$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: a+NFK0Rg//C6zRX8vaxx45PUaPZIZoipFANBga5IdkY= Subject key identifier: A1:3F:00:30:4B:D5:44:D6:8E:AD:06:33:55:C1:BA:AD:D7:5F:ED:06 Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 475ED1397B6C9E239347EF1907349557900D6571 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 015B Signing time: Thu 30 May 2024 08:51:45 +0000 Manifest this update: Thu 30 May 2024 08:46:45 +0000 Manifest next update: Sun 02 Jun 2024 16:32:45 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: UyhTvO5G4xGEQLH41uXpPNjILWpS09QySy9kfEU3yYI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 10:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:5e:d1:39:7b:6c:9e:23:93:47:ef:19:07:34:95:57:90:0d:65:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: May 30 08:46:45 2024 GMT Not After : Jun 2 16:32:45 2024 GMT Subject: CN=A13F00304BD544D68EAD063355C1BAADD75FED06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:b8:09:8e:df:6e:b2:73:5c:ea:7c:0a:6a: 6f:88:1b:df:fd:8f:5f:e8:95:86:82:6f:96:01:79: 1c:2d:05:70:00:c2:34:ab:0f:8d:82:c0:ef:72:dd: a4:7a:27:0e:78:bd:8c:5a:10:ed:e1:c4:4f:30:d9: 1f:c9:43:28:21:32:33:ea:84:e0:a3:e9:ce:06:46: c5:f1:33:19:5d:d3:e0:33:59:3b:a8:d4:33:6f:3e: 33:6e:e7:80:eb:06:54:76:df:49:3b:66:19:78:c8: 41:ff:1b:76:09:1a:69:73:fc:4e:36:d6:12:70:4a: ab:80:0e:c7:19:bb:87:0f:e0:49:f2:33:b8:d3:5e: 89:ff:a8:7c:e0:4b:d4:87:e5:13:e7:3e:07:67:d5: c0:00:13:1a:8e:00:a3:ff:55:99:1c:93:e7:7b:fe: 95:3f:6e:5f:9b:8d:05:30:8c:30:2f:98:f9:4e:4d: a3:e9:c5:b6:f7:c7:d4:75:42:9c:a9:34:a4:bf:54: 6e:71:af:50:d6:49:32:82:5b:e6:28:6f:a6:f5:8c: dc:ba:81:c8:a7:4c:fb:bf:4d:c8:cc:02:40:83:b6: ba:04:48:58:4a:16:e9:3d:2e:94:41:2c:5e:5e:f4: 05:e7:cb:fd:75:32:be:5e:cf:2a:24:ec:fb:f7:f9: f6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3F:00:30:4B:D5:44:D6:8E:AD:06:33:55:C1:BA:AD:D7:5F:ED:06 X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:70:fc:94:ee:57:2e:f9:2e:d9:31:dd:a9:47:30:cc:3e:ae: f7:cc:ca:17:cd:74:5e:b3:c7:0d:3a:80:5d:cf:58:ff:48:9a: 69:38:4d:37:cc:09:17:77:59:35:97:ce:6a:4f:9d:7b:f6:c4: b8:33:97:23:27:46:10:02:78:76:65:38:5e:63:2c:6b:f3:ba: fc:85:c0:07:4d:2a:98:6d:01:d8:62:40:c3:86:3d:d1:2e:56: 6d:de:00:05:dc:ad:fc:ee:45:c4:4c:9b:06:d4:d2:53:8d:29: 11:2e:dd:e2:8a:b3:30:07:93:d8:b4:56:ea:55:cb:c8:78:14: f8:c7:ff:09:2e:7b:ee:be:e5:e6:28:0b:7f:29:ad:aa:99:b5: ca:9f:d9:b6:76:33:5b:50:18:75:0c:96:31:9b:f2:51:52:b7: 40:cf:25:b2:6d:04:9f:8b:9b:1e:3e:8d:92:03:6e:63:a5:e5: 45:cb:db:5d:21:f2:63:75:ca:b8:58:aa:3a:62:20:eb:4c:b3: 8c:46:fe:75:7c:4b:ef:46:22:43:3c:e3:33:6a:f8:84:77:94: 60:6f:6f:b8:1b:c5:1d:b6:55:c2:5a:99:1f:d9:05:2b:fe:a8: 82:94:c5:b4:66:eb:07:71:f3:5e:98:9e:b5:a1:2d:44:45:71: e5:23:47:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR17ROXtsniOTR+8ZBzSVV5ANZXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNDA1MzAwODQ2NDVaFw0yNDA2MDIxNjMyNDVaMDMxMTAvBgNV BAMTKEExM0YwMDMwNEJENTQ0RDY4RUFEMDYzMzU1QzFCQUFERDc1RkVEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4LgJjt9usnNc6nwKam+IG9/9 j1/olYaCb5YBeRwtBXAAwjSrD42CwO9y3aR6Jw54vYxaEO3hxE8w2R/JQyghMjPq hOCj6c4GRsXxMxld0+AzWTuo1DNvPjNu54DrBlR230k7Zhl4yEH/G3YJGmlz/E42 1hJwSquADscZu4cP4EnyM7jTXon/qHzgS9SH5RPnPgdn1cAAExqOAKP/VZkck+d7 /pU/bl+bjQUwjDAvmPlOTaPpxbb3x9R1QpypNKS/VG5xr1DWSTKCW+Yob6b1jNy6 gcinTPu/TcjMAkCDtroESFhKFuk9LpRBLF5e9AXny/11Mr5ezyok7Pv3+fYJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoT8AMEvVRNaOrQYzVcG6rddf7QYwHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANBw/JTuVy75Ltkx3alHMMw+rvfMyhfNdF6z xw06gF3PWP9Immk4TTfMCRd3WTWXzmpPnXv2xLgzlyMnRhACeHZlOF5jLGvzuvyF wAdNKphtAdhiQMOGPdEuVm3eAAXcrfzuRcRMmwbU0lONKREu3eKKszAHk9i0VupV y8h4FPjH/wkue+6+5eYoC38praqZtcqf2bZ2M1tQGHUMljGb8lFSt0DPJbJtBJ+L mx4+jZIDbmOl5UXL210h8mN1yrhYqjpiIOtMs4xG/nV8S+9GIkM84zNq+IR3lGBv b7gbxR22VcJamR/ZBSv+qIKUxbRm6wdx816YnrWhLURFceUjRxc= -----END CERTIFICATE-----Generated at Thu May 30 11:27:40 2024 by rpki-client on console-ams.rpki-client.org