$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: zRoPFIK1hLFIBqcfLvcr3AiqEktrevOiJy22ML7evRo= Subject key identifier: 83:A7:32:BD:5A:87:E9:1B:28:06:25:5A:59:AC:DA:E6:25:49:51:85 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 7DACC61EBC2AD528EE3327C88BED2C6797E360A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 0430 Signing time: Tue 21 May 2024 09:40:38 +0000 Manifest this update: Tue 21 May 2024 09:35:38 +0000 Manifest next update: Fri 24 May 2024 13:31:38 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: uiQMObwF6vIUxAnIdiKGu3H1g9aC/C2kjzfTvuMbmu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 13:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ac:c6:1e:bc:2a:d5:28:ee:33:27:c8:8b:ed:2c:67:97:e3:60:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: May 21 09:35:38 2024 GMT Not After : May 24 13:31:38 2024 GMT Subject: CN=83A732BD5A87E91B2806255A59ACDAE625495185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:90:03:35:c2:ae:0f:77:ae:91:2f:f9:08: 70:26:67:c8:07:5e:fe:e8:28:a5:b4:c2:61:c2:2d: 7a:db:ee:de:5f:8b:2f:05:2c:1f:49:fc:2c:ff:9a: d0:06:5b:cb:b7:a8:ea:c0:62:83:ea:f1:f9:7c:82: d1:89:5b:47:74:15:08:31:2d:fc:eb:03:fb:a9:cf: ad:ec:71:e2:6f:14:21:79:25:f9:03:8c:31:91:2a: d9:f0:3f:09:81:28:40:c8:f3:41:f4:11:26:6f:97: d3:1e:f0:6a:4f:a5:6d:59:f2:8a:c7:65:f5:33:f3: 07:95:be:4a:57:94:f0:4e:47:46:69:c5:f7:d4:51: 65:41:99:78:75:7f:4b:f5:3e:ac:2e:ea:47:b2:95: 4e:ba:0b:4f:a9:e0:34:84:93:91:04:ed:97:e5:4e: 9d:eb:fd:ef:5e:19:70:de:1d:c9:63:99:f9:00:a9: b3:c7:3d:7c:1c:de:51:bd:fd:20:78:46:50:26:a1: 4a:5c:35:9a:95:69:1f:64:36:f7:24:1c:e3:e8:2c: 61:c1:02:cb:49:4d:0b:6e:6d:1b:a2:40:32:91:16: 3a:30:76:ed:b7:96:79:6d:ad:c1:5a:4a:c0:87:1d: d7:65:e7:8a:c5:41:db:83:62:be:69:50:5f:ea:46: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A7:32:BD:5A:87:E9:1B:28:06:25:5A:59:AC:DA:E6:25:49:51:85 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0b:fd:17:6c:6a:2d:d0:6c:22:27:23:10:ba:cb:4d:5c:39: 95:bf:40:96:dc:a9:c6:3c:51:c7:06:1a:5e:dd:e1:43:86:0c: 67:ff:2a:c3:4d:00:9c:07:a1:af:88:68:eb:a5:6f:b4:7e:07: c0:fa:f0:1f:bc:89:fb:3f:e1:35:ad:cc:fd:66:9c:be:6f:4a: aa:bd:3b:c9:a3:41:8a:b4:aa:93:34:57:b2:dd:1a:44:42:3b: 04:61:f4:5c:f6:08:7f:7a:b8:37:25:5f:d5:74:1d:32:37:a3: 86:de:e4:93:d5:94:3e:29:fb:27:44:46:d3:6b:3b:e7:8b:90: ea:4f:d5:62:89:c1:ea:cb:60:4b:25:62:59:43:7b:1f:c2:93: 8e:7b:bf:11:4c:d1:46:03:e1:6a:8e:12:7b:2c:19:46:db:6a: 47:db:97:bc:2b:f7:56:4a:4c:d5:e1:a1:d4:85:d7:d3:3b:30: 67:7d:da:5b:93:88:20:cb:a4:08:a5:4b:24:70:53:62:2e:68: bf:1a:93:d0:7d:ed:b5:ab:c5:97:56:72:ff:4e:ac:9a:60:e6: f8:75:23:d8:94:aa:e7:80:ad:f7:4f:3f:1f:83:f0:b2:e7:95: cc:35:1d:0e:01:69:cf:79:b1:e2:79:0a:6f:21:98:4f:35:f5: 4b:58:57:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfazGHrwq1SjuMyfIi+0sZ5fjYKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNDA1MjEwOTM1MzhaFw0yNDA1MjQxMzMxMzhaMDMxMTAvBgNV BAMTKDgzQTczMkJENUE4N0U5MUIyODA2MjU1QTU5QUNEQUU2MjU0OTUxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3pADNcKuD3eukS/5CHAmZ8gH Xv7oKKW0wmHCLXrb7t5fiy8FLB9J/Cz/mtAGW8u3qOrAYoPq8fl8gtGJW0d0FQgx LfzrA/upz63sceJvFCF5JfkDjDGRKtnwPwmBKEDI80H0ESZvl9Me8GpPpW1Z8orH ZfUz8weVvkpXlPBOR0ZpxffUUWVBmXh1f0v1Pqwu6keylU66C0+p4DSEk5EE7Zfl Tp3r/e9eGXDeHcljmfkAqbPHPXwc3lG9/SB4RlAmoUpcNZqVaR9kNvckHOPoLGHB AstJTQtubRuiQDKRFjowdu23lnltrcFaSsCHHddl54rFQduDYr5pUF/qRpFDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg6cyvVqH6RsoBiVaWaza5iVJUYUwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAL/Rdsai3QbCInIxC6y01cOZW/QJbcqcY8 UccGGl7d4UOGDGf/KsNNAJwHoa+IaOulb7R+B8D68B+8ifs/4TWtzP1mnL5vSqq9 O8mjQYq0qpM0V7LdGkRCOwRh9Fz2CH96uDclX9V0HTI3o4be5JPVlD4p+ydERtNr O+eLkOpP1WKJwerLYEslYllDex/Ck457vxFM0UYD4WqOEnssGUbbakfbl7wr91ZK TNXhodSF19M7MGd92luTiCDLpAilSyRwU2IuaL8ak9B97bWrxZdWcv9OrJpg5vh1 I9iUqueArfdPPx+D8LLnlcw1HQ4Bac95seJ5Cm8hmE819UtYV1s= -----END CERTIFICATE-----Generated at Tue May 21 10:10:37 2024 by rpki-client on console-ams.rpki-client.org