$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: iCYBvvuKJhoawDwoZ4qrS0DbJzRQ0/vpW0Yj4iXn6mI= Subject key identifier: 9D:21:75:98:F8:8E:4D:A9:05:8D:CD:1E:6F:D2:28:E8:77:2A:15:40 Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 634617D4018A11D4BC80C78EE0B47F7F50F2E438 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 0135 Signing time: Wed 29 May 2024 01:01:37 +0000 Manifest this update: Wed 29 May 2024 00:56:37 +0000 Manifest next update: Sat 01 Jun 2024 05:00:37 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: pnQc47noPeafSIvxEMHXmk8GiJk+/lCaAlBd6yLmKG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:46:17:d4:01:8a:11:d4:bc:80:c7:8e:e0:b4:7f:7f:50:f2:e4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: May 29 00:56:37 2024 GMT Not After : Jun 1 05:00:37 2024 GMT Subject: CN=9D217598F88E4DA9058DCD1E6FD228E8772A1540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:1f:b0:d1:18:78:e7:25:43:b2:c3:bc:60: e3:62:94:28:e4:ad:dd:90:36:ce:a3:51:71:28:92: 59:4e:ff:af:4e:61:d2:b2:ca:bc:6d:82:7f:1f:81: 4d:f1:30:a0:54:d0:d0:bc:f4:13:79:5d:a8:6f:84: ec:f6:1a:88:01:6e:01:82:3a:2b:f8:31:81:07:c7: b9:d4:c1:37:bb:d4:e1:19:e5:25:d9:8a:84:0a:5f: 1e:e5:7e:1b:d0:69:13:1d:5b:b3:6a:49:e9:95:4f: 27:1b:ac:f7:8e:d4:81:8d:a3:6d:4a:2c:3b:cc:b7: e1:d7:f0:06:79:fb:63:75:32:c2:09:0a:06:41:4d: 22:1a:09:e0:6f:dc:cf:aa:85:31:5a:6f:90:cd:fb: 75:55:7d:40:b8:e2:cb:94:97:1f:81:c0:3a:0b:c5: 11:bf:03:8d:2a:f0:ea:77:69:6f:13:5f:8a:ea:c2: 26:8a:8d:af:3f:a3:19:21:5c:fc:7c:fc:b4:24:02: 9f:e9:cd:19:59:ef:b5:48:90:aa:c7:c9:8f:3b:bf: e7:7f:f4:7f:e8:89:c2:00:c8:74:ff:46:ae:5e:8c: db:8b:db:70:0a:2c:1b:87:c8:80:dc:55:f2:45:28: 9d:a5:a0:1f:8a:b5:8c:7f:c7:8c:b1:63:7c:bb:61: 3e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:21:75:98:F8:8E:4D:A9:05:8D:CD:1E:6F:D2:28:E8:77:2A:15:40 X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6f:70:28:9c:0b:3c:00:a3:20:99:dd:99:7d:c5:e6:41:53: ec:e4:ce:36:dc:8d:d5:5a:ea:b1:53:6d:09:98:4d:47:35:c3: 96:7e:fb:6a:05:8f:56:85:50:14:a9:81:12:e7:da:7b:a2:94: be:69:43:46:69:50:13:89:ec:c2:8a:60:ce:b7:f7:e4:55:de: 60:d5:63:df:12:ff:86:2c:a4:83:c9:ba:ae:f4:5f:a0:b6:a4: 93:61:e6:b6:58:3c:15:dd:f3:d4:e9:bf:d2:08:84:a8:3d:a5: 9b:7d:40:b6:68:75:f1:b6:05:3f:18:2b:57:c8:8a:e4:10:b3: b0:ae:fa:12:af:ac:e4:d7:77:86:df:8a:c7:42:bc:c0:25:6a: 4f:8c:02:e9:e9:fb:b0:cf:1f:10:69:7e:67:37:85:59:bf:54: f8:71:88:9b:fd:ae:2e:c5:cf:77:0c:e9:87:07:fd:16:76:08: 8e:23:39:2c:1a:ab:ca:08:73:0b:ab:ad:2b:19:d7:b2:69:23: f1:6d:de:8b:d3:63:15:10:25:2d:26:b4:1d:0d:a5:e6:c4:33: c3:a9:4f:17:0e:97:1b:e1:20:75:68:2f:59:6a:59:aa:b2:25: 93:3a:88:e2:13:bc:07:c4:81:7c:3e:4f:2e:d9:87:dd:86:f2: 0a:c2:aa:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY0YX1AGKEdS8gMeO4LR/f1Dy5DgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNDA1MjkwMDU2MzdaFw0yNDA2MDEwNTAwMzdaMDMxMTAvBgNV BAMTKDlEMjE3NTk4Rjg4RTREQTkwNThEQ0QxRTZGRDIyOEU4NzcyQTE1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/x+w0Rh45yVDssO8YONilCjk rd2QNs6jUXEokllO/69OYdKyyrxtgn8fgU3xMKBU0NC89BN5XahvhOz2GogBbgGC Oiv4MYEHx7nUwTe71OEZ5SXZioQKXx7lfhvQaRMdW7NqSemVTycbrPeO1IGNo21K LDvMt+HX8AZ5+2N1MsIJCgZBTSIaCeBv3M+qhTFab5DN+3VVfUC44suUlx+BwDoL xRG/A40q8Op3aW8TX4rqwiaKja8/oxkhXPx8/LQkAp/pzRlZ77VIkKrHyY87v+d/ 9H/oicIAyHT/Rq5ejNuL23AKLBuHyIDcVfJFKJ2loB+KtYx/x4yxY3y7YT6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnSF1mPiOTakFjc0eb9Io6HcqFUAwHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxvcCicCzwAoyCZ3Zl9xeZBU+zkzjbcjdVa 6rFTbQmYTUc1w5Z++2oFj1aFUBSpgRLn2nuilL5pQ0ZpUBOJ7MKKYM639+RV3mDV Y98S/4YspIPJuq70X6C2pJNh5rZYPBXd89Tpv9IIhKg9pZt9QLZodfG2BT8YK1fI iuQQs7Cu+hKvrOTXd4bfisdCvMAlak+MAunp+7DPHxBpfmc3hVm/VPhxiJv9ri7F z3cM6YcH/RZ2CI4jOSwaq8oIcwurrSsZ17JpI/Ft3ovTYxUQJS0mtB0NpebEM8Op TxcOlxvhIHVoL1lqWaqyJZM6iOITvAfEgXw+Ty7Zh92G8grCqms= -----END CERTIFICATE-----Generated at Wed May 29 02:48:29 2024 by rpki-client on console-fra.rpki-client.org