$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: jXZ0p03Y/yQLsVC0mWeHwBb/W6ycbti66wAaCuKekqs= Subject key identifier: 56:C5:A9:DE:B4:9B:7A:16:69:89:CD:6B:91:FE:4D:90:78:4E:E9:82 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 1F7557DB29728737F09E886389036F5B323E1219 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: EA Signing time: Tue 28 May 2024 05:40:37 +0000 Manifest this update: Tue 28 May 2024 05:35:37 +0000 Manifest next update: Fri 31 May 2024 08:32:37 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: 5pDaUHEGn+DCRLr77UBmhXrYFlzFFBEHmk7C0VDzgkc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 08:32:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:75:57:db:29:72:87:37:f0:9e:88:63:89:03:6f:5b:32:3e:12:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: May 28 05:35:37 2024 GMT Not After : May 31 08:32:37 2024 GMT Subject: CN=56C5A9DEB49B7A166989CD6B91FE4D90784EE982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:db:3c:96:5a:74:a0:f9:05:dc:06:56:4f: 10:dc:6f:8c:1a:13:cb:33:bc:5f:7e:a2:bd:13:05: 7c:c0:8b:55:74:74:20:e7:21:79:be:05:8e:51:58: 34:3e:46:29:0a:e1:54:70:ea:81:4b:4e:04:66:02: bc:36:86:9a:03:89:87:36:08:5e:94:d4:78:08:e2: 20:e9:54:12:92:ed:39:c4:64:12:87:46:e2:91:cc: c8:e4:22:fe:4a:5b:65:c5:0b:07:e9:b2:5c:96:ea: 00:43:7c:8c:b5:47:d3:07:d1:fa:2f:78:37:20:bd: 3e:8f:63:67:4c:00:e4:5e:5b:06:50:56:13:82:0c: ec:60:f3:c4:9f:6f:ea:34:a4:b2:d0:d5:64:f6:9f: 69:4b:ca:00:0e:6e:f9:b2:b9:0d:a8:f7:f0:9a:ef: cd:17:7a:78:33:4e:d2:dc:e0:f5:36:d2:ed:2a:12: fc:de:55:61:34:da:36:69:30:fc:80:67:c0:97:55: ee:ef:45:00:37:51:5e:97:2b:87:21:11:0f:f7:86: d3:3f:d8:95:58:31:aa:ed:57:3d:a3:b9:72:23:90: 6b:a6:13:01:6a:e9:3b:e9:7c:4a:ea:b5:63:e0:31: 5d:34:11:93:00:01:0b:c5:19:80:6d:d8:41:e6:94: ca:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C5:A9:DE:B4:9B:7A:16:69:89:CD:6B:91:FE:4D:90:78:4E:E9:82 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0c:24:5f:56:a9:40:3a:e4:91:0b:a0:06:8f:a1:e9:b0:ef: 9c:63:35:03:1a:8a:c8:de:08:5a:d1:81:8f:6b:3c:17:fc:6a: 71:57:bb:1b:d2:b3:cc:1c:36:6e:28:a4:6a:fe:af:cc:81:a3: 9b:dc:e0:85:9b:c2:1e:d1:4e:b7:0d:3d:26:34:b6:c8:ca:82: 22:ae:13:a2:21:60:65:9f:93:0f:99:55:35:41:41:2d:9c:54: 1d:55:f0:09:c8:e5:76:36:d1:98:36:67:3a:0d:3b:b0:71:ec: 84:06:18:47:5a:40:27:1d:69:79:56:9b:f3:e7:9e:8d:81:18: 0e:d6:a8:97:9e:6e:31:4c:5e:9f:ce:1e:95:88:44:d9:95:56: 31:7e:a8:3a:13:c1:e8:e7:f1:a1:7d:28:e1:8c:55:7d:b7:c1: b9:6d:ce:53:e7:64:b6:39:e5:b5:4d:88:d4:2f:97:0a:1b:cf: 5e:82:6e:63:55:b2:59:71:a5:33:72:a3:57:b3:29:cc:25:9c: 98:08:18:ef:a7:ee:72:9c:4d:d5:da:a6:a2:00:21:4d:4e:83: a1:46:ab:e4:67:08:44:5d:be:4e:27:81:08:10:77:c0:8c:3e: 97:7f:33:59:c5:30:a4:df:a3:27:01:0c:e9:dd:5a:bf:5d:a4: e5:c6:02:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3VX2ylyhzfwnohjiQNvWzI+EhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNDA1MjgwNTM1MzdaFw0yNDA1MzEwODMyMzdaMDMxMTAvBgNV BAMTKDU2QzVBOURFQjQ5QjdBMTY2OTg5Q0Q2QjkxRkU0RDkwNzg0RUU5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLNs8llp0oPkF3AZWTxDcb4wa E8szvF9+or0TBXzAi1V0dCDnIXm+BY5RWDQ+RikK4VRw6oFLTgRmArw2hpoDiYc2 CF6U1HgI4iDpVBKS7TnEZBKHRuKRzMjkIv5KW2XFCwfpslyW6gBDfIy1R9MH0fov eDcgvT6PY2dMAOReWwZQVhOCDOxg88Sfb+o0pLLQ1WT2n2lLygAObvmyuQ2o9/Ca 780XengzTtLc4PU20u0qEvzeVWE02jZpMPyAZ8CXVe7vRQA3UV6XK4chEQ/3htM/ 2JVYMartVz2juXIjkGumEwFq6TvpfErqtWPgMV00EZMAAQvFGYBt2EHmlMopAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVsWp3rSbehZpic1rkf5NkHhO6YIwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEMJF9WqUA65JELoAaPoemw75xjNQMaisje CFrRgY9rPBf8anFXuxvSs8wcNm4opGr+r8yBo5vc4IWbwh7RTrcNPSY0tsjKgiKu E6IhYGWfkw+ZVTVBQS2cVB1V8AnI5XY20Zg2ZzoNO7Bx7IQGGEdaQCcdaXlWm/Pn no2BGA7WqJeebjFMXp/OHpWIRNmVVjF+qDoTwejn8aF9KOGMVX23wbltzlPnZLY5 5bVNiNQvlwobz16CbmNVsllxpTNyo1ezKcwlnJgIGO+n7nKcTdXapqIAIU1Og6FG q+RnCERdvk4ngQgQd8CMPpd/M1nFMKTfoycBDOndWr9dpOXGAl8= -----END CERTIFICATE-----Generated at Tue May 28 07:04:26 2024 by rpki-client on console-fra.rpki-client.org