$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: mfa3qv4EpRn8F40Nndq8UwoSjPTXMhxdIoICTW0Nurw= Subject key identifier: A9:0B:69:F7:71:61:7D:A5:6D:DF:97:2C:CD:77:94:B4:19:BF:6F:67 Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 6FE83B1FF328A96112F8BCD9319B5A7FACE3FFCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: 2B Signing time: Wed 29 May 2024 23:20:57 +0000 Manifest this update: Wed 29 May 2024 23:15:57 +0000 Manifest next update: Sun 02 Jun 2024 07:58:57 +0000 Files and hashes: 1: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: lUSfpnZx9fdKlYaVxzrjLEaDLuVRY9GhAiW+Xn0l+aw=) 2: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: DuvGDCKKKSGReqir1AMaFe7qP9iC9HzhFPsZXtzz7b0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 01:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e8:3b:1f:f3:28:a9:61:12:f8:bc:d9:31:9b:5a:7f:ac:e3:ff:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: May 29 23:15:57 2024 GMT Not After : Jun 2 07:58:57 2024 GMT Subject: CN=A90B69F771617DA56DDF972CCD7794B419BF6F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fc:25:8d:ca:1d:b3:1c:da:73:ea:e7:31:c3: 81:85:cb:f8:8c:32:64:93:92:e6:d5:27:81:b6:d4: d4:15:d5:51:7a:fa:60:13:a3:61:cf:92:d1:4a:bb: e2:e3:df:cf:85:4b:ff:e7:1f:bb:a0:51:9b:73:d0: 99:0e:c6:8f:7f:b4:b5:de:27:18:06:95:77:75:ae: 8a:64:77:f3:30:1a:e0:e4:1e:1d:6d:0f:7a:b1:3f: 14:b0:95:0a:8d:bd:3e:30:fc:68:af:b5:85:52:a2: ef:b6:4d:62:7d:ab:f8:08:83:af:90:41:39:19:12: 32:19:62:2a:fe:7c:a9:d8:5c:09:e6:31:ea:43:52: 5b:e2:f2:a4:b3:3a:10:3f:09:4d:0e:c2:e0:de:59: 5d:5a:3e:f6:31:76:8f:70:8b:3c:4e:1d:fb:d3:20: 87:4f:dd:0e:2d:c0:05:7b:8f:0d:8e:58:5c:fe:f3: b1:80:3c:e5:c7:6d:56:82:1a:77:03:7d:15:e1:dc: b7:2b:36:8d:f9:3d:d3:b7:ac:1f:ed:4c:b2:91:b0: f7:12:c2:2e:d8:fb:67:54:d9:92:e1:0c:8b:88:95: 82:a4:41:2d:cb:df:54:5a:a7:82:11:2c:69:f1:ea: 0c:e9:fe:b0:94:80:83:c4:72:3f:4b:d9:7b:06:c2: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0B:69:F7:71:61:7D:A5:6D:DF:97:2C:CD:77:94:B4:19:BF:6F:67 X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c6:52:d8:3c:7d:6d:e8:3a:e5:7b:ef:14:bc:bc:b9:49:ae: a1:ca:37:00:f7:02:68:79:95:d4:e4:a3:c2:d0:21:57:32:34: 4a:85:a8:8e:21:b2:8a:f6:2d:4e:1d:ed:38:72:68:e4:4a:3f: 2f:f9:43:57:b6:e1:e9:5c:56:f6:ed:53:b7:53:91:0b:fc:b0: c8:36:b2:a1:04:71:76:be:e8:18:14:fc:66:57:93:79:10:52: 74:b0:86:d6:f4:d8:a5:93:0f:0b:bf:c9:30:e7:77:79:6c:f6: 1f:1d:4e:c6:41:ce:4e:b8:17:4a:5a:34:fe:98:44:a7:e0:63: ae:90:2e:3b:ca:5c:7b:bb:40:87:91:b8:7a:74:60:0a:ae:8e: a3:e8:d5:72:15:4b:76:ac:1c:36:21:27:69:a1:59:4d:4b:10: c1:52:37:0b:46:ce:2a:5d:04:01:57:46:bf:fe:c8:07:55:7e: 85:43:1b:43:ac:14:8d:a7:10:25:e8:f4:01:bb:f8:69:42:21: 2f:a4:e3:85:db:29:cb:75:26:7c:73:44:dd:99:55:f9:10:b6: ae:04:bf:15:bd:38:86:d0:4d:67:bb:7c:2d:4f:e3:66:05:ae: 09:c4:20:0a:4a:a1:75:9a:75:01:47:d1:02:85:61:4e:ae:e2: 5d:02:a8:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+g7H/MoqWES+LzZMZtaf6zj/8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNDA1MjkyMzE1NTdaFw0yNDA2MDIwNzU4NTdaMDMxMTAvBgNV BAMTKEE5MEI2OUY3NzE2MTdEQTU2RERGOTcyQ0NENzc5NEI0MTlCRjZGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl/CWNyh2zHNpz6ucxw4GFy/iM MmSTkubVJ4G21NQV1VF6+mATo2HPktFKu+Lj38+FS//nH7ugUZtz0JkOxo9/tLXe JxgGlXd1ropkd/MwGuDkHh1tD3qxPxSwlQqNvT4w/GivtYVSou+2TWJ9q/gIg6+Q QTkZEjIZYir+fKnYXAnmMepDUlvi8qSzOhA/CU0OwuDeWV1aPvYxdo9wizxOHfvT IIdP3Q4twAV7jw2OWFz+87GAPOXHbVaCGncDfRXh3LcrNo35PdO3rB/tTLKRsPcS wi7Y+2dU2ZLhDIuIlYKkQS3L31Rap4IRLGnx6gzp/rCUgIPEcj9L2XsGwgdnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqQtp93FhfaVt35cszXeUtBm/b2cwHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTGUtg8fW3oOuV77xS8vLlJrqHKNwD3Amh5 ldTko8LQIVcyNEqFqI4hsor2LU4d7ThyaORKPy/5Q1e24elcVvbtU7dTkQv8sMg2 sqEEcXa+6BgU/GZXk3kQUnSwhtb02KWTDwu/yTDnd3ls9h8dTsZBzk64F0paNP6Y RKfgY66QLjvKXHu7QIeRuHp0YAqujqPo1XIVS3asHDYhJ2mhWU1LEMFSNwtGzipd BAFXRr/+yAdVfoVDG0OsFI2nECXo9AG7+GlCIS+k44XbKct1JnxzRN2ZVfkQtq4E vxW9OIbQTWe7fC1P42YFrgnEIApKoXWadQFH0QKFYU6u4l0CqD0= -----END CERTIFICATE-----Generated at Thu May 30 01:36:29 2024 by rpki-client on console-ams.rpki-client.org