$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: 1dj+6MLPTW2ju7gec3T+uZPr4dfZjbjuHkHoYjv70hw= Subject key identifier: 39:E2:C3:8E:77:D2:E8:2A:C3:F7:2B:C6:19:F8:93:4B:0B:73:D7:A4 Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 4771C17D6B4CCEDD2ADC14A00E5090D5C10CC79A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 015E Signing time: Sun 19 May 2024 13:02:02 +0000 Manifest this update: Sun 19 May 2024 12:57:02 +0000 Manifest next update: Wed 22 May 2024 23:32:02 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: dAXJoaQyvbGdqu52TG1dZeZuKgIaCYXSo4SPbfEaCLw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:71:c1:7d:6b:4c:ce:dd:2a:dc:14:a0:0e:50:90:d5:c1:0c:c7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: May 19 12:57:02 2024 GMT Not After : May 22 23:32:02 2024 GMT Subject: CN=39E2C38E77D2E82AC3F72BC619F8934B0B73D7A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:9d:78:e4:55:60:c0:57:ed:42:e2:08:6c: c4:6d:61:f8:a2:93:a2:0f:8b:36:cc:8c:c6:62:82: f8:c7:03:6d:20:d5:22:36:3f:84:5b:68:fe:f7:97: 0e:4f:80:9d:a7:07:55:0b:a1:07:aa:77:18:29:a9: b3:b6:d8:b4:f5:3f:28:cc:58:7b:6d:d1:61:63:c8: c8:01:c2:32:d9:7b:02:88:c3:e2:62:73:3f:3f:0a: f4:e6:06:fa:30:53:8a:e7:87:26:46:b9:3a:52:67: 9e:ae:fe:50:34:4a:8d:ef:f7:9b:6c:3f:d5:7c:a0: cb:0c:2c:27:8e:80:e5:9b:a3:a7:e2:24:4e:f5:c5: 42:9a:19:e8:a4:5e:3b:1b:aa:91:80:96:c1:e7:a1: e5:87:88:4f:28:7b:2f:fd:25:a2:b5:38:87:3d:7d: bc:c1:59:d4:47:61:8d:ab:7d:9e:2e:df:ad:34:96: f2:3e:89:46:95:c9:06:e8:dc:9b:67:9d:4d:00:e4: 2b:d1:a9:5b:55:dd:d5:2d:e3:4c:bc:44:9d:53:ae: c7:4b:b9:34:2c:f1:eb:cf:c7:00:f1:ce:83:0f:e8: c0:14:d7:e7:32:12:c6:b3:e8:df:11:c8:ce:07:38: ba:62:08:bf:af:42:d6:11:82:dd:a7:4d:62:4b:f4: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E2:C3:8E:77:D2:E8:2A:C3:F7:2B:C6:19:F8:93:4B:0B:73:D7:A4 X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d3:7d:1b:02:28:77:4c:44:ca:87:57:f9:1a:5c:88:86:8d: 3d:cd:84:2f:38:f2:03:6e:8e:7a:78:2d:26:d5:63:c4:d4:74: 6a:54:b0:50:29:70:f9:e2:c9:c0:eb:c2:91:40:e8:df:17:4c: 30:40:91:94:dd:0b:20:e9:7a:24:a6:c2:a4:e2:72:8f:45:13: e5:ef:b9:05:db:fa:0f:5c:59:8f:a6:e6:38:cb:67:a1:f1:0d: df:44:bf:cf:75:18:d9:6e:4f:76:38:61:1b:55:c6:18:58:e7: 07:62:04:cd:ac:e6:ae:f6:c1:e7:e0:cb:cc:6d:dd:55:e6:eb: 6f:df:b1:7a:48:a7:62:4c:c4:da:ed:2c:5a:04:4d:97:7c:7b: 8d:f0:7e:2d:9e:a4:95:a4:0b:c3:bd:69:69:01:22:a9:16:ac: 83:5f:50:66:d2:f6:e4:93:24:ca:9a:b7:dd:9c:6d:61:f8:ea: 45:23:f2:a5:5a:78:b5:55:b3:c7:f6:61:a4:24:30:14:7f:b3: 4b:07:6a:ff:e8:74:23:9f:12:bb:69:45:db:28:9a:fb:fb:d5: 40:7d:81:99:be:df:a0:c9:92:ed:ec:d6:c2:2e:e5:b8:a0:36: 13:b2:d9:bf:95:0d:65:c9:61:71:9b:96:2a:72:5f:cd:ba:6d: 1f:c2:a9:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3HBfWtMzt0q3BSgDlCQ1cEMx5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNDA1MTkxMjU3MDJaFw0yNDA1MjIyMzMyMDJaMDMxMTAvBgNV BAMTKDM5RTJDMzhFNzdEMkU4MkFDM0Y3MkJDNjE5Rjg5MzRCMEI3M0Q3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Rp145FVgwFftQuIIbMRtYfii k6IPizbMjMZigvjHA20g1SI2P4RbaP73lw5PgJ2nB1ULoQeqdxgpqbO22LT1PyjM WHtt0WFjyMgBwjLZewKIw+Jicz8/CvTmBvowU4rnhyZGuTpSZ56u/lA0So3v95ts P9V8oMsMLCeOgOWbo6fiJE71xUKaGeikXjsbqpGAlsHnoeWHiE8oey/9JaK1OIc9 fbzBWdRHYY2rfZ4u3600lvI+iUaVyQbo3JtnnU0A5CvRqVtV3dUt40y8RJ1TrsdL uTQs8evPxwDxzoMP6MAU1+cyEsaz6N8RyM4HOLpiCL+vQtYRgt2nTWJL9MUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOeLDjnfS6CrD9yvGGfiTSwtz16QwHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvTfRsCKHdMRMqHV/kaXIiGjT3NhC848gNu jnp4LSbVY8TUdGpUsFApcPniycDrwpFA6N8XTDBAkZTdCyDpeiSmwqTico9FE+Xv uQXb+g9cWY+m5jjLZ6HxDd9Ev891GNluT3Y4YRtVxhhY5wdiBM2s5q72wefgy8xt 3VXm62/fsXpIp2JMxNrtLFoETZd8e43wfi2epJWkC8O9aWkBIqkWrINfUGbS9uST JMqat92cbWH46kUj8qVaeLVVs8f2YaQkMBR/s0sHav/odCOfErtpRdsomvv71UB9 gZm+36DJku3s1sIu5bigNhOy2b+VDWXJYXGblipyX826bR/Cqfo= -----END CERTIFICATE-----Generated at Sun May 19 13:35:05 2024 by rpki-client on console-ams.rpki-client.org