$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: P2wGEr+1vNwIgSpJLxK0LFAtwIMLz3k/OmIotOUqtsM= Subject key identifier: 9F:D0:7D:43:A1:9D:85:77:7A:6D:D8:F8:AF:2D:2F:FD:D2:80:E2:ED Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 6645D9C5E413150F152F2D622AF6CC122C627A93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: FE Signing time: Wed 29 May 2024 01:20:32 +0000 Manifest this update: Wed 29 May 2024 01:15:32 +0000 Manifest next update: Sat 01 Jun 2024 02:46:32 +0000 Files and hashes: 1: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: PLj+pLk9ZA4VlrabhQn+TMoDgLQZHyEVvINTh2Z53O0=) 2: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: a21A7Aw1eA0w27BaRI4anjJydt9OVkV4jK6OQ5ecATg=) 3: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: eo1fc45lUO5eL4uwMM/2Q+tKl8YbRDl2DJpPoF9TqZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:45:d9:c5:e4:13:15:0f:15:2f:2d:62:2a:f6:cc:12:2c:62:7a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: May 29 01:15:32 2024 GMT Not After : Jun 1 02:46:32 2024 GMT Subject: CN=9FD07D43A19D85777A6DD8F8AF2D2FFDD280E2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ca:40:c2:21:87:9c:9f:fe:83:8f:2d:75:7c: f0:7b:19:51:e6:c3:21:98:66:f8:b5:cf:83:13:a0: 83:6d:4f:3d:60:10:a6:1e:06:89:fb:60:ce:28:0c: 54:50:65:71:2e:85:96:78:a5:13:d5:59:91:39:88: ad:69:19:13:cc:00:94:00:5f:51:9d:d3:a3:bf:ca: ba:de:32:f4:a6:1c:8f:42:9d:34:d1:7d:3e:2d:2d: da:55:94:a6:da:ca:26:50:01:db:af:22:f5:16:94: 72:3f:25:df:ed:ae:a5:85:4b:67:6b:22:8f:63:26: 89:63:4a:47:36:66:c5:2b:a8:bd:98:8f:5d:3c:87: 61:8b:b0:ca:56:e7:31:5b:fe:84:9e:b7:76:de:ca: 7f:af:a6:25:5b:60:77:56:1a:0b:bf:d8:ce:b2:7a: 1b:a8:ac:77:8e:a1:36:f4:a5:dc:75:e8:ef:44:16: e1:1d:fd:f8:d3:13:67:03:a9:c4:6f:c7:8d:bf:f5: ae:45:8f:a7:01:35:2c:0a:61:ba:58:3d:2e:e1:2c: d6:d8:3b:ca:8b:ed:8b:98:0d:4c:bc:40:41:67:6f: 3e:06:ae:34:7e:7f:ea:ab:33:af:8c:f5:2b:7f:10: 6b:ab:0f:eb:e2:ee:d6:4d:46:34:e3:c3:8a:48:1d: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D0:7D:43:A1:9D:85:77:7A:6D:D8:F8:AF:2D:2F:FD:D2:80:E2:ED X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:46:0c:03:ab:91:5a:61:94:a0:47:e3:3e:ad:e3:fa:38:00: e8:28:48:c6:c5:73:5e:03:9d:3c:d9:ce:6c:2d:c5:1c:93:b0: 02:e2:c7:8d:ad:11:9c:6b:65:67:19:8b:af:b8:2a:3d:ca:ec: 71:ce:1e:19:ad:dd:a8:c2:3a:97:12:55:4c:8b:15:0d:14:21: fa:07:10:cf:a8:95:0f:32:95:64:a9:3c:6e:83:d0:18:0e:44: 86:57:ab:65:c5:4b:97:87:86:94:d0:22:66:0d:69:07:57:3d: 18:b0:5a:81:51:75:25:55:36:6b:fc:ff:2a:a8:a5:dc:8e:90: 96:eb:68:2d:22:9e:43:1b:77:ec:0a:af:c5:dc:3d:21:14:29: 2d:27:53:d1:56:22:b4:b5:97:ea:20:c9:de:f1:a1:b0:e0:d6: f8:43:b2:97:3b:e7:3a:db:d8:4d:38:63:8b:a1:9b:6f:10:00: 7d:b3:14:ec:d5:04:4b:61:a3:58:a0:b9:c9:40:70:85:80:18: 19:fb:bf:ec:8d:71:18:c3:7c:c0:e1:22:16:10:ec:8a:0a:d1: 48:14:a2:7b:2c:7e:b9:2a:5f:d7:4a:d3:1d:68:a2:cd:2c:f9: 9e:7e:2a:98:79:12:b2:b8:8a:f9:52:44:84:95:db:15:34:62: 30:65:1b:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZkXZxeQTFQ8VLy1iKvbMEixiepMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNDA1MjkwMTE1MzJaFw0yNDA2MDEwMjQ2MzJaMDMxMTAvBgNV BAMTKDlGRDA3RDQzQTE5RDg1Nzc3QTZERDhGOEFGMkQyRkZERDI4MEUyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiykDCIYecn/6Djy11fPB7GVHm wyGYZvi1z4MToINtTz1gEKYeBon7YM4oDFRQZXEuhZZ4pRPVWZE5iK1pGRPMAJQA X1Gd06O/yrreMvSmHI9CnTTRfT4tLdpVlKbayiZQAduvIvUWlHI/Jd/trqWFS2dr Io9jJoljSkc2ZsUrqL2Yj108h2GLsMpW5zFb/oSet3beyn+vpiVbYHdWGgu/2M6y ehuorHeOoTb0pdx16O9EFuEd/fjTE2cDqcRvx42/9a5Fj6cBNSwKYbpYPS7hLNbY O8qL7YuYDUy8QEFnbz4GrjR+f+qrM6+M9St/EGurD+vi7tZNRjTjw4pIHXg/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn9B9Q6GdhXd6bdj4ry0v/dKA4u0wHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhGDAOrkVphlKBH4z6t4/o4AOgoSMbFc14D nTzZzmwtxRyTsALix42tEZxrZWcZi6+4Kj3K7HHOHhmt3ajCOpcSVUyLFQ0UIfoH EM+olQ8ylWSpPG6D0BgORIZXq2XFS5eHhpTQImYNaQdXPRiwWoFRdSVVNmv8/yqo pdyOkJbraC0inkMbd+wKr8XcPSEUKS0nU9FWIrS1l+ogyd7xobDg1vhDspc75zrb 2E04Y4uhm28QAH2zFOzVBEtho1iguclAcIWAGBn7v+yNcRjDfMDhIhYQ7IoK0UgU onssfrkqX9dK0x1oos0s+Z5+Kph5ErK4ivlSRISV2xU0YjBlG40= -----END CERTIFICATE-----Generated at Wed May 29 02:48:28 2024 by rpki-client on console-fra.rpki-client.org