$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: Lq6M5HUPww1NJBYZ2+bQSLZv2GYyXAsHEPjKdXK6R3w= Subject key identifier: E8:FC:29:AF:B4:A1:85:F4:23:C0:D8:EA:A2:55:82:98:4B:9A:98:5D Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 6CD7BFFAF3103E12254E9EC1F43C8CF3B6E67280 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: 07 Signing time: Thu 27 Jun 2024 19:50:30 +0000 Manifest this update: Thu 27 Jun 2024 19:45:30 +0000 Manifest next update: Mon 01 Jul 2024 01:36:30 +0000 Files and hashes: 1: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: C7EziRxcWaF6GHcfoDWfaXjfmIKvK2e7AOoXQvKYzLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Jul 2024 01:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d7:bf:fa:f3:10:3e:12:25:4e:9e:c1:f4:3c:8c:f3:b6:e6:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Jun 27 19:45:30 2024 GMT Not After : Jul 1 01:36:30 2024 GMT Subject: CN=E8FC29AFB4A185F423C0D8EAA25582984B9A985D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:55:db:42:f2:11:23:07:c4:c8:64:30:10: 88:22:49:53:09:b9:73:07:ed:73:c3:24:89:aa:53: 9a:dd:1d:66:9b:58:8e:e2:91:7e:21:9c:a5:83:7e: ae:d4:5f:7a:9e:87:14:7a:01:ea:32:ed:1c:9b:96: 3f:57:2d:8f:08:d8:75:e6:0c:88:bb:eb:b2:8a:33: 0c:ad:5d:d9:9e:4b:63:f2:ce:77:45:52:1b:8f:d1: 74:89:e0:d3:0b:37:79:b3:b3:eb:59:5f:48:e3:c8: 65:7c:6a:51:83:2d:89:9f:95:73:2a:72:9b:c3:26: ce:9b:7c:56:46:1a:7f:38:76:82:7f:da:4f:56:5b: 40:e6:f1:d0:e3:f9:06:ad:e6:1e:b3:48:d2:9c:e8: ca:10:87:a2:25:49:1c:63:4e:7e:cc:43:e0:a0:8d: b2:c3:2c:61:c4:bc:20:7f:e7:cc:ba:c3:bd:c2:c0: a4:3a:7f:00:38:db:02:4e:a0:a5:d6:cb:c2:e6:c3: ad:13:40:50:ca:94:78:9f:eb:77:7b:85:96:b1:52: f5:99:19:cd:6c:83:ce:69:be:20:0c:9a:f4:0f:4a: fe:37:b7:14:ef:35:8c:32:b7:ee:47:16:ed:47:c2: c7:bc:5d:5a:fb:bd:a4:ce:5e:8f:5b:c6:90:22:0d: fe:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FC:29:AF:B4:A1:85:F4:23:C0:D8:EA:A2:55:82:98:4B:9A:98:5D X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:71:97:67:53:9c:78:66:8f:3b:22:7e:99:f9:10:7e:29:46: 02:52:66:2f:91:90:ef:6a:65:21:c3:ef:42:2b:02:ff:45:1f: 97:43:23:06:b9:38:dd:dc:03:0b:55:12:fa:01:2d:2c:3a:04: 22:eb:38:01:86:7a:f0:66:20:38:d4:20:35:7d:2d:5a:59:fe: 27:23:f4:ea:55:a2:19:4c:7a:e2:a1:ac:04:38:69:e8:62:4d: 0b:48:ee:ae:dd:5e:73:6d:8b:63:08:bd:fe:8e:de:0f:15:07: 0e:ab:8e:21:78:a3:83:98:ba:d2:e3:2b:5d:d6:32:af:12:82: f6:8a:e2:68:bb:28:30:e0:7b:f1:fd:e6:68:83:3d:0b:7c:2f: d3:de:8c:6b:68:8e:bd:e9:2a:8b:b7:80:53:cf:4c:0a:a2:e9: d7:cb:31:a0:bf:e2:76:b2:d6:08:47:46:2e:3d:80:b1:b3:ca: d4:2b:29:6d:41:a6:07:1b:3d:47:7e:a4:c6:14:03:69:1a:78: 46:31:1d:1c:f9:c2:02:f6:f8:22:73:eb:3d:88:71:c4:56:3d: 99:85:3e:c9:82:7c:55:cd:81:33:b0:62:f1:76:f6:2b:8b:30: f9:14:c0:71:ca:d5:e2:05:87:54:90:8b:6f:f3:7b:94:d9:77: fa:65:df:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNe/+vMQPhIlTp7B9DyM87bmcoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNDA2MjcxOTQ1MzBaFw0yNDA3MDEwMTM2MzBaMDMxMTAvBgNV BAMTKEU4RkMyOUFGQjRBMTg1RjQyM0MwRDhFQUEyNTU4Mjk4NEI5QTk4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRlXbQvIRIwfEyGQwEIgiSVMJ uXMH7XPDJImqU5rdHWabWI7ikX4hnKWDfq7UX3qehxR6Aeoy7Ryblj9XLY8I2HXm DIi767KKMwytXdmeS2PyzndFUhuP0XSJ4NMLN3mzs+tZX0jjyGV8alGDLYmflXMq cpvDJs6bfFZGGn84doJ/2k9WW0Dm8dDj+Qat5h6zSNKc6MoQh6IlSRxjTn7MQ+Cg jbLDLGHEvCB/58y6w73CwKQ6fwA42wJOoKXWy8Lmw60TQFDKlHif63d7hZaxUvWZ Gc1sg85pviAMmvQPSv43txTvNYwyt+5HFu1Hwse8XVr7vaTOXo9bxpAiDf5/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Pwpr7ShhfQjwNjqolWCmEuamF0wHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItxl2dTnHhmjzsifpn5EH4pRgJSZi+RkO9q ZSHD70IrAv9FH5dDIwa5ON3cAwtVEvoBLSw6BCLrOAGGevBmIDjUIDV9LVpZ/icj 9OpVohlMeuKhrAQ4aehiTQtI7q7dXnNti2MIvf6O3g8VBw6rjiF4o4OYutLjK13W Mq8SgvaK4mi7KDDge/H95miDPQt8L9PejGtojr3pKou3gFPPTAqi6dfLMaC/4nay 1ghHRi49gLGzytQrKW1BpgcbPUd+pMYUA2kaeEYxHRz5wgL2+CJz6z2IccRWPZmF PsmCfFXNgTOwYvF29iuLMPkUwHHK1eIFh1SQi2/ze5TZd/pl320= -----END CERTIFICATE-----Generated at Thu Jun 27 21:49:44 2024 by rpki-client on console-ams.rpki-client.org