$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: Z1M46F4l6ESkTGC56/2GtWLWo5dYbSRuDmQGNtU+WYk= Subject key identifier: 3C:E6:AA:26:ED:A8:7D:78:5F:92:18:B8:2C:81:D5:10:50:A6:B0:C2 Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 192FD03C7C556C38D9D73FD11261D3604733772A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 016A Signing time: Fri 31 May 2024 13:20:04 +0000 Manifest this update: Fri 31 May 2024 13:15:04 +0000 Manifest next update: Mon 03 Jun 2024 13:37:04 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: DmDj6SlWc0nnKDTttjOdZfYzJoe8BLLtGYbhq4WfzNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2f:d0:3c:7c:55:6c:38:d9:d7:3f:d1:12:61:d3:60:47:33:77:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: May 31 13:15:04 2024 GMT Not After : Jun 3 13:37:04 2024 GMT Subject: CN=3CE6AA26EDA87D785F9218B82C81D51050A6B0C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:bb:99:a2:8b:b1:19:57:85:b0:49:59:8d: 07:1f:b5:5a:c5:11:fd:37:f4:e6:37:1b:9f:24:ad: c1:31:bd:b8:ff:4b:9c:48:6a:33:8a:8c:df:87:6f: c1:f4:dc:86:cb:8b:61:9e:fe:b4:58:4c:0c:02:48: ee:9a:3e:ad:a2:04:9d:1b:9a:18:a7:6a:ac:ef:ce: c1:78:74:a8:c0:19:ab:2f:45:24:33:95:6f:0e:1d: f6:fe:a7:f5:5f:ad:b7:2e:ba:69:05:73:4d:58:18: c7:77:e3:79:29:e4:f6:48:b7:fd:b3:6b:95:10:51: 88:39:6a:54:52:0d:3d:98:77:16:84:0b:44:f1:28: 52:ef:e0:9f:1c:c9:29:f4:cf:85:43:f3:f7:a2:a9: a6:2a:1a:01:05:32:44:18:29:4c:4d:53:e4:75:e1: 1d:8b:c7:36:79:04:2f:83:2d:8c:22:fc:b7:e5:e3: 59:73:e9:be:a3:76:73:0a:0d:e0:2b:f0:23:c8:ea: 1a:91:a4:d4:c1:0e:4e:41:6f:e5:6b:2b:6c:9f:30: df:36:3c:ff:e0:31:2b:b5:3f:80:b2:c4:48:bb:7f: d3:be:cd:fc:0a:fc:e9:40:9d:62:f8:3b:a3:a4:bf: 21:f0:63:5f:16:de:41:09:5b:fd:b6:eb:de:12:2e: 18:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E6:AA:26:ED:A8:7D:78:5F:92:18:B8:2C:81:D5:10:50:A6:B0:C2 X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:42:ba:13:fc:39:36:f6:d1:fe:10:80:5b:37:15:e8:f4:7a: 1e:42:6e:90:2f:ab:a5:3a:6a:d7:e4:5f:c4:17:3b:56:48:67: d9:38:80:14:30:25:1f:cd:9e:9c:8f:d2:64:70:0a:30:4a:6a: 95:5e:d1:b1:e2:b1:e9:c7:99:0b:b9:df:a8:fc:12:9e:95:aa: bf:9d:2c:d7:cc:87:99:1d:f6:6a:8b:90:53:f9:7f:56:d2:11: 6c:60:d6:4b:07:cd:f9:bf:20:6a:cc:e9:a2:50:93:8a:bb:db: 8b:3d:10:b9:79:2e:09:de:38:32:94:3a:22:f3:bf:76:bf:9f: d4:b3:0d:83:a5:95:cd:bf:3c:5e:48:f5:4a:89:94:ad:ef:f5: 4d:bf:43:30:59:61:22:93:e6:ad:ff:5b:fc:2a:1d:5f:54:fa: 57:8f:47:a9:bc:07:cc:80:2b:b1:b2:e9:79:86:9f:e8:91:94: 2f:c8:f6:4c:37:32:e0:f7:90:27:f6:b0:62:b4:05:4c:c0:ed: a7:b1:e1:77:af:00:64:40:86:d2:98:83:33:69:8d:41:72:af: 85:2e:05:83:8d:a5:13:2c:19:0e:18:a4:26:79:61:b4:49:61: 79:4c:0c:02:6b:c8:89:39:d2:f0:b3:83:82:dd:13:33:55:ff: 6d:d6:16:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGS/QPHxVbDjZ1z/REmHTYEczdyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNDA1MzExMzE1MDRaFw0yNDA2MDMxMzM3MDRaMDMxMTAvBgNV BAMTKDNDRTZBQTI2RURBODdENzg1RjkyMThCODJDODFENTEwNTBBNkIwQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwLuZoouxGVeFsElZjQcftVrF Ef039OY3G58krcExvbj/S5xIajOKjN+Hb8H03IbLi2Ge/rRYTAwCSO6aPq2iBJ0b mhinaqzvzsF4dKjAGasvRSQzlW8OHfb+p/VfrbcuumkFc01YGMd343kp5PZIt/2z a5UQUYg5alRSDT2YdxaEC0TxKFLv4J8cySn0z4VD8/eiqaYqGgEFMkQYKUxNU+R1 4R2LxzZ5BC+DLYwi/Lfl41lz6b6jdnMKDeAr8CPI6hqRpNTBDk5Bb+VrK2yfMN82 PP/gMSu1P4CyxEi7f9O+zfwK/OlAnWL4O6OkvyHwY18W3kEJW/22694SLhgvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPOaqJu2ofXhfkhi4LIHVEFCmsMIwHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1CuhP8OTb20f4QgFs3Fej0eh5CbpAvq6U6 atfkX8QXO1ZIZ9k4gBQwJR/NnpyP0mRwCjBKapVe0bHisenHmQu536j8Ep6Vqr+d LNfMh5kd9mqLkFP5f1bSEWxg1ksHzfm/IGrM6aJQk4q724s9ELl5LgneODKUOiLz v3a/n9SzDYOllc2/PF5I9UqJlK3v9U2/QzBZYSKT5q3/W/wqHV9U+lePR6m8B8yA K7Gy6XmGn+iRlC/I9kw3MuD3kCf2sGK0BUzA7aex4XevAGRAhtKYgzNpjUFyr4Uu BYONpRMsGQ4YpCZ5YbRJYXlMDAJryIk50vCzg4LdEzNV/23WFls= -----END CERTIFICATE-----Generated at Fri May 31 16:38:18 2024 by rpki-client on console-ams.rpki-client.org