$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: 6gNSCbTJd7ufvq+vJwlezlld2aHZfi3iBkEw4VXS/kc= Subject key identifier: 35:10:A3:F4:67:01:C8:0D:D0:83:A5:3D:E3:E4:90:1F:79:FB:E9:D4 Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 16EA9950950725853B5BC97F7F107C9C6BB62E7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 0203 Signing time: Sat 18 May 2024 09:42:05 +0000 Manifest this update: Sat 18 May 2024 09:37:05 +0000 Manifest next update: Tue 21 May 2024 13:13:05 +0000 Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: SQU8c8fWo0VaZ5LUDnqpXtWLfucFENsyZ6x+O6TbB4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 13:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ea:99:50:95:07:25:85:3b:5b:c9:7f:7f:10:7c:9c:6b:b6:2e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: May 18 09:37:05 2024 GMT Not After : May 21 13:13:05 2024 GMT Subject: CN=3510A3F46701C80DD083A53DE3E4901F79FBE9D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:1d:89:2c:4b:6e:bc:10:f4:40:e9:07:ed: 78:bf:6a:4b:74:18:6b:dd:c5:c0:42:48:b7:b4:89: c1:4b:5a:3f:b0:a9:64:a6:d2:a2:b5:bc:c0:ae:4e: 79:ab:65:aa:17:2a:67:b9:7c:96:0c:15:ac:5a:aa: 72:78:ca:6e:da:11:fd:bf:5d:5c:28:68:b4:38:32: 27:1f:c2:6a:13:19:59:e3:fa:88:6c:b8:91:e6:ec: be:7b:60:d7:fe:fc:ce:0f:83:ec:ba:14:20:9a:37: 9b:a5:67:f7:96:d7:33:78:0d:f1:7e:4e:be:7a:a4: e1:a1:73:0c:f5:57:58:dd:61:c3:e3:6e:c6:9e:dc: 00:03:5f:34:3a:f5:b2:2c:4e:ee:17:ed:b2:28:93: 04:f1:b1:d9:3f:80:86:45:a5:5f:3c:fa:26:51:1a: b4:ea:31:5d:63:32:d4:5f:ae:5f:e3:89:b8:eb:f4: 08:66:56:04:f0:42:8b:2b:77:25:19:e4:43:93:cf: 1e:9f:9f:13:d2:12:97:c7:dc:45:b9:bf:59:d0:e5: 86:87:59:1f:64:3a:a6:47:66:3b:24:36:64:b6:09: 1e:6e:4e:69:2e:69:54:89:ee:73:9d:67:f0:47:b6: a7:06:c0:97:ab:97:1d:dc:4f:0b:a5:e9:02:9b:d2: 4d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:10:A3:F4:67:01:C8:0D:D0:83:A5:3D:E3:E4:90:1F:79:FB:E9:D4 X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f1:7f:24:48:f2:8a:48:c2:aa:f7:e0:29:b4:ad:ea:ba:00: fc:1c:f3:04:59:b7:c2:60:73:a6:cb:b8:45:76:bc:e2:3b:a2: 22:5e:ac:e3:bc:4c:8d:12:5e:eb:1d:c3:fc:18:a9:1a:d4:c1: 25:30:1b:e3:ca:13:24:31:fb:cc:e6:7e:04:a2:eb:d7:28:e0: ce:a0:c5:8a:5c:c3:93:8d:7e:2c:00:b0:2e:31:e2:a5:a6:85: d5:22:d1:16:93:c0:87:b3:8b:57:7f:6a:98:be:99:11:91:16: 75:38:a4:bb:da:31:94:ee:5e:d6:36:a5:f4:02:46:3d:9e:70: 45:9b:47:6e:41:0c:78:f2:6c:88:b4:e1:aa:b0:81:a3:08:32: e6:ea:d4:c1:cf:e1:bb:9b:d1:a8:8b:12:4b:d9:04:01:60:e3: a8:41:bb:dc:8f:f5:d3:0e:07:75:99:f5:ee:1e:f1:f6:94:46: 97:1f:69:15:6d:f1:6c:a8:25:72:02:c7:5a:b3:3d:23:f6:c9: 3e:a2:16:59:f6:8b:39:4b:08:83:27:ff:85:a7:d7:7b:e1:6d: e9:a2:ef:b0:f1:dc:bd:c6:59:a5:2d:e5:9a:af:74:9d:64:91: fa:f8:b7:9f:9c:df:69:b2:10:99:f1:c2:dc:d9:e9:75:1c:41: c3:9e:24:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuqZUJUHJYU7W8l/fxB8nGu2Ln0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNDA1MTgwOTM3MDVaFw0yNDA1MjExMzEzMDVaMDMxMTAvBgNV BAMTKDM1MTBBM0Y0NjcwMUM4MEREMDgzQTUzREUzRTQ5MDFGNzlGQkU5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Hh2JLEtuvBD0QOkH7Xi/akt0 GGvdxcBCSLe0icFLWj+wqWSm0qK1vMCuTnmrZaoXKme5fJYMFaxaqnJ4ym7aEf2/ XVwoaLQ4MicfwmoTGVnj+ohsuJHm7L57YNf+/M4Pg+y6FCCaN5ulZ/eW1zN4DfF+ Tr56pOGhcwz1V1jdYcPjbsae3AADXzQ69bIsTu4X7bIokwTxsdk/gIZFpV88+iZR GrTqMV1jMtRfrl/jibjr9AhmVgTwQosrdyUZ5EOTzx6fnxPSEpfH3EW5v1nQ5YaH WR9kOqZHZjskNmS2CR5uTmkuaVSJ7nOdZ/BHtqcGwJerlx3cTwul6QKb0k2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNRCj9GcByA3Qg6U94+SQH3n76dQwHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvxfyRI8opIwqr34Cm0req6APwc8wRZt8Jg c6bLuEV2vOI7oiJerOO8TI0SXusdw/wYqRrUwSUwG+PKEyQx+8zmfgSi69co4M6g xYpcw5ONfiwAsC4x4qWmhdUi0RaTwIezi1d/api+mRGRFnU4pLvaMZTuXtY2pfQC Rj2ecEWbR25BDHjybIi04aqwgaMIMubq1MHP4bub0aiLEkvZBAFg46hBu9yP9dMO B3WZ9e4e8faURpcfaRVt8WyoJXICx1qzPSP2yT6iFln2izlLCIMn/4Wn13vhbemi 77Dx3L3GWaUt5ZqvdJ1kkfr4t5+c32myEJnxwtzZ6XUcQcOeJAw= -----END CERTIFICATE-----Generated at Sat May 18 10:26:12 2024 by rpki-client on console-ams.rpki-client.org