$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: oi9EFnImIzQLbhvfTXAePFcFaRrYPeBxMPGlym98Zi4= Subject key identifier: 69:19:5A:10:7F:99:41:F2:DF:E5:98:31:62:E4:BB:A6:46:E7:86:D2 Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 1EBBEDE66763949D058F9660EF49C383BE145761 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 0430 Signing time: Sat 18 May 2024 03:01:46 +0000 Manifest this update: Sat 18 May 2024 02:56:46 +0000 Manifest next update: Tue 21 May 2024 08:19:46 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: Qv3+rQf1VFzzh698TDjx1NL2idegEdmqeJ4xKc0v948=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:bb:ed:e6:67:63:94:9d:05:8f:96:60:ef:49:c3:83:be:14:57:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: May 18 02:56:46 2024 GMT Not After : May 21 08:19:46 2024 GMT Subject: CN=69195A107F9941F2DFE5983162E4BBA646E786D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7f:db:90:10:04:e5:51:34:f2:a4:1b:1d:fa: cf:0c:bc:de:69:f8:64:19:2e:16:f1:3b:1b:03:e8: ee:e7:3c:66:17:71:cc:b3:87:4c:15:65:86:4d:b5: 5e:df:2a:6a:90:85:46:ce:3c:a9:9d:da:93:7e:52: 59:bf:b8:d0:33:aa:8f:5c:81:5e:be:eb:45:06:17: ba:cf:cd:50:68:95:79:70:4e:a7:1c:3b:a1:6a:9f: f4:59:16:64:28:4f:41:d2:10:1a:86:2a:3e:8b:37: a5:96:34:90:95:67:15:c7:5f:07:af:76:5f:87:4b: ef:5c:d5:77:3b:2d:3e:e7:bc:09:84:76:75:59:00: 5c:55:44:b6:7c:52:91:96:0c:4e:15:3f:d1:9d:55: ee:b2:d8:a1:9c:08:45:d7:9d:23:cd:97:fd:81:2a: 95:32:6e:b7:9d:14:a1:28:4c:65:52:4f:d4:d8:e9: 6e:9d:98:ad:e3:ff:36:9c:e1:fd:83:e8:62:e8:12: d0:00:f9:3e:04:49:4e:65:6b:6a:2c:df:3b:98:c9: 1b:22:39:ca:8d:bf:d9:19:ad:45:93:4d:db:b7:2f: 46:f9:10:f0:cd:fc:00:d3:1e:70:f2:ae:3f:1e:94: c7:4b:56:5c:c9:54:bb:53:b7:b4:da:ce:86:03:54: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:19:5A:10:7F:99:41:F2:DF:E5:98:31:62:E4:BB:A6:46:E7:86:D2 X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f2:db:20:72:b4:70:df:72:e9:c8:31:78:7b:e8:e9:3c:f7: 51:01:2b:9b:e0:28:da:f4:a0:f0:a0:a9:95:f4:28:db:d3:fa: f0:08:35:61:4c:c2:8c:1c:a0:49:0b:7c:df:2e:b9:f5:8f:32: 9f:0a:f4:2d:6f:9f:66:18:a7:3c:a9:aa:5f:e7:02:64:65:19: f7:52:c7:1a:11:09:50:3c:41:6b:26:3a:78:db:4d:d4:c7:0d: 25:39:e3:92:b5:6d:50:f0:83:5d:0a:cd:96:cc:d8:4d:3b:e7: 1d:3d:d3:c4:e0:42:49:62:2e:72:50:fe:d1:77:52:f3:93:e7: 8b:70:e9:e1:63:6b:2a:bc:50:0e:36:f3:40:8c:b5:8c:6e:0e: 3b:70:fa:52:23:dd:d9:85:ca:c3:c7:ed:0e:80:c0:55:21:d8: 74:0d:cc:5a:e3:6e:dd:32:38:c1:53:34:3c:65:58:06:20:5c: 3b:1e:3d:a9:b6:c1:61:53:30:35:90:42:f4:be:23:c3:db:90: a9:7e:6e:80:47:0e:e5:ef:e4:45:3d:f8:2b:34:a8:20:9e:18: e6:74:f9:75:01:ba:1c:59:ab:da:b4:aa:d5:c2:5e:28:32:20: 9c:f4:1a:fc:6e:86:7c:c3:d5:da:e9:16:8c:9b:67:8d:89:c0: c3:17:03:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrvt5mdjlJ0Fj5Zg70nDg74UV2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNDA1MTgwMjU2NDZaFw0yNDA1MjEwODE5NDZaMDMxMTAvBgNV BAMTKDY5MTk1QTEwN0Y5OTQxRjJERkU1OTgzMTYyRTRCQkE2NDZFNzg2RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjf9uQEATlUTTypBsd+s8MvN5p +GQZLhbxOxsD6O7nPGYXccyzh0wVZYZNtV7fKmqQhUbOPKmd2pN+Ulm/uNAzqo9c gV6+60UGF7rPzVBolXlwTqccO6Fqn/RZFmQoT0HSEBqGKj6LN6WWNJCVZxXHXwev dl+HS+9c1Xc7LT7nvAmEdnVZAFxVRLZ8UpGWDE4VP9GdVe6y2KGcCEXXnSPNl/2B KpUybredFKEoTGVST9TY6W6dmK3j/zac4f2D6GLoEtAA+T4ESU5la2os3zuYyRsi OcqNv9kZrUWTTdu3L0b5EPDN/ADTHnDyrj8elMdLVlzJVLtTt7TazoYDVPC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaRlaEH+ZQfLf5ZgxYuS7pkbnhtIwHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABby2yBytHDfcunIMXh76Ok891EBK5vgKNr0 oPCgqZX0KNvT+vAINWFMwowcoEkLfN8uufWPMp8K9C1vn2YYpzypql/nAmRlGfdS xxoRCVA8QWsmOnjbTdTHDSU545K1bVDwg10KzZbM2E075x0908TgQkliLnJQ/tF3 UvOT54tw6eFjayq8UA4280CMtYxuDjtw+lIj3dmFysPH7Q6AwFUh2HQNzFrjbt0y OMFTNDxlWAYgXDsePam2wWFTMDWQQvS+I8PbkKl+boBHDuXv5EU9+Cs0qCCeGOZ0 +XUBuhxZq9q0qtXCXigyIJz0GvxuhnzD1drpFoybZ42JwMMXA3c= -----END CERTIFICATE-----Generated at Sat May 18 03:47:49 2024 by rpki-client on console-fra.rpki-client.org