$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: iy0q7dg5Elimom1wSxKbMQz1dpjL7DtWcLxQjgAc6l0= Subject key identifier: CC:20:04:66:90:C8:C6:C9:71:EC:0E:8D:3C:E5:3F:D1:C5:7D:71:ED Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 3954FB169D877606F0122823B7F4E4785D7A9A2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 0141 Signing time: Sat 18 May 2024 17:11:38 +0000 Manifest this update: Sat 18 May 2024 17:06:38 +0000 Manifest next update: Wed 22 May 2024 01:46:38 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: JBkxmQrYuiIrmglq7n9nSZaz+eFr51oggYTeUQ+jtLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:54:fb:16:9d:87:76:06:f0:12:28:23:b7:f4:e4:78:5d:7a:9a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: May 18 17:06:38 2024 GMT Not After : May 22 01:46:38 2024 GMT Subject: CN=CC20046690C8C6C971EC0E8D3CE53FD1C57D71ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:40:ef:e0:62:29:29:63:63:a7:31:01:1d:e7: eb:94:74:28:43:5f:78:ab:27:28:c0:d2:32:b4:14: 94:4f:4c:c0:fe:4e:23:39:17:53:e6:78:c2:46:b5: e6:dd:fa:84:92:65:05:0f:93:e8:be:df:85:ec:90: 91:03:2d:e2:5f:68:88:61:dd:93:dc:0f:aa:05:cd: f7:2e:a5:bf:51:21:64:09:0a:42:79:92:a7:a3:d4: 85:a4:a5:53:de:ff:f7:71:08:66:fd:60:0c:60:0b: e2:13:34:a0:8d:e2:17:20:90:13:9b:e2:a1:b7:79: 25:99:70:7a:61:ca:90:21:fc:e5:b3:39:02:30:5b: a9:9d:fe:ba:58:f2:98:e7:30:9f:b9:aa:d2:53:9f: 21:40:95:2c:92:e2:fe:de:a4:2e:40:9e:4d:5b:8f: 81:17:9d:ad:d7:31:21:32:dc:a4:dd:c3:47:e8:7f: 11:b7:b6:8a:c4:db:10:62:83:6b:b3:a9:f6:ba:6f: e8:4c:c3:cc:a1:3b:0e:44:d4:fe:0a:e8:a7:94:7b: 3f:bb:24:57:81:a6:c4:db:c6:ee:20:b7:f9:5a:3c: 19:89:e3:b2:ef:9d:67:0b:b2:cd:52:a5:7b:80:3c: cd:e5:f7:15:fa:ec:cf:20:76:20:cc:82:15:ce:63: 77:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:20:04:66:90:C8:C6:C9:71:EC:0E:8D:3C:E5:3F:D1:C5:7D:71:ED X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:6b:0c:ec:60:f3:d4:dd:8c:96:32:71:cb:4e:79:92:dc:f6: ec:52:f0:4c:d8:ed:c3:8f:4f:5d:ef:f5:21:6f:44:59:34:6c: 2f:b7:b4:7f:cb:11:fb:55:17:f0:89:cc:ae:4c:15:5b:a6:ff: db:86:44:8e:90:8d:92:05:8d:73:1b:98:77:ee:a4:06:ed:e4: 05:1e:fd:84:34:c4:6b:a4:c6:86:65:28:32:86:b0:c7:6b:7b: ce:3d:b9:f7:5d:92:18:0c:fd:89:8a:3a:c6:3c:b9:fb:60:a7: c9:31:4e:ed:f0:d1:0c:cd:bf:71:01:ea:34:e2:eb:30:1b:c0: 4b:3d:b2:16:19:d8:ac:2b:15:85:1d:22:b8:50:72:8f:e0:f0: 92:97:e0:3e:6d:c5:21:88:b4:ed:f8:78:43:a4:f4:81:ee:20: 8b:f0:2f:4e:6b:24:e1:28:81:fa:95:1f:90:a8:bf:53:69:cc: ef:d3:2d:b0:cd:37:c0:15:97:d0:49:b9:e8:bf:61:0b:4d:1b: 4a:d6:af:2e:8d:89:08:6b:07:4b:60:ec:52:8b:cf:45:ca:e4: dc:a9:9a:28:5c:88:94:3a:17:bb:30:79:37:68:5c:1d:9c:1d: 09:4f:e5:82:ae:5f:76:71:8c:21:38:fb:e0:b9:a3:5a:08:6b: a6:d0:ae:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVT7Fp2HdgbwEigjt/TkeF16miwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNDA1MTgxNzA2MzhaFw0yNDA1MjIwMTQ2MzhaMDMxMTAvBgNV BAMTKENDMjAwNDY2OTBDOEM2Qzk3MUVDMEU4RDNDRTUzRkQxQzU3RDcxRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQO/gYikpY2OnMQEd5+uUdChD X3irJyjA0jK0FJRPTMD+TiM5F1PmeMJGtebd+oSSZQUPk+i+34XskJEDLeJfaIhh 3ZPcD6oFzfcupb9RIWQJCkJ5kqej1IWkpVPe//dxCGb9YAxgC+ITNKCN4hcgkBOb 4qG3eSWZcHphypAh/OWzOQIwW6md/rpY8pjnMJ+5qtJTnyFAlSyS4v7epC5Ank1b j4EXna3XMSEy3KTdw0fofxG3torE2xBig2uzqfa6b+hMw8yhOw5E1P4K6KeUez+7 JFeBpsTbxu4gt/laPBmJ47LvnWcLss1SpXuAPM3l9xX67M8gdiDMghXOY3etAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzCAEZpDIxslx7A6NPOU/0cV9ce0wHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlrDOxg89TdjJYycctOeZLc9uxS8EzY7cOP T13v9SFvRFk0bC+3tH/LEftVF/CJzK5MFVum/9uGRI6QjZIFjXMbmHfupAbt5AUe /YQ0xGukxoZlKDKGsMdre849ufddkhgM/YmKOsY8uftgp8kxTu3w0QzNv3EB6jTi 6zAbwEs9shYZ2KwrFYUdIrhQco/g8JKX4D5txSGItO34eEOk9IHuIIvwL05rJOEo gfqVH5Cov1NpzO/TLbDNN8AVl9BJuei/YQtNG0rWry6NiQhrB0tg7FKLz0XK5Nyp mihciJQ6F7sweTdoXB2cHQlP5YKuX3ZxjCE4++C5o1oIa6bQrn8= -----END CERTIFICATE-----Generated at Sat May 18 18:21:12 2024 by rpki-client on console-ams.rpki-client.org