$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: jBUm7aWVEcCPvk7DgtZ9z7pgxABAl7FjT5xm2nSKQrU= Subject key identifier: B3:1E:CE:4C:5F:7D:32:2F:EC:1D:95:2B:0A:C5:D0:BD:A0:FD:88:8C Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 6AB58D28E2523DA949C34356BF01AAC980C1FC81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 0133 Signing time: Sat 18 May 2024 13:41:09 +0000 Manifest this update: Sat 18 May 2024 13:36:09 +0000 Manifest next update: Tue 21 May 2024 18:33:09 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: TYSa6veffg26spMr4fUjUvoWaH78e1spq2wsDReAwCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b5:8d:28:e2:52:3d:a9:49:c3:43:56:bf:01:aa:c9:80:c1:fc:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: May 18 13:36:09 2024 GMT Not After : May 21 18:33:09 2024 GMT Subject: CN=B31ECE4C5F7D322FEC1D952B0AC5D0BDA0FD888C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:02:9f:bf:b6:db:3a:4b:53:cb:49:02:6b: 63:d6:c1:f8:72:fc:6c:92:7a:95:27:1b:c7:8f:45: 6e:19:e2:97:b3:d6:91:2a:ee:f0:36:bf:b0:27:ea: 3c:c0:48:86:93:4b:a3:86:4a:14:e8:f3:7f:37:8e: 89:38:ff:25:9b:8a:ba:05:56:a4:2f:fe:25:fc:86: 87:17:66:ee:22:37:82:1a:89:f6:03:da:cf:72:7a: 52:d7:31:1f:ee:44:fd:36:98:fb:23:17:03:50:39: 1a:fb:89:a7:14:5c:cf:b5:47:af:55:36:a1:36:a3: 45:83:0c:ab:34:a1:3e:ee:26:3f:ba:a4:83:00:16: 74:6b:e3:ca:ec:e7:90:90:ac:36:3a:f5:6e:37:7c: cf:f5:a3:82:7e:d6:a4:9f:75:ba:21:86:79:90:86: 23:65:ad:02:92:23:c1:74:a6:c7:e1:8e:c4:d8:d3: ba:1e:41:38:c9:3e:75:8d:02:86:d5:f4:7a:9b:94: 2e:4c:6a:ee:22:63:18:2a:3c:49:44:e0:6a:d2:9c: df:ba:a7:6d:61:da:23:9b:48:f0:0e:fe:5e:63:71: 31:5e:5a:e6:c1:0b:9b:4e:d3:ce:1b:6a:76:b4:c2: 1a:3a:d3:e8:90:46:66:e2:2a:8b:5e:60:99:f7:e6: a9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1E:CE:4C:5F:7D:32:2F:EC:1D:95:2B:0A:C5:D0:BD:A0:FD:88:8C X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:ab:29:49:5d:b1:8b:91:10:d6:90:52:3e:04:6f:d6:26:1f: d4:a5:81:b9:63:e7:3c:3f:d1:25:cb:79:9c:1b:c2:b1:3d:bf: e5:81:f4:3e:45:43:c8:de:94:a4:8c:06:d1:38:67:e4:d5:b7: e3:8b:1b:3f:53:f0:27:c8:80:6b:29:4b:cb:38:b3:67:39:8d: 28:c0:52:12:9c:98:26:c2:04:46:61:de:3c:f7:d7:65:4b:e2: 90:fa:75:43:12:46:9f:97:cc:6a:60:5c:9d:55:7d:cd:35:72: fb:84:98:17:59:17:d8:a7:81:4c:cd:9b:64:5a:fb:d1:df:07: 1f:44:74:b3:33:68:5e:a0:7f:52:81:1d:9c:89:ef:9a:8b:97: a4:86:ca:b0:88:d7:f6:c4:cb:f1:8a:79:ad:88:27:2c:fd:bd: de:d0:aa:c3:b5:83:ea:b7:a1:95:e7:66:df:dd:ef:6f:ba:0b: bd:a5:7f:69:51:9f:f1:25:94:6f:44:51:bd:75:37:26:7d:fb: 57:dc:28:62:de:23:64:d9:d7:8f:c4:8a:1c:94:53:fd:7e:bb: e3:34:8f:d0:21:47:f6:86:8f:d4:e0:8b:bb:f2:65:77:a1:2d: f5:3f:d6:56:5e:50:1d:b3:ad:44:66:1c:ef:60:97:32:c8:69: 06:d6:45:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarWNKOJSPalJw0NWvwGqyYDB/IEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNDA1MTgxMzM2MDlaFw0yNDA1MjExODMzMDlaMDMxMTAvBgNV BAMTKEIzMUVDRTRDNUY3RDMyMkZFQzFEOTUyQjBBQzVEMEJEQTBGRDg4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmywKfv7bbOktTy0kCa2PWwfhy /GySepUnG8ePRW4Z4pez1pEq7vA2v7An6jzASIaTS6OGShTo8383jok4/yWbiroF VqQv/iX8hocXZu4iN4IaifYD2s9yelLXMR/uRP02mPsjFwNQORr7iacUXM+1R69V NqE2o0WDDKs0oT7uJj+6pIMAFnRr48rs55CQrDY69W43fM/1o4J+1qSfdbohhnmQ hiNlrQKSI8F0psfhjsTY07oeQTjJPnWNAobV9HqblC5Mau4iYxgqPElE4GrSnN+6 p21h2iObSPAO/l5jcTFeWubBC5tO084bana0who60+iQRmbiKoteYJn35qklAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsx7OTF99Mi/sHZUrCsXQvaD9iIwwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGrKUldsYuRENaQUj4Eb9YmH9Slgblj5zw/ 0SXLeZwbwrE9v+WB9D5FQ8jelKSMBtE4Z+TVt+OLGz9T8CfIgGspS8s4s2c5jSjA UhKcmCbCBEZh3jz312VL4pD6dUMSRp+XzGpgXJ1Vfc01cvuEmBdZF9ingUzNm2Ra +9HfBx9EdLMzaF6gf1KBHZyJ75qLl6SGyrCI1/bEy/GKea2IJyz9vd7QqsO1g+q3 oZXnZt/d72+6C72lf2lRn/EllG9EUb11NyZ9+1fcKGLeI2TZ14/EihyUU/1+u+M0 j9AhR/aGj9Tgi7vyZXehLfU/1lZeUB2zrURmHO9glzLIaQbWRZs= -----END CERTIFICATE-----Generated at Sat May 18 15:25:21 2024 by rpki-client on console-fra.rpki-client.org