$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: XZ0P1zxOM+Ov1k4oUApg2Qf0D1P1fWY4P+fwaEGGWWQ= Subject key identifier: 1B:69:A4:CF:75:4F:5A:53:B7:41:06:5D:D9:DF:AB:C2:89:E7:B1:87 Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 0C0A2F3AFF854F260F91B2A665F66095F1A50427 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: EA Signing time: Tue 28 May 2024 12:01:28 +0000 Manifest this update: Tue 28 May 2024 11:56:28 +0000 Manifest next update: Fri 31 May 2024 22:19:28 +0000 Files and hashes: 1: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: kIfgLGYzT0iAD6R3E4fk82hwM+Kpon5cK/e8pknCDpA=) 2: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: HMtU026Dte6FTxY9ovYtA2FmbE9g9GhJNzzv7sWy8yQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:0a:2f:3a:ff:85:4f:26:0f:91:b2:a6:65:f6:60:95:f1:a5:04:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: May 28 11:56:28 2024 GMT Not After : May 31 22:19:28 2024 GMT Subject: CN=1B69A4CF754F5A53B741065DD9DFABC289E7B187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c9:b5:f8:69:34:78:87:ef:fc:95:d2:3e:b3: 7c:f8:7a:9a:46:df:18:06:51:f0:13:97:ab:f5:fc: c0:78:bf:2b:d3:18:77:df:9d:a2:eb:2b:43:88:9d: 5a:35:d4:5c:40:ce:4e:10:89:4b:43:f8:87:e7:34: 60:dc:50:7a:cf:cc:34:e2:82:cb:95:ee:a8:d2:65: 29:e8:d8:73:e0:fa:44:9c:af:ec:bf:dd:bc:85:88: a1:ef:9a:37:a0:1f:4c:0e:e4:f4:b3:cc:3d:ba:89: fb:66:6b:62:f0:ac:5e:f5:79:77:13:67:00:d3:ff: e1:13:52:4e:5b:1a:8f:5c:fd:84:76:95:5e:a6:1f: 66:cc:2a:b8:96:c1:4b:a2:1f:c0:b7:77:38:43:3c: cf:61:2f:6b:6d:ab:da:16:1a:83:92:e2:d2:ac:f3: ed:51:c8:ee:ba:8c:93:52:40:83:9d:f2:06:2f:6a: 3b:2f:63:ba:13:ba:53:bb:52:61:96:0f:84:49:14: 86:53:92:17:64:c5:88:cb:ab:28:5c:e6:f9:94:a2: 1b:ea:5d:1f:cc:f0:2c:27:b1:c1:26:4d:27:fb:88: 3e:73:74:0b:dc:7b:40:33:0d:9e:f4:20:4a:15:10: 9e:01:85:67:52:7b:fb:51:5d:d0:02:3f:15:45:c2: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:69:A4:CF:75:4F:5A:53:B7:41:06:5D:D9:DF:AB:C2:89:E7:B1:87 X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:eb:0a:86:02:4c:59:70:24:c6:fd:73:c4:d8:e3:47:1d:0c: d9:c4:da:b6:9b:82:93:ed:bd:ff:e8:4e:a9:91:dd:36:3a:78: 99:a9:0e:ea:8c:f4:cc:f8:f6:f1:58:2a:3a:e1:b3:fe:35:57: f4:5d:66:45:15:f6:80:ec:83:89:d5:5b:a2:f5:47:77:23:80: 2e:bc:1d:8f:7b:43:4f:8b:b6:c1:60:e4:da:72:78:59:2e:0a: 87:cb:f2:1e:68:07:75:1e:bc:b6:d8:cd:08:66:de:ea:2a:cb: 66:16:00:ec:e0:14:b2:db:4c:d2:71:ed:2f:57:47:3a:ef:1d: 7b:92:5e:57:22:02:a5:06:ba:38:a5:24:98:50:3f:9e:1f:ec: 40:41:a0:08:db:7b:8b:0b:7b:4f:59:34:93:ab:16:04:06:22: 11:57:1b:05:ad:a2:9f:0a:f1:e0:50:e8:6d:5d:32:8b:d1:2f: 49:e7:8d:d1:a6:2a:99:90:7c:02:e3:22:d3:ab:0e:da:9e:44: 2c:b4:25:24:84:1f:83:58:1e:4a:ed:6c:0c:21:f1:08:93:9b: c6:98:37:2f:63:e4:60:d4:d2:05:1a:d3:81:51:ee:46:af:1a: a1:d4:99:57:17:5f:b0:47:4a:8d:d7:fe:4a:2a:6f:60:d4:d7: 97:cf:ac:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAovOv+FTyYPkbKmZfZglfGlBCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNDA1MjgxMTU2MjhaFw0yNDA1MzEyMjE5MjhaMDMxMTAvBgNV BAMTKDFCNjlBNENGNzU0RjVBNTNCNzQxMDY1REQ5REZBQkMyODlFN0IxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGybX4aTR4h+/8ldI+s3z4eppG 3xgGUfATl6v1/MB4vyvTGHffnaLrK0OInVo11FxAzk4QiUtD+IfnNGDcUHrPzDTi gsuV7qjSZSno2HPg+kScr+y/3byFiKHvmjegH0wO5PSzzD26iftma2LwrF71eXcT ZwDT/+ETUk5bGo9c/YR2lV6mH2bMKriWwUuiH8C3dzhDPM9hL2ttq9oWGoOS4tKs 8+1RyO66jJNSQIOd8gYvajsvY7oTulO7UmGWD4RJFIZTkhdkxYjLqyhc5vmUohvq XR/M8CwnscEmTSf7iD5zdAvce0AzDZ70IEoVEJ4BhWdSe/tRXdACPxVFwh5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG2mkz3VPWlO3QQZd2d+rwonnsYcwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXrCoYCTFlwJMb9c8TY40cdDNnE2rabgpPt vf/oTqmR3TY6eJmpDuqM9Mz49vFYKjrhs/41V/RdZkUV9oDsg4nVW6L1R3cjgC68 HY97Q0+LtsFg5NpyeFkuCofL8h5oB3UevLbYzQhm3uoqy2YWAOzgFLLbTNJx7S9X RzrvHXuSXlciAqUGujilJJhQP54f7EBBoAjbe4sLe09ZNJOrFgQGIhFXGwWtop8K 8eBQ6G1dMovRL0nnjdGmKpmQfALjItOrDtqeRCy0JSSEH4NYHkrtbAwh8QiTm8aY Ny9j5GDU0gUa04FR7kavGqHUmVcXX7BHSo3X/koqb2DU15fPrBs= -----END CERTIFICATE-----Generated at Tue May 28 15:18:20 2024 by rpki-client on console-ams.rpki-client.org