$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: jy/UY3SaejU5wn5IrNkPlbf5CZ/Hf3nJkSIkmntQ1MI= Subject key identifier: 4C:3A:1E:EB:6C:AB:C1:76:ED:63:E1:2A:47:3B:86:20:83:5A:EF:D4 Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 21F0A9F79F6E7E41D627DEFE320B6D96B31CBCE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 042E Signing time: Fri 17 May 2024 16:50:47 +0000 Manifest this update: Fri 17 May 2024 16:45:47 +0000 Manifest next update: Tue 21 May 2024 02:35:47 +0000 Files and hashes: 1: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: AwK6OuX79/KlF+8PETnzxa0MieD2vFc2KXSFkcSMPpU=) 2: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: gQ+NqLFlVrZV4N0g6iYgjNGyLo3OsL3RedOqerdC2Yo=) 3: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 5AsJP/y4L1wuWQ7JbC6ov+eOub5b4P0fq+E5OhPcklk=) 4: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: Yk4G03GQNoIZbipugEEDdD1uis4DOd7NkdJuPgusSGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 23:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f0:a9:f7:9f:6e:7e:41:d6:27:de:fe:32:0b:6d:96:b3:1c:bc:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: May 17 16:45:47 2024 GMT Not After : May 21 02:35:47 2024 GMT Subject: CN=4C3A1EEB6CABC176ED63E12A473B8620835AEFD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:2a:d9:f2:4b:a0:c7:4b:94:5a:85:2d:be: 48:98:f8:51:1a:ff:6c:d6:93:6c:ea:fd:f9:f3:89: a8:40:3c:a0:74:07:4e:9f:9e:69:ba:9f:d2:8b:bb: 70:03:9c:a9:3c:3c:2b:93:b0:85:47:5d:72:ce:7b: 62:0f:bb:f7:f5:8a:9d:b9:27:5c:cf:04:2a:81:be: e1:1d:e4:d6:33:1d:5c:44:18:dc:b3:b9:f7:2b:62: 02:ac:46:ae:57:95:41:b2:8f:26:ea:9e:5a:48:a4: b7:70:ca:e6:14:60:ab:8c:82:99:b8:fc:75:fd:bb: e9:bd:46:ad:3b:f3:97:c9:5c:bf:f9:c1:fa:3b:be: bc:f0:1b:e2:60:e0:10:3f:40:e5:ee:fc:ca:9c:74: fc:25:8a:3c:3a:1f:92:13:83:d9:72:52:41:f9:c1: 7c:77:b5:6c:50:c4:fd:5e:b4:fc:c4:33:b3:c7:38: 05:a0:ca:8d:31:4a:ce:91:1b:65:22:c1:5d:d1:03: 88:cc:11:39:81:3b:20:77:a8:d2:81:0b:64:be:c9: c7:ab:63:b0:9b:39:c6:44:d3:a9:ff:4a:51:f6:34: bf:5b:ba:99:87:c9:62:cf:9a:8c:a3:b9:99:93:6f: 7b:d7:06:2d:4c:70:f5:93:b9:64:1d:03:23:40:63: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3A:1E:EB:6C:AB:C1:76:ED:63:E1:2A:47:3B:86:20:83:5A:EF:D4 X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7b:f5:61:85:4e:ae:5c:c1:cf:95:cd:45:67:11:14:86:f8: 9d:6e:98:9c:ed:b1:4f:32:bc:dc:3c:43:69:3c:89:5d:de:77: cd:10:2e:65:63:ac:a1:54:ed:2d:14:c8:da:8b:43:ca:4d:cd: 30:07:a7:54:00:00:a6:9d:33:4e:5c:f0:a3:82:5a:f0:e8:99: f0:6e:f8:82:34:4c:50:55:41:c5:e7:15:05:25:cc:08:b5:7b: e8:90:80:34:f1:c8:70:c5:0b:26:52:b1:56:c4:86:75:c9:15: ca:e8:82:ab:8e:fc:08:d9:2d:97:be:bd:15:53:67:b8:60:3f: 54:49:d9:39:d3:9d:12:9c:c1:05:eb:45:2c:71:8a:19:30:48: 63:04:ff:b1:ba:5b:a9:be:23:69:6f:84:4d:99:9d:fa:27:1e: ae:92:f7:13:a2:12:94:5f:4b:80:3a:2a:ed:30:a3:46:ec:0d: 10:7b:a1:ef:09:ea:97:cd:9c:99:67:e8:71:e6:f6:c6:12:63: b1:b5:7a:8c:7d:fb:c1:fd:80:e8:6c:c6:c3:44:4b:0f:5a:c3: 20:1e:57:12:56:b1:16:0c:47:f9:c0:17:02:91:b7:64:e3:83: 0f:a3:34:6f:68:30:6a:cf:38:71:d0:ef:bb:28:ad:87:bd:29: a3:4a:54:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfCp959ufkHWJ97+MgttlrMcvOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNDA1MTcxNjQ1NDdaFw0yNDA1MjEwMjM1NDdaMDMxMTAvBgNV BAMTKDRDM0ExRUVCNkNBQkMxNzZFRDYzRTEyQTQ3M0I4NjIwODM1QUVGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4irZ8kugx0uUWoUtvkiY+FEa /2zWk2zq/fnziahAPKB0B06fnmm6n9KLu3ADnKk8PCuTsIVHXXLOe2IPu/f1ip25 J1zPBCqBvuEd5NYzHVxEGNyzufcrYgKsRq5XlUGyjybqnlpIpLdwyuYUYKuMgpm4 /HX9u+m9Rq0785fJXL/5wfo7vrzwG+Jg4BA/QOXu/MqcdPwlijw6H5ITg9lyUkH5 wXx3tWxQxP1etPzEM7PHOAWgyo0xSs6RG2UiwV3RA4jMETmBOyB3qNKBC2S+ycer Y7CbOcZE06n/SlH2NL9bupmHyWLPmoyjuZmTb3vXBi1McPWTuWQdAyNAY1BBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTDoe62yrwXbtY+EqRzuGIINa79QwHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJN79WGFTq5cwc+VzUVnERSG+J1umJztsU8y vNw8Q2k8iV3ed80QLmVjrKFU7S0UyNqLQ8pNzTAHp1QAAKadM05c8KOCWvDomfBu +II0TFBVQcXnFQUlzAi1e+iQgDTxyHDFCyZSsVbEhnXJFcrogquO/AjZLZe+vRVT Z7hgP1RJ2TnTnRKcwQXrRSxxihkwSGME/7G6W6m+I2lvhE2ZnfonHq6S9xOiEpRf S4A6Ku0wo0bsDRB7oe8J6pfNnJln6HHm9sYSY7G1eox9+8H9gOhsxsNESw9awyAe VxJWsRYMR/nAFwKRt2Tjgw+jNG9oMGrPOHHQ77sorYe9KaNKVEM= -----END CERTIFICATE-----Generated at Fri May 17 18:13:30 2024 by rpki-client on console-fra.rpki-client.org