$ rpki-client -vvf repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft File: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft (raw, json) Hash identifier: NezCj6ITfX1OgUhbjLC4YYt4EW/IGDmho/14GJ+x6tQ= Subject key identifier: E7:25:93:4A:C5:AF:8F:8A:8E:34:D3:1F:51:E0:C8:23:04:20:AD:5E Authority key identifier: 55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 Certificate issuer: /CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Certificate serial: 66A8631F24856D68A50713D723019959FBB277D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft Manifest number: 0133 Signing time: Sun 19 May 2024 07:51:32 +0000 Manifest this update: Sun 19 May 2024 07:46:32 +0000 Manifest next update: Wed 22 May 2024 12:09:32 +0000 Files and hashes: 1: 5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl (hash: NhhIPlhOH4bEiD3QIxlpoQYNyQH/LmPGhn3zKNQqZq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a8:63:1f:24:85:6d:68:a5:07:13:d7:23:01:99:59:fb:b2:77:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04 Validity Not Before: May 19 07:46:32 2024 GMT Not After : May 22 12:09:32 2024 GMT Subject: CN=E725934AC5AF8F8A8E34D31F51E0C8230420AD5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7b:08:f0:b8:08:94:dc:be:a8:b3:f4:c0:10: 23:5b:fe:2d:b9:86:e5:c6:ec:6a:c2:a7:aa:f6:47: 50:5e:71:2f:eb:c1:a6:71:8d:85:b3:c1:69:e4:45: 05:cf:06:75:46:75:be:86:b9:ee:f4:a7:a0:6f:78: 8c:77:1d:84:46:02:48:68:20:16:f5:23:22:aa:a0: a8:fe:89:7d:65:52:18:30:05:65:17:45:1c:1e:75: f3:58:21:f9:cf:a9:8a:25:4f:8c:70:2a:49:b1:1d: 56:47:d5:c9:45:71:c3:34:19:fe:cd:c6:b0:e4:35: eb:d5:7c:29:54:58:ae:4d:da:00:e3:28:fe:0b:84: 4a:60:86:24:37:9a:bd:66:7d:75:26:6c:12:02:9c: 89:98:96:6a:f1:6f:2b:a3:2a:d3:b6:d1:b2:d5:c9: bb:d7:e6:9e:3d:11:4a:55:5b:cc:a1:8d:7f:aa:18: fa:4a:d3:8b:01:7e:08:8c:c9:8a:ae:73:09:d4:14: 28:fa:98:af:fe:61:fd:30:13:ab:b3:02:eb:13:7d: d2:d6:9d:c8:aa:18:90:a7:f4:70:72:7b:5a:bd:39: b5:f0:9e:6b:95:51:d6:6a:af:76:52:94:6b:00:18: 8b:38:d0:92:9e:64:d8:d5:b2:4f:af:31:77:ca:04: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:25:93:4A:C5:AF:8F:8A:8E:34:D3:1F:51:E0:C8:23:04:20:AD:5E X509v3 Authority Key Identifier: keyid:55:46:E9:F1:CF:2C:F5:82:78:C5:BD:B5:30:E9:1E:FD:1B:EC:EF:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1486ccd-0c95-491a-b9e6-667cee44594f/0/5546E9F1CF2CF58278C5BDB530E91EFD1BECEF04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:09:5e:d1:08:00:ff:ea:88:a6:90:0b:58:24:82:55:ba:c5: 8a:70:71:e9:5c:d7:99:aa:63:7c:d3:b0:cf:13:52:8b:62:46: b9:ac:9d:a3:25:72:a2:54:f6:71:f2:86:d8:8c:1a:e1:f3:98: 6a:ae:ff:3b:e9:88:10:0e:31:18:df:d2:60:98:81:40:07:59: f1:03:13:7d:f2:08:c8:1d:cf:15:0d:2c:ab:1c:87:57:14:fa: f1:da:57:7d:cf:6c:a5:6f:ed:21:10:2b:4a:c8:a5:1c:b1:72: 00:89:e6:cc:ac:61:06:a9:74:a2:a8:34:0f:12:ba:69:91:73: e1:8e:8d:53:93:ac:7e:62:71:85:ee:a0:a1:10:a5:db:7b:8c: 36:b9:97:5f:a2:97:f5:71:85:bb:e6:02:6e:a0:16:6f:25:23: 88:89:8c:9e:e3:55:bf:0f:30:ed:85:1b:ad:57:54:2f:75:3d: f7:b6:a3:bb:23:5a:23:4c:11:7b:91:22:f0:56:fe:bb:6e:48: 10:13:73:29:19:b2:94:f0:da:69:c9:45:c8:b6:4b:07:46:84: 27:91:c0:6b:00:da:72:19:45:b4:15:07:4a:4d:42:16:7e:14: c0:1d:5a:21:14:36:57:24:d5:77:4e:43:9f:8f:ff:6b:d0:00: fa:4d:a7:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqhjHySFbWilBxPXIwGZWfuyd9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQx QkVDRUYwNDAeFw0yNDA1MTkwNzQ2MzJaFw0yNDA1MjIxMjA5MzJaMDMxMTAvBgNV BAMTKEU3MjU5MzRBQzVBRjhGOEE4RTM0RDMxRjUxRTBDODIzMDQyMEFENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkewjwuAiU3L6os/TAECNb/i25 huXG7GrCp6r2R1BecS/rwaZxjYWzwWnkRQXPBnVGdb6Gue70p6BveIx3HYRGAkho IBb1IyKqoKj+iX1lUhgwBWUXRRwedfNYIfnPqYolT4xwKkmxHVZH1clFccM0Gf7N xrDkNevVfClUWK5N2gDjKP4LhEpghiQ3mr1mfXUmbBICnImYlmrxbyujKtO20bLV ybvX5p49EUpVW8yhjX+qGPpK04sBfgiMyYqucwnUFCj6mK/+Yf0wE6uzAusTfdLW nciqGJCn9HBye1q9ObXwnmuVUdZqr3ZSlGsAGIs40JKeZNjVsk+vMXfKBJ4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5yWTSsWvj4qONNMfUeDIIwQgrV4wHwYDVR0j BBgwFoAUVUbp8c8s9YJ4xb21MOke/Rvs7wQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTQ4NmNjZC0wYzk1LTQ5MWEtYjllNi02NjdjZWU0NDU5NGYvMC81NTQ2RTlGMUNG MkNGNTgyNzhDNUJEQjUzMEU5MUVGRDFCRUNFRjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFFRkQxQkVD RUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE0ODZjY2QtMGM5NS00OTFhLWI5 ZTYtNjY3Y2VlNDQ1OTRmLzAvNTU0NkU5RjFDRjJDRjU4Mjc4QzVCREI1MzBFOTFF RkQxQkVDRUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoJXtEIAP/qiKaQC1gkglW6xYpwcelc15mq Y3zTsM8TUotiRrmsnaMlcqJU9nHyhtiMGuHzmGqu/zvpiBAOMRjf0mCYgUAHWfED E33yCMgdzxUNLKsch1cU+vHaV33PbKVv7SEQK0rIpRyxcgCJ5sysYQapdKKoNA8S ummRc+GOjVOTrH5icYXuoKEQpdt7jDa5l1+il/VxhbvmAm6gFm8lI4iJjJ7jVb8P MO2FG61XVC91Pfe2o7sjWiNMEXuRIvBW/rtuSBATcykZspTw2mnJRci2SwdGhCeR wGsA2nIZRbQVB0pNQhZ+FMAdWiEUNlck1XdOQ5+P/2vQAPpNp/E= -----END CERTIFICATE-----Generated at Sun May 19 08:24:27 2024 by rpki-client on console-ams.rpki-client.org