$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: 3eK5h7ENuevB8Jej7lwcb61ER8enEfjE++2aoVFa0H4= Subject key identifier: 67:6D:4C:D8:E3:F8:41:A5:8A:93:C9:F7:5E:1D:0E:B9:76:48:7F:42 Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 527A87048C69B7CB8BAE06F863860AC89AA74266 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: 53 Signing time: Sun 19 May 2024 02:01:55 +0000 Manifest this update: Sun 19 May 2024 01:56:55 +0000 Manifest next update: Wed 22 May 2024 07:26:55 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: ThyqjYiDaiTtQZDaVhRA+V9VBzeZKDhKJbnJJ3jCLUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7a:87:04:8c:69:b7:cb:8b:ae:06:f8:63:86:0a:c8:9a:a7:42:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: May 19 01:56:55 2024 GMT Not After : May 22 07:26:55 2024 GMT Subject: CN=676D4CD8E3F841A58A93C9F75E1D0EB976487F42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:a5:95:04:80:79:d5:a5:9e:31:b8:9b:98: 06:f8:b7:ee:c4:e2:d7:5d:df:c8:46:cb:62:d1:d1: 2c:ba:dc:4e:c1:61:00:c4:47:5d:d1:59:85:87:76: 98:60:4a:26:6b:2d:1c:d7:eb:52:14:83:ed:73:13: cb:ca:8a:8d:92:14:a0:b6:d6:c4:42:e2:2e:ca:02: 36:a8:25:e4:3a:4a:31:58:15:85:b9:d4:93:eb:37: f5:cd:74:40:67:a8:5b:f5:38:8d:2e:06:09:2f:f6: ae:1e:85:d3:63:b5:10:6c:b3:0a:da:52:d5:4c:c2: 7c:f2:8a:b5:6e:3c:d5:f0:0e:6e:a4:8c:63:ef:9d: a2:34:c8:f6:52:4f:b0:45:fd:5c:b4:18:75:c5:53: f1:de:ad:e7:fc:ea:76:0d:52:18:11:44:54:c4:02: c3:93:21:cc:cc:14:63:74:39:d6:63:54:a3:32:e8: 49:2c:2e:55:52:55:86:33:be:0a:df:0f:b2:3f:22: e1:ad:b7:04:9b:b0:aa:c2:f0:f5:ee:24:5a:ee:b9: 7e:b7:38:4a:d3:6f:6e:12:f5:ea:b4:81:86:ab:70: 88:c9:4b:2b:64:51:d2:cd:82:0f:1b:7f:48:12:42: f9:d6:37:00:14:8b:56:bb:86:53:b5:70:df:ea:02: cd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6D:4C:D8:E3:F8:41:A5:8A:93:C9:F7:5E:1D:0E:B9:76:48:7F:42 X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:91:2f:b3:89:19:31:20:f1:ba:fe:e5:99:c1:b8:8c:6d:90: 75:a0:5d:7d:ef:f5:4a:b4:7f:05:d3:90:fe:2a:56:50:3f:3a: 95:2a:49:4c:ec:f1:34:f4:c2:dd:5f:45:17:6f:96:a5:fd:01: 40:21:ac:90:ba:b3:bd:7d:b3:a7:35:c4:85:b7:5d:50:55:5c: 0f:0d:87:d3:f4:45:5b:13:f9:35:2c:52:b8:d1:2a:b2:21:00: 8c:6f:b1:19:86:50:63:3c:b6:0b:44:f6:1a:6f:07:fd:a4:41: 7c:41:6b:a7:a4:ac:76:f5:8e:7a:00:ee:a9:c8:b1:95:ef:35: 0c:2f:df:97:8a:ad:8f:16:fb:a3:59:80:0d:02:88:ab:73:ba: 9a:65:d4:b3:3a:0e:be:69:3c:dd:d1:2e:c9:48:d1:0a:58:ba: 58:d9:15:2c:07:4c:05:7c:d8:04:ca:8a:85:23:62:a1:e2:53: d0:e5:2d:a7:df:2a:87:3b:74:d7:7b:59:86:f7:0c:74:b4:41: ad:f8:b2:78:57:26:2c:34:80:9a:41:fe:92:67:24:46:ad:40: ec:f4:c7:91:60:2e:a5:a2:c2:e0:96:df:6b:99:0e:28:8c:ba: 06:86:11:16:ac:10:1c:35:1e:d7:43:f1:16:79:7a:85:fb:5a: ef:c2:e1:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUnqHBIxpt8uLrgb4Y4YKyJqnQmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNDA1MTkwMTU2NTVaFw0yNDA1MjIwNzI2NTVaMDMxMTAvBgNV BAMTKDY3NkQ0Q0Q4RTNGODQxQTU4QTkzQzlGNzVFMUQwRUI5NzY0ODdGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbBaWVBIB51aWeMbibmAb4t+7E 4tdd38hGy2LR0Sy63E7BYQDER13RWYWHdphgSiZrLRzX61IUg+1zE8vKio2SFKC2 1sRC4i7KAjaoJeQ6SjFYFYW51JPrN/XNdEBnqFv1OI0uBgkv9q4ehdNjtRBsswra UtVMwnzyirVuPNXwDm6kjGPvnaI0yPZST7BF/Vy0GHXFU/Heref86nYNUhgRRFTE AsOTIczMFGN0OdZjVKMy6EksLlVSVYYzvgrfD7I/IuGttwSbsKrC8PXuJFruuX63 OErTb24S9eq0gYarcIjJSytkUdLNgg8bf0gSQvnWNwAUi1a7hlO1cN/qAs1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ21M2OP4QaWKk8n3Xh0OuXZIf0IwHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmRL7OJGTEg8br+5ZnBuIxtkHWgXX3v9Uq0 fwXTkP4qVlA/OpUqSUzs8TT0wt1fRRdvlqX9AUAhrJC6s719s6c1xIW3XVBVXA8N h9P0RVsT+TUsUrjRKrIhAIxvsRmGUGM8tgtE9hpvB/2kQXxBa6ekrHb1jnoA7qnI sZXvNQwv35eKrY8W+6NZgA0CiKtzuppl1LM6Dr5pPN3RLslI0QpYuljZFSwHTAV8 2ATKioUjYqHiU9DlLaffKoc7dNd7WYb3DHS0Qa34snhXJiw0gJpB/pJnJEatQOz0 x5FgLqWiwuCW32uZDiiMugaGERasEBw1HtdD8RZ5eoX7Wu/C4SM= -----END CERTIFICATE-----Generated at Sun May 19 02:39:07 2024 by rpki-client on console-fra.rpki-client.org