$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft File: C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json) Hash identifier: kML0yg6EGxadtHtN0zf8KPlXvghfaxHomJHcDs/aHK4= Subject key identifier: 0B:A7:9D:A3:8D:83:5D:B6:44:D5:DF:AC:9D:F9:F4:AF:7D:1A:9B:BA Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 72F6DA2DA8DC5A75DB0F803B38E57EEAABE99296 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft Manifest number: 03C4 Signing time: Tue 21 May 2024 02:51:23 +0000 Manifest this update: Tue 21 May 2024 02:46:23 +0000 Manifest next update: Fri 24 May 2024 05:21:23 +0000 Files and hashes: 1: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: gi0af/cQbabaV6AiHGMfP/9tqFkO/i715nyDNUjuW74=) 2: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: LLWVbF1wODphiXMeuEBRIN5JZzs0/nwZFnvCxIPF50I=) 3: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: 6aACRlZDtPDfbUv4fSt9lM6NKFQcVH4Wsg/EgnefO58=) 4: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: ZuvrSecsDpPHhtDYv++FNUvAYFbNWQ7mE+i4fAbhYz0=) 5: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: gob+xEPM7WKJN0PLWYhFd0rggbO0AzhOmiiOC3MP3is=) 6: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: TYanWHMpregDr4E1iIZzCFBC+NEEhazNFpWOvRWmhsg=) 7: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: YU9rwF7Nq2PsqvxR0/A1idDD4Fas6QoktMDYAPWcA7M=) 8: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: gGSb6UlTXlbMS7NNsB+MxN8fFYpbgNoMMYZOqkxuIvg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 05:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f6:da:2d:a8:dc:5a:75:db:0f:80:3b:38:e5:7e:ea:ab:e9:92:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: May 21 02:46:23 2024 GMT Not After : May 24 05:21:23 2024 GMT Subject: CN=0BA79DA38D835DB644D5DFAC9DF9F4AF7D1A9BBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:da:00:d5:0f:04:29:4a:67:86:9f:ed:e5: 1a:ac:c1:34:53:cd:d6:79:0a:2c:34:90:50:50:7e: d0:6d:30:93:3d:f4:5e:23:e2:49:ec:05:12:df:43: a2:10:2c:e9:6c:a7:a5:23:96:76:f6:b7:c3:1d:ef: 38:91:9c:89:75:8c:04:7d:0a:91:f0:c1:4a:e5:df: 6c:9e:ad:7b:e6:c5:e4:41:5e:c4:a7:65:11:d5:9d: 50:93:2b:a4:d3:2a:2d:5c:7d:d1:6c:aa:d1:49:4b: e8:a5:93:15:b8:dd:09:3e:11:e4:12:24:d1:46:99: 3a:3d:ec:41:3e:a4:de:ee:28:1b:1c:2d:ba:63:e2: c4:07:8c:ee:a8:4d:cd:4f:de:51:b0:b2:18:87:b1: 85:10:6b:ff:bd:06:39:3d:95:bd:ff:78:21:05:a8: 77:c2:63:63:03:aa:34:7b:ce:ec:6f:af:79:8a:a4: c8:83:b9:a1:35:9e:a0:b7:d4:e0:2d:f7:b1:78:b8: 5a:ae:bc:4c:fd:0b:ff:dc:bd:39:dd:a5:62:b0:b3: 0c:5b:6a:80:b9:93:27:32:ee:3f:5d:a9:f6:93:34: 40:6a:f6:eb:83:a7:ca:00:9a:60:85:d2:c1:6d:c0: c9:45:6e:d4:7b:0e:17:66:9c:12:58:27:03:08:64: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A7:9D:A3:8D:83:5D:B6:44:D5:DF:AC:9D:F9:F4:AF:7D:1A:9B:BA X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:9b:57:66:26:e9:91:07:33:a4:8f:d8:75:2e:a3:9e:7b:37: ea:bc:03:b9:38:24:a8:20:b4:ef:19:25:c6:08:38:15:8d:56: 77:eb:27:6c:b0:fb:98:99:2e:88:4d:18:b7:15:9d:1f:f0:63: ce:08:59:6c:e3:84:e9:82:58:41:e8:4e:56:bb:bd:1f:e5:e5: 2b:b8:f7:e1:ab:77:e3:bc:af:e3:d7:c2:21:22:45:06:9d:6e: 44:a9:c1:7b:f8:e0:ff:30:4b:74:7d:d7:ce:b8:de:51:73:2f: ec:24:d2:76:29:b3:d7:8e:3b:82:9c:9e:d9:b7:05:05:a6:9a: f6:26:15:5e:17:6f:eb:0d:e3:37:5c:8b:ac:fe:f4:07:cf:ee: 36:ac:10:cd:36:d5:b9:c0:48:35:f3:35:90:9e:5d:2b:0c:5c: be:03:bb:0b:f5:94:32:ad:12:c7:72:d9:38:89:13:6f:af:5d: 13:41:da:6d:10:c0:fc:64:04:d2:35:1d:69:17:8a:c3:8f:2f: 4d:5b:de:da:3f:14:8b:b1:98:74:09:44:82:e8:4d:36:a8:42: 2b:23:6b:d8:9d:b4:b8:44:ab:3d:6d:1c:bc:13:76:4a:5d:7d: a9:6b:9e:82:65:d8:a6:78:f4:a0:32:33:49:9b:cb:c8:87:e7: 30:51:f0:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcvbaLajcWnXbD4A7OOV+6qvpkpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNDA1MjEwMjQ2MjNaFw0yNDA1MjQwNTIxMjNaMDMxMTAvBgNV BAMTKDBCQTc5REEzOEQ4MzVEQjY0NEQ1REZBQzlERjlGNEFGN0QxQTlCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJstoA1Q8EKUpnhp/t5RqswTRT zdZ5Ciw0kFBQftBtMJM99F4j4knsBRLfQ6IQLOlsp6Ujlnb2t8Md7ziRnIl1jAR9 CpHwwUrl32yerXvmxeRBXsSnZRHVnVCTK6TTKi1cfdFsqtFJS+ilkxW43Qk+EeQS JNFGmTo97EE+pN7uKBscLbpj4sQHjO6oTc1P3lGwshiHsYUQa/+9Bjk9lb3/eCEF qHfCY2MDqjR7zuxvr3mKpMiDuaE1nqC31OAt97F4uFquvEz9C//cvTndpWKwswxb aoC5kycy7j9dqfaTNEBq9uuDp8oAmmCF0sFtwMlFbtR7DhdmnBJYJwMIZClpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC6edo42DXbZE1d+snfn0r30am7owHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi ZDktNGFjNGJjNjMwNDE0LzAvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAx MkZGQjQ4ODcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImbV2Ym6ZEHM6SP2HUuo557N+q8A7k4JKgg tO8ZJcYIOBWNVnfrJ2yw+5iZLohNGLcVnR/wY84IWWzjhOmCWEHoTla7vR/l5Su4 9+Grd+O8r+PXwiEiRQadbkSpwXv44P8wS3R918643lFzL+wk0nYps9eOO4Kcntm3 BQWmmvYmFV4Xb+sN4zdci6z+9AfP7jasEM021bnASDXzNZCeXSsMXL4Duwv1lDKt Esdy2TiJE2+vXRNB2m0QwPxkBNI1HWkXisOPL01b3to/FIuxmHQJRILoTTaoQisj a9idtLhEqz1tHLwTdkpdfalrnoJl2KZ49KAyM0mby8iH5zBR8BM= -----END CERTIFICATE-----Generated at Tue May 21 03:28:56 2024 by rpki-client on console-fra.rpki-client.org