$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: G0Zhy9swLhuKciraqEtKHeyRlSxOcm8Z08w+pxbXZtU= Subject key identifier: 8E:B9:58:1D:F4:11:17:87:FA:12:6D:0F:1E:16:50:89:4A:73:89:5F Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 75AE62BDAF26943CEC4A56E7FC44E53CAEF207E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: 29 Signing time: Sun 23 Jun 2024 08:22:03 +0000 Manifest this update: Sun 23 Jun 2024 08:17:03 +0000 Manifest next update: Wed 26 Jun 2024 13:15:03 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: QIWH3BFI/G0MAJCQghEgnQJ52PPivK8y0Lm4v3ZWfhQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ae:62:bd:af:26:94:3c:ec:4a:56:e7:fc:44:e5:3c:ae:f2:07:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Jun 23 08:17:03 2024 GMT Not After : Jun 26 13:15:03 2024 GMT Subject: CN=8EB9581DF4111787FA126D0F1E1650894A73895F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:7b:cf:33:c9:76:9f:47:6a:66:e8:c8:8e: d8:43:ec:a3:41:a7:af:64:18:5d:2a:86:a9:87:71: 68:cc:c0:56:d1:6c:b4:49:89:d5:f5:bc:e5:d6:97: 5e:f3:61:60:f5:a0:b7:b5:91:3a:39:3c:de:f7:3e: f4:b3:d0:95:e0:d2:19:8d:c7:17:c1:bb:5c:fc:3f: da:98:de:cd:44:6e:5c:66:12:1c:06:6a:ea:76:0a: e7:c1:80:c6:0c:4b:1b:47:d0:59:23:5c:48:10:cf: a3:59:de:e2:af:09:12:f5:52:55:d6:60:87:9c:e7: 38:32:4c:61:0f:b9:75:98:e5:27:03:e2:6d:4b:79: 8b:03:85:14:3b:0d:74:43:b7:75:97:24:b1:0d:c4: cc:f1:d9:43:a2:cc:cd:fe:6f:eb:68:99:d5:3a:00: a9:26:4a:52:4f:35:27:53:3f:82:ea:40:34:c2:6b: 22:fa:59:dc:df:31:15:e0:2f:8d:55:2b:73:4e:1c: f2:bb:2b:a5:cb:ca:b1:67:9d:f8:fe:af:75:b9:51: 79:db:51:6d:6d:64:66:96:b2:99:c6:96:57:78:89: c2:02:74:a3:7f:be:c8:82:7d:6e:8e:11:49:a9:da: 87:c3:7e:07:7d:bc:89:ba:c1:2a:bb:3b:b7:1f:15: 3e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B9:58:1D:F4:11:17:87:FA:12:6D:0F:1E:16:50:89:4A:73:89:5F X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1d:e4:63:e3:8f:a9:0c:9f:b2:ac:bd:66:26:17:d7:75:01: 5a:db:ec:13:dc:fd:10:7b:cd:c4:b1:8b:b3:06:70:88:3f:2e: 71:c9:eb:5d:8a:4a:d7:42:33:c0:01:6a:31:8d:43:5b:f0:f8: 14:dc:24:b7:fe:a3:bd:aa:be:cf:20:4a:9f:8e:44:2c:dd:6f: 64:25:a6:1b:39:4c:e9:cb:8c:54:6c:00:77:ed:ff:68:b3:34: b4:3c:fa:5a:d8:ea:eb:3b:a1:eb:90:6d:02:7f:eb:c0:7e:3d: 5a:8b:ba:c8:74:e0:c4:81:d6:fa:7a:b3:fc:2f:30:48:fd:fb: 87:f2:fe:77:39:eb:5b:78:bf:80:ee:c0:24:60:fb:ce:f1:f9: 58:7f:5e:1c:c3:ab:6d:21:2a:ff:0e:4a:9c:19:b3:bd:c3:37: fc:e6:a4:3b:b4:25:04:d0:4b:da:82:76:25:d6:e5:a0:26:13: ef:ea:c9:a7:fb:f8:d9:bd:7c:43:76:1f:4c:03:98:e6:c0:dd: 16:08:37:d8:c4:c0:63:fc:7b:8e:90:72:17:e1:2f:8c:40:9c: 18:79:60:ed:f2:bb:8f:48:2a:7c:57:e5:da:8c:4c:98:60:67: aa:cb:68:fb:94:99:19:96:93:c8:05:34:15:5b:c6:2c:35:30: e8:eb:0b:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUda5iva8mlDzsSlbn/ETlPK7yB+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNDA2MjMwODE3MDNaFw0yNDA2MjYxMzE1MDNaMDMxMTAvBgNV BAMTKDhFQjk1ODFERjQxMTE3ODdGQTEyNkQwRjFFMTY1MDg5NEE3Mzg5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCja3vPM8l2n0dqZujIjthD7KNB p69kGF0qhqmHcWjMwFbRbLRJidX1vOXWl17zYWD1oLe1kTo5PN73PvSz0JXg0hmN xxfBu1z8P9qY3s1EblxmEhwGaup2CufBgMYMSxtH0FkjXEgQz6NZ3uKvCRL1UlXW YIec5zgyTGEPuXWY5ScD4m1LeYsDhRQ7DXRDt3WXJLENxMzx2UOizM3+b+tomdU6 AKkmSlJPNSdTP4LqQDTCayL6WdzfMRXgL41VK3NOHPK7K6XLyrFnnfj+r3W5UXnb UW1tZGaWspnGlld4icICdKN/vsiCfW6OEUmp2ofDfgd9vIm6wSq7O7cfFT7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjrlYHfQRF4f6Em0PHhZQiUpziV8wHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8d5GPjj6kMn7KsvWYmF9d1AVrb7BPc/RB7 zcSxi7MGcIg/LnHJ612KStdCM8ABajGNQ1vw+BTcJLf+o72qvs8gSp+ORCzdb2Ql phs5TOnLjFRsAHft/2izNLQ8+lrY6us7oeuQbQJ/68B+PVqLush04MSB1vp6s/wv MEj9+4fy/nc561t4v4DuwCRg+87x+Vh/XhzDq20hKv8OSpwZs73DN/zmpDu0JQTQ S9qCdiXW5aAmE+/qyaf7+Nm9fEN2H0wDmObA3RYIN9jEwGP8e46QchfhL4xAnBh5 YO3yu49IKnxX5dqMTJhgZ6rLaPuUmRmWk8gFNBVbxiw1MOjrC1g= -----END CERTIFICATE-----Generated at Sun Jun 23 09:04:58 2024 by rpki-client on console-fra.rpki-client.org