$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: c7mnKxThUZsK8T9m8frqru8y4XzDcLY78Z3lWCtyiF8= Subject key identifier: EA:0F:52:3A:55:D0:AC:0B:F3:5E:73:9C:D8:58:42:AF:92:24:85:EA Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 0DAC3DC15CE8EDDA8AC0B51A7F819E18DE99CC65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 0423 Signing time: Thu 18 Apr 2024 18:11:45 +0000 Manifest this update: Thu 18 Apr 2024 18:06:45 +0000 Manifest next update: Sun 21 Apr 2024 22:19:45 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: ROtmmBdLINi2oXrIPBQKnU6d9yUn38RFpFUVMyydEA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Apr 2024 22:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ac:3d:c1:5c:e8:ed:da:8a:c0:b5:1a:7f:81:9e:18:de:99:cc:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: Apr 18 18:06:45 2024 GMT Not After : Apr 21 22:19:45 2024 GMT Subject: CN=EA0F523A55D0AC0BF35E739CD85842AF922485EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5f:2c:90:38:4b:1f:61:be:40:f8:31:eb:d0: 84:28:67:bc:dc:2a:ff:bd:7e:80:fb:06:a8:48:1d: fb:b1:b1:cb:4b:98:35:cd:4b:52:8f:1f:57:d2:68: 8c:c8:83:14:ee:26:2b:6b:f1:ef:0c:5f:f2:fa:01: 9b:ee:0a:82:c8:8f:45:80:32:2b:c1:25:e9:79:96: 31:e7:cf:1f:8b:8e:74:db:d7:96:ad:05:73:d6:97: 90:7d:42:cf:97:a0:b5:47:f1:9a:6d:8c:36:a3:b4: 52:d5:dc:f9:d7:8a:3a:ef:83:93:0c:23:d2:3d:88: a1:2d:53:44:1c:12:d3:af:a7:ee:bf:97:86:7e:ad: 10:60:0f:9d:79:64:4a:4c:26:55:c3:04:0b:26:39: ca:ba:8c:b3:d0:8c:af:18:e0:5f:97:6f:03:db:7d: 7c:4a:d0:f0:f3:f7:eb:a1:46:40:cd:14:3b:9b:2d: 23:fb:09:ca:41:67:87:a7:a2:0a:18:cf:5b:12:d1: 57:d2:08:11:d0:fd:9a:54:35:f0:2c:03:aa:18:b9: 98:82:d9:0f:f8:0a:55:01:7f:d1:43:c3:27:c5:eb: 2a:eb:df:c7:f5:10:ca:f9:75:87:ea:a0:01:cd:d0: 64:da:6c:52:a2:75:3c:16:ff:5f:3f:cb:0a:98:4d: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0F:52:3A:55:D0:AC:0B:F3:5E:73:9C:D8:58:42:AF:92:24:85:EA X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:9f:62:e1:51:20:33:54:f1:d4:d0:4b:23:63:27:e5:1e:ad: 8f:48:74:2b:50:ce:5e:01:fa:e0:1a:44:93:52:48:0a:bc:88: d9:92:f6:ef:17:a5:8d:14:46:40:84:c5:f5:16:42:0b:dd:98: 41:d8:aa:9c:8e:47:4c:5e:de:92:6f:c9:af:e4:5c:5a:d5:c9: c7:93:08:6b:ac:2a:b5:0d:fb:41:ff:7e:94:14:0e:4a:80:66: e0:39:03:04:84:25:22:a2:3b:9e:23:ef:7d:d3:19:40:7f:3b: ba:f2:63:b4:e3:a7:6f:53:6b:73:a5:fd:91:16:de:45:6b:b8: c0:1a:a3:2c:21:f6:ba:ae:a0:89:9e:0b:cb:60:f8:8f:1f:d8: ba:87:bc:b4:ae:23:38:c7:1f:dd:15:34:52:e2:ca:e8:ad:50: 3e:0e:27:cf:6a:3d:de:3e:a9:65:73:01:6c:ce:11:83:2a:51: bb:c8:cd:e5:04:5a:09:f5:e8:76:09:87:3b:4d:40:c7:53:50: 57:38:7b:f6:12:88:05:08:08:33:5e:7b:c0:04:65:ca:c5:32: b5:16:54:25:89:42:64:28:c9:41:42:58:21:0f:76:3f:9a:30: 0f:a2:87:91:9b:b5:78:06:9e:3a:c7:71:ab:f9:b6:fc:52:54: 6e:d4:9e:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDaw9wVzo7dqKwLUaf4GeGN6ZzGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNDA0MTgxODA2NDVaFw0yNDA0MjEyMjE5NDVaMDMxMTAvBgNV BAMTKEVBMEY1MjNBNTVEMEFDMEJGMzVFNzM5Q0Q4NTg0MkFGOTIyNDg1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmXyyQOEsfYb5A+DHr0IQoZ7zc Kv+9foD7BqhIHfuxsctLmDXNS1KPH1fSaIzIgxTuJitr8e8MX/L6AZvuCoLIj0WA MivBJel5ljHnzx+LjnTb15atBXPWl5B9Qs+XoLVH8ZptjDajtFLV3PnXijrvg5MM I9I9iKEtU0QcEtOvp+6/l4Z+rRBgD515ZEpMJlXDBAsmOcq6jLPQjK8Y4F+XbwPb fXxK0PDz9+uhRkDNFDubLSP7CcpBZ4enogoYz1sS0VfSCBHQ/ZpUNfAsA6oYuZiC 2Q/4ClUBf9FDwyfF6yrr38f1EMr5dYfqoAHN0GTabFKidTwW/18/ywqYTYv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6g9SOlXQrAvzXnOc2FhCr5IkheowHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFifYuFRIDNU8dTQSyNjJ+UerY9IdCtQzl4B +uAaRJNSSAq8iNmS9u8XpY0URkCExfUWQgvdmEHYqpyOR0xe3pJvya/kXFrVyceT CGusKrUN+0H/fpQUDkqAZuA5AwSEJSKiO54j733TGUB/O7ryY7Tjp29Ta3Ol/ZEW 3kVruMAaoywh9rquoImeC8tg+I8f2LqHvLSuIzjHH90VNFLiyuitUD4OJ89qPd4+ qWVzAWzOEYMqUbvIzeUEWgn16HYJhztNQMdTUFc4e/YSiAUICDNee8AEZcrFMrUW VCWJQmQoyUFCWCEPdj+aMA+ih5GbtXgGnjrHcav5tvxSVG7UnlM= -----END CERTIFICATE-----Generated at Thu Apr 18 20:31:25 2024 by rpki-client on console-ams.rpki-client.org