$ rpki-client -vvf repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft File: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft (raw, json) Hash identifier: cV2zAWcvBldLbhVWPBaXsgrwKbX6VXnwoemEqvgCa4I= Subject key identifier: 74:77:88:1D:E2:AC:32:44:81:C2:C3:14:60:E7:9B:16:EC:D1:42:95 Authority key identifier: B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 Certificate issuer: /CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Certificate serial: 10D1EC669B9296198FF20E8F490F0DF3D5F6345E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft Manifest number: 022D Signing time: Wed 29 May 2024 19:20:53 +0000 Manifest this update: Wed 29 May 2024 19:15:53 +0000 Manifest next update: Sat 01 Jun 2024 23:55:53 +0000 Files and hashes: 1: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl (hash: VtM4BCHmbau4UvMHvNWMrfY4/utNg4VHlNsIettDNUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d1:ec:66:9b:92:96:19:8f:f2:0e:8f:49:0f:0d:f3:d5:f6:34:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Validity Not Before: May 29 19:15:53 2024 GMT Not After : Jun 1 23:55:53 2024 GMT Subject: CN=7477881DE2AC324481C2C31460E79B16ECD14295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:1f:fb:02:b7:1f:30:53:3d:2e:6f:32:46: ee:45:7c:bd:6c:86:ca:df:b1:5b:da:2c:3a:4e:44: 82:20:44:e0:5c:97:c9:ef:39:ee:9d:ef:c2:e1:a3: 15:19:63:d6:b3:3b:a2:9d:90:b7:6d:f8:d0:94:fd: 63:5f:91:86:9e:34:b2:ee:3c:ef:74:24:e5:29:e3: 45:6a:cb:1b:45:c5:ea:3e:62:a3:02:07:87:a5:ad: eb:57:0d:ed:e3:b3:06:9e:2c:7d:d6:aa:3e:74:b9: 22:c8:25:04:9f:30:29:ff:0c:66:bb:af:f1:09:50: 34:e6:b2:9b:6f:d9:8e:ba:aa:fa:25:e9:24:60:97: 97:e9:59:25:26:cc:e3:05:64:1a:82:85:ce:41:c9: e4:8e:3a:c6:e8:35:d8:96:6b:06:dc:c3:8f:5a:70: d2:4e:8b:8a:f9:ba:40:72:2e:4c:fc:8f:f8:3b:7f: 46:45:53:a2:d3:ed:f9:92:a8:51:b3:54:64:d1:d8: 67:32:ff:38:2d:2e:6c:cd:49:f4:56:32:13:49:c4: fb:82:f2:93:d6:78:e8:13:fd:bc:ab:1e:62:94:52: e0:a7:b6:68:67:63:81:9f:f1:f8:d7:7d:79:13:a0: 02:3c:cd:d2:a3:3b:50:98:3b:dc:32:7d:3f:6d:39: e2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:77:88:1D:E2:AC:32:44:81:C2:C3:14:60:E7:9B:16:EC:D1:42:95 X509v3 Authority Key Identifier: keyid:B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:91:f5:82:21:34:ad:67:ac:19:92:e6:4f:50:b8:07:8a:b9: 56:30:4b:ba:4f:a9:13:21:02:93:ca:07:1f:ce:ec:13:38:44: aa:b7:35:37:67:c0:e3:49:27:a3:47:d9:ce:fe:59:a3:74:e2: ae:4a:4e:a1:b9:b6:ad:a4:ec:15:f1:39:a2:fb:90:a6:36:ab: 12:c8:db:ab:c3:50:17:05:2a:de:f8:db:38:24:18:56:c2:bd: c3:c2:93:10:1f:b4:90:87:09:80:fb:f1:c4:84:b4:ad:51:9e: 76:d2:85:58:a3:ad:bb:e0:51:42:3e:b3:07:86:68:9f:99:01: b5:ce:d9:8a:0e:33:0b:fb:7f:96:b1:c7:a8:ac:74:cf:75:2a: dd:a8:36:c8:88:c9:e7:64:b2:2b:1c:ac:ec:f0:b7:9b:43:e6: 27:aa:06:67:fe:21:ee:06:29:7c:b6:bc:6f:65:60:c8:00:67: 3e:59:eb:c5:e4:4d:2a:da:59:10:51:bb:0e:ad:b6:5e:d8:01: 40:22:76:1c:98:70:04:9f:e7:13:75:d0:fd:03:b7:09:cc:78: 76:96:e0:96:f7:47:b1:9e:37:e0:d5:19:6f:59:c5:92:66:3e: 7b:4c:03:fa:ab:46:c9:1e:da:38:7b:22:6e:b2:b1:1b:9f:cd: 6c:2d:92:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENHsZpuSlhmP8g6PSQ8N89X2NF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYw Q0MxODRDMTAeFw0yNDA1MjkxOTE1NTNaFw0yNDA2MDEyMzU1NTNaMDMxMTAvBgNV BAMTKDc0Nzc4ODFERTJBQzMyNDQ4MUMyQzMxNDYwRTc5QjE2RUNEMTQyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEdB/7ArcfMFM9Lm8yRu5FfL1s hsrfsVvaLDpORIIgROBcl8nvOe6d78LhoxUZY9azO6KdkLdt+NCU/WNfkYaeNLLu PO90JOUp40VqyxtFxeo+YqMCB4elretXDe3jswaeLH3Wqj50uSLIJQSfMCn/DGa7 r/EJUDTmsptv2Y66qvol6SRgl5fpWSUmzOMFZBqChc5ByeSOOsboNdiWawbcw49a cNJOi4r5ukByLkz8j/g7f0ZFU6LT7fmSqFGzVGTR2Gcy/zgtLmzNSfRWMhNJxPuC 8pPWeOgT/byrHmKUUuCntmhnY4Gf8fjXfXkToAI8zdKjO1CYO9wyfT9tOeKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdHeIHeKsMkSBwsMUYOebFuzRQpUwHwYDVR0j BBgwFoAUsNWgU0DFXH4s3IOtzkd0rwzBhMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWNmNTY1Ny1lY2RjLTRkOTctYTU5Yy1iNjc2Y2U1M2M4YTEvMC9CMEQ1QTA1MzQw QzU1QzdFMkNEQzgzQURDRTQ3NzRBRjBDQzE4NEMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYwQ0Mx ODRDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0 QUYwQ0MxODRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuR9YIhNK1nrBmS5k9QuAeKuVYwS7pPqRMh ApPKBx/O7BM4RKq3NTdnwONJJ6NH2c7+WaN04q5KTqG5tq2k7BXxOaL7kKY2qxLI 26vDUBcFKt742zgkGFbCvcPCkxAftJCHCYD78cSEtK1RnnbShVijrbvgUUI+sweG aJ+ZAbXO2YoOMwv7f5axx6isdM91Kt2oNsiIyedksiscrOzwt5tD5ieqBmf+Ie4G KXy2vG9lYMgAZz5Z68XkTSraWRBRuw6ttl7YAUAidhyYcASf5xN10P0DtwnMeHaW 4Jb3R7GeN+DVGW9ZxZJmPntMA/qrRske2jh7Im6ysRufzWwtkjw= -----END CERTIFICATE-----Generated at Wed May 29 21:54:56 2024 by rpki-client on console-ams.rpki-client.org