$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: 2ABk83hob68fhNver2bqIWddcSVlFxbECtSy2NSiXFg= Subject key identifier: 4B:34:6F:23:B0:51:52:69:53:FE:76:68:E4:CF:D7:36:B2:73:5E:86 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 326FC0355B2F14391E66FABD40E5DC3D5D1A08F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 3B Signing time: Sun 19 May 2024 15:31:14 +0000 Manifest this update: Sun 19 May 2024 15:26:14 +0000 Manifest next update: Wed 22 May 2024 19:28:14 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: a37mFLOEY+Jx00IdRYRGp26S/w8UcPq4LhA5UXfZif4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:6f:c0:35:5b:2f:14:39:1e:66:fa:bd:40:e5:dc:3d:5d:1a:08:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: May 19 15:26:14 2024 GMT Not After : May 22 19:28:14 2024 GMT Subject: CN=4B346F23B051526953FE7668E4CFD736B2735E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:70:a2:13:a9:5f:ab:6c:17:69:7e:44:fa: fe:f3:5a:a4:d8:8a:20:2d:32:2e:f7:c4:c5:95:83: 1a:bc:e7:85:e4:c4:e6:6f:81:6e:9d:fe:9d:9e:87: 92:70:df:61:30:9b:60:b3:58:02:ec:21:e9:ef:a7: 0d:42:c4:1a:14:50:25:19:4a:55:37:c8:48:d7:98: e9:55:0a:3f:15:af:9d:b1:54:b6:2d:ba:ee:63:ce: ca:d2:13:9c:9b:4c:0d:ed:21:49:13:40:8a:19:0a: 66:85:3f:99:8e:9d:35:fd:44:e5:fc:e8:60:7d:98: c8:a3:f5:f2:5b:79:0b:25:d1:da:3d:0b:b0:6d:61: 0d:6b:9c:49:92:45:16:61:10:a8:a5:65:41:62:22: a2:7d:ff:f0:e9:85:92:1c:32:48:ef:6c:76:c9:c1: 0e:48:5f:82:6d:aa:40:2d:65:1d:16:01:5b:8c:b4: 25:5d:3f:8c:8e:7c:87:e3:30:79:d0:f2:5b:b0:2b: 9d:f1:a0:ec:94:8e:51:cf:5e:4a:3d:91:5b:67:05: 3d:16:6d:34:30:24:37:98:e5:96:4c:97:c0:4e:e7: 3b:b3:b9:76:16:b1:78:5e:ac:7f:6a:d9:47:ca:23: 2a:7c:df:46:47:6c:e5:ba:fb:c1:d1:cf:9f:2f:a0: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:34:6F:23:B0:51:52:69:53:FE:76:68:E4:CF:D7:36:B2:73:5E:86 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:5e:dc:ff:b4:8f:79:3c:9c:0d:95:f5:da:de:7e:03:ff:65: d2:7a:99:f9:fd:32:cf:be:7f:4e:c9:20:77:cc:00:ec:d0:7f: 13:01:7e:68:72:63:b6:34:57:c2:70:fa:ab:95:74:e0:ea:d2: 11:84:08:e3:8d:11:02:68:22:af:cf:6e:42:d0:e0:18:87:4c: 09:69:a9:a3:67:af:c9:6b:2e:00:e2:b3:40:e7:0f:54:26:44: 09:20:7a:b8:02:44:a9:b2:fd:cd:4e:00:a5:bb:97:07:c7:17: 7f:bf:c2:cd:c2:65:69:a0:f7:2e:8a:a4:80:df:04:2a:0a:19: 64:c1:a1:cc:c0:b4:61:1a:1a:b7:82:b2:56:17:d8:e3:02:79: 55:c6:fc:64:a5:20:a7:71:1b:45:2f:64:6e:02:2f:b6:04:6c: 0b:c3:ba:67:23:d1:39:f8:19:df:bf:e6:a6:79:2e:7a:90:ae: 65:b1:5c:79:ed:8e:60:4b:83:fa:c6:73:0d:aa:a4:87:e3:cc: 32:1a:ca:9c:09:f0:f4:c8:ef:a6:03:41:02:15:3e:86:2c:83: b0:f8:8b:2a:7c:b4:2c:01:5d:c6:99:96:a1:79:43:c3:05:3a: 5a:20:61:b3:6c:fa:eb:73:0b:b0:a1:ef:f1:ef:0f:cf:e3:22: 37:2a:fb:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMm/ANVsvFDkeZvq9QOXcPV0aCPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNDA1MTkxNTI2MTRaFw0yNDA1MjIxOTI4MTRaMDMxMTAvBgNV BAMTKDRCMzQ2RjIzQjA1MTUyNjk1M0ZFNzY2OEU0Q0ZENzM2QjI3MzVFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKh3CiE6lfq2wXaX5E+v7zWqTY iiAtMi73xMWVgxq854XkxOZvgW6d/p2eh5Jw32Ewm2CzWALsIenvpw1CxBoUUCUZ SlU3yEjXmOlVCj8Vr52xVLYtuu5jzsrSE5ybTA3tIUkTQIoZCmaFP5mOnTX9ROX8 6GB9mMij9fJbeQsl0do9C7BtYQ1rnEmSRRZhEKilZUFiIqJ9//DphZIcMkjvbHbJ wQ5IX4JtqkAtZR0WAVuMtCVdP4yOfIfjMHnQ8luwK53xoOyUjlHPXko9kVtnBT0W bTQwJDeY5ZZMl8BO5zuzuXYWsXherH9q2UfKIyp830ZHbOW6+8HRz58voLwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSzRvI7BRUmlT/nZo5M/XNrJzXoYwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVe3P+0j3k8nA2V9drefgP/ZdJ6mfn9Ms++ f07JIHfMAOzQfxMBfmhyY7Y0V8Jw+quVdODq0hGECOONEQJoIq/PbkLQ4BiHTAlp qaNnr8lrLgDis0DnD1QmRAkgergCRKmy/c1OAKW7lwfHF3+/ws3CZWmg9y6KpIDf BCoKGWTBoczAtGEaGreCslYX2OMCeVXG/GSlIKdxG0UvZG4CL7YEbAvDumcj0Tn4 Gd+/5qZ5LnqQrmWxXHntjmBLg/rGcw2qpIfjzDIaypwJ8PTI76YDQQIVPoYsg7D4 iyp8tCwBXcaZlqF5Q8MFOlogYbNs+utzC7Ch7/HvD8/jIjcq+9A= -----END CERTIFICATE-----Generated at Sun May 19 17:04:58 2024 by rpki-client on console-ams.rpki-client.org