$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: y6RvPwdnRIj2NZrvUTbPGP9ii/doJK9m/BpvP1rWrLQ= Subject key identifier: 66:5D:8E:83:7A:F6:24:55:1A:E0:A1:58:09:7A:80:9E:80:26:52:ED Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 029799F896D33887545EB598F2E60E6FBC058082 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 02B9 Signing time: Sat 18 May 2024 18:52:00 +0000 Manifest this update: Sat 18 May 2024 18:47:00 +0000 Manifest next update: Wed 22 May 2024 03:35:00 +0000 Files and hashes: 1: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: rfjWflYs2OIVtGTsa3+jWqNQSk38MjPkdtKZ6wMEY8U=) 2: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: ZQeUJA8FemXPUrCCTqWQsa/Ey/xybN+VqtEDuKlLH5M=) 3: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: OwvRHKXOCqilqh1cTmagBAChy5YOmSNiZsYY8ObeQjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:97:99:f8:96:d3:38:87:54:5e:b5:98:f2:e6:0e:6f:bc:05:80:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: May 18 18:47:00 2024 GMT Not After : May 22 03:35:00 2024 GMT Subject: CN=665D8E837AF624551AE0A158097A809E802652ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:11:d9:1d:51:09:56:cf:62:da:4d:e4:0a: d2:aa:c2:9e:29:66:42:f3:5c:9c:dc:1b:43:62:5d: 27:94:a3:99:a4:a3:39:e5:73:53:93:80:36:86:3e: fe:0f:97:32:2d:3c:4f:b9:26:a7:ec:3b:ce:71:dc: d2:62:27:75:a4:6b:b6:47:8f:6e:92:d6:ea:10:fa: 5d:df:7c:3e:a9:ca:c6:60:a5:81:69:fb:b8:80:0f: 44:aa:84:25:3b:2d:4f:15:e4:fa:d2:5c:78:1b:13: 65:1f:ac:67:b5:c8:57:bc:26:a5:74:0d:27:01:89: 8b:27:22:1c:8c:22:07:5c:a7:7e:86:dd:3c:ae:9f: 5f:dd:7f:0f:e2:a8:bd:05:5a:e9:58:35:42:d3:6e: 2c:76:6d:b3:28:09:1d:e0:f9:f4:6b:9b:bf:f0:ee: 06:bc:21:82:8e:ee:84:18:d0:5d:c0:cf:e8:1a:95: 8d:90:2f:f3:67:e5:3d:b4:67:96:c9:5e:c3:15:9e: aa:87:a9:26:fa:5c:1e:56:84:65:2f:35:af:35:8b: bc:08:49:bc:91:91:4a:f8:5a:de:ba:20:a5:c0:a4: 14:89:7a:7d:d0:1b:d0:e0:7c:51:31:c8:17:3b:e1: f4:b8:a7:e1:57:25:0e:82:e3:9d:2c:85:c2:ff:c6: 28:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5D:8E:83:7A:F6:24:55:1A:E0:A1:58:09:7A:80:9E:80:26:52:ED X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c2:d1:02:69:66:17:28:a2:94:48:fd:37:f6:39:61:20:c5: 14:27:ed:ff:a8:b9:95:66:06:1a:28:7d:0b:b0:5c:fd:f3:b7: 12:40:6a:cf:60:b7:7b:97:80:9e:45:bb:c9:cf:8b:2e:bf:b0: b0:73:61:7d:59:ba:39:a6:aa:be:ce:05:5b:57:ca:c7:bc:be: be:98:95:56:94:4f:ac:92:0e:e7:4a:2b:e6:fe:bb:f8:04:15: ce:4e:d2:d4:59:91:90:8e:8a:69:f5:09:9e:88:70:73:0c:ad: bd:7c:20:d2:1a:a6:f1:72:47:85:4d:85:e1:3b:05:32:74:b8: 84:b4:1a:15:95:9d:4c:61:66:a2:57:1c:21:77:2e:9c:4b:2e: ff:a3:be:89:e0:16:94:86:3b:94:2c:42:13:41:53:a3:e7:ef: c2:04:28:31:dd:79:3f:18:49:4b:e4:18:45:3b:1f:c5:ce:10: 7b:9e:ee:0b:42:a8:fa:11:0a:bc:10:88:a5:0a:00:10:4a:cd: bf:2d:e0:53:85:c1:ec:7d:d9:82:9f:a2:35:62:99:bb:1b:67: b0:0d:b5:22:a8:2d:1a:41:76:58:91:14:02:0a:f4:e7:3e:76: c3:48:aa:3c:94:44:fb:7a:32:e6:e3:fd:fc:73:6a:f0:05:1d: 2a:d8:78:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApeZ+JbTOIdUXrWY8uYOb7wFgIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNDA1MTgxODQ3MDBaFw0yNDA1MjIwMzM1MDBaMDMxMTAvBgNV BAMTKDY2NUQ4RTgzN0FGNjI0NTUxQUUwQTE1ODA5N0E4MDlFODAyNjUyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdBHZHVEJVs9i2k3kCtKqwp4p ZkLzXJzcG0NiXSeUo5mkoznlc1OTgDaGPv4PlzItPE+5JqfsO85x3NJiJ3Wka7ZH j26S1uoQ+l3ffD6pysZgpYFp+7iAD0SqhCU7LU8V5PrSXHgbE2UfrGe1yFe8JqV0 DScBiYsnIhyMIgdcp36G3Tyun1/dfw/iqL0FWulYNULTbix2bbMoCR3g+fRrm7/w 7ga8IYKO7oQY0F3Az+galY2QL/Nn5T20Z5bJXsMVnqqHqSb6XB5WhGUvNa81i7wI SbyRkUr4Wt66IKXApBSJen3QG9DgfFExyBc74fS4p+FXJQ6C450shcL/xiifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZl2Og3r2JFUa4KFYCXqAnoAmUu0wHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrC0QJpZhcoopRI/Tf2OWEgxRQn7f+ouZVm BhoofQuwXP3ztxJAas9gt3uXgJ5Fu8nPiy6/sLBzYX1Zujmmqr7OBVtXyse8vr6Y lVaUT6ySDudKK+b+u/gEFc5O0tRZkZCOimn1CZ6IcHMMrb18INIapvFyR4VNheE7 BTJ0uIS0GhWVnUxhZqJXHCF3LpxLLv+jvongFpSGO5QsQhNBU6Pn78IEKDHdeT8Y SUvkGEU7H8XOEHue7gtCqPoRCrwQiKUKABBKzb8t4FOFwex92YKfojVimbsbZ7AN tSKoLRpBdliRFAIK9Oc+dsNIqjyURPt6Mubj/fxzavAFHSrYeAg= -----END CERTIFICATE-----Generated at Sat May 18 20:15:34 2024 by rpki-client on console-ams.rpki-client.org