$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json) Hash identifier: +gs9fcjzEgJ5HOHZHecZTksO81FLiM9zMIQgq1W0NDc= Subject key identifier: C3:38:D6:5E:68:3E:10:88:93:84:01:55:7C:B0:BC:86:84:0F:F4:8C Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 4B502C9F103F6BFB5FBD2CFB648CC9D1BD7311EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft Manifest number: 014B Signing time: Tue 28 May 2024 15:01:07 +0000 Manifest this update: Tue 28 May 2024 14:56:07 +0000 Manifest next update: Sat 01 Jun 2024 01:28:07 +0000 Files and hashes: 1: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: gxQnMC7IT2KHIqm7lUTUCzsWjHJe7NBVBWkdEYqy9R4=) 2: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: kKYhOUtX//VijmHcCGR4k8Pd57HI13xOYuzcfOHbcVM=) 3: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: XEhQYS4X7zjzLZqlSDh+Gdi/QWiIRxG8BJAhwTn/VM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:50:2c:9f:10:3f:6b:fb:5f:bd:2c:fb:64:8c:c9:d1:bd:73:11:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: May 28 14:56:07 2024 GMT Not After : Jun 1 01:28:07 2024 GMT Subject: CN=C338D65E683E1088938401557CB0BC86840FF48C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:76:ff:64:ee:98:32:f6:47:db:a2:33:9a:9e: ef:e0:1d:2f:15:97:3b:d5:81:18:bd:97:ea:f0:30: e5:a3:d8:b2:f6:97:9a:7b:8a:d8:72:ac:ba:66:19: df:9c:d1:fd:e9:31:97:ed:01:c6:f2:20:72:da:a4: 9f:ad:0a:c3:56:ab:7c:29:34:cc:f6:19:91:fb:7c: d7:08:65:e3:96:e6:48:2e:56:21:a8:4a:cd:64:d9: 6f:01:8b:73:ab:25:2e:84:92:f6:17:a0:0b:0d:10: 8f:c2:3e:88:48:92:47:8c:0f:b7:41:78:57:09:27: a5:2e:2e:57:5f:71:1b:c7:c6:a6:7c:29:f3:07:25: 3d:f1:b2:88:fb:25:36:5b:81:29:1d:85:8a:cc:51: d6:72:20:b2:04:02:a2:c3:f2:cf:f1:08:2a:32:dd: f5:d6:c5:4a:2d:9a:3f:c9:c0:b0:0b:c5:e4:e1:32: 9e:fa:0c:67:fb:1e:fc:6e:7d:e9:02:82:81:2c:97: 51:08:02:4b:0f:ae:d2:89:8e:65:3a:f5:ed:3f:54: c5:45:cc:00:c0:16:71:e1:64:4d:af:15:56:43:96: cd:87:41:cc:60:61:2f:6d:69:fb:bf:7e:da:07:cf: fa:3f:0d:4f:b1:c7:84:c9:50:26:97:05:13:f5:be: 89:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:38:D6:5E:68:3E:10:88:93:84:01:55:7C:B0:BC:86:84:0F:F4:8C X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:77:d8:61:d1:a6:18:d5:3d:f6:e0:e3:09:ee:14:c7:de:ae: be:9a:52:7c:bb:42:dc:30:0a:3d:68:50:c0:77:56:dc:da:aa: 0f:d3:0f:fc:b1:eb:6f:bc:cc:32:9f:50:ac:8c:0c:de:bd:ed: 66:2a:ca:5e:c3:40:1b:24:ab:8f:f7:4c:2b:31:b9:d3:db:6f: e5:80:cb:32:c0:2c:29:22:78:36:95:04:10:ed:c7:75:83:2d: 6a:d0:9b:da:80:29:9e:cb:55:a4:66:74:21:4e:3e:27:1b:ea: ea:aa:51:9d:47:63:21:1a:a4:a5:d5:08:86:5c:e0:9f:5c:df: 2e:f1:89:b4:8d:7c:ef:92:20:35:33:97:f9:93:00:76:b4:ae: fe:ba:39:5e:67:38:e9:fb:17:d2:5c:8b:71:aa:92:77:0f:1f: df:32:55:03:ff:3d:cc:19:3d:3b:1c:71:7d:dd:4d:bd:96:de: 91:15:81:44:09:c3:20:04:67:3e:ed:5e:86:0c:6a:29:89:9e: 45:59:dc:98:d0:49:63:02:03:53:cb:10:38:91:f5:a6:cf:17: 5d:7d:8c:66:d4:ad:e2:05:0f:db:ab:ac:b4:8f:e8:9f:14:18: 6e:cf:b6:d1:9b:e7:60:d7:c2:35:af:58:9e:81:46:27:2a:4f: ba:c2:8c:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS1AsnxA/a/tfvSz7ZIzJ0b1zEeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNDA1MjgxNDU2MDdaFw0yNDA2MDEwMTI4MDdaMDMxMTAvBgNV BAMTKEMzMzhENjVFNjgzRTEwODg5Mzg0MDE1NTdDQjBCQzg2ODQwRkY0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZdv9k7pgy9kfbojOanu/gHS8V lzvVgRi9l+rwMOWj2LL2l5p7ithyrLpmGd+c0f3pMZftAcbyIHLapJ+tCsNWq3wp NMz2GZH7fNcIZeOW5kguViGoSs1k2W8Bi3OrJS6EkvYXoAsNEI/CPohIkkeMD7dB eFcJJ6UuLldfcRvHxqZ8KfMHJT3xsoj7JTZbgSkdhYrMUdZyILIEAqLD8s/xCCoy 3fXWxUotmj/JwLALxeThMp76DGf7HvxufekCgoEsl1EIAksPrtKJjmU69e0/VMVF zADAFnHhZE2vFVZDls2HQcxgYS9tafu/ftoHz/o/DU+xx4TJUCaXBRP1vol7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwzjWXmg+EIiThAFVfLC8hoQP9IwwHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIF32GHRphjVPfbg4wnuFMferr6aUny7Qtww Cj1oUMB3Vtzaqg/TD/yx62+8zDKfUKyMDN697WYqyl7DQBskq4/3TCsxudPbb+WA yzLALCkieDaVBBDtx3WDLWrQm9qAKZ7LVaRmdCFOPicb6uqqUZ1HYyEapKXVCIZc 4J9c3y7xibSNfO+SIDUzl/mTAHa0rv66OV5nOOn7F9Jci3GqkncPH98yVQP/PcwZ PTsccX3dTb2W3pEVgUQJwyAEZz7tXoYMaimJnkVZ3JjQSWMCA1PLEDiR9abPF119 jGbUreIFD9urrLSP6J8UGG7PttGb52DXwjWvWJ6BRicqT7rCjH8= -----END CERTIFICATE-----Generated at Tue May 28 17:49:09 2024 by rpki-client on console-fra.rpki-client.org