$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: 38wai+vZI6hHHLKvztI6SuKwpU3ZNlSc4fg/Uzg7RgY= Subject key identifier: B0:4B:56:30:F2:55:F4:07:F9:7D:DB:06:41:23:0F:D2:7D:A1:C5:8B Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 106A53022A46F895B7464716F7F23B3F55BC8AFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 043C Signing time: Thu 30 May 2024 10:41:58 +0000 Manifest this update: Thu 30 May 2024 10:36:58 +0000 Manifest next update: Sun 02 Jun 2024 14:30:58 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: x+FXTebNsJnndmRkHdwK3auHv5KNFOd6dc+MX9P0p5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 10:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6a:53:02:2a:46:f8:95:b7:46:47:16:f7:f2:3b:3f:55:bc:8a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: May 30 10:36:58 2024 GMT Not After : Jun 2 14:30:58 2024 GMT Subject: CN=B04B5630F255F407F97DDB0641230FD27DA1C58B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:32:67:f4:02:8f:97:7d:81:12:fa:96:98: a7:67:64:04:b7:fe:4e:4d:2f:06:25:7e:e4:01:12: a1:cc:84:f0:7b:f0:43:ec:90:7f:90:0f:f1:79:39: 9a:6a:52:63:a0:77:2b:a5:05:19:3d:0c:86:ec:25: 9a:cf:cd:e2:8c:79:0b:a2:89:e9:8d:56:e0:32:8f: 44:2f:1e:4d:05:e0:53:48:86:62:f9:3d:8e:dd:8b: 51:fe:e5:77:0d:90:6b:54:fc:01:98:86:db:26:92: 12:5c:e9:45:8f:09:c1:52:bf:24:ab:b7:f1:9e:dd: a7:b9:a4:c0:37:db:27:4a:07:87:a0:4b:b7:b9:99: b3:b4:0c:70:31:13:af:a4:ca:a7:01:9d:76:27:55: f1:3e:0b:3e:fe:3c:b1:99:0d:42:98:23:f4:c8:12: 7f:df:6a:70:94:f5:c6:e2:6d:63:83:0f:e7:86:24: 71:98:db:c5:f0:8e:6b:33:2b:09:5c:a1:f5:fd:b7: be:78:96:97:bc:92:7b:a7:14:a2:a5:65:81:a7:86: da:13:04:90:3b:6c:10:26:42:f4:db:ad:c9:85:e7: bd:9d:da:9c:0e:72:2b:2c:cd:92:ad:2a:9a:68:ba: b3:09:02:69:f3:ea:26:85:6b:8e:08:dd:33:2f:3e: b1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4B:56:30:F2:55:F4:07:F9:7D:DB:06:41:23:0F:D2:7D:A1:C5:8B X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ed:1b:be:df:24:ab:15:6e:f4:ba:ee:36:7d:6b:2a:3f:ab: 7e:7a:66:68:c4:9d:26:f9:70:f4:36:f8:70:19:ec:2a:5c:bd: 9b:0d:80:e1:db:4c:c2:6e:4f:e2:69:13:77:59:f8:7f:02:2f: 79:c0:7b:9e:ee:f0:fb:74:19:23:28:0c:b2:9f:b7:2b:04:03: 7d:04:81:6c:27:83:b2:14:ed:c2:e0:72:54:76:78:c7:e3:1f: 14:9b:94:59:07:bb:d1:b1:7c:b3:a3:a7:5b:06:28:29:d8:02: 32:5b:fb:f8:df:1a:f6:ba:42:96:bb:8f:ba:1c:0e:9b:d7:1f: 7b:5b:82:a0:45:48:89:0c:7f:7d:37:31:31:8a:fa:e2:06:01: 29:72:e1:4e:bf:eb:44:69:9f:f2:9a:c7:6f:76:53:52:76:a3: 63:90:80:42:52:e7:49:f6:79:93:00:74:7d:ac:cb:50:e4:ff: 56:54:23:8b:92:d0:3d:ba:37:8e:ab:b7:6a:0e:f0:0d:e7:1a: 55:4c:2e:6c:45:7f:ff:aa:3e:e2:6c:17:90:bd:86:60:f2:fa: d6:d3:a8:4c:b7:f6:6b:18:e2:f5:86:8b:b5:d1:99:76:b1:83: f4:4a:50:ce:72:d0:b1:46:02:83:ef:5d:d0:af:0b:8b:7e:91: 1e:7a:ef:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGpTAipG+JW3RkcW9/I7P1W8ivswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNDA1MzAxMDM2NThaFw0yNDA2MDIxNDMwNThaMDMxMTAvBgNV BAMTKEIwNEI1NjMwRjI1NUY0MDdGOTdEREIwNjQxMjMwRkQyN0RBMUM1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XjJn9AKPl32BEvqWmKdnZAS3 /k5NLwYlfuQBEqHMhPB78EPskH+QD/F5OZpqUmOgdyulBRk9DIbsJZrPzeKMeQui iemNVuAyj0QvHk0F4FNIhmL5PY7di1H+5XcNkGtU/AGYhtsmkhJc6UWPCcFSvySr t/Ge3ae5pMA32ydKB4egS7e5mbO0DHAxE6+kyqcBnXYnVfE+Cz7+PLGZDUKYI/TI En/fanCU9cbibWODD+eGJHGY28XwjmszKwlcofX9t754lpe8knunFKKlZYGnhtoT BJA7bBAmQvTbrcmF572d2pwOcisszZKtKppourMJAmnz6iaFa44I3TMvPrGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEtWMPJV9Af5fdsGQSMP0n2hxYswHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrtG77fJKsVbvS67jZ9ayo/q356ZmjEnSb5 cPQ2+HAZ7CpcvZsNgOHbTMJuT+JpE3dZ+H8CL3nAe57u8Pt0GSMoDLKftysEA30E gWwng7IU7cLgclR2eMfjHxSblFkHu9GxfLOjp1sGKCnYAjJb+/jfGva6Qpa7j7oc DpvXH3tbgqBFSIkMf303MTGK+uIGASly4U6/60Rpn/Kax292U1J2o2OQgEJS50n2 eZMAdH2sy1Dk/1ZUI4uS0D26N46rt2oO8A3nGlVMLmxFf/+qPuJsF5C9hmDy+tbT qEy39msY4vWGi7XRmXaxg/RKUM5y0LFGAoPvXdCvC4t+kR567+A= -----END CERTIFICATE-----Generated at Thu May 30 11:27:40 2024 by rpki-client on console-ams.rpki-client.org