$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: dHt0Pav2WM6vU1AqtaJfLUdr/UvQutiEwfACm4UEZIc= Subject key identifier: 93:BB:AB:06:70:86:A4:7F:19:EA:C0:C2:6E:51:0A:FC:02:41:20:5B Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: B7178F85DABE611ED9CE22C51E36D291660828 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: 0B Signing time: Tue 25 Jun 2024 12:41:13 +0000 Manifest this update: Tue 25 Jun 2024 12:36:13 +0000 Manifest next update: Fri 28 Jun 2024 22:15:13 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: xgPIxADycZB5hEsT2dHp++YhJzGyjm2SMd1CV/1EClg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Jun 2024 17:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b7:17:8f:85:da:be:61:1e:d9:ce:22:c5:1e:36:d2:91:66:08:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Jun 25 12:36:13 2024 GMT Not After : Jun 28 22:15:13 2024 GMT Subject: CN=93BBAB067086A47F19EAC0C26E510AFC0241205B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:ec:a5:22:e4:cd:d5:77:bd:e7:ee:ea:61: 8e:d9:7a:1d:09:2e:b9:5c:78:fc:87:33:56:46:e1: 32:51:96:42:0d:80:8a:4b:85:59:d6:8e:3c:17:ca: 68:a7:b0:9c:b5:9c:08:8c:6a:c0:57:e8:cd:f4:40: 37:42:96:e5:81:d7:73:fd:5d:2b:ce:be:0f:36:39: 6a:d3:07:f4:49:c7:7b:39:64:23:c8:c7:d7:78:e5: f5:a9:54:d6:1a:8b:9a:30:09:d9:61:ad:26:3e:b7: bc:a9:bc:b8:a8:35:41:87:e9:97:3e:42:ad:af:e8: ac:c1:1c:b4:f1:00:72:0c:63:b2:96:7e:07:3e:b0: b8:f2:64:af:f2:9d:1e:51:2e:53:fe:bf:eb:15:85: 5c:b4:c9:75:de:78:01:93:6f:d1:c7:dd:ee:1e:43: b4:67:98:c3:e3:e7:1c:7d:29:42:9f:57:24:45:50: e2:8a:3b:f6:d5:b0:fb:ff:c1:04:30:56:14:b6:47: 64:72:90:30:8a:cf:8f:58:47:5f:ea:88:07:05:f5: ff:74:46:b0:30:a3:b8:d0:f1:7b:e0:9b:4f:ab:d2: 44:a0:39:93:4e:5f:a4:48:ba:cf:c8:bf:1d:70:15: 15:53:f3:57:d9:31:db:0c:48:60:9c:f8:d9:53:b5: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BB:AB:06:70:86:A4:7F:19:EA:C0:C2:6E:51:0A:FC:02:41:20:5B X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:0a:1c:e5:ff:0f:0d:74:60:85:c4:5d:ec:80:39:f0:ce:19: 32:19:2c:e1:8d:17:b4:87:7a:51:72:e4:6b:db:91:33:ab:4f: b8:27:98:7e:35:a7:c5:d7:6c:f1:6f:32:04:5f:b9:86:3c:fc: 6c:1a:1c:21:27:cf:56:ce:93:c9:5a:b9:3b:b2:a8:a8:6c:b2: 90:ac:69:de:21:7f:0a:59:40:73:94:bb:2e:f7:bf:82:09:ae: ca:38:3c:34:f1:f8:24:6c:19:47:bc:ce:92:77:2d:62:13:9a: 46:a6:fe:9d:bf:ed:c8:d9:8d:2c:ea:3e:02:df:c4:2b:12:45: 2a:9e:98:97:85:6c:81:61:3d:9f:0a:b8:d8:5b:d1:38:3f:2e: cc:64:a7:ae:2e:03:c4:10:50:d4:81:9a:97:de:c9:bb:d2:39: a8:9e:93:46:1a:17:bb:63:e1:3a:04:3c:55:31:6d:2f:26:4f: 80:ad:c6:01:9c:41:54:4c:f5:95:98:75:a2:2e:bb:54:bc:ce: 62:13:de:fe:5f:8f:a0:2d:98:23:c0:7b:72:ee:be:26:0d:6b: 0a:95:3d:7d:84:fd:bb:f2:b9:81:d4:7f:08:d7:24:fa:10:87: 22:e2:d1:0f:3c:a2:1c:17:31:30:5f:d7:22:54:7b:53:7e:5c: a2:44:45:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUALcXj4XavmEe2c4ixR420pFmCCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNDA2MjUxMjM2MTNaFw0yNDA2MjgyMjE1MTNaMDMxMTAvBgNV BAMTKDkzQkJBQjA2NzA4NkE0N0YxOUVBQzBDMjZFNTEwQUZDMDI0MTIwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSuylIuTN1Xe95+7qYY7Zeh0J LrlcePyHM1ZG4TJRlkINgIpLhVnWjjwXyminsJy1nAiMasBX6M30QDdCluWB13P9 XSvOvg82OWrTB/RJx3s5ZCPIx9d45fWpVNYai5owCdlhrSY+t7ypvLioNUGH6Zc+ Qq2v6KzBHLTxAHIMY7KWfgc+sLjyZK/ynR5RLlP+v+sVhVy0yXXeeAGTb9HH3e4e Q7RnmMPj5xx9KUKfVyRFUOKKO/bVsPv/wQQwVhS2R2RykDCKz49YR1/qiAcF9f90 RrAwo7jQ8Xvgm0+r0kSgOZNOX6RIus/Ivx1wFRVT81fZMdsMSGCc+NlTtdq9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk7urBnCGpH8Z6sDCblEK/AJBIFswHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMKHOX/Dw10YIXEXeyAOfDOGTIZLOGNF7SH elFy5GvbkTOrT7gnmH41p8XXbPFvMgRfuYY8/GwaHCEnz1bOk8lauTuyqKhsspCs ad4hfwpZQHOUuy73v4IJrso4PDTx+CRsGUe8zpJ3LWITmkam/p2/7cjZjSzqPgLf xCsSRSqemJeFbIFhPZ8KuNhb0Tg/Lsxkp64uA8QQUNSBmpfeybvSOaiek0YaF7tj 4ToEPFUxbS8mT4CtxgGcQVRM9ZWYdaIuu1S8zmIT3v5fj6AtmCPAe3LuviYNawqV PX2E/bvyuYHUfwjXJPoQhyLi0Q88ohwXMTBf1yJUe1N+XKJERQM= -----END CERTIFICATE-----Generated at Tue Jun 25 15:58:12 2024 by rpki-client on console-fra.rpki-client.org