e6:1d:bc:dc:ef:de:bd:ec:aa:63:83: 58:68:ff:e5:20:a3:45:8d:db:e7:01:52:1a:e6:0d:a9:26:be: a8:3e:74:36:6f:b7:66:49:91:3d:bd:c8:5f:2b:62:79:58:e5: 95:3a:3b:a3:db:e1:d3:6b:2f:6e:2d:df:c5:8a:0b:7c:4e:c6: d3:06:51:c0:f2:6d:c2:d7:07:a9:e7:a7:40:11:06:9a:1f:43: 81:01:5e:ea:da:12:56:2a:81:23:6f:2f:82:57:43:d9:67:0d: 40:62:ca:de:5d:ab:f2:03:96:e7:b6:50:6f:24:53:31:3c:a5: 53:5b:1b:fb:cf:89:8d:ff:a4:9e:67:6d:13:c2:79:9d:b4:a0: 0c:51:4e:30:e8:f4:aa:2a:fe:e0:c5:97:1d:fc:05:a6:6c:59: 17:d3:0c:3f:11:c0:06:4f:ab:74:a9:c2:d9:2c:b5:5b:36:27: 53:cc:5f:05:01:2c:a4:b6:b2:65:ae:fb:46:c5:dc:60:3d:e1: 63:75:a3:17:cb:aa:cb:40:aa:9a:ea:48:74:ea:96:fe:65:66: a4:a2:34:2a:e1:27:ee:b3:63:fc:ed:a2:6c:a1:f5:9a:03:cf: b7:80:d1:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGje3JNhF5HUkEJbhZInUkCXQP0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNDA1MjkwNTM2MDRaFw0yNDA2MDEwNjI2MDRaMDMxMTAvBgNV BAMTKDhFN0Y0NzU2MjExQTQ4ODkwNDIzMTVBOUI3NEREQ0VBOUU3QzBBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6sJL+/VjsVPelsP+gm098geJ 8Ss7NG+oi2KeV0JZqvJTogqMP1p+FAzqxBluB/3MjCiosRbosMocfY53rVKBGy/n M0wIvlU4oTuE8UP+LrbzZlzDMinIGlA44n6/XMIDuK5K59BSvYFplZx54hpVjwpt 0scmWjg6RsTQNAEFrDBFMeN9sU3IMDWeU2KmNmuYqLG2/aNYq8rMMh63Ba58vCgt Sv0z+DWCAHiDV72xZOPs7k/VX8y8l4bHKfVLfv3Y8oYae8l+FFNUi6P9b8l9fvSn RiYmB5XcmLeSuWwLjGbs/yMCJZGwDc/SyLfUq2KCaCLwSTFugH1Bnoqk45qNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjn9HViEaSIkEIxWpt03c6p58CuwwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuEKSxlz3Fc8tPh0rDHT913s8LU2lBVBXTm Hbzc79697Kpjg1ho/+Ugo0WN2+cBUhrmDakmvqg+dDZvt2ZJkT29yF8rYnlY5ZU6 O6Pb4dNrL24t38WKC3xOxtMGUcDybcLXB6nnp0ARBpofQ4EBXuraElYqgSNvL4JX Q9lnDUBiyt5dq/IDlue2UG8kUzE8pVNbG/vPiY3/pJ5nbRPCeZ20oAxRTjDo9Koq /uDFlx38BaZsWRfTDD8RwAZPq3SpwtkstVs2J1PMXwUBLKS2smWu+0bF3GA94WN1 oxfLqstAqprqSHTqlv5lZqSiNCrhJ+6zY/ztomyh9ZoDz7eA0bU= -----END CERTIFICATE-----Generated at Wed May 29 06:01:24 2024 by rpki-client on console-fra.rpki-client.org