$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft (raw, json) Hash identifier: x13af5JEnWdBIx6/pz/qYDb5gHvv+scZOihBQaAoZc0= Subject key identifier: 4D:38:19:6F:BF:E9:9E:30:43:8D:7D:C9:5C:C2:8A:6E:24:4B:D3:21 Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 2C35A9DE4F77EE2F404D7E42B3008D734EE6C4AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft Manifest number: 0147 Signing time: Tue 28 May 2024 16:00:42 +0000 Manifest this update: Tue 28 May 2024 15:55:42 +0000 Manifest next update: Fri 31 May 2024 19:24:42 +0000 Files and hashes: 1: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl (hash: xp0GtHUvYM5fnZRZmN6t2QtQ1ZQoqD1dPA6gcNpMcSA=) 2: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: vEN5+8N4lOo4Itdf+oFc07PgLTLPtkSPNTs1/8b7E0U=) 3: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: ROpvS3RnkfTnhxjuQ32b+fwz7IB+o1xhpNOdiN2KnhA=) 4: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: Q/LrC0lApeEpkcG4EsW/h+HjwO1YTc03oRd8jJlrVMc=) 5: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: tkzZuf7JfbezRTv15414IroAVNAguQHh0TGGYRvOMs4=) 6: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: 3qnCtoCeKXBegDtpX3cC5NA+r2J5bWzaWBUjmHqCK/8=) 7: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: gwZEOTJ9RvHsz8NVnMhDUDNoD6twtkjnxJbK5Yw/hi4=) 8: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: iyoiMRwsIajIM2TaWhebxXz1q29AeJvhYkGXkSK1Bd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 19:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:35:a9:de:4f:77:ee:2f:40:4d:7e:42:b3:00:8d:73:4e:e6:c4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: May 28 15:55:42 2024 GMT Not After : May 31 19:24:42 2024 GMT Subject: CN=4D38196FBFE99E30438D7DC95CC28A6E244BD321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:e3:99:3a:7f:9e:ac:63:99:a4:ce:0e:f2: 57:67:55:ca:c6:b6:13:c8:40:e2:66:68:22:36:f3: 4c:db:f8:32:81:c2:97:c1:4c:1b:66:e6:72:86:df: 2c:57:76:e4:42:96:66:3f:4a:73:96:9c:27:c5:0d: 04:7f:0f:33:37:89:60:7b:02:64:01:61:36:d4:3c: ec:5f:27:01:18:8a:72:83:8c:e1:24:2e:b0:a8:8b: 41:fc:2b:f9:77:eb:b9:10:8d:2c:83:cb:3f:05:06: 76:51:fe:5e:3c:0c:47:36:f4:b9:22:d0:84:a9:62: 0b:3e:b7:c1:bb:07:93:bd:50:59:84:96:f0:a3:cf: 23:53:95:ec:17:d6:e7:d8:1d:73:a4:e9:0f:e7:50: 4a:81:e6:33:f9:7f:e4:8f:ed:4c:a7:04:24:4c:09: 0f:e5:ba:ee:dd:10:61:9b:f0:1e:65:a7:80:01:61: 6d:c2:63:bb:d2:fa:1e:c0:d6:ee:8c:d9:b2:1c:b6: 85:cb:2f:b6:50:88:d5:df:bf:f3:74:51:93:f6:88: b5:44:3c:4d:34:e9:0b:27:71:5e:a4:f8:62:7d:d3: d9:6c:c8:86:87:08:c0:8b:6c:f7:33:cb:1a:cb:c1: 70:5f:be:c8:af:3e:52:a5:87:26:10:ca:f4:bc:de: e8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:38:19:6F:BF:E9:9E:30:43:8D:7D:C9:5C:C2:8A:6E:24:4B:D3:21 X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a7:9e:f3:79:c7:4f:84:ce:ad:b4:11:a0:16:e6:24:e2:3b: 64:7c:30:8e:23:ce:39:d2:88:ab:38:0a:f0:ed:87:b4:8b:04: e3:ae:10:85:a9:37:ff:be:98:90:5e:89:dc:8a:f9:90:bb:04: 18:70:33:ff:01:a6:b3:9a:94:cc:06:6f:7a:76:0c:87:81:bf: 54:14:5c:09:0d:dd:32:52:cf:57:a1:6f:0b:5c:86:91:15:30: 5e:d6:f3:d2:0b:b8:54:37:8c:8f:4b:ac:c0:94:ab:b7:e2:71: 0c:f3:53:29:06:18:36:32:7f:fd:c4:c7:92:13:87:01:b1:2b: f2:fb:9e:25:bc:6d:bb:74:23:ec:b2:c3:10:27:a5:ea:fa:20: a0:03:57:ba:70:8b:a3:cd:47:d3:06:3a:b3:00:a9:f6:90:22: d6:61:c0:ef:c8:c1:a0:8f:2d:e6:8d:35:61:05:8c:6c:6f:d3: fa:0b:05:66:05:d4:d2:27:4e:6f:2b:fb:d4:12:d8:3a:9b:23: d5:b0:e2:6a:93:fe:6e:5f:ca:a7:74:5f:64:68:c5:44:04:da: f0:4c:87:76:6f:b4:90:c6:d8:72:55:e9:c4:1a:a6:ea:c5:c6: bc:23:97:79:f3:36:15:be:7f:36:b1:0b:e9:61:95:de:a1:b0: 13:5d:76:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDWp3k937i9ATX5CswCNc07mxK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNDA1MjgxNTU1NDJaFw0yNDA1MzExOTI0NDJaMDMxMTAvBgNV BAMTKDREMzgxOTZGQkZFOTlFMzA0MzhEN0RDOTVDQzI4QTZFMjQ0QkQzMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJeOZOn+erGOZpM4O8ldnVcrG thPIQOJmaCI280zb+DKBwpfBTBtm5nKG3yxXduRClmY/SnOWnCfFDQR/DzM3iWB7 AmQBYTbUPOxfJwEYinKDjOEkLrCoi0H8K/l367kQjSyDyz8FBnZR/l48DEc29Lki 0ISpYgs+t8G7B5O9UFmElvCjzyNTlewX1ufYHXOk6Q/nUEqB5jP5f+SP7UynBCRM CQ/luu7dEGGb8B5lp4ABYW3CY7vS+h7A1u6M2bIctoXLL7ZQiNXfv/N0UZP2iLVE PE006QsncV6k+GJ909lsyIaHCMCLbPczyxrLwXBfvsivPlKlhyYQyvS83uh1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTTgZb7/pnjBDjX3JXMKKbiRL0yEwHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBC MDU1RjlEQTQxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAinnvN5x0+Ezq20EaAW5iTiO2R8MI4jzjnS iKs4CvDth7SLBOOuEIWpN/++mJBeidyK+ZC7BBhwM/8BprOalMwGb3p2DIeBv1QU XAkN3TJSz1ehbwtchpEVMF7W89ILuFQ3jI9LrMCUq7ficQzzUykGGDYyf/3Ex5IT hwGxK/L7niW8bbt0I+yywxAnper6IKADV7pwi6PNR9MGOrMAqfaQItZhwO/IwaCP LeaNNWEFjGxv0/oLBWYF1NInTm8r+9QS2DqbI9Ww4mqT/m5fyqd0X2RoxUQE2vBM h3ZvtJDG2HJV6cQapurFxrwjl3nzNhW+fzaxC+lhld6hsBNddsc= -----END CERTIFICATE-----Generated at Tue May 28 19:28:19 2024 by rpki-client on console-ams.rpki-client.org