$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: D7xoy7hYLQYqu5cKy1clKJs4MUlnGSTSPvX78siRHOg= Subject key identifier: 1D:BC:06:C3:24:32:39:B8:0B:39:C1:A6:DC:85:A3:25:49:E7:36:40 Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: 75B1042259F933EE553696E3064E92476F23D488 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 01B4 Signing time: Sun 19 May 2024 19:50:55 +0000 Manifest this update: Sun 19 May 2024 19:45:55 +0000 Manifest next update: Wed 22 May 2024 23:48:55 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: Dm9VSaZGn4sn0oE8PsPrZlS0Cd9CSRx0vwBXTtwcFHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b1:04:22:59:f9:33:ee:55:36:96:e3:06:4e:92:47:6f:23:d4:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: May 19 19:45:55 2024 GMT Not After : May 22 23:48:55 2024 GMT Subject: CN=1DBC06C3243239B80B39C1A6DC85A32549E73640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:80:3d:cd:d0:b6:38:86:f7:a6:ef:5c:a5: 3b:6e:1a:20:f2:36:e0:9e:4b:4b:06:f2:b5:68:57: a6:a3:c3:97:23:f3:27:16:f8:eb:55:7a:a4:fa:32: 7e:f1:5c:de:5a:1d:e7:d1:09:80:31:9e:e6:23:b5: dc:ed:e9:e2:ef:b8:56:de:80:c9:76:71:12:b8:8b: cc:86:44:d1:0a:68:25:a8:36:d8:b8:de:cc:fd:b2: 0c:4c:0a:ca:18:b1:a5:43:f7:8b:03:65:48:bd:ad: 05:5c:7d:65:a5:11:fe:f1:47:73:1e:4b:8c:71:0e: 81:2c:4e:78:d2:7b:44:a2:35:72:4f:2d:ef:d3:d7: b7:ef:f8:0e:98:c6:6f:c8:33:5e:fa:66:af:d7:ac: fd:75:fb:61:b5:ae:3e:43:b8:51:5d:d9:c0:20:cd: c7:cd:ce:cb:cd:0f:88:8d:32:70:6d:e0:8b:cb:57: 92:61:f6:6e:39:37:08:c9:2f:50:85:52:40:c8:bd: 99:b5:59:06:c8:8a:6a:12:ca:5c:df:b6:8c:29:51: 56:c5:cf:a1:83:37:fb:a8:e9:dd:4f:2c:c8:87:4b: f3:00:68:80:3c:d6:81:c8:4d:47:63:50:85:f5:f7: 98:57:ae:54:6e:47:31:01:7e:17:65:de:d7:92:9a: 57:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BC:06:C3:24:32:39:B8:0B:39:C1:A6:DC:85:A3:25:49:E7:36:40 X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d4:56:f0:df:ad:08:9d:48:df:4e:dd:0e:7c:a5:11:77:aa: b2:77:70:3c:28:d3:d0:b2:9f:7e:54:3f:31:e4:04:78:eb:13: be:6a:40:45:29:5c:1e:88:05:70:83:3d:e2:04:bd:b1:97:27: 11:51:c3:be:81:92:fd:85:59:24:41:c6:b1:a2:01:cd:f1:06: f5:05:12:3f:19:f0:a8:2e:22:ae:56:a2:df:68:3b:c1:29:e8: 30:87:01:de:d0:1c:58:d3:c2:64:f3:97:9d:0d:03:e2:95:ea: c3:00:10:44:54:bb:16:52:a0:ac:b3:1e:f8:0a:3a:e2:51:49: 34:85:fa:66:21:be:b2:07:5b:0a:52:13:16:c2:c9:16:e0:f4: 32:3f:25:99:95:11:c3:9b:11:40:1f:09:45:2d:27:ac:5c:38: 23:79:8a:7b:18:64:76:c3:a4:15:6d:77:82:b3:1b:24:25:7f: ca:a4:bb:a7:f2:3f:06:7e:6b:79:ae:9e:e5:c2:96:5d:69:c1: 14:df:33:53:06:3e:8d:d5:bd:a6:a3:82:09:a5:f1:9a:71:53: 79:f7:e1:ef:15:35:37:8e:d4:39:76:e5:3d:8d:9c:15:fd:1f: 5e:59:1b:a8:c6:bd:89:54:b8:2a:42:78:47:b4:ad:e6:54:06: c9:b3:f2:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbEEIln5M+5VNpbjBk6SR28j1IgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNDA1MTkxOTQ1NTVaFw0yNDA1MjIyMzQ4NTVaMDMxMTAvBgNV BAMTKDFEQkMwNkMzMjQzMjM5QjgwQjM5QzFBNkRDODVBMzI1NDlFNzM2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71IA9zdC2OIb3pu9cpTtuGiDy NuCeS0sG8rVoV6ajw5cj8ycW+OtVeqT6Mn7xXN5aHefRCYAxnuYjtdzt6eLvuFbe gMl2cRK4i8yGRNEKaCWoNti43sz9sgxMCsoYsaVD94sDZUi9rQVcfWWlEf7xR3Me S4xxDoEsTnjSe0SiNXJPLe/T17fv+A6Yxm/IM176Zq/XrP11+2G1rj5DuFFd2cAg zcfNzsvND4iNMnBt4IvLV5Jh9m45NwjJL1CFUkDIvZm1WQbIimoSylzftowpUVbF z6GDN/uo6d1PLMiHS/MAaIA81oHITUdjUIX195hXrlRuRzEBfhdl3teSmleLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHbwGwyQyObgLOcGm3IWjJUnnNkAwHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzUVvDfrQidSN9O3Q58pRF3qrJ3cDwo09Cy n35UPzHkBHjrE75qQEUpXB6IBXCDPeIEvbGXJxFRw76Bkv2FWSRBxrGiAc3xBvUF Ej8Z8KguIq5Wot9oO8Ep6DCHAd7QHFjTwmTzl50NA+KV6sMAEERUuxZSoKyzHvgK OuJRSTSF+mYhvrIHWwpSExbCyRbg9DI/JZmVEcObEUAfCUUtJ6xcOCN5insYZHbD pBVtd4KzGyQlf8qku6fyPwZ+a3munuXCll1pwRTfM1MGPo3Vvaajggml8ZpxU3n3 4e8VNTeO1Dl25T2NnBX9H15ZG6jGvYlUuCpCeEe0reZUBsmz8n8= -----END CERTIFICATE-----Generated at Sun May 19 20:54:08 2024 by rpki-client on console-ams.rpki-client.org