$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: 4AWxqs4I1qqf4C9k9pFkaFmmxvMOd72qXpO2UPx23Fo= Subject key identifier: 62:52:61:A0:F9:C9:41:5F:20:BF:04:94:D8:3E:2C:1A:84:2B:00:CD Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 70A09920F91809745568759BD1DF193BDAD2ED2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 011A Signing time: Wed 29 May 2024 16:11:00 +0000 Manifest this update: Wed 29 May 2024 16:06:00 +0000 Manifest next update: Sat 01 Jun 2024 22:31:00 +0000 Files and hashes: 1: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: ZQUA+Wf+C7IOvSR1cmKq88RAq7/oQ+Bds5jZDG1hRFk=) 2: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: qtooem7d0gAH8+dYEIeOuRHsoMRBB5yoYJowLxjEMN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 20:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a0:99:20:f9:18:09:74:55:68:75:9b:d1:df:19:3b:da:d2:ed:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: May 29 16:06:00 2024 GMT Not After : Jun 1 22:31:00 2024 GMT Subject: CN=625261A0F9C9415F20BF0494D83E2C1A842B00CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:94:78:76:df:88:8d:32:a7:a4:03:4f:22:4a: 2f:44:4e:0a:d8:80:65:d1:bd:f3:09:05:30:5c:06: 9d:e2:09:3d:81:4c:15:87:fe:7f:13:cd:2d:1b:0f: c7:5c:a4:79:2f:0c:da:05:52:70:36:dd:a3:c4:03: 7e:2d:70:f5:2c:4e:d6:b9:1e:ab:35:9f:26:76:ec: 64:50:30:9d:48:67:1f:a9:fc:52:83:33:6e:c3:b2: 80:f5:54:67:3c:ae:73:72:31:40:ae:cd:c7:b8:77: dd:08:6b:ec:29:6b:cf:c3:f9:55:ab:7f:0e:a7:f5: 09:fc:a1:af:d9:1a:85:75:45:3f:96:d6:8d:e6:b7: 44:fa:15:a4:33:2b:fe:31:45:ec:59:dc:6a:eb:be: 14:61:9c:28:c2:5e:3a:f4:2b:57:a2:63:eb:a8:22: 71:57:60:7c:98:bc:8e:a6:1b:87:52:0b:26:55:d6: 3c:2f:ba:39:3d:57:29:c3:c8:3a:ac:de:79:c3:3a: 35:c4:7c:6c:c6:e3:75:96:cf:23:98:37:a3:13:e1: d5:12:9f:e9:c7:c5:3d:b7:20:2b:b3:79:ca:f9:85: 17:53:9f:5c:d7:19:34:1f:1f:8c:6a:58:c9:a6:2b: 81:b5:cd:93:61:5e:dd:6b:99:a4:30:35:17:cf:d3: ed:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:52:61:A0:F9:C9:41:5F:20:BF:04:94:D8:3E:2C:1A:84:2B:00:CD X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f9:7d:2f:1a:73:8b:42:5a:27:9f:b8:46:02:95:ad:af:46: e2:91:c3:2b:56:f2:8a:9e:35:96:9e:6f:10:0c:84:33:a9:99: 18:0f:5f:cd:ae:47:cc:cf:d8:39:07:e3:e7:4e:91:82:c4:af: 6c:7f:7c:d0:bf:c9:6b:60:2d:60:1c:09:73:74:2f:c1:ff:67: 97:38:cc:0d:e6:9d:42:33:97:b8:32:2c:36:04:1b:d6:c5:94: 4a:ea:40:84:3a:33:c5:77:93:d9:60:97:f7:1e:87:26:6f:fc: c3:61:95:b8:a4:1e:42:14:6a:60:d9:e0:79:75:0c:5b:19:86: c7:39:cc:5b:c7:65:08:85:4b:2d:db:49:27:f0:58:9c:ad:89: be:8a:2f:4f:bc:fd:2c:32:67:87:ac:ae:de:10:ec:6c:97:6b: 03:ea:75:a0:68:eb:78:f9:ad:11:5e:4c:e3:29:f7:38:06:61: 0a:d6:48:d5:e5:ce:61:9d:cb:f6:dd:e9:ce:ba:f4:3c:1c:f5: a3:10:cc:70:bc:e9:60:8d:ad:4b:2a:3f:83:57:1b:07:a8:1a: 2b:ad:69:ff:f1:4c:e1:a3:10:df:cb:3d:49:04:f1:1c:f8:37: 2c:ad:80:da:80:3c:2a:bf:d5:87:e8:42:2d:25:b8:a3:7f:30: a5:ca:1c:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKCZIPkYCXRVaHWb0d8ZO9rS7S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNDA1MjkxNjA2MDBaFw0yNDA2MDEyMjMxMDBaMDMxMTAvBgNV BAMTKDYyNTI2MUEwRjlDOTQxNUYyMEJGMDQ5NEQ4M0UyQzFBODQyQjAwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBlHh234iNMqekA08iSi9ETgrY gGXRvfMJBTBcBp3iCT2BTBWH/n8TzS0bD8dcpHkvDNoFUnA23aPEA34tcPUsTta5 Hqs1nyZ27GRQMJ1IZx+p/FKDM27DsoD1VGc8rnNyMUCuzce4d90Ia+wpa8/D+VWr fw6n9Qn8oa/ZGoV1RT+W1o3mt0T6FaQzK/4xRexZ3GrrvhRhnCjCXjr0K1eiY+uo InFXYHyYvI6mG4dSCyZV1jwvujk9VynDyDqs3nnDOjXEfGzG43WWzyOYN6MT4dUS n+nHxT23ICuzecr5hRdTn1zXGTQfH4xqWMmmK4G1zZNhXt1rmaQwNRfP0+0PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYlJhoPnJQV8gvwSU2D4sGoQrAM0wHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAb5fS8ac4tCWiefuEYCla2vRuKRwytW8oqe NZaebxAMhDOpmRgPX82uR8zP2DkH4+dOkYLEr2x/fNC/yWtgLWAcCXN0L8H/Z5c4 zA3mnUIzl7gyLDYEG9bFlErqQIQ6M8V3k9lgl/cehyZv/MNhlbikHkIUamDZ4Hl1 DFsZhsc5zFvHZQiFSy3bSSfwWJytib6KL0+8/SwyZ4esrt4Q7GyXawPqdaBo63j5 rRFeTOMp9zgGYQrWSNXlzmGdy/bd6c669Dwc9aMQzHC86WCNrUsqP4NXGweoGiut af/xTOGjEN/LPUkE8Rz4NyytgNqAPCq/1YfoQi0luKN/MKXKHHk= -----END CERTIFICATE-----Generated at Wed May 29 17:52:44 2024 by rpki-client on console-ams.rpki-client.org