$ rpki-client -vvf repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft File: 00CBB314A3396508984527DC9E3F91DA2A407863.mft (raw, json) Hash identifier: g/BXismEFFW5rw/HB3VlOiTkMpgH7Omb8d2qkwx4hkU= Subject key identifier: 70:8B:6C:E3:F5:ED:0C:FA:3E:FB:50:A3:34:6B:0B:C6:55:C7:0A:AB Authority key identifier: 00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 Certificate issuer: /CN=00CBB314A3396508984527DC9E3F91DA2A407863 Certificate serial: 4688482ADAC3363FD400E2273F0FF0C1D5EA329C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject info access: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft Manifest number: 9A Signing time: Sat 18 May 2024 08:42:00 +0000 Manifest this update: Sat 18 May 2024 08:37:00 +0000 Manifest next update: Tue 21 May 2024 09:27:00 +0000 Files and hashes: 1: 00CBB314A3396508984527DC9E3F91DA2A407863.crl (hash: PvFk4thoAs4tzpsxoJxuunnaBXgJtgVD3bunCt0TUI0=) 2: 3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (hash: jUBG0ihe87NPF0UeSwPcw2ps7geEn49dS5EBW0b09+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 09:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:88:48:2a:da:c3:36:3f:d4:00:e2:27:3f:0f:f0:c1:d5:ea:32:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00CBB314A3396508984527DC9E3F91DA2A407863 Validity Not Before: May 18 08:37:00 2024 GMT Not After : May 21 09:27:00 2024 GMT Subject: CN=708B6CE3F5ED0CFA3EFB50A3346B0BC655C70AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1b:d8:06:55:98:d0:05:f7:fe:4e:e9:11:33: a8:73:f5:de:be:a1:fc:08:af:86:69:9f:fa:78:4e: 3d:26:b3:3d:f3:20:80:4e:91:2b:f1:9d:91:07:dd: 87:f2:9c:4c:51:32:bc:f8:47:5e:1c:6b:99:18:8b: 0a:d2:fe:7f:d1:07:69:f8:f3:ea:87:8f:4f:a2:0f: a3:9e:e7:6b:ed:28:5e:cd:d0:5d:bc:1a:81:c9:d1: c9:c0:2d:5b:53:dd:64:9e:b0:f7:7a:b7:55:ae:b6: 07:57:e3:58:3b:e0:f2:83:38:52:cd:4f:50:7b:ce: 4a:01:9c:0e:9e:7e:8c:51:71:23:87:6d:fc:56:7c: 75:07:a4:60:9f:5d:cc:3e:7c:6d:b0:ef:7c:cf:0e: e9:3a:32:73:ee:73:02:55:5f:09:b7:e8:42:47:2a: 66:b6:a9:a7:9c:4a:f8:58:a8:9d:68:d0:84:a2:9a: 87:d1:31:16:bb:b9:aa:3d:44:58:13:61:d2:7d:76: 50:e9:e0:5f:a2:99:a8:b6:3b:53:6a:ef:9c:44:c0: 10:c2:58:c5:77:6c:45:dd:0b:a6:d9:3c:d4:ea:8f: 37:e9:53:36:d0:31:2a:f8:4b:93:6e:f6:98:06:e4: 98:04:2f:93:44:e5:33:db:08:e0:a4:d7:69:cd:9c: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8B:6C:E3:F5:ED:0C:FA:3E:FB:50:A3:34:6B:0B:C6:55:C7:0A:AB X509v3 Authority Key Identifier: keyid:00:CB:B3:14:A3:39:65:08:98:45:27:DC:9E:3F:91:DA:2A:40:78:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00CBB314A3396508984527DC9E3F91DA2A407863.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/00CBB314A3396508984527DC9E3F91DA2A407863.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:77:cc:f0:40:ae:9e:81:10:ea:49:e2:96:38:ce:cc:35:f4: 28:e7:d6:c1:70:df:b6:18:17:64:fa:1f:51:17:8d:ef:d8:4b: 12:fc:b5:76:ee:64:14:1f:94:37:1a:8b:99:4d:94:3b:c2:f0: b6:06:58:57:7d:ef:98:49:5a:33:2e:b4:f8:f7:ed:ed:89:60: a1:72:46:72:cb:32:de:79:2c:ce:79:8c:cd:be:23:43:54:32: 62:59:a1:83:b1:ef:a9:03:72:6c:91:57:72:c2:13:a5:bc:9e: 40:41:fe:ad:28:c0:34:94:dc:61:a3:af:e0:a5:28:9c:bf:82: ee:ba:1e:74:f9:96:6d:cf:24:97:ff:4e:e7:52:24:67:61:5a: 1b:2e:8c:5b:fc:f7:82:21:ae:0f:14:f2:fe:4a:e1:37:09:96: 8c:7b:af:02:36:08:6a:e8:89:41:29:17:eb:4a:17:18:3c:9a: 7b:6c:79:08:0a:50:b5:a1:80:89:20:1c:6c:dc:b9:84:3d:77: 38:da:b5:22:00:dc:f9:26:34:b7:63:11:3f:a4:8b:87:6c:79: 5c:35:74:ab:4e:0d:6b:37:78:3e:8d:4f:87:a7:72:f2:15:b0: 13:ba:b6:36:37:48:1d:87:7f:f8:fe:b1:46:70:55:c8:b1:c4: 0d:ff:ff:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURohIKtrDNj/UAOInPw/wwdXqMpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEy QTQwNzg2MzAeFw0yNDA1MTgwODM3MDBaFw0yNDA1MjEwOTI3MDBaMDMxMTAvBgNV BAMTKDcwOEI2Q0UzRjVFRDBDRkEzRUZCNTBBMzM0NkIwQkM2NTVDNzBBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdG9gGVZjQBff+TukRM6hz9d6+ ofwIr4Zpn/p4Tj0msz3zIIBOkSvxnZEH3YfynExRMrz4R14ca5kYiwrS/n/RB2n4 8+qHj0+iD6Oe52vtKF7N0F28GoHJ0cnALVtT3WSesPd6t1WutgdX41g74PKDOFLN T1B7zkoBnA6efoxRcSOHbfxWfHUHpGCfXcw+fG2w73zPDuk6MnPucwJVXwm36EJH Kma2qaecSvhYqJ1o0ISimofRMRa7uao9RFgTYdJ9dlDp4F+imai2O1Nq75xEwBDC WMV3bEXdC6bZPNTqjzfpUzbQMSr4S5Nu9pgG5JgEL5NE5TPbCOCk12nNnPZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcIts4/XtDPo++1CjNGsLxlXHCqswHwYDVR0j BBgwFoAUAMuzFKM5ZQiYRSfcnj+R2ipAeGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzRkYzVlMS0xZDU1LTQ5ZDItOTNkNC01ZDk4ZWFkNzc5ZWQvMC8wMENCQjMxNEEz Mzk2NTA4OTg0NTI3REM5RTNGOTFEQTJBNDA3ODYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkxREEyQTQw Nzg2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTc0ZGM1ZTEtMWQ1NS00OWQyLTkz ZDQtNWQ5OGVhZDc3OWVkLzAvMDBDQkIzMTRBMzM5NjUwODk4NDUyN0RDOUUzRjkx REEyQTQwNzg2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKp3zPBArp6BEOpJ4pY4zsw19Cjn1sFw37YY F2T6H1EXje/YSxL8tXbuZBQflDcai5lNlDvC8LYGWFd975hJWjMutPj37e2JYKFy RnLLMt55LM55jM2+I0NUMmJZoYOx76kDcmyRV3LCE6W8nkBB/q0owDSU3GGjr+Cl KJy/gu66HnT5lm3PJJf/TudSJGdhWhsujFv894Ihrg8U8v5K4TcJlox7rwI2CGro iUEpF+tKFxg8mntseQgKULWhgIkgHGzcuYQ9dzjatSIA3PkmNLdjET+ki4dseVw1 dKtODWs3eD6NT4encvIVsBO6tjY3SB2Hf/j+sUZwVcixxA3//40= -----END CERTIFICATE-----Generated at Sat May 18 09:08:41 2024 by rpki-client on console-ams.rpki-client.org