$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: l67Bmo+tZ9UF/TI0opElJA28s57LSlCj66Z4uE3ZFAs= Subject key identifier: A9:B1:8A:9A:D0:A4:28:25:23:CF:4F:3C:64:C3:41:C2:61:DB:FB:29 Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 32E564B6AAD5CDA8A14BA42B077D6171DDB967E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: 28 Signing time: Sun 19 May 2024 12:30:52 +0000 Manifest this update: Sun 19 May 2024 12:25:52 +0000 Manifest next update: Wed 22 May 2024 22:14:52 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: hxVZjthl6VkMF/YX7qqi5iNQHG+V8iDhLgMIUXv9sW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e5:64:b6:aa:d5:cd:a8:a1:4b:a4:2b:07:7d:61:71:dd:b9:67:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: May 19 12:25:52 2024 GMT Not After : May 22 22:14:52 2024 GMT Subject: CN=A9B18A9AD0A4282523CF4F3C64C341C261DBFB29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:64:e3:c3:de:61:c7:93:0b:e3:9a:42:89:46: 3f:a3:98:e8:15:af:5b:5c:3b:63:1e:55:12:20:6c: c7:65:24:a2:3b:7f:99:1d:5e:86:b8:5a:3c:ef:1b: 3c:7d:75:c9:b7:d2:91:eb:ad:ea:9d:59:17:8e:28: 12:b9:ec:82:a0:6b:74:6a:a9:f3:ed:8b:e7:ed:41: 3d:9a:62:ba:4f:82:38:7d:dd:10:2c:e4:28:7b:28: 03:41:66:4b:db:25:53:bb:f7:92:b0:5e:0b:0e:e2: 19:25:8a:7e:43:da:4d:ce:a5:32:5c:37:35:90:35: 6f:ad:48:21:99:e9:25:13:0c:78:84:1c:9f:59:f8: c9:b2:45:05:00:99:0a:57:d7:67:05:c6:ff:3d:eb: 4c:20:72:b2:82:a5:8d:79:17:f8:ee:af:50:13:b8: d1:c5:dc:a7:f2:99:37:bb:c0:b7:a5:ef:e1:ac:b3: 7d:05:c3:e3:11:0f:c3:d0:09:9a:e5:c6:80:d6:d7: 35:9e:c2:20:4d:54:89:f9:14:a9:65:eb:0e:2f:25: 6a:07:df:14:a0:d4:b1:cf:e1:9e:ce:d5:ec:e4:59: 29:20:01:92:b9:8b:03:08:00:44:39:97:23:cc:d9: f7:b3:d9:6e:d5:0e:79:30:66:a0:11:3a:5d:0b:fa: ac:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B1:8A:9A:D0:A4:28:25:23:CF:4F:3C:64:C3:41:C2:61:DB:FB:29 X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:a0:27:e8:f8:62:a5:3f:6a:2f:ac:9e:9b:8f:b3:3e:a5:11: 80:50:d9:b6:15:d1:2d:86:96:4d:c4:ac:af:6e:3a:39:c8:89: 38:a4:60:df:5e:de:6a:2a:e8:4a:8f:ad:25:05:39:8f:22:80: 7b:c4:5a:ed:71:1e:08:45:9e:68:a6:f1:14:88:3e:4b:04:cc: 45:fa:a5:7e:ff:0a:8b:06:c8:b5:3b:a6:eb:ac:27:22:a7:42: 92:72:8a:5b:ea:6f:2b:ad:16:6f:56:c5:b5:99:dc:72:13:b2: 3e:78:32:60:08:22:05:e9:5e:36:11:28:b2:b0:ba:f0:c1:b5: 3c:7d:d2:30:6f:d7:c8:b7:51:fb:d3:bd:6c:88:92:a2:81:ec: 99:64:4f:cc:67:22:38:ff:bb:99:43:0d:63:5b:3e:65:e3:21: 0e:90:e8:3a:12:73:3c:65:4a:13:e5:3a:ea:f1:46:41:d6:0e: d0:c8:c9:45:ac:9d:c9:8f:40:95:f1:2c:51:30:31:c8:48:8d: cd:cc:86:87:99:54:e2:b5:f9:97:d4:e6:54:1d:fa:91:ba:59: 7e:29:26:b6:be:2c:12:5f:32:26:2d:d4:b1:66:ba:c0:f8:e3: 68:da:7f:e1:00:91:72:1f:9a:64:bd:3d:72:82:3d:25:90:39: 18:03:b5:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuVktqrVzaihS6QrB31hcd25Z+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNDA1MTkxMjI1NTJaFw0yNDA1MjIyMjE0NTJaMDMxMTAvBgNV BAMTKEE5QjE4QTlBRDBBNDI4MjUyM0NGNEYzQzY0QzM0MUMyNjFEQkZCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZOPD3mHHkwvjmkKJRj+jmOgV r1tcO2MeVRIgbMdlJKI7f5kdXoa4WjzvGzx9dcm30pHrreqdWReOKBK57IKga3Rq qfPti+ftQT2aYrpPgjh93RAs5Ch7KANBZkvbJVO795KwXgsO4hklin5D2k3OpTJc NzWQNW+tSCGZ6SUTDHiEHJ9Z+MmyRQUAmQpX12cFxv8960wgcrKCpY15F/jur1AT uNHF3KfymTe7wLel7+Gss30Fw+MRD8PQCZrlxoDW1zWewiBNVIn5FKll6w4vJWoH 3xSg1LHP4Z7O1ezkWSkgAZK5iwMIAEQ5lyPM2fez2W7VDnkwZqAROl0L+qytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqbGKmtCkKCUjz088ZMNBwmHb+ykwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6gJ+j4YqU/ai+snpuPsz6lEYBQ2bYV0S2G lk3ErK9uOjnIiTikYN9e3moq6EqPrSUFOY8igHvEWu1xHghFnmim8RSIPksEzEX6 pX7/CosGyLU7puusJyKnQpJyilvqbyutFm9WxbWZ3HITsj54MmAIIgXpXjYRKLKw uvDBtTx90jBv18i3UfvTvWyIkqKB7JlkT8xnIjj/u5lDDWNbPmXjIQ6Q6DoSczxl ShPlOurxRkHWDtDIyUWsncmPQJXxLFEwMchIjc3MhoeZVOK1+ZfU5lQd+pG6WX4p Jra+LBJfMiYt1LFmusD442jaf+EAkXIfmmS9PXKCPSWQORgDtV8= -----END CERTIFICATE-----Generated at Sun May 19 13:35:05 2024 by rpki-client on console-ams.rpki-client.org