$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: fXtXeNrhVlTglfHtN8dzeSYwWjCZ/uQE8CEMYIqiv54= Subject key identifier: E0:0B:B1:A2:89:25:A2:BD:1B:2D:36:90:C7:BF:94:E7:B1:29:3D:C4 Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 74C97490F74B1E627871E30EFBDA4CF344F737EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: 4F Signing time: Fri 17 May 2024 18:00:44 +0000 Manifest this update: Fri 17 May 2024 17:55:44 +0000 Manifest next update: Mon 20 May 2024 20:03:44 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: +gyVuV9yOG9Y2ClGT/F9nONwdA1TzVicqryIdHAmEIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 20:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c9:74:90:f7:4b:1e:62:78:71:e3:0e:fb:da:4c:f3:44:f7:37:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: May 17 17:55:44 2024 GMT Not After : May 20 20:03:44 2024 GMT Subject: CN=E00BB1A28925A2BD1B2D3690C7BF94E7B1293DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:ae:5c:d3:4c:7f:e8:28:05:a4:8f:f0:cc: fc:da:fc:03:91:b8:c3:46:54:1b:2b:cd:4b:17:c4: b1:aa:d0:d1:65:50:48:c8:ba:a8:92:a0:fa:5b:f6: 18:38:d3:11:d9:eb:49:1d:cf:25:d7:6a:36:d4:67: 10:52:da:29:4e:98:55:e4:6c:4c:8b:c5:04:a4:f5: e7:f8:57:ad:c5:53:a3:3c:ae:7f:e7:3e:dd:26:b8: ad:0e:2f:0f:31:84:f6:7a:83:c1:73:22:b1:8b:83: 69:1a:fa:42:11:a3:7b:0e:41:ae:32:08:94:8d:16: 16:37:98:3e:de:84:e4:80:30:35:30:90:c3:73:a0: 5c:dd:fa:a9:f5:2f:49:1c:72:bf:4a:4f:fc:3a:85: 67:2c:a8:94:be:ec:13:d9:cd:39:bb:c2:0a:1c:7b: b5:cc:af:8b:60:d0:d1:b0:ce:85:87:b6:85:aa:91: f6:e5:0c:55:da:a3:37:ac:e0:b6:c0:c6:3d:90:49: aa:cb:6c:ee:10:2c:d5:7e:34:18:3e:ed:b2:b0:78: 73:61:9f:4a:04:cd:58:b6:41:22:63:3b:9d:e8:58: d3:4f:58:f7:11:77:9a:10:74:d1:1a:6a:6c:08:23: 2a:9a:47:67:03:79:5e:d6:be:8f:0b:67:1a:e3:c3: 7a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0B:B1:A2:89:25:A2:BD:1B:2D:36:90:C7:BF:94:E7:B1:29:3D:C4 X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:30:13:7e:9f:98:4c:8d:f2:0d:83:27:bc:e2:2c:cf:a5:b9: 52:bb:89:9b:47:96:ec:90:83:db:d1:5c:55:ac:46:f7:b9:bc: 9b:4e:74:5b:e9:dc:64:cb:03:bc:ea:86:9c:f9:3a:d9:f6:f4: 3c:60:d8:dc:3b:b1:72:00:01:83:f7:b8:8b:a6:3a:75:c8:79: a0:99:c8:42:66:43:a6:68:22:61:6a:3e:9d:c3:61:9a:11:74: dd:cf:9c:5e:0f:b7:53:19:9e:ef:7c:96:5c:14:78:46:6f:38: 7e:aa:47:c3:73:61:c8:0b:14:14:a7:cd:29:48:e9:52:a5:66: e3:2a:58:bd:97:36:5f:f5:8b:21:a7:c8:b7:ca:2a:9d:79:f5: a3:d7:a1:80:35:b6:b2:75:04:39:1d:28:7d:09:f1:2e:18:0b: f5:c0:62:a0:cf:31:d9:b9:8d:92:91:ad:d4:9e:ec:fc:c8:3f: 09:09:ac:17:16:0a:e4:7b:c6:0d:5d:43:8c:40:04:3b:d7:e6: 85:bf:54:40:51:25:c8:2e:e3:42:c6:dd:fe:54:bf:b0:f1:36: 4a:30:0d:16:36:96:88:db:d1:3f:e0:e9:4e:f6:45:b3:54:7b: 77:43:44:c3:1c:b8:26:7f:05:61:c1:f7:96:9f:c8:ed:62:d6: 58:4f:e6:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMl0kPdLHmJ4ceMO+9pM80T3N+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNDA1MTcxNzU1NDRaFw0yNDA1MjAyMDAzNDRaMDMxMTAvBgNV BAMTKEUwMEJCMUEyODkyNUEyQkQxQjJEMzY5MEM3QkY5NEU3QjEyOTNEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8wq5c00x/6CgFpI/wzPza/AOR uMNGVBsrzUsXxLGq0NFlUEjIuqiSoPpb9hg40xHZ60kdzyXXajbUZxBS2ilOmFXk bEyLxQSk9ef4V63FU6M8rn/nPt0muK0OLw8xhPZ6g8FzIrGLg2ka+kIRo3sOQa4y CJSNFhY3mD7ehOSAMDUwkMNzoFzd+qn1L0kccr9KT/w6hWcsqJS+7BPZzTm7wgoc e7XMr4tg0NGwzoWHtoWqkfblDFXaozes4LbAxj2QSarLbO4QLNV+NBg+7bKweHNh n0oEzVi2QSJjO53oWNNPWPcRd5oQdNEaamwIIyqaR2cDeV7Wvo8LZxrjw3r1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Auxooklor0bLTaQx7+U57EpPcQwHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIswE36fmEyN8g2DJ7ziLM+luVK7iZtHluyQ g9vRXFWsRve5vJtOdFvp3GTLA7zqhpz5Otn29Dxg2Nw7sXIAAYP3uIumOnXIeaCZ yEJmQ6ZoImFqPp3DYZoRdN3PnF4Pt1MZnu98llwUeEZvOH6qR8NzYcgLFBSnzSlI 6VKlZuMqWL2XNl/1iyGnyLfKKp159aPXoYA1trJ1BDkdKH0J8S4YC/XAYqDPMdm5 jZKRrdSe7PzIPwkJrBcWCuR7xg1dQ4xABDvX5oW/VEBRJcgu40LG3f5Uv7DxNkow DRY2lojb0T/g6U72RbNUe3dDRMMcuCZ/BWHB95afyO1i1lhP5sM= -----END CERTIFICATE-----Generated at Fri May 17 20:01:48 2024 by rpki-client on console-ams.rpki-client.org