$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: QvQfBItiAli6Stc33PeLULPQbQ3R6s91eg6oCZVSDl0= Subject key identifier: 1C:D1:E0:4B:EF:36:C8:38:A4:AD:97:93:92:58:B4:CB:D0:71:01:B4 Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 217B669D39454D4CDD775E532CD8CF681A3CB468 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: 14 Signing time: Wed 26 Jun 2024 20:11:44 +0000 Manifest this update: Wed 26 Jun 2024 20:06:44 +0000 Manifest next update: Sun 30 Jun 2024 03:43:44 +0000 Files and hashes: 1: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: jt7vMeeQf0u8k+PNCPkDQpm7/wum1rn+HJWmQrSrZvI=) 2: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: Nnj8KTcoEReTLw1P68EAB/1cFuKKJhBcLhOnp9fxKLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 03:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7b:66:9d:39:45:4d:4c:dd:77:5e:53:2c:d8:cf:68:1a:3c:b4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Jun 26 20:06:44 2024 GMT Not After : Jun 30 03:43:44 2024 GMT Subject: CN=1CD1E04BEF36C838A4AD97939258B4CBD07101B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:f7:0e:ba:0c:b6:3d:ef:7d:8b:57:c3:5c: 9d:cc:e3:bb:60:a0:97:46:e8:2c:89:dd:e9:ad:3b: db:92:9f:9e:8c:ec:c5:db:49:5e:17:d0:b7:0c:ee: d7:4a:6f:d2:4e:a8:8a:a1:03:3e:8f:6f:bb:52:bd: 94:da:3c:b3:10:db:7d:6a:e8:d1:f2:31:64:7b:24: c8:28:e8:16:e0:e1:fe:20:d1:21:18:54:b9:e2:65: 67:41:e7:36:f7:38:60:64:e5:11:9b:3e:33:7e:29: 16:96:06:cf:35:03:67:41:c5:22:cc:d5:3c:78:88: 79:58:33:c7:a1:61:61:94:e0:dd:5f:ce:65:c2:10: 3a:20:e6:74:bf:74:76:f5:55:b3:c4:1c:ce:54:f4: c6:21:83:6f:57:7f:45:b3:40:b8:84:f9:4a:7b:d0: da:fb:d7:b1:64:ab:d8:b3:24:b2:56:06:c1:07:b2: 86:7d:f5:c2:73:23:85:09:cb:0e:1b:eb:c5:0e:3a: 54:42:ef:b4:ce:bc:87:85:27:35:bd:99:36:71:cb: 1a:ee:0e:45:2e:16:98:d2:71:06:49:d1:c2:e8:18: f9:df:97:ad:c7:63:10:9b:65:d0:5b:8d:5f:16:db: 0f:0e:d7:47:99:9a:38:97:de:c7:2a:4b:dc:6d:77: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D1:E0:4B:EF:36:C8:38:A4:AD:97:93:92:58:B4:CB:D0:71:01:B4 X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bf:85:39:47:f6:e4:29:96:80:dd:ab:00:cd:e3:97:66:7f: aa:02:43:62:9b:15:d6:40:85:45:31:0b:dc:bf:4f:cf:60:ff: 0c:03:6c:90:00:ee:6e:1b:21:03:34:b4:63:0e:d5:1e:b5:5f: 2f:4e:25:21:c5:3f:f0:5d:6b:ad:16:ed:52:b9:6a:df:a4:26: 6d:f3:26:22:3b:d1:a5:94:74:5c:f9:78:6d:1d:f9:8c:13:44: 46:be:3c:10:84:a3:16:51:90:5f:bd:2a:8e:5e:dc:47:29:5a: 1c:46:1b:a9:9e:26:92:19:74:7b:47:74:88:87:fe:5f:6d:c4: e5:05:3c:38:bc:aa:2f:2d:b5:91:57:a2:ab:33:d1:f5:a9:8d: 2f:5c:64:d9:c5:6a:97:36:e6:74:f9:70:1f:80:5d:3a:98:8d: 1a:d7:05:e2:94:30:e0:9e:c6:82:dd:df:21:33:bd:1b:96:24: d8:5b:68:03:c3:be:03:62:ca:73:53:0e:54:7a:00:90:0d:58: 77:81:82:87:25:53:9d:68:c1:0e:6e:40:0b:4d:e4:e8:0f:e8: 08:17:61:87:ba:96:c0:c5:32:19:41:3c:be:7c:cc:6d:b3:7c: a8:c0:ea:b6:48:d0:7d:fa:55:ce:94:72:47:75:8b:69:86:c6: 8e:5e:b6:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIXtmnTlFTUzdd15TLNjPaBo8tGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNDA2MjYyMDA2NDRaFw0yNDA2MzAwMzQzNDRaMDMxMTAvBgNV BAMTKDFDRDFFMDRCRUYzNkM4MzhBNEFEOTc5MzkyNThCNENCRDA3MTAxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsfcOugy2Pe99i1fDXJ3M47tg oJdG6CyJ3emtO9uSn56M7MXbSV4X0LcM7tdKb9JOqIqhAz6Pb7tSvZTaPLMQ231q 6NHyMWR7JMgo6Bbg4f4g0SEYVLniZWdB5zb3OGBk5RGbPjN+KRaWBs81A2dBxSLM 1Tx4iHlYM8ehYWGU4N1fzmXCEDog5nS/dHb1VbPEHM5U9MYhg29Xf0WzQLiE+Up7 0Nr717Fkq9izJLJWBsEHsoZ99cJzI4UJyw4b68UOOlRC77TOvIeFJzW9mTZxyxru DkUuFpjScQZJ0cLoGPnfl63HYxCbZdBbjV8W2w8O10eZmjiX3scqS9xtdzfRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHNHgS+82yDikrZeTkli0y9BxAbQwHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIq/hTlH9uQploDdqwDN45dmf6oCQ2KbFdZA hUUxC9y/T89g/wwDbJAA7m4bIQM0tGMO1R61Xy9OJSHFP/Bda60W7VK5at+kJm3z JiI70aWUdFz5eG0d+YwTREa+PBCEoxZRkF+9Ko5e3EcpWhxGG6meJpIZdHtHdIiH /l9txOUFPDi8qi8ttZFXoqsz0fWpjS9cZNnFapc25nT5cB+AXTqYjRrXBeKUMOCe xoLd3yEzvRuWJNhbaAPDvgNiynNTDlR6AJANWHeBgoclU51owQ5uQAtN5OgP6AgX YYe6lsDFMhlBPL58zG2zfKjA6rZI0H36Vc6Uckd1i2mGxo5etns= -----END CERTIFICATE-----Generated at Wed Jun 26 23:08:56 2024 by rpki-client on console-ams.rpki-client.org