$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: DQDtZzuv307QrNEA6DmFcVJyhnosLgvHDTs8LoMZj1o= Subject key identifier: AA:0A:7B:03:D1:B4:03:AC:30:89:C8:00:87:AE:3B:67:9A:0E:3C:3D Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 754E5FB9BA474B75043B69055198C565032BBCD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: BB Signing time: Thu 30 May 2024 08:11:24 +0000 Manifest this update: Thu 30 May 2024 08:06:24 +0000 Manifest next update: Sun 02 Jun 2024 12:27:24 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: aU6iT+WJRTAjpZIC1hd8QfPSSrdN+/ANhXzQVXioLUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 10:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4e:5f:b9:ba:47:4b:75:04:3b:69:05:51:98:c5:65:03:2b:bc:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: May 30 08:06:24 2024 GMT Not After : Jun 2 12:27:24 2024 GMT Subject: CN=AA0A7B03D1B403AC3089C80087AE3B679A0E3C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:30:be:0d:7f:09:73:7e:94:ed:ad:d4:88: 92:b9:30:83:2c:63:82:8a:b5:05:56:3b:4a:18:50: 2b:d1:0f:d1:bb:7d:c8:71:9a:01:70:f4:6f:64:ec: 0e:f0:89:ab:3e:1a:94:24:4a:85:8e:c9:0e:5a:ae: 15:18:eb:4f:3b:af:12:c6:42:87:ec:6f:2c:f9:70: d4:e5:dc:74:50:06:9a:72:91:ea:c8:aa:1f:f5:76: 8f:a2:24:c9:4e:96:75:23:12:c8:20:fb:31:21:b9: fc:f7:b4:8a:0f:61:33:14:23:a0:0f:e9:ef:47:16: 5a:75:1d:69:db:d2:1d:bc:49:18:63:4e:3a:96:7e: 8d:78:c5:f0:43:94:8a:04:c3:29:06:1b:9f:e4:44: 37:8c:e7:67:c7:da:9d:ea:24:41:5a:1d:1e:6f:75: 71:c6:d1:58:13:bb:0a:84:08:7e:84:38:6b:e2:c7: 7c:b1:41:40:2f:cd:ed:6d:9e:ca:9c:1b:d8:d9:04: c1:de:96:b2:39:de:f9:c5:a9:7c:4e:d4:b2:e8:df: 29:ff:42:d7:d3:c2:1c:d9:57:62:db:bf:58:63:69: f8:57:f1:99:b4:d7:45:3e:43:40:fb:cb:c8:c2:83: 75:03:8c:6f:5e:54:cb:3e:b7:cb:38:8a:c1:71:0d: 37:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0A:7B:03:D1:B4:03:AC:30:89:C8:00:87:AE:3B:67:9A:0E:3C:3D X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:2c:43:46:8e:f6:07:2c:ab:3a:fd:34:9e:3f:6c:1c:3e:d6: 94:fb:7c:33:4b:34:43:3a:43:35:2e:ae:bc:34:97:e4:5a:8a: d7:94:5b:78:ec:eb:5f:6d:8f:ca:39:60:a2:1b:9d:d0:d8:28: 3f:de:6c:d2:eb:5b:b5:0a:0e:74:4a:d4:c2:35:b9:b5:bf:d2: 0a:73:11:91:52:8c:b2:10:88:7e:d9:34:69:18:ea:12:9a:eb: cc:f9:ca:28:fb:68:2a:a9:66:c7:c4:ee:f4:b2:f2:ea:d0:fe: 76:74:9e:56:59:03:ed:40:77:02:fd:3a:b1:08:be:a1:ee:bb: d6:0e:1e:37:ac:8f:81:90:b8:49:9a:8d:3b:ae:4e:d7:82:c5: 72:6d:ea:a9:82:11:35:04:3e:4f:07:a7:a6:8b:9b:33:e1:8c: 47:de:7a:2d:bd:41:64:85:80:29:39:85:71:7a:89:9b:3a:81: 60:d7:30:e0:f6:60:98:a9:8f:3f:ba:cf:8a:fe:23:e5:cb:44: ea:b6:a4:22:32:32:de:aa:10:0b:44:51:2f:35:45:65:87:23: 3a:af:22:8d:e2:9c:2f:14:b4:2f:8b:f9:5c:b5:61:17:de:ad: 32:cd:a3:04:4b:09:53:09:89:9c:2d:d8:88:30:2e:0c:53:70: 97:d0:8c:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdU5fubpHS3UEO2kFUZjFZQMrvNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNDA1MzAwODA2MjRaFw0yNDA2MDIxMjI3MjRaMDMxMTAvBgNV BAMTKEFBMEE3QjAzRDFCNDAzQUMzMDg5QzgwMDg3QUUzQjY3OUEwRTNDM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfzC+DX8Jc36U7a3UiJK5MIMs Y4KKtQVWO0oYUCvRD9G7fchxmgFw9G9k7A7wias+GpQkSoWOyQ5arhUY6087rxLG Qofsbyz5cNTl3HRQBppykerIqh/1do+iJMlOlnUjEsgg+zEhufz3tIoPYTMUI6AP 6e9HFlp1HWnb0h28SRhjTjqWfo14xfBDlIoEwykGG5/kRDeM52fH2p3qJEFaHR5v dXHG0VgTuwqECH6EOGvix3yxQUAvze1tnsqcG9jZBMHelrI53vnFqXxO1LLo3yn/ QtfTwhzZV2Lbv1hjafhX8Zm010U+Q0D7y8jCg3UDjG9eVMs+t8s4isFxDTdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqgp7A9G0A6wwicgAh647Z5oOPD0wHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUsQ0aO9gcsqzr9NJ4/bBw+1pT7fDNLNEM6 QzUurrw0l+RaiteUW3js619tj8o5YKIbndDYKD/ebNLrW7UKDnRK1MI1ubW/0gpz EZFSjLIQiH7ZNGkY6hKa68z5yij7aCqpZsfE7vSy8urQ/nZ0nlZZA+1AdwL9OrEI vqHuu9YOHjesj4GQuEmajTuuTteCxXJt6qmCETUEPk8Hp6aLmzPhjEfeei29QWSF gCk5hXF6iZs6gWDXMOD2YJipjz+6z4r+I+XLROq2pCIyMt6qEAtEUS81RWWHIzqv Io3inC8UtC+L+Vy1YRferTLNowRLCVMJiZwt2IgwLgxTcJfQjGA= -----END CERTIFICATE-----Generated at Thu May 30 11:34:46 2024 by rpki-client on console-fra.rpki-client.org