$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: Td1WrdoVTU/hV7WwFdK1ZOVjw/G2RlzgxdCI1U4B+S4= Subject key identifier: C5:02:1F:FA:4D:A7:A9:7E:A1:A5:E9:9B:C3:D0:BE:B0:CC:38:22:64 Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 403CB85F04CFEF1D7A0486FAE6D21766944D75D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 0259 Signing time: Thu 02 May 2024 14:21:41 +0000 Manifest this update: Thu 02 May 2024 14:16:41 +0000 Manifest next update: Mon 06 May 2024 01:39:41 +0000 Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: ffDvzrwQh2vVlQSgkmqe8LXaCp/bn8RuxKiHhiMXeRY=) 2: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: qT3K5dDF7h0FiVQuCTB6G53Vsw6kW9GQMzzLPmiH7aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 May 2024 00:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:3c:b8:5f:04:cf:ef:1d:7a:04:86:fa:e6:d2:17:66:94:4d:75:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: May 2 14:16:41 2024 GMT Not After : May 6 01:39:41 2024 GMT Subject: CN=C5021FFA4DA7A97EA1A5E99BC3D0BEB0CC382264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:82:10:38:51:75:df:97:88:24:c8:04:d6: 74:03:08:bb:32:e8:01:4d:d1:93:5c:7e:b4:22:5f: c7:9a:e5:70:c5:53:ac:07:4f:cb:f4:40:19:3a:32: 32:f4:0c:06:eb:7b:a7:53:08:a9:1e:db:67:78:ea: bf:c3:d2:bd:80:95:be:27:cf:24:53:c6:c4:98:30: ea:50:56:48:f5:92:9a:f3:15:c7:b8:66:77:96:76: bd:dd:12:38:5d:d0:fa:9e:40:2f:da:ac:fb:df:b1: f5:88:46:74:f7:1d:39:42:10:2b:be:5a:2b:f0:09: ca:65:86:97:0c:b5:89:0d:8e:90:ce:2b:c3:ef:2d: 5b:e2:5a:40:a4:8e:e8:35:c2:03:c6:b9:53:d4:24: 29:79:38:45:7c:6d:89:d2:20:cf:74:c1:86:5b:fe: 58:c8:fa:3e:f3:08:35:90:12:03:42:23:70:b1:14: 4c:71:1c:fd:4a:75:8a:18:ea:f5:d4:ba:9f:ee:ed: 1b:f1:b3:6b:7c:ec:3f:d7:19:eb:05:1c:bd:8a:76: bb:f9:02:0d:25:83:21:72:14:f3:16:f3:45:bc:29: 6d:b4:a9:6f:fb:49:74:77:97:3a:2c:5e:f0:3b:66: 98:fe:bf:dd:30:55:a6:18:44:2e:5c:11:b9:36:a1: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:02:1F:FA:4D:A7:A9:7E:A1:A5:E9:9B:C3:D0:BE:B0:CC:38:22:64 X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:76:62:91:8b:82:c9:4f:a8:4c:e1:b8:0e:92:8f:a2:13:54: 16:c4:33:dd:3b:e8:02:a7:e2:9e:c3:2c:63:41:1f:5c:13:9d: 09:94:92:3f:cd:e2:3b:4f:43:d6:44:7f:d6:d5:b7:99:8a:c1: 21:1b:bb:17:08:27:dc:4f:74:13:90:3c:7d:6d:16:20:24:87: cd:3d:6d:ef:32:d5:20:01:9b:ab:3b:3e:6f:c3:50:a5:be:43: 2e:34:37:c0:00:6e:1e:70:60:01:b8:2f:06:45:57:8d:88:f5: 13:f4:bb:d0:37:ee:9c:d3:4f:66:f1:20:db:56:5d:25:75:62: 29:38:33:15:c9:81:c3:cb:11:ca:82:c6:60:01:d9:90:27:a0: fa:94:68:80:31:87:63:b4:56:63:81:79:8b:17:ef:73:33:b7: 16:7d:ec:ef:a6:29:9f:77:4d:33:c9:9b:44:b6:9c:df:ca:1b: a8:41:6d:aa:c9:46:3f:ee:6f:46:de:42:18:9e:c6:98:d8:20: ca:d9:82:02:e7:26:40:da:4f:44:6a:73:95:4e:b5:c5:37:1d: ac:7e:fc:26:b4:30:b0:4a:17:d9:a8:6e:e8:5f:95:b7:56:e9: 11:77:07:ae:9c:3c:80:a1:98:e7:67:dc:e9:44:f5:09:8c:e0: a0:f6:82:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDy4XwTP7x16BIb65tIXZpRNddYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNDA1MDIxNDE2NDFaFw0yNDA1MDYwMTM5NDFaMDMxMTAvBgNV BAMTKEM1MDIxRkZBNERBN0E5N0VBMUE1RTk5QkMzRDBCRUIwQ0MzODIyNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFIIQOFF135eIJMgE1nQDCLsy 6AFN0ZNcfrQiX8ea5XDFU6wHT8v0QBk6MjL0DAbre6dTCKke22d46r/D0r2Alb4n zyRTxsSYMOpQVkj1kprzFce4ZneWdr3dEjhd0PqeQC/arPvfsfWIRnT3HTlCECu+ WivwCcplhpcMtYkNjpDOK8PvLVviWkCkjug1wgPGuVPUJCl5OEV8bYnSIM90wYZb /ljI+j7zCDWQEgNCI3CxFExxHP1KdYoY6vXUup/u7Rvxs2t87D/XGesFHL2Kdrv5 Ag0lgyFyFPMW80W8KW20qW/7SXR3lzosXvA7Zpj+v90wVaYYRC5cEbk2odHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQIf+k2nqX6hpembw9C+sMw4ImQwHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKt2YpGLgslPqEzhuA6Sj6ITVBbEM9076AKn 4p7DLGNBH1wTnQmUkj/N4jtPQ9ZEf9bVt5mKwSEbuxcIJ9xPdBOQPH1tFiAkh809 be8y1SABm6s7Pm/DUKW+Qy40N8AAbh5wYAG4LwZFV42I9RP0u9A37pzTT2bxINtW XSV1Yik4MxXJgcPLEcqCxmAB2ZAnoPqUaIAxh2O0VmOBeYsX73MztxZ97O+mKZ93 TTPJm0S2nN/KG6hBbarJRj/ub0beQhiexpjYIMrZggLnJkDaT0Rqc5VOtcU3Hax+ /Ca0MLBKF9mobuhflbdW6RF3B66cPIChmOdn3OlE9QmM4KD2ghg= -----END CERTIFICATE-----Generated at Thu May 2 17:16:34 2024 by rpki-client on console-ams.rpki-client.org