$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft File: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft (raw, json) Hash identifier: 1lOtKaUPQ6x6Uwt63k1XBB+nfcI0HLNlQCE2GkpPsb8= Subject key identifier: C4:FF:61:84:07:62:DE:A5:99:1B:84:BB:34:00:75:D7:36:CA:0A:53 Authority key identifier: 26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA Certificate issuer: /CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Certificate serial: 063D94F48CD1A7819B1AB514E00EC3EC0E17CAF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft Manifest number: 02E6 Signing time: Thu 30 May 2024 04:21:54 +0000 Manifest this update: Thu 30 May 2024 04:16:54 +0000 Manifest next update: Sun 02 Jun 2024 05:27:54 +0000 Files and hashes: 1: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl (hash: TZ85u/unpMRrb0Q46s85lp8PTFpvqowLA8NBXY4UZiw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 05:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3d:94:f4:8c:d1:a7:81:9b:1a:b5:14:e0:0e:c3:ec:0e:17:ca:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Validity Not Before: May 30 04:16:54 2024 GMT Not After : Jun 2 05:27:54 2024 GMT Subject: CN=C4FF61840762DEA5991B84BB340075D736CA0A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:94:24:e1:2a:b2:1c:c3:4f:36:f7:3b:c5:5d: 38:a0:e6:3d:70:1a:16:f0:c8:2c:97:d3:5d:b1:f2: fc:ed:1f:45:91:11:e7:41:5d:3f:17:b1:46:a1:77: be:42:32:b2:82:b6:91:a7:a1:85:5f:c4:e3:b6:e5: d2:80:8d:96:8e:fc:cb:24:ab:31:cc:cd:7b:0e:93: 50:cf:89:2c:c7:ed:33:eb:e5:f0:cf:f7:32:aa:53: 82:88:46:f1:98:ac:f4:79:49:76:10:a3:ba:6e:e2: dd:93:18:0d:0c:5e:69:ae:6b:bb:94:58:88:a5:41: 03:fc:48:df:3c:a6:3b:dd:c6:da:ab:bf:85:00:b2: e0:50:0e:39:71:39:0e:36:2f:53:50:e5:74:0b:45: 26:02:82:e7:7c:96:37:b4:b1:66:d5:b5:b1:a8:c4: bf:07:d7:75:08:ab:8a:cf:a7:44:cb:58:89:62:6d: c9:5a:9b:8a:51:31:8f:fa:73:1d:8f:18:a3:02:c7: f4:ee:f2:f4:33:a0:a1:70:1a:76:df:8e:7e:a0:43: c1:24:09:d1:80:9a:65:5e:4a:09:9f:f2:3e:b3:d6: 7e:f9:e4:b2:c9:9b:22:ab:25:69:05:05:72:45:37: 25:a3:ec:a1:da:59:c6:0c:50:e4:4f:e1:eb:1b:f0: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FF:61:84:07:62:DE:A5:99:1B:84:BB:34:00:75:D7:36:CA:0A:53 X509v3 Authority Key Identifier: keyid:26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fa:ec:e0:28:0b:ce:d4:60:70:f3:d7:ff:83:f7:c0:5b:cd: 31:e9:36:ac:94:b3:fe:bd:c4:68:a8:ba:59:e8:9e:02:63:bb: 93:bb:9a:97:48:4d:27:f6:25:4a:85:27:55:76:39:f4:cf:1b: 31:50:85:99:01:9e:af:b3:ed:bd:21:8a:b7:05:75:7a:a1:19: 1e:0a:84:48:d7:15:44:28:22:b7:b5:d5:04:71:60:e5:25:c3: 80:81:ef:6c:23:af:ba:d3:af:42:ee:af:a4:26:7f:78:16:72: b1:70:58:34:4a:5a:e2:57:65:6e:c4:52:09:da:97:c4:ab:71: 82:3f:de:1e:ab:b9:99:db:b8:7f:d9:7a:34:43:5d:f0:80:ca: 10:2e:fa:b4:01:79:fc:7e:a1:3f:23:ee:7e:00:0d:b6:7e:ca: 25:50:15:17:78:b0:04:15:ba:7f:70:21:31:5d:c0:f2:41:c6: c8:cc:55:65:53:f4:7b:04:8e:36:40:f2:d2:26:3e:7c:97:8e: 49:99:27:fe:34:bc:5f:8e:64:08:99:f6:86:9b:7e:25:ce:1f: 86:78:89:96:ff:f9:46:88:fd:ed:9a:1c:1f:b3:44:7e:c7:6f: 5a:ae:5b:dd:30:a7:42:90:5c:c7:d7:00:86:b0:ce:dc:57:63: c6:dc:8e:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBj2U9IzRp4GbGrUU4A7D7A4XyvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUy QjlGMTdGQTAeFw0yNDA1MzAwNDE2NTRaFw0yNDA2MDIwNTI3NTRaMDMxMTAvBgNV BAMTKEM0RkY2MTg0MDc2MkRFQTU5OTFCODRCQjM0MDA3NUQ3MzZDQTBBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtlCThKrIcw0829zvFXTig5j1w GhbwyCyX012x8vztH0WREedBXT8XsUahd75CMrKCtpGnoYVfxOO25dKAjZaO/Msk qzHMzXsOk1DPiSzH7TPr5fDP9zKqU4KIRvGYrPR5SXYQo7pu4t2TGA0MXmmua7uU WIilQQP8SN88pjvdxtqrv4UAsuBQDjlxOQ42L1NQ5XQLRSYCgud8lje0sWbVtbGo xL8H13UIq4rPp0TLWIlibclam4pRMY/6cx2PGKMCx/Tu8vQzoKFwGnbfjn6gQ8Ek CdGAmmVeSgmf8j6z1n755LLJmyKrJWkFBXJFNyWj7KHaWcYMUORP4esb8IyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxP9hhAdi3qWZG4S7NAB11zbKClMwHwYDVR0j BBgwFoAUJmTL4Q8rn/G+xQpqhdx6pSufF/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YzYzIxMS0wNjQ1LTQ4ODItYTRmMS00NmJlODY3Yjc5ODMvMC8yNjY0Q0JFMTBG MkI5RkYxQkVDNTBBNkE4NURDN0FBNTJCOUYxN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUyQjlG MTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdB QTUyQjlGMTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/67OAoC87UYHDz1/+D98BbzTHpNqyUs/69 xGioulnongJju5O7mpdITSf2JUqFJ1V2OfTPGzFQhZkBnq+z7b0hircFdXqhGR4K hEjXFUQoIre11QRxYOUlw4CB72wjr7rTr0Lur6Qmf3gWcrFwWDRKWuJXZW7EUgna l8SrcYI/3h6ruZnbuH/ZejRDXfCAyhAu+rQBefx+oT8j7n4ADbZ+yiVQFRd4sAQV un9wITFdwPJBxsjMVWVT9HsEjjZA8tImPnyXjkmZJ/40vF+OZAiZ9oabfiXOH4Z4 iZb/+UaI/e2aHB+zRH7Hb1quW90wp0KQXMfXAIawztxXY8bcjo8= -----END CERTIFICATE-----Generated at Thu May 30 06:45:24 2024 by rpki-client on console-ams.rpki-client.org