$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: SDZcu7A24taqcCgEeIE8HkaqJsC29WlbNnyEi3bGC68= Subject key identifier: 9E:D9:1D:F8:54:89:96:9F:5E:A6:19:17:BB:3E:91:3C:8E:DD:1D:8C Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 3F98119FAC9E8E2D50A7C32D020ACCA24248AD2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: 31 Signing time: Sat 18 May 2024 12:40:30 +0000 Manifest this update: Sat 18 May 2024 12:35:30 +0000 Manifest next update: Tue 21 May 2024 20:21:30 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: dEauwNn/16mb+cFblNFBMaGMARtEYIcxTlcWj4EKxjE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:98:11:9f:ac:9e:8e:2d:50:a7:c3:2d:02:0a:cc:a2:42:48:ad:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: May 18 12:35:30 2024 GMT Not After : May 21 20:21:30 2024 GMT Subject: CN=9ED91DF85489969F5EA61917BB3E913C8EDD1D8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0e:3a:0a:b2:06:2c:95:d2:04:d5:c2:51:5a: 36:c2:b8:bb:4c:8d:20:60:14:b9:e3:f6:e9:21:00: e2:1c:ee:0b:0f:ed:85:cf:02:bc:69:4f:35:b8:cb: 79:f5:18:8f:77:fb:00:a7:69:12:5a:ed:e6:86:da: e8:da:e6:b4:20:fc:a3:0d:46:7f:c5:51:92:75:f6: 82:b2:f4:18:be:97:fe:46:d7:16:9f:55:4a:ab:a4: 6a:81:20:26:6f:ff:3d:92:0d:63:56:e4:e8:24:6d: 26:4f:2e:72:21:c8:4f:70:4b:ee:ae:d5:80:8c:e7: 2c:e1:e0:c1:57:bf:bf:24:f4:45:6c:78:c4:ff:7a: df:c4:3c:22:d6:95:a7:b5:e5:18:e5:cb:dc:51:8c: fc:ea:f3:b9:55:0a:f6:88:c1:6d:91:96:b5:5b:ba: 32:07:88:7b:83:38:9a:ec:ce:49:19:0c:a2:db:98: f0:37:71:41:25:f7:7d:55:0c:e6:78:28:89:69:c8: 07:f4:d8:28:60:cb:6f:88:c6:67:0c:f7:c8:f9:d0: 16:58:07:53:5a:72:d4:64:82:82:2a:fc:8e:27:c3: 46:18:15:d8:9a:cf:3a:5f:70:17:a6:3f:72:96:0a: 99:00:03:4b:8c:3f:b7:db:04:8a:0e:6e:32:e6:45: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D9:1D:F8:54:89:96:9F:5E:A6:19:17:BB:3E:91:3C:8E:DD:1D:8C X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:eb:a3:77:71:55:a4:7d:cb:ae:9b:1f:b3:1c:09:37:ad:19: 45:1e:34:90:5c:eb:67:ca:15:6f:00:0e:5d:29:d8:86:73:f8: e1:ba:c7:4f:ec:26:ee:ca:40:a0:e3:05:07:03:f9:e5:d2:b4: 5c:dd:fd:c1:1c:47:99:50:ca:a7:e1:b6:37:9d:0a:7f:31:c2: ca:6a:90:8c:1a:16:0c:9f:f4:36:24:5a:2a:c0:73:1e:8e:e4: 4e:52:81:85:8b:3d:24:ec:08:89:13:4a:41:ba:84:ba:0f:57: bd:26:d3:9c:fb:67:14:1d:31:5b:e3:0a:1a:f3:ac:36:7e:b4: 1d:81:f2:1e:57:53:7d:3b:cb:37:58:53:25:90:bf:a6:e2:c4: 71:1f:b7:e2:aa:7b:4c:2e:84:34:46:f2:ed:6b:27:dd:b1:a4: 75:af:93:62:e8:d6:b8:17:d9:f4:9e:83:a9:b9:6c:99:e9:e3: 98:fe:b1:f8:2e:e8:0f:f9:d0:5a:7a:d8:b0:cf:f1:a1:e3:42: 67:a2:99:50:8c:0b:0f:9a:8d:af:70:b1:85:85:e0:09:33:6e: 85:2a:f2:5a:01:b8:51:68:45:41:1c:b9:60:7d:6f:e9:29:ad: bd:fd:7b:4e:16:a9:c1:9f:fa:5a:b5:e8:a8:34:20:1d:a7:76: 8d:bb:15:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5gRn6yeji1Qp8MtAgrMokJIrS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNDA1MTgxMjM1MzBaFw0yNDA1MjEyMDIxMzBaMDMxMTAvBgNV BAMTKDlFRDkxREY4NTQ4OTk2OUY1RUE2MTkxN0JCM0U5MTNDOEVERDFEOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDjoKsgYsldIE1cJRWjbCuLtM jSBgFLnj9ukhAOIc7gsP7YXPArxpTzW4y3n1GI93+wCnaRJa7eaG2uja5rQg/KMN Rn/FUZJ19oKy9Bi+l/5G1xafVUqrpGqBICZv/z2SDWNW5OgkbSZPLnIhyE9wS+6u 1YCM5yzh4MFXv78k9EVseMT/et/EPCLWlae15Rjly9xRjPzq87lVCvaIwW2RlrVb ujIHiHuDOJrszkkZDKLbmPA3cUEl931VDOZ4KIlpyAf02Chgy2+IxmcM98j50BZY B1NactRkgoIq/I4nw0YYFdiazzpfcBemP3KWCpkAA0uMP7fbBIoObjLmReZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUntkd+FSJlp9ephkXuz6RPI7dHYwwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLro3dxVaR9y66bH7McCTetGUUeNJBc62fK FW8ADl0p2IZz+OG6x0/sJu7KQKDjBQcD+eXStFzd/cEcR5lQyqfhtjedCn8xwspq kIwaFgyf9DYkWirAcx6O5E5SgYWLPSTsCIkTSkG6hLoPV70m05z7ZxQdMVvjChrz rDZ+tB2B8h5XU307yzdYUyWQv6bixHEft+Kqe0wuhDRG8u1rJ92xpHWvk2Lo1rgX 2fSeg6m5bJnp45j+sfgu6A/50Fp62LDP8aHjQmeimVCMCw+aja9wsYWF4AkzboUq 8loBuFFoRUEcuWB9b+kprb39e04WqcGf+lq16Kg0IB2ndo27FVE= -----END CERTIFICATE-----Generated at Sat May 18 13:39:19 2024 by rpki-client on console-ams.rpki-client.org