$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: 3BVd/+30UuyK5EI+OC/j053Mo6G1pcWminlFCSqYWl4= Subject key identifier: DA:82:A9:F0:7C:F8:9D:85:89:43:A0:DF:A6:EA:E5:D9:F1:4B:3E:4D Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 19B211EFEB7F717662C10A14C5C8F0F87D5257B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: D9 Signing time: Tue 28 May 2024 14:50:35 +0000 Manifest this update: Tue 28 May 2024 14:45:35 +0000 Manifest next update: Sat 01 Jun 2024 00:53:35 +0000 Files and hashes: 1: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: te1T1EqIjA/OJ9QeDIYY7nRH/bfo7ViQBRbGdWFOWq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 00:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b2:11:ef:eb:7f:71:76:62:c1:0a:14:c5:c8:f0:f8:7d:52:57:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: May 28 14:45:35 2024 GMT Not After : Jun 1 00:53:35 2024 GMT Subject: CN=DA82A9F07CF89D858943A0DFA6EAE5D9F14B3E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:80:19:92:5c:a5:b5:dc:77:97:6f:f0:02: 81:5d:d9:d9:73:1f:91:aa:f1:59:d7:f0:a6:91:ea: 35:ff:63:5b:b7:c6:81:06:f9:ab:46:3c:15:ae:1b: 41:2f:86:f4:44:df:86:6a:2f:e0:de:b8:4b:17:e3: f7:c8:97:a4:f7:22:3b:12:3b:47:19:cf:84:e4:db: a7:4d:0c:45:57:f9:41:66:85:22:40:68:6f:9a:ae: 42:da:a9:cd:fe:16:1f:4d:39:1e:29:76:db:48:36: 51:94:c2:c3:18:c2:ea:64:02:19:7b:5e:18:7d:73: 9d:71:bb:c5:a3:0a:71:fb:92:c7:7c:23:07:1b:bc: a0:65:c2:35:66:38:45:ba:24:af:d4:b5:79:3d:93: df:38:a3:90:a9:be:48:a9:38:e1:84:04:95:0d:70: 70:ab:d3:56:91:1d:3e:22:5f:df:b5:62:34:53:81: ec:37:f0:f1:92:6b:24:73:b7:9b:15:99:1d:20:2f: c2:57:14:8d:8d:3b:03:be:1a:3f:f7:74:af:52:7b: c6:11:1f:78:8d:e3:db:fe:e7:28:83:15:3c:f6:28: e1:86:d2:a8:21:b6:b1:4b:ca:09:75:74:1e:31:26: 1f:b1:99:56:2c:58:4a:e1:98:e7:5f:05:dc:5e:b1: 1c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:82:A9:F0:7C:F8:9D:85:89:43:A0:DF:A6:EA:E5:D9:F1:4B:3E:4D X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:14:b0:db:db:e3:a4:cc:4c:41:11:f5:01:ec:ed:c9:91:7f: 61:cd:13:a4:82:ac:ab:75:3f:d5:32:26:3b:6c:ec:ab:51:21: 23:75:5d:8c:64:19:a1:34:83:d0:50:f9:bd:52:0c:de:db:0b: 4b:24:fb:ae:0f:85:33:fb:f3:12:24:37:c9:25:9b:83:16:fb: 09:3a:9b:cd:e7:6b:41:58:cf:61:d5:e4:a2:a3:68:af:65:49: bc:41:58:b0:5a:0d:9a:68:98:dc:04:fe:a7:55:ee:4d:f2:b1: 25:d3:f8:65:94:00:cb:7f:5b:43:c9:b8:06:af:f6:41:96:38: 82:9c:00:bc:79:54:fe:20:53:a7:c0:b5:28:d8:4c:a6:ee:83: 7c:a9:e8:9e:65:56:8c:ba:a4:69:76:2f:58:f6:fa:59:fd:63: 06:24:28:fa:58:af:6c:9a:4b:79:b0:1c:91:15:47:27:d3:5e: 96:b5:a2:a5:32:6f:b6:82:dd:93:7e:eb:41:02:1a:52:59:5a: f4:b1:8d:48:af:b3:e0:8c:ed:f0:ab:23:02:71:7a:09:bf:54: 39:d7:c6:e4:fa:20:5e:29:5d:63:ed:a1:8e:cd:f1:57:c2:d1: bb:2a:e8:fb:02:ea:ff:06:19:d7:d2:a8:d1:13:f2:bf:e2:5a: 85:0c:3b:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbIR7+t/cXZiwQoUxcjw+H1SV7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNDA1MjgxNDQ1MzVaFw0yNDA2MDEwMDUzMzVaMDMxMTAvBgNV BAMTKERBODJBOUYwN0NGODlEODU4OTQzQTBERkE2RUFFNUQ5RjE0QjNFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOV4AZklyltdx3l2/wAoFd2dlz H5Gq8VnX8KaR6jX/Y1u3xoEG+atGPBWuG0EvhvRE34ZqL+DeuEsX4/fIl6T3IjsS O0cZz4Tk26dNDEVX+UFmhSJAaG+arkLaqc3+Fh9NOR4pdttINlGUwsMYwupkAhl7 Xhh9c51xu8WjCnH7ksd8IwcbvKBlwjVmOEW6JK/UtXk9k984o5CpvkipOOGEBJUN cHCr01aRHT4iX9+1YjRTgew38PGSayRzt5sVmR0gL8JXFI2NOwO+Gj/3dK9Se8YR H3iN49v+5yiDFTz2KOGG0qghtrFLygl1dB4xJh+xmVYsWErhmOdfBdxesRxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2oKp8Hz4nYWJQ6Dfpurl2fFLPk0wHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcUsNvb46TMTEER9QHs7cmRf2HNE6SCrKt1 P9UyJjts7KtRISN1XYxkGaE0g9BQ+b1SDN7bC0sk+64PhTP78xIkN8klm4MW+wk6 m83na0FYz2HV5KKjaK9lSbxBWLBaDZpomNwE/qdV7k3ysSXT+GWUAMt/W0PJuAav 9kGWOIKcALx5VP4gU6fAtSjYTKbug3yp6J5lVoy6pGl2L1j2+ln9YwYkKPpYr2ya S3mwHJEVRyfTXpa1oqUyb7aC3ZN+60ECGlJZWvSxjUivs+CM7fCrIwJxegm/VDnX xuT6IF4pXWPtoY7N8VfC0bsq6PsC6v8GGdfSqNET8r/iWoUMO6I= -----END CERTIFICATE-----Generated at Tue May 28 19:28:19 2024 by rpki-client on console-ams.rpki-client.org