$ rpki-client -vvf repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft File: 26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft (raw, json) Hash identifier: KlZzWBZgq+Qdpia+dAMWdYobsnyMBGx8/CoZJ94rjhs= Subject key identifier: CE:A9:35:D9:B6:C5:A8:97:A0:63:9E:9B:BD:F3:B1:9E:53:C9:45:99 Authority key identifier: 26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4 Certificate issuer: /CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4 Certificate serial: 5AAF2A70050C7F86CCEF8064116D114717A5E4BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft Manifest number: 0242 Signing time: Wed 29 May 2024 20:20:43 +0000 Manifest this update: Wed 29 May 2024 20:15:43 +0000 Manifest next update: Sun 02 Jun 2024 07:38:43 +0000 Files and hashes: 1: 3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa (hash: PigcoaTwZl7NqJoQNh5KCfgJnSjcWfR1DhnbZEoQ4Ck=) 2: 26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl (hash: nc7fz/T8I5rnMXBz4S7MKf0nONOuJfpNswoGLhPTjBA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:af:2a:70:05:0c:7f:86:cc:ef:80:64:11:6d:11:47:17:a5:e4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4 Validity Not Before: May 29 20:15:43 2024 GMT Not After : Jun 2 07:38:43 2024 GMT Subject: CN=CEA935D9B6C5A897A0639E9BBDF3B19E53C94599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:8f:9a:2f:85:27:c6:8d:ee:39:0a:3e:05: 63:40:04:80:91:48:24:26:e2:72:48:e9:a1:92:da: f3:e4:62:27:64:6d:d4:5c:dd:5b:53:8c:93:1e:09: 8c:b4:5d:86:d7:7c:e9:77:27:a5:e4:95:86:89:0f: 75:ec:ff:cd:3e:c9:81:b3:fc:ff:db:08:87:43:c1: 95:6e:cc:a2:10:2f:3e:91:f3:2d:76:d2:ae:8c:23: 76:dc:64:f7:eb:4d:39:95:21:7d:ff:cd:65:f1:1e: bd:7a:d1:a7:26:80:05:51:de:74:47:f9:2d:20:e1: d8:30:40:a9:4f:e6:95:4d:92:25:27:43:ed:2c:3e: 9a:f3:8d:23:8a:b8:21:94:12:69:69:d2:d0:8d:29: ee:c7:c1:8e:75:05:cc:42:f6:ae:4d:42:6c:80:9d: c7:4d:fa:bd:f5:ca:10:db:60:26:f0:10:16:70:57: 4c:88:02:bb:16:78:26:20:ff:fc:3b:2e:1c:81:15: 2d:af:f1:c0:7e:8c:70:32:b1:f2:8a:04:a3:7b:56: 74:80:e4:0d:70:23:dc:bc:43:bc:c0:2a:cb:9e:d5: 6c:84:25:ec:e0:6d:cf:90:a4:53:bf:3e:9d:1e:d4: d8:48:eb:0a:5c:c0:86:37:f4:10:21:f5:21:df:6f: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A9:35:D9:B6:C5:A8:97:A0:63:9E:9B:BD:F3:B1:9E:53:C9:45:99 X509v3 Authority Key Identifier: keyid:26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2f:67:b0:1c:07:00:bf:94:b9:9d:32:94:a0:ca:1e:1a:1f: 0e:65:d0:84:79:75:0e:ba:64:fe:dc:65:ad:7b:81:fb:fa:c4: d7:c3:bc:7b:6b:8a:45:64:84:69:1a:2d:7d:b7:0b:b5:8d:b0: cb:d7:c8:d8:1e:b3:53:29:32:b2:a4:c6:3f:01:b6:ed:b6:7c: a5:28:5a:a7:5d:6d:da:af:54:28:33:9f:8f:80:f5:d4:b7:6d: 51:9e:12:5c:49:af:16:35:a6:ed:39:98:d2:ab:7a:d3:14:ee: 80:b0:37:34:4e:db:a5:13:4d:0d:4d:6c:9c:26:47:9d:52:ff: 0f:62:de:e0:56:bf:37:57:bb:72:df:27:8e:6e:71:ab:90:c7: 9b:12:17:dd:ea:d9:e7:9c:2e:ee:39:d8:67:e6:1b:d9:e7:7f: a6:d0:72:13:84:ed:1e:cc:04:f2:6f:a0:fa:d2:01:32:3c:85: 10:76:2c:d6:5e:23:c5:6d:c3:59:a1:20:e5:f1:31:70:05:a7: 89:5d:53:cf:88:14:5b:c6:f4:c9:f6:ba:8f:42:d2:d8:41:20: 03:73:98:6c:38:d7:41:c8:b1:32:9d:78:19:ed:ff:b1:4d:a2: 96:f9:31:fa:36:20:36:5b:52:f6:e7:91:94:cb:0f:fd:98:57: 03:8f:a9:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWq8qcAUMf4bM74BkEW0RRxel5L0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZBRTE2REYyQkYwRkQ1MTg0RkVDNjU1MjUwRDI0NDcz OUZBOUZDNDAeFw0yNDA1MjkyMDE1NDNaFw0yNDA2MDIwNzM4NDNaMDMxMTAvBgNV BAMTKENFQTkzNUQ5QjZDNUE4OTdBMDYzOUU5QkJERjNCMTlFNTNDOTQ1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFo+aL4Unxo3uOQo+BWNABICR SCQm4nJI6aGS2vPkYidkbdRc3VtTjJMeCYy0XYbXfOl3J6XklYaJD3Xs/80+yYGz /P/bCIdDwZVuzKIQLz6R8y120q6MI3bcZPfrTTmVIX3/zWXxHr160acmgAVR3nRH +S0g4dgwQKlP5pVNkiUnQ+0sPprzjSOKuCGUEmlp0tCNKe7HwY51BcxC9q5NQmyA ncdN+r31yhDbYCbwEBZwV0yIArsWeCYg//w7LhyBFS2v8cB+jHAysfKKBKN7VnSA 5A1wI9y8Q7zAKsue1WyEJezgbc+QpFO/Pp0e1NhI6wpcwIY39BAh9SHfb61LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzqk12bbFqJegY56bvfOxnlPJRZkwHwYDVR0j BBgwFoAUJq4W3yvw/VGE/sZVJQ0kRzn6n8QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGM0YmExMi02M2JiLTQ1NTAtYWMwZi01M2YwOGM0NjM1MTEvMC8yNkFFMTZERjJC RjBGRDUxODRGRUM2NTUyNTBEMjQ0NzM5RkE5RkM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZBRTE2REYyQkYwRkQ1MTg0RkVDNjU1MjUwRDI0NDczOUZB OUZDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThjNGJhMTItNjNiYi00NTUwLWFj MGYtNTNmMDhjNDYzNTExLzAvMjZBRTE2REYyQkYwRkQ1MTg0RkVDNjU1MjUwRDI0 NDczOUZBOUZDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMvZ7AcBwC/lLmdMpSgyh4aHw5l0IR5dQ66 ZP7cZa17gfv6xNfDvHtrikVkhGkaLX23C7WNsMvXyNges1MpMrKkxj8Btu22fKUo WqddbdqvVCgzn4+A9dS3bVGeElxJrxY1pu05mNKretMU7oCwNzRO26UTTQ1NbJwm R51S/w9i3uBWvzdXu3LfJ45ucauQx5sSF93q2eecLu452GfmG9nnf6bQchOE7R7M BPJvoPrSATI8hRB2LNZeI8Vtw1mhIOXxMXAFp4ldU8+IFFvG9Mn2uo9C0thBIANz mGw410HIsTKdeBnt/7FNopb5Mfo2IDZbUvbnkZTLD/2YVwOPqao= -----END CERTIFICATE-----Generated at Wed May 29 21:54:56 2024 by rpki-client on console-ams.rpki-client.org