$ rpki-client -vvf repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft File: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft (raw, json) Hash identifier: j8ybrAnpE2DQimElG06xlMhIqGHSWGvdLc2GjutId30= Subject key identifier: A4:D9:DB:5E:09:29:23:62:80:34:0E:F2:B6:60:AF:2B:69:92:F6:49 Authority key identifier: E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F Certificate issuer: /CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Certificate serial: 368A3DB0F6DA1983089B564268E5FADE1EC93995 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft Manifest number: C0 Signing time: Tue 28 May 2024 19:51:28 +0000 Manifest this update: Tue 28 May 2024 19:46:28 +0000 Manifest next update: Sat 01 Jun 2024 01:07:28 +0000 Files and hashes: 1: E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl (hash: MwddqmtQHl5JdGWkuTSBIXJYzATBmE8LJQBS3hTIc+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 01:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8a:3d:b0:f6:da:19:83:08:9b:56:42:68:e5:fa:de:1e:c9:39:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1B708FECC3E90643F33B8311E29F1B46FE92B7F Validity Not Before: May 28 19:46:28 2024 GMT Not After : Jun 1 01:07:28 2024 GMT Subject: CN=A4D9DB5E0929236280340EF2B660AF2B6992F649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:38:c4:db:32:d6:fa:83:98:68:5c:22:83: 3e:65:a0:bc:8d:22:e5:4d:29:54:26:5a:d4:f6:59: 89:2d:79:c0:6f:3b:e9:60:63:37:92:c5:e1:18:2b: 0c:aa:94:b6:76:1a:c5:2d:54:34:e5:a7:f3:5a:bd: 3f:0a:dd:a4:0d:0f:73:fa:a1:d8:0f:ad:dd:ba:66: 6b:45:c4:e6:db:5b:54:25:a9:4f:7b:ef:46:e5:ae: 5b:9a:01:58:0b:e8:14:d9:14:26:88:74:bc:de:8e: 24:3e:83:3f:83:24:ba:39:23:bf:c5:6c:5d:2c:9c: 87:0d:cd:3f:37:b6:06:09:9d:0d:f1:3b:cb:c8:cd: 65:a0:3b:88:70:a2:b0:fe:55:9a:b8:cc:eb:39:4c: b6:f2:0b:65:be:d9:58:42:da:e1:3a:d8:89:3f:45: 94:d1:9a:c8:dd:d0:3d:bb:fe:31:fd:ce:61:38:fc: 28:b7:cb:5b:b0:a7:f5:56:ee:26:9a:3e:2a:ae:d5: 34:bc:cc:bd:a7:82:6e:18:a8:da:a6:5c:1d:02:37: eb:11:6e:53:20:b5:25:03:f7:0a:c9:bb:af:bb:b3: ba:86:08:1b:d7:4e:98:59:2c:5b:0a:ea:de:17:d6: 4d:51:2c:b8:c9:c4:83:78:d2:f6:6d:95:5b:f7:53: cc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D9:DB:5E:09:29:23:62:80:34:0E:F2:B6:60:AF:2B:69:92:F6:49 X509v3 Authority Key Identifier: keyid:E1:B7:08:FE:CC:3E:90:64:3F:33:B8:31:1E:29:F1:B4:6F:E9:2B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f4d1c36-4a31-4857-9e36-0ddf3d691eb5/0/E1B708FECC3E90643F33B8311E29F1B46FE92B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3b:22:ac:0c:59:68:09:66:ec:46:67:e0:37:ea:cb:0c:c3: 63:eb:58:93:90:7e:d4:b0:49:45:b2:7b:68:9f:af:7d:64:4d: eb:53:4b:09:16:a1:3c:2f:02:bd:34:74:59:b0:74:42:d1:63: 18:a5:a5:99:75:fe:2e:59:10:65:16:fe:3f:2f:e6:7f:67:24: cf:e1:45:f7:fa:d6:5e:d3:a3:44:5a:cf:e2:fd:a7:fc:49:b1: e5:d1:cf:82:a1:a3:cc:81:58:57:83:45:39:36:d1:13:e0:9b: ed:8b:da:05:fd:80:4b:c8:7b:6f:3a:50:5a:e8:6f:fd:ef:fe: ab:93:fb:a4:b9:a7:9a:b1:d9:34:44:85:26:b6:7d:a9:67:31: db:00:24:16:90:b9:92:cb:2b:91:fe:51:aa:56:01:bd:20:a1: 59:a5:0c:64:1b:ef:b2:17:7e:12:db:1c:97:65:84:52:fb:8c: 47:24:57:6d:26:d0:b1:36:8e:09:44:2a:b2:96:dd:95:f2:86: 7b:73:1a:d3:a9:1b:dc:a9:7e:b1:3d:aa:c1:46:96:2f:10:0a: 67:ae:0c:74:42:53:7b:36:90:a7:c6:7f:fd:26:a7:3e:ac:2e: 59:05:c4:31:0f:32:cf:17:73:47:8f:1e:ed:29:33:a0:7c:a6: f9:52:8b:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoo9sPbaGYMIm1ZCaOX63h7JOZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2 RkU5MkI3RjAeFw0yNDA1MjgxOTQ2MjhaFw0yNDA2MDEwMTA3MjhaMDMxMTAvBgNV BAMTKEE0RDlEQjVFMDkyOTIzNjI4MDM0MEVGMkI2NjBBRjJCNjk5MkY2NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsDjE2zLW+oOYaFwigz5loLyN IuVNKVQmWtT2WYktecBvO+lgYzeSxeEYKwyqlLZ2GsUtVDTlp/NavT8K3aQND3P6 odgPrd26ZmtFxObbW1QlqU9770blrluaAVgL6BTZFCaIdLzejiQ+gz+DJLo5I7/F bF0snIcNzT83tgYJnQ3xO8vIzWWgO4hworD+VZq4zOs5TLbyC2W+2VhC2uE62Ik/ RZTRmsjd0D27/jH9zmE4/Ci3y1uwp/VW7iaaPiqu1TS8zL2ngm4YqNqmXB0CN+sR blMgtSUD9wrJu6+7s7qGCBvXTphZLFsK6t4X1k1RLLjJxIN40vZtlVv3U8yJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpNnbXgkpI2KANA7ytmCvK2mS9kkwHwYDVR0j BBgwFoAU4bcI/sw+kGQ/M7gxHinxtG/pK38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjRkMWMzNi00YTMxLTQ4NTctOWUzNi0wZGRmM2Q2OTFlYjUvMC9FMUI3MDhGRUND M0U5MDY0M0YzM0I4MzExRTI5RjFCNDZGRTkyQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYxQjQ2RkU5 MkI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmY0ZDFjMzYtNGEzMS00ODU3LTll MzYtMGRkZjNkNjkxZWI1LzAvRTFCNzA4RkVDQzNFOTA2NDNGMzNCODMxMUUyOUYx QjQ2RkU5MkI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB47IqwMWWgJZuxGZ+A36ssMw2PrWJOQftSw SUWye2ifr31kTetTSwkWoTwvAr00dFmwdELRYxilpZl1/i5ZEGUW/j8v5n9nJM/h Rff61l7To0Raz+L9p/xJseXRz4Kho8yBWFeDRTk20RPgm+2L2gX9gEvIe286UFro b/3v/quT+6S5p5qx2TREhSa2falnMdsAJBaQuZLLK5H+UapWAb0goVmlDGQb77IX fhLbHJdlhFL7jEckV20m0LE2jglEKrKW3ZXyhntzGtOpG9ypfrE9qsFGli8QCmeu DHRCU3s2kKfGf/0mpz6sLlkFxDEPMs8Xc0ePHu0pM6B8pvlSi0w= -----END CERTIFICATE-----Generated at Tue May 28 22:49:01 2024 by rpki-client on console-ams.rpki-client.org