$ rpki-client -vvf repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft File: E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft (raw, json) Hash identifier: YvVEeQL2JmRcJZKoE9bcgYuD2zJUriCKmqsRbcXa+bo= Subject key identifier: 30:87:F9:E4:26:A1:DF:AC:27:B4:E2:A1:55:2D:14:F0:40:1E:30:18 Authority key identifier: E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B Certificate issuer: /CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Certificate serial: 576D9A6224E2F1E7553AF31E03E3B68861B3888D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft Manifest number: 023B Signing time: Mon 27 May 2024 16:00:32 +0000 Manifest this update: Mon 27 May 2024 15:55:32 +0000 Manifest next update: Fri 31 May 2024 03:47:32 +0000 Files and hashes: 1: E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl (hash: CtIbml0oSLVf62xpj7CeaCBv3RFPtXTsULV+Vc3Orks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 23:45:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6d:9a:62:24:e2:f1:e7:55:3a:f3:1e:03:e3:b6:88:61:b3:88:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8DA87F34A550D0047EEC039A20C8441F066EC5B Validity Not Before: May 27 15:55:32 2024 GMT Not After : May 31 03:47:32 2024 GMT Subject: CN=3087F9E426A1DFAC27B4E2A1552D14F0401E3018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:f8:8e:3c:56:06:77:aa:5f:a7:b0:4a:87: b1:25:40:c8:db:6b:21:a3:80:90:06:09:43:93:7a: ac:a0:06:06:48:69:d3:69:b6:aa:1f:e9:af:2e:87: a9:b3:8e:b5:ed:6e:71:c0:e8:81:64:7f:fa:d0:a6: 27:cf:4a:05:25:98:54:44:d4:59:90:f2:ac:48:63: a7:55:a9:fd:8c:ef:94:9d:db:71:94:50:34:1a:24: a8:d8:7d:d6:d9:10:10:8e:78:90:20:12:89:ca:b6: 41:84:a0:02:bd:54:c4:51:ad:d7:da:a1:0e:23:ff: 94:da:58:82:71:0f:8e:c6:33:13:ba:ea:40:c3:69: c9:91:0f:f2:54:92:82:4d:a9:f2:e5:8e:46:84:27: 5f:96:1b:ad:4e:23:e6:47:d6:dd:0b:46:cf:7d:b6: 4c:75:85:25:04:3b:14:f4:0b:c4:3b:c7:a2:1e:41: 27:48:89:9a:5e:b9:2a:b2:25:26:51:57:db:c9:88: ed:a3:fb:95:45:0c:fc:db:73:9b:3a:2d:aa:e5:01: 7c:b8:c2:f6:ef:c9:72:d2:f8:77:ae:45:b7:a3:ed: 2a:f6:08:84:94:89:fa:f4:89:dc:99:17:b0:83:b4: ec:45:66:70:29:19:7c:ae:e5:b1:05:c8:1c:85:e6: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:87:F9:E4:26:A1:DF:AC:27:B4:E2:A1:55:2D:14:F0:40:1E:30:18 X509v3 Authority Key Identifier: keyid:E8:DA:87:F3:4A:55:0D:00:47:EE:C0:39:A2:0C:84:41:F0:66:EC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E8DA87F34A550D0047EEC039A20C8441F066EC5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214676cd-de39-468a-ad25-675e1b910fac/0/E8DA87F34A550D0047EEC039A20C8441F066EC5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6a:d8:6a:85:b4:d9:f9:78:e4:bf:6e:8c:97:25:16:85:dd: 64:6a:dc:bd:08:1d:c3:86:7f:c4:e1:b2:0c:54:ac:c1:97:1b: f8:3e:07:98:db:bb:44:64:c4:d0:c9:dc:fb:64:2e:41:d8:ff: cf:85:48:40:f3:6b:cc:49:db:0d:e9:c3:8f:5f:99:0b:1a:f9: 9a:be:fb:fb:c7:0d:17:69:20:91:0a:e7:d8:47:5a:d6:5f:36: 77:1e:f0:cf:1a:f1:a9:4b:ce:41:d9:8f:57:75:b1:dd:ed:bc: 97:43:21:9b:fb:91:7c:c3:31:c4:3b:0e:39:53:00:a4:cb:a0: bf:d4:aa:65:98:f6:67:76:21:d6:5d:9f:84:a9:64:4a:be:0d: 5f:62:8c:c9:a2:9e:0f:16:da:74:1f:f7:41:85:d2:30:d7:a5: ca:14:9d:b6:94:81:78:e8:1c:1e:d1:f1:2e:9b:bc:6c:53:86: 26:df:ce:6a:cb:97:6d:d7:76:2e:89:34:ad:2a:05:5c:fe:07: e3:ef:6d:62:1d:94:30:6b:bf:99:17:21:01:37:32:96:10:6f: 3d:de:a8:72:75:b9:04:ae:21:c0:a9:14:83:cb:e3:a1:c3:b4: 16:c6:c4:3f:f6:97:bf:d8:a8:5a:b4:bf:67:79:2a:f0:0a:cf: a9:64:5a:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV22aYiTi8edVOvMeA+O2iGGziI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFG MDY2RUM1QjAeFw0yNDA1MjcxNTU1MzJaFw0yNDA1MzEwMzQ3MzJaMDMxMTAvBgNV BAMTKDMwODdGOUU0MjZBMURGQUMyN0I0RTJBMTU1MkQxNEYwNDAxRTMwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdP/iOPFYGd6pfp7BKh7ElQMjb ayGjgJAGCUOTeqygBgZIadNptqof6a8uh6mzjrXtbnHA6IFkf/rQpifPSgUlmFRE 1FmQ8qxIY6dVqf2M75Sd23GUUDQaJKjYfdbZEBCOeJAgEonKtkGEoAK9VMRRrdfa oQ4j/5TaWIJxD47GMxO66kDDacmRD/JUkoJNqfLljkaEJ1+WG61OI+ZH1t0LRs99 tkx1hSUEOxT0C8Q7x6IeQSdIiZpeuSqyJSZRV9vJiO2j+5VFDPzbc5s6LarlAXy4 wvbvyXLS+HeuRbej7Sr2CISUifr0idyZF7CDtOxFZnApGXyu5bEFyByF5pcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMIf55Cah36wntOKhVS0U8EAeMBgwHwYDVR0j BBgwFoAU6NqH80pVDQBH7sA5ogyEQfBm7FswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ2NzZjZC1kZTM5LTQ2OGEtYWQyNS02NzVlMWI5MTBmYWMvMC9FOERBODdGMzRB NTUwRDAwNDdFRUMwMzlBMjBDODQ0MUYwNjZFQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0NDFGMDY2 RUM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0Njc2Y2QtZGUzOS00NjhhLWFk MjUtNjc1ZTFiOTEwZmFjLzAvRThEQTg3RjM0QTU1MEQwMDQ3RUVDMDM5QTIwQzg0 NDFGMDY2RUM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhq2GqFtNn5eOS/boyXJRaF3WRq3L0IHcOG f8ThsgxUrMGXG/g+B5jbu0RkxNDJ3PtkLkHY/8+FSEDza8xJ2w3pw49fmQsa+Zq+ +/vHDRdpIJEK59hHWtZfNnce8M8a8alLzkHZj1d1sd3tvJdDIZv7kXzDMcQ7DjlT AKTLoL/UqmWY9md2IdZdn4SpZEq+DV9ijMming8W2nQf90GF0jDXpcoUnbaUgXjo HB7R8S6bvGxThibfzmrLl23Xdi6JNK0qBVz+B+PvbWIdlDBrv5kXIQE3MpYQbz3e qHJ1uQSuIcCpFIPL46HDtBbGxD/2l7/YqFq0v2d5KvAKz6lkWig= -----END CERTIFICATE-----Generated at Mon May 27 19:01:03 2024 by rpki-client on console-ams.rpki-client.org