$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: k3vGIlUJ2TJlNy6HTU9MHdBs+prdgihs4c4VtKbp0ns= Subject key identifier: EA:B7:91:E3:91:5E:25:D6:EE:8B:7E:8E:48:D8:46:22:BE:E7:33:1E Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 2AD6D518EB40141BBD2490E7729951CCA7A84707 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 0176 Signing time: Fri 17 May 2024 18:40:41 +0000 Manifest this update: Fri 17 May 2024 18:35:41 +0000 Manifest next update: Tue 21 May 2024 05:42:41 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: GwKrznAnzVxD2fqvYjFmwb9vkPNsNz9Aag8aQCp/GlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d6:d5:18:eb:40:14:1b:bd:24:90:e7:72:99:51:cc:a7:a8:47:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: May 17 18:35:41 2024 GMT Not After : May 21 05:42:41 2024 GMT Subject: CN=EAB791E3915E25D6EE8B7E8E48D84622BEE7331E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:94:7a:2b:ea:c1:a5:21:70:b7:c5:67:50: 44:5c:8c:c7:68:5b:1d:6d:14:f4:3e:3b:7d:ae:cd: 0d:b2:ed:6a:63:0e:18:97:ca:d3:5d:7a:09:ed:ca: 77:73:25:cd:91:68:99:a7:2e:a3:04:80:8a:76:5b: 46:3c:05:11:f8:cd:f5:02:1c:7a:70:7c:71:3f:f4: 75:00:92:d6:2d:a1:74:33:73:98:8a:24:72:ef:57: 99:5f:9a:fb:99:6f:11:cc:1e:70:7b:22:bc:18:e4: 7b:74:b0:9d:7d:97:60:10:ef:36:7d:18:c5:4f:51: 93:4f:be:d8:fe:70:92:35:f8:52:a4:5e:8e:19:0d: e5:ed:15:e5:a4:41:3d:88:6d:b7:50:dc:2f:55:b4: 17:4c:90:92:27:ae:3c:80:39:80:ed:e2:9a:a4:44: df:65:7a:e7:aa:cd:e2:fd:76:db:65:bd:e9:fa:58: b2:56:f7:c5:54:1b:cb:62:cc:4a:07:37:64:10:a5: 44:50:1a:82:9a:3f:ed:b4:60:17:98:74:ad:7a:64: 15:a7:80:88:69:2c:06:f7:83:42:b3:5c:45:a3:8b: 4b:f6:b6:2d:27:37:54:c2:59:3b:6a:d9:26:d6:88: 35:40:80:09:a9:7f:65:a0:60:9c:29:4f:49:b1:da: ca:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B7:91:E3:91:5E:25:D6:EE:8B:7E:8E:48:D8:46:22:BE:E7:33:1E X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:63:ab:27:28:ed:3d:ef:a3:f1:5c:22:04:70:12:79:5f:78: be:ea:2f:77:ca:9e:38:d9:95:85:5a:e8:ce:4a:f7:e3:49:9e: 16:1b:50:54:96:02:db:4a:3e:30:6c:99:71:19:00:07:c7:47: bf:c7:81:c1:eb:7e:19:54:65:51:e0:00:26:d2:d6:e5:3c:e6: 64:1c:63:d9:ec:86:c4:b2:af:3b:6a:ff:1e:b0:40:3a:26:a9: 70:e6:28:63:cc:42:f2:c2:27:9b:ef:77:da:8a:68:a9:14:9e: 57:58:07:ae:29:88:c6:62:da:4f:6e:df:44:a1:29:d2:67:62: bc:67:f5:42:7a:2c:5a:a3:de:ec:d0:0c:74:59:c3:d2:0c:af: 1d:d7:4f:ea:80:22:e9:b9:e4:09:61:51:20:ce:57:52:ef:bb: 26:26:31:a4:78:86:8d:67:21:6e:a5:a6:16:b3:c4:1e:ec:7e: 9f:54:c7:df:57:dc:ef:56:cb:ed:83:4d:6f:85:ff:20:be:2a: 12:45:8e:5e:d6:35:35:14:13:41:54:e0:44:6e:40:d4:a2:78: de:17:20:8b:85:1b:db:43:7b:03:c3:c7:17:b0:a9:e7:55:a2: 80:5e:b0:8c:6b:9e:2c:b6:35:91:1c:01:c4:56:df:31:43:8c: e3:35:40:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtbVGOtAFBu9JJDncplRzKeoRwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNDA1MTcxODM1NDFaFw0yNDA1MjEwNTQyNDFaMDMxMTAvBgNV BAMTKEVBQjc5MUUzOTE1RTI1RDZFRThCN0U4RTQ4RDg0NjIyQkVFNzMzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzG5R6K+rBpSFwt8VnUERcjMdo Wx1tFPQ+O32uzQ2y7WpjDhiXytNdegntyndzJc2RaJmnLqMEgIp2W0Y8BRH4zfUC HHpwfHE/9HUAktYtoXQzc5iKJHLvV5lfmvuZbxHMHnB7IrwY5Ht0sJ19l2AQ7zZ9 GMVPUZNPvtj+cJI1+FKkXo4ZDeXtFeWkQT2IbbdQ3C9VtBdMkJInrjyAOYDt4pqk RN9leueqzeL9dttlven6WLJW98VUG8tizEoHN2QQpURQGoKaP+20YBeYdK16ZBWn gIhpLAb3g0KzXEWji0v2ti0nN1TCWTtq2SbWiDVAgAmpf2WgYJwpT0mx2sohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6reR45FeJdbui36OSNhGIr7nMx4wHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZjqyco7T3vo/FcIgRwEnlfeL7qL3fKnjjZ lYVa6M5K9+NJnhYbUFSWAttKPjBsmXEZAAfHR7/HgcHrfhlUZVHgACbS1uU85mQc Y9nshsSyrztq/x6wQDomqXDmKGPMQvLCJ5vvd9qKaKkUnldYB64piMZi2k9u30Sh KdJnYrxn9UJ6LFqj3uzQDHRZw9IMrx3XT+qAIum55AlhUSDOV1LvuyYmMaR4ho1n IW6lphazxB7sfp9Ux99X3O9Wy+2DTW+F/yC+KhJFjl7WNTUUE0FU4ERuQNSieN4X IIuFG9tDewPDxxewqedVooBesIxrniy2NZEcAcRW3zFDjOM1QNE= -----END CERTIFICATE-----Generated at Fri May 17 20:01:49 2024 by rpki-client on console-ams.rpki-client.org