$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: uNINGFd8dtV4jS/kSERMH5DkhIZjGyo4AZeguV+drwM= Subject key identifier: 8F:DF:4A:B5:CF:73:36:0D:BC:1C:B5:D5:57:11:81:E0:27:39:AE:6E Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 2388B62AC8D3CD982FDAB3117D4B4CEE5657AB33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: 0E Signing time: Thu 27 Jun 2024 19:20:33 +0000 Manifest this update: Thu 27 Jun 2024 19:15:33 +0000 Manifest next update: Mon 01 Jul 2024 01:13:33 +0000 Files and hashes: 1: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: OrkyEG3FqRY4Vvm9xpRzHEexguZ7JGZSrB5/F5vOjVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 23:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:88:b6:2a:c8:d3:cd:98:2f:da:b3:11:7d:4b:4c:ee:56:57:ab:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Jun 27 19:15:33 2024 GMT Not After : Jul 1 01:13:33 2024 GMT Subject: CN=8FDF4AB5CF73360DBC1CB5D5571181E02739AE6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:43:5e:dd:91:ec:cd:12:a7:36:ef:6e:1e:0c: b6:c0:8c:d4:9f:63:5b:bf:e6:f1:37:f0:01:42:d5: d0:57:04:bc:12:af:d4:e0:7e:47:3e:a7:1c:eb:30: ca:68:78:f0:a3:c5:dc:61:40:e3:c5:a0:b6:bb:77: e0:23:6a:cb:a7:ae:7b:c4:54:bd:1c:55:cb:01:62: c2:cd:ab:28:42:43:9b:90:9c:2d:3c:36:10:0a:0c: 6d:be:e7:6e:56:49:31:87:19:28:66:34:dd:5a:cf: 8e:56:18:27:b9:c2:88:83:d5:89:41:d6:2b:48:4b: b4:bb:6d:8a:fa:aa:11:32:2d:35:fb:c0:93:5d:9d: ea:94:04:9b:bd:70:c3:3f:df:3e:85:fe:3c:ac:7f: 08:e4:5e:97:2c:a3:9a:b0:9b:53:93:7a:eb:1b:95: c9:f9:a8:a6:74:a0:e3:06:94:c2:79:29:8f:c5:fe: be:01:5c:aa:24:bc:94:f5:2b:35:14:15:5e:ca:32: 4c:5f:bf:b1:80:81:4b:44:d4:a7:30:14:d2:47:51: 51:67:ec:14:9f:d3:e0:0d:cd:62:3f:56:86:03:05: 29:7f:9d:48:c9:db:66:53:51:41:49:5f:f4:e2:85: 73:9b:3a:0a:71:3b:b5:1e:c8:d2:d4:b3:8b:50:55: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DF:4A:B5:CF:73:36:0D:BC:1C:B5:D5:57:11:81:E0:27:39:AE:6E X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:21:e3:64:e3:da:b2:f1:be:a0:60:6d:1c:5a:59:37:ef:1d: f0:b8:73:30:6c:bd:df:88:24:f8:54:70:e4:b0:09:4d:67:d6: 72:1f:de:77:e3:13:e7:66:98:a0:e9:78:ec:b4:a3:7a:84:bf: 35:27:56:23:07:1a:f4:be:96:05:48:8b:a9:c4:ce:f5:42:55: 58:63:45:e2:4c:41:8b:f0:ae:e6:e1:e9:f8:1f:b1:34:32:06: d6:d2:1c:0d:a2:0c:c4:6c:c7:17:f5:f0:ac:e6:32:14:42:75: 14:6f:c4:e8:89:2a:58:25:0a:41:11:98:1e:6e:d7:83:5c:9f: 8f:c5:96:1a:1d:95:e7:f5:4c:c2:80:8d:fc:4a:a6:8b:aa:50: de:e7:5e:d0:65:0a:ae:11:d0:28:69:81:79:03:d1:d1:fe:6f: 5c:29:60:ae:79:c4:34:b9:f4:9b:b0:c6:d5:9d:f2:7a:57:db: df:77:4b:27:8c:ae:b2:0f:25:52:7f:15:c7:ff:29:5f:43:9e: 78:66:58:03:c7:e8:b7:bd:47:29:23:cd:8b:4c:86:fb:c9:ec: bc:45:76:cc:7e:a4:c1:69:56:9c:11:0b:da:80:e5:66:30:12: fc:c9:d2:32:fd:7c:8c:bf:57:c5:13:ab:b3:3c:0d:d9:05:ce: f3:3c:93:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI4i2KsjTzZgv2rMRfUtM7lZXqzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNDA2MjcxOTE1MzNaFw0yNDA3MDEwMTEzMzNaMDMxMTAvBgNV BAMTKDhGREY0QUI1Q0Y3MzM2MERCQzFDQjVENTU3MTE4MUUwMjczOUFFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhQ17dkezNEqc2724eDLbAjNSf Y1u/5vE38AFC1dBXBLwSr9Tgfkc+pxzrMMpoePCjxdxhQOPFoLa7d+AjasunrnvE VL0cVcsBYsLNqyhCQ5uQnC08NhAKDG2+525WSTGHGShmNN1az45WGCe5woiD1YlB 1itIS7S7bYr6qhEyLTX7wJNdneqUBJu9cMM/3z6F/jysfwjkXpcso5qwm1OTeusb lcn5qKZ0oOMGlMJ5KY/F/r4BXKokvJT1KzUUFV7KMkxfv7GAgUtE1KcwFNJHUVFn 7BSf0+ANzWI/VoYDBSl/nUjJ22ZTUUFJX/TihXObOgpxO7UeyNLUs4tQVWgnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj99Ktc9zNg28HLXVVxGB4Cc5rm4wHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgh42Tj2rLxvqBgbRxaWTfvHfC4czBsvd+I JPhUcOSwCU1n1nIf3nfjE+dmmKDpeOy0o3qEvzUnViMHGvS+lgVIi6nEzvVCVVhj ReJMQYvwrubh6fgfsTQyBtbSHA2iDMRsxxf18KzmMhRCdRRvxOiJKlglCkERmB5u 14Ncn4/Flhodlef1TMKAjfxKpouqUN7nXtBlCq4R0ChpgXkD0dH+b1wpYK55xDS5 9JuwxtWd8npX2993SyeMrrIPJVJ/Fcf/KV9DnnhmWAPH6Le9RykjzYtMhvvJ7LxF dsx+pMFpVpwRC9qA5WYwEvzJ0jL9fIy/V8UTq7M8DdkFzvM8k8s= -----END CERTIFICATE-----Generated at Thu Jun 27 21:45:36 2024 by rpki-client on console-fra.rpki-client.org