$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: yOT3JEb3O3ntsBMG/79z+P8WUTBqFKWOSGnA/VwHrWk= Subject key identifier: 1B:F0:39:36:86:CF:BC:6F:0D:AF:1C:79:39:CC:8B:62:2F:05:02:C3 Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 03CB1E9670C1EE5611FDD1E910FF3D737856F55E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 0159 Signing time: Sat 18 May 2024 15:22:00 +0000 Manifest this update: Sat 18 May 2024 15:17:00 +0000 Manifest next update: Tue 21 May 2024 19:46:00 +0000 Files and hashes: 1: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: I2zfwSditx8l+Ssbe3KX1EWJ0YwJDyZ/Ht8I8XX33I0=) 2: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: cmDf0cwOgmSLbU+fpqFm+0nug8Bv8vzRFR2zAC3uVh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 19:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cb:1e:96:70:c1:ee:56:11:fd:d1:e9:10:ff:3d:73:78:56:f5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: May 18 15:17:00 2024 GMT Not After : May 21 19:46:00 2024 GMT Subject: CN=1BF0393686CFBC6F0DAF1C7939CC8B622F0502C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:97:dd:92:78:13:dd:9a:4c:30:94:e6:e1: 92:9b:a6:16:1f:d1:00:1a:ca:62:fd:4f:1b:a6:ac: a3:54:68:bf:b1:a9:56:cc:a3:b8:8a:ed:79:51:f7: 55:06:e2:39:cf:bb:63:63:3e:4b:63:59:a4:d8:61: b8:18:7a:99:20:ec:df:ee:f8:e5:e6:be:5f:de:ca: 65:94:7d:18:13:41:f6:e9:f4:2e:04:b0:85:b7:ba: 0a:83:22:b4:39:bb:d0:5f:50:de:8b:b9:58:bd:16: c6:6c:78:9f:dd:d0:55:dd:8e:cc:28:84:c5:df:4c: 66:22:fb:9b:5e:4f:e5:30:ef:b4:0b:ef:3e:7f:ed: 0f:96:18:e5:98:af:27:ae:bf:2b:13:7c:f4:4e:14: 1c:a4:aa:1a:c0:b3:83:07:38:51:2f:60:83:c8:f1: f6:64:9f:6c:34:5b:f4:85:c5:9c:9c:67:e4:99:2a: 32:86:05:c6:0d:84:58:05:7b:e3:db:6b:e7:ef:95: f7:3c:89:15:41:e9:2f:40:06:21:68:87:6c:1b:d8: 1c:f4:44:92:60:7e:2d:8f:61:8c:28:ec:6c:61:0f: 89:8a:7c:c9:4e:91:f4:b8:53:ce:18:cc:d8:91:9a: 61:4d:ae:da:af:92:b6:7a:ac:d9:81:97:cf:bc:dd: 61:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F0:39:36:86:CF:BC:6F:0D:AF:1C:79:39:CC:8B:62:2F:05:02:C3 X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f3:86:41:5a:2b:71:b4:94:3e:5e:8e:74:82:d5:5f:ab:29: 37:49:d3:52:57:b0:e7:96:3b:d5:5f:c4:ed:cc:30:12:99:18: b9:ce:c4:d5:6f:15:99:08:20:c5:e1:05:7c:84:8f:22:4e:c7: 80:64:21:06:22:32:b3:66:a9:85:2e:21:70:3b:a5:0f:36:37: b5:92:23:cd:18:c8:44:60:79:9f:0f:dc:77:62:b4:e8:3c:ec: 0b:df:29:f7:ff:a0:c7:60:f0:72:3e:3f:03:8c:fc:96:47:03: 16:c4:2c:5f:e6:33:a4:a7:8c:d1:88:de:d9:12:25:5b:e1:21: 49:1d:79:10:e8:e4:5c:95:01:a1:f3:1c:6e:47:ac:ea:66:5e: 2d:1b:17:6b:50:f8:25:83:8f:c3:9c:55:09:cb:77:a6:11:e3: 1e:69:3a:9f:bf:35:a2:f3:0a:72:a5:3a:34:5c:a5:06:bc:2c: 1e:eb:24:51:bb:57:cd:4f:5e:bf:9b:93:3b:9c:5c:34:ed:91: 44:c9:c3:a6:f8:4d:f7:de:11:7f:c2:ac:b5:a9:cb:87:8e:01: 40:ed:1d:58:82:1c:ea:9d:47:1b:78:d3:0a:32:b5:76:4c:a9: a6:8a:71:ff:fb:7d:ba:9d:59:0a:df:a8:c4:fb:38:18:e2:54: ca:39:82:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8selnDB7lYR/dHpEP89c3hW9V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNDA1MTgxNTE3MDBaFw0yNDA1MjExOTQ2MDBaMDMxMTAvBgNV BAMTKDFCRjAzOTM2ODZDRkJDNkYwREFGMUM3OTM5Q0M4QjYyMkYwNTAyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBZfdkngT3ZpMMJTm4ZKbphYf 0QAaymL9TxumrKNUaL+xqVbMo7iK7XlR91UG4jnPu2NjPktjWaTYYbgYepkg7N/u +OXmvl/eymWUfRgTQfbp9C4EsIW3ugqDIrQ5u9BfUN6LuVi9FsZseJ/d0FXdjswo hMXfTGYi+5teT+Uw77QL7z5/7Q+WGOWYryeuvysTfPROFBykqhrAs4MHOFEvYIPI 8fZkn2w0W/SFxZycZ+SZKjKGBcYNhFgFe+Pba+fvlfc8iRVB6S9ABiFoh2wb2Bz0 RJJgfi2PYYwo7GxhD4mKfMlOkfS4U84YzNiRmmFNrtqvkrZ6rNmBl8+83WG9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG/A5NobPvG8Nrxx5OcyLYi8FAsMwHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzzhkFaK3G0lD5ejnSC1V+rKTdJ01JXsOeW O9VfxO3MMBKZGLnOxNVvFZkIIMXhBXyEjyJOx4BkIQYiMrNmqYUuIXA7pQ82N7WS I80YyERgeZ8P3HditOg87AvfKff/oMdg8HI+PwOM/JZHAxbELF/mM6SnjNGI3tkS JVvhIUkdeRDo5FyVAaHzHG5HrOpmXi0bF2tQ+CWDj8OcVQnLd6YR4x5pOp+/NaLz CnKlOjRcpQa8LB7rJFG7V81PXr+bkzucXDTtkUTJw6b4TffeEX/CrLWpy4eOAUDt HViCHOqdRxt40woytXZMqaaKcf/7fbqdWQrfqMT7OBjiVMo5guo= -----END CERTIFICATE-----Generated at Sat May 18 16:19:20 2024 by rpki-client on console-fra.rpki-client.org