$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: S+c+EenwYUSxI1rqrUWguh0E0xmhBvP5yKizFQtby58= Subject key identifier: D9:7A:51:35:DB:14:37:A1:F7:14:CC:07:E1:6D:5F:77:25:F3:FF:B7 Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 0633A76CF285BE75EC2FE18624B7D2419B91C427 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 02AD Signing time: Mon 13 May 2024 07:20:35 +0000 Manifest this update: Mon 13 May 2024 07:15:35 +0000 Manifest next update: Thu 16 May 2024 12:43:35 +0000 Files and hashes: 1: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: L1ch+psbKJG8GIPrtyy05oIZfmdnBgOUslWZWvQfcJs=) 2: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: c3utuI2CLkkw3BaE/1tvYgBMap1lWhlLuLsEo7UFfSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 May 2024 12:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:33:a7:6c:f2:85:be:75:ec:2f:e1:86:24:b7:d2:41:9b:91:c4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: May 13 07:15:35 2024 GMT Not After : May 16 12:43:35 2024 GMT Subject: CN=D97A5135DB1437A1F714CC07E16D5F7725F3FFB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:68:ad:86:5c:42:d8:b0:4d:83:55:56:37:3d: 19:50:cb:05:a1:27:ec:37:95:07:1b:96:ad:c2:9f: 40:8c:55:87:87:bd:3a:1e:1f:90:ad:1f:98:0f:fc: d0:6a:37:71:42:0f:df:4a:12:7e:98:c7:82:d8:a5: 8f:6a:84:1f:b5:9a:f5:3f:98:46:21:6e:a9:a1:86: 25:dd:06:75:00:e1:9b:94:d2:4f:bd:2f:a7:54:1c: 56:c2:73:ae:20:fd:0b:8a:37:29:e1:e4:02:22:f6: a4:8a:05:02:72:91:d0:1e:b3:6a:ef:51:82:74:cc: 97:fa:ac:18:2f:51:fa:1a:17:b2:cb:b2:7b:c8:9a: 60:52:82:1d:d9:99:3e:c9:78:e3:ef:51:00:75:01: 7f:94:b4:24:c2:14:a1:84:91:81:4e:23:4d:85:82: 03:e3:14:96:f7:bc:45:9a:9c:25:c4:52:ae:86:d1: a5:e1:17:e9:2a:de:59:f3:cb:1f:82:d8:63:5a:50: 6d:a5:7c:5b:7e:a5:2d:38:33:c7:04:14:64:a0:97: 01:94:ec:97:be:b0:3d:fb:31:5e:02:83:9c:28:88: a6:dc:2d:a5:1d:d7:b6:3c:f2:bd:85:7b:93:d4:c3: 12:02:b7:8b:d8:c9:ac:bc:1d:24:b0:77:3a:9d:d3: 4d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7A:51:35:DB:14:37:A1:F7:14:CC:07:E1:6D:5F:77:25:F3:FF:B7 X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0e:40:9d:00:44:2e:03:d6:3b:83:77:d5:98:d2:70:56:5c: ac:38:6c:3d:26:59:ee:29:ae:a3:1c:7c:2e:50:7d:26:e0:5a: 52:56:50:ec:92:81:b3:73:b4:cb:62:4a:6e:77:8c:ad:85:0a: 4e:cf:c3:7e:de:a5:3c:09:6c:46:49:a0:ad:1c:cc:b1:0a:cd: f4:3f:0b:13:5b:c6:b9:6f:f1:65:70:03:0a:6a:92:b2:3f:44: c9:03:b1:1c:81:26:21:f1:d5:fe:ab:95:49:13:13:43:de:4f: 7a:58:6a:a5:02:a5:9b:76:bc:03:05:c0:00:7a:32:ba:89:b9: 45:66:f3:d2:d0:96:36:5c:25:44:04:ab:3f:52:ce:c1:c7:fa: aa:9d:69:84:8e:42:65:b4:c7:08:e2:68:e0:ed:8f:8b:b1:c7: d6:92:2b:79:ea:7a:2d:53:83:7d:db:75:36:eb:77:21:ac:b4: a8:c1:b1:5e:d2:a8:e1:16:67:10:ca:56:a9:6f:cb:43:00:d1: b8:59:1d:1e:f7:2e:b5:18:52:1c:ec:e1:22:ea:1e:02:ec:34: 3a:f6:33:28:fc:32:8a:12:69:5d:c5:c9:62:92:67:4d:1c:32: 7f:31:95:b7:57:9a:52:1c:83:d6:a5:76:22:a4:e9:bf:9c:e9: 3f:7a:e8:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBjOnbPKFvnXsL+GGJLfSQZuRxCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNDA1MTMwNzE1MzVaFw0yNDA1MTYxMjQzMzVaMDMxMTAvBgNV BAMTKEQ5N0E1MTM1REIxNDM3QTFGNzE0Q0MwN0UxNkQ1Rjc3MjVGM0ZGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIaK2GXELYsE2DVVY3PRlQywWh J+w3lQcblq3Cn0CMVYeHvToeH5CtH5gP/NBqN3FCD99KEn6Yx4LYpY9qhB+1mvU/ mEYhbqmhhiXdBnUA4ZuU0k+9L6dUHFbCc64g/QuKNynh5AIi9qSKBQJykdAes2rv UYJ0zJf6rBgvUfoaF7LLsnvImmBSgh3ZmT7JeOPvUQB1AX+UtCTCFKGEkYFOI02F ggPjFJb3vEWanCXEUq6G0aXhF+kq3lnzyx+C2GNaUG2lfFt+pS04M8cEFGSglwGU 7Je+sD37MV4Cg5woiKbcLaUd17Y88r2Fe5PUwxICt4vYyay8HSSwdzqd001xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2XpRNdsUN6H3FMwH4W1fdyXz/7cwHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgOQJ0ARC4D1juDd9WY0nBWXKw4bD0mWe4p rqMcfC5QfSbgWlJWUOySgbNztMtiSm53jK2FCk7Pw37epTwJbEZJoK0czLEKzfQ/ CxNbxrlv8WVwAwpqkrI/RMkDsRyBJiHx1f6rlUkTE0PeT3pYaqUCpZt2vAMFwAB6 MrqJuUVm89LQljZcJUQEqz9SzsHH+qqdaYSOQmW0xwjiaODtj4uxx9aSK3nqei1T g33bdTbrdyGstKjBsV7SqOEWZxDKVqlvy0MA0bhZHR73LrUYUhzs4SLqHgLsNDr2 Myj8MooSaV3FyWKSZ00cMn8xlbdXmlIcg9aldiKk6b+c6T966Jk= -----END CERTIFICATE-----Generated at Mon May 13 12:05:29 2024 by rpki-client on console-ams.rpki-client.org