$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: Q3bu+dnNZ5oSBIoOjwUyGVlQGhlEKwIQsg9vffXDqdw= Subject key identifier: 7A:FA:71:1F:76:F3:BF:C4:C7:53:4D:48:2B:9D:1A:AF:5D:7D:09:A0 Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 3C023718A4D401659057C787764F650F6245D9E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 0254 Signing time: Sun 19 May 2024 08:42:03 +0000 Manifest this update: Sun 19 May 2024 08:37:03 +0000 Manifest next update: Wed 22 May 2024 16:09:03 +0000 Files and hashes: 1: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: 5Miu5on9qz2hjWjrmO9hjtyXJCScNO+5HgEnu8IW3WE=) 2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: rkgA1ecdAQwqwlhPzGICq18Ka5xfEW+a3vh7SCXgiOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:02:37:18:a4:d4:01:65:90:57:c7:87:76:4f:65:0f:62:45:d9:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: May 19 08:37:03 2024 GMT Not After : May 22 16:09:03 2024 GMT Subject: CN=7AFA711F76F3BFC4C7534D482B9D1AAF5D7D09A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:9f:c5:0c:2d:3d:ec:ac:3e:67:e9:a4:8e: 4f:04:d9:fa:67:4f:13:5b:24:2d:9b:16:a0:ab:f6: cd:bb:4e:74:dd:36:ef:6b:fe:8b:be:81:28:17:26: 94:f5:63:a5:d3:f3:c3:02:31:ee:78:dd:7a:c0:5a: bc:85:88:f2:13:c8:09:fa:44:82:55:88:d6:bf:75: b7:18:a0:0b:de:f5:1d:14:62:e0:2a:21:0e:20:76: 71:d0:27:94:ac:fe:86:8f:01:25:63:0a:bb:f9:59: 73:59:2c:4f:86:ad:5a:7f:d8:35:96:bc:99:da:c0: 26:2f:be:e2:6e:2c:a2:38:d3:de:ec:cc:36:eb:d7: 12:4a:dd:6d:8e:c1:98:0b:c4:04:7e:8f:16:75:7d: e8:de:6b:0a:97:ea:cd:3c:b3:d2:ce:44:f0:6e:db: 22:08:0d:9b:c8:f4:e8:20:de:fa:3a:fd:be:75:c8: 0d:c3:b4:06:ce:9a:5e:a2:17:24:32:ba:db:95:a6: 76:8a:b0:56:0e:84:43:60:0a:d6:60:c5:c0:5c:46: a7:dc:4c:04:6f:63:bb:8b:7a:e9:6b:36:70:39:fe: 51:4a:36:c4:95:30:7a:f6:41:46:61:26:90:8e:a1: dc:8e:79:6c:79:24:36:99:04:a2:b2:28:f3:63:a5: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FA:71:1F:76:F3:BF:C4:C7:53:4D:48:2B:9D:1A:AF:5D:7D:09:A0 X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:36:f6:ba:70:da:37:f6:e8:5b:c9:13:9a:fb:10:d9:35:43: f0:fd:af:e9:12:8f:a2:38:4e:7a:ff:03:06:46:8b:b6:d8:e4: 9e:c7:33:a9:5d:7c:f2:90:e9:12:a0:74:3e:04:81:17:1c:4f: 71:0a:4b:95:04:ea:36:9c:c7:16:d5:c4:17:f3:c3:97:0c:76: 0e:97:74:cf:72:cb:9e:da:51:e4:ba:7b:7d:ff:4a:9f:f2:4e: 7f:eb:6c:e3:b3:33:fd:f4:f9:19:fd:29:87:6e:4f:fa:14:15: 05:b9:a8:9a:96:0b:25:50:d4:5e:23:05:3e:9f:19:84:fc:f7: 8d:11:55:da:70:80:1e:7b:12:a6:06:40:fd:c9:c5:1c:96:b3: 08:c2:b8:63:da:d3:39:c9:19:96:11:91:d6:9f:a2:27:c2:71: 13:3e:f9:bb:ae:dc:2d:be:69:7f:9e:34:3d:5d:fa:cd:a2:84: 32:75:36:c4:4f:e0:5e:04:06:80:83:8d:b6:04:4e:da:9e:8d: b7:ea:e6:09:99:14:ad:03:94:d9:18:8e:47:9f:1b:1e:37:56: bb:db:a4:57:7d:0a:c2:0b:fa:4e:c3:c4:c9:35:fd:8b:00:8c: ef:f7:48:c3:40:a3:ac:bf:b5:6c:19:f5:06:a7:78:ef:16:06: 5c:b1:a6:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAI3GKTUAWWQV8eHdk9lD2JF2ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNDA1MTkwODM3MDNaFw0yNDA1MjIxNjA5MDNaMDMxMTAvBgNV BAMTKDdBRkE3MTFGNzZGM0JGQzRDNzUzNEQ0ODJCOUQxQUFGNUQ3RDA5QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSp/FDC097Kw+Z+mkjk8E2fpn TxNbJC2bFqCr9s27TnTdNu9r/ou+gSgXJpT1Y6XT88MCMe543XrAWryFiPITyAn6 RIJViNa/dbcYoAve9R0UYuAqIQ4gdnHQJ5Ss/oaPASVjCrv5WXNZLE+GrVp/2DWW vJnawCYvvuJuLKI4097szDbr1xJK3W2OwZgLxAR+jxZ1fejeawqX6s08s9LORPBu 2yIIDZvI9Ogg3vo6/b51yA3DtAbOml6iFyQyutuVpnaKsFYOhENgCtZgxcBcRqfc TARvY7uLeulrNnA5/lFKNsSVMHr2QUZhJpCOodyOeWx5JDaZBKKyKPNjpUVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUevpxH3bzv8THU01IK50ar119CaAwHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw29rpw2jf26FvJE5r7ENk1Q/D9r+kSj6I4 Tnr/AwZGi7bY5J7HM6ldfPKQ6RKgdD4EgRccT3EKS5UE6jacxxbVxBfzw5cMdg6X dM9yy57aUeS6e33/Sp/yTn/rbOOzM/30+Rn9KYduT/oUFQW5qJqWCyVQ1F4jBT6f GYT8940RVdpwgB57EqYGQP3JxRyWswjCuGPa0znJGZYRkdafoifCcRM++buu3C2+ aX+eND1d+s2ihDJ1NsRP4F4EBoCDjbYETtqejbfq5gmZFK0DlNkYjkefGx43Vrvb pFd9CsIL+k7DxMk1/YsAjO/3SMNAo6y/tWwZ9QaneO8WBlyxpmU= -----END CERTIFICATE-----Generated at Sun May 19 09:03:52 2024 by rpki-client on console-fra.rpki-client.org