$ rpki-client -vvf repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft File: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft (raw, json) Hash identifier: tesrpBw8KwLRjwvSR3zNCX0T/1UxphkdU85HqzIq6Uc= Subject key identifier: AF:CD:B0:2C:E7:77:46:EA:5B:2B:34:B4:00:2C:95:CA:6C:D8:86:C1 Authority key identifier: C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F Certificate issuer: /CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Certificate serial: 4E9D6A1883DB2E5D52660067A2A7BC5FA7CF46A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft Manifest number: B2 Signing time: Wed 29 May 2024 18:41:43 +0000 Manifest this update: Wed 29 May 2024 18:36:43 +0000 Manifest next update: Sat 01 Jun 2024 19:49:43 +0000 Files and hashes: 1: C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl (hash: QHyUQS/eIF8/I5LpF+QsvW61OOq9u0yt3lBa/Cb4c+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 19:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9d:6a:18:83:db:2e:5d:52:66:00:67:a2:a7:bc:5f:a7:cf:46:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F Validity Not Before: May 29 18:36:43 2024 GMT Not After : Jun 1 19:49:43 2024 GMT Subject: CN=AFCDB02CE77746EA5B2B34B4002C95CA6CD886C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:e0:9c:7b:d2:82:a6:37:3e:cc:88:0f:cf: 1b:c1:0b:4b:c1:f0:cc:6a:6f:c6:07:ba:e2:81:6b: a5:30:3a:21:72:cb:1f:2c:7d:86:79:33:f1:e6:b5: 8f:84:e6:7d:12:65:7e:fb:c9:ac:78:ff:de:fd:40: b4:eb:08:75:2d:e5:47:78:55:7c:27:d5:d5:02:74: c9:40:e7:6b:76:c3:be:47:f1:2f:29:90:94:98:a3: 18:71:b0:56:cd:6a:67:df:7c:43:fc:fe:a1:55:b2: 61:39:69:6e:ab:3b:f0:ad:52:5e:33:a3:9a:d7:8f: e3:54:4e:1d:fb:dd:4a:62:45:c9:30:8a:5f:83:5d: bb:39:c6:23:e6:71:3a:dd:76:d0:f4:98:37:80:01: 8f:e7:f2:5f:99:3e:2f:04:f3:63:df:5c:d2:61:74: a9:d4:36:6d:f4:9b:9b:9f:cf:d8:5d:6d:b8:11:bc: d7:4d:32:ec:61:e1:86:4a:18:2d:01:f2:73:8a:cb: 23:04:6d:32:c4:34:e7:37:d9:77:ec:2c:a5:db:91: 3c:63:13:5a:81:c6:0c:0d:e7:56:08:9e:8f:bf:3e: 75:54:8e:a9:f2:5e:ba:02:4b:28:a0:43:dd:0c:c6: fb:1f:d0:12:e5:c0:24:ed:ea:a8:27:48:98:f2:f8: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CD:B0:2C:E7:77:46:EA:5B:2B:34:B4:00:2C:95:CA:6C:D8:86:C1 X509v3 Authority Key Identifier: keyid:C5:A6:30:2D:82:8A:EC:E1:F1:4A:35:BA:8F:AC:FE:EB:26:8E:0E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb43f786-8235-4a90-8a07-5df9c6d64440/0/C5A6302D828AECE1F14A35BA8FACFEEB268E0E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8d:27:8c:9b:e9:ed:c7:7b:f6:af:e9:67:4f:1c:14:63:63: 4b:36:ed:f3:4c:5d:16:4c:77:86:94:c5:87:df:c3:e1:d5:73: ea:32:97:60:04:42:9f:82:21:c8:4b:f3:56:46:32:d2:2d:6c: be:7a:32:ab:ef:35:a2:c5:d8:4d:a7:14:8e:a8:ae:42:61:2d: 5d:17:54:03:6f:3f:ca:89:43:16:93:28:4b:13:17:24:0b:d3: bd:38:51:c7:9a:73:3c:c2:a1:a9:9b:51:25:65:cc:07:98:4c: 16:ed:9a:b7:74:ce:71:07:8e:77:21:00:e0:83:c2:5d:5c:c9: 32:b8:95:1d:5a:f8:c6:8b:a1:ab:3b:6d:0b:65:47:cb:bf:93: 02:f4:a6:08:a8:17:c8:77:ce:51:aa:5f:51:2e:b8:e3:a3:89: 45:f2:c8:8a:3f:36:7f:34:f6:91:16:1e:0e:a6:87:3f:b5:6e: 45:a5:1c:bc:c5:64:38:7e:6a:c7:4d:e8:61:56:0b:bb:b4:41: 96:22:5c:17:79:ab:ce:8f:93:15:14:19:b2:8a:df:6e:39:9f: 26:a8:2a:ce:e7:df:dd:0a:f6:15:fe:44:e7:f2:35:25:89:78: 9a:de:c4:87:03:f3:b8:a6:ea:aa:64:69:49:0b:62:0d:b5:60: 01:32:ee:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTp1qGIPbLl1SZgBnoqe8X6fPRqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIy NjhFMEU0RjAeFw0yNDA1MjkxODM2NDNaFw0yNDA2MDExOTQ5NDNaMDMxMTAvBgNV BAMTKEFGQ0RCMDJDRTc3NzQ2RUE1QjJCMzRCNDAwMkM5NUNBNkNEODg2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJx+Cce9KCpjc+zIgPzxvBC0vB 8Mxqb8YHuuKBa6UwOiFyyx8sfYZ5M/HmtY+E5n0SZX77yax4/979QLTrCHUt5Ud4 VXwn1dUCdMlA52t2w75H8S8pkJSYoxhxsFbNamfffEP8/qFVsmE5aW6rO/CtUl4z o5rXj+NUTh373UpiRckwil+DXbs5xiPmcTrddtD0mDeAAY/n8l+ZPi8E82PfXNJh dKnUNm30m5ufz9hdbbgRvNdNMuxh4YZKGC0B8nOKyyMEbTLENOc32XfsLKXbkTxj E1qBxgwN51YIno+/PnVUjqnyXroCSyigQ90Mxvsf0BLlwCTt6qgnSJjy+K6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr82wLOd3RupbKzS0ACyVymzYhsEwHwYDVR0j BBgwFoAUxaYwLYKK7OHxSjW6j6z+6yaODk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjQzZjc4Ni04MjM1LTRhOTAtOGEwNy01ZGY5YzZkNjQ0NDAvMC9DNUE2MzAyRDgy OEFFQ0UxRjE0QTM1QkE4RkFDRkVFQjI2OEUwRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZFRUIyNjhF MEU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I0M2Y3ODYtODIzNS00YTkwLThh MDctNWRmOWM2ZDY0NDQwLzAvQzVBNjMwMkQ4MjhBRUNFMUYxNEEzNUJBOEZBQ0ZF RUIyNjhFMEU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqNJ4yb6e3He/av6WdPHBRjY0s27fNMXRZM d4aUxYffw+HVc+oyl2AEQp+CIchL81ZGMtItbL56MqvvNaLF2E2nFI6orkJhLV0X VANvP8qJQxaTKEsTFyQL0704UceaczzCoambUSVlzAeYTBbtmrd0znEHjnchAOCD wl1cyTK4lR1a+MaLoas7bQtlR8u/kwL0pgioF8h3zlGqX1EuuOOjiUXyyIo/Nn80 9pEWHg6mhz+1bkWlHLzFZDh+asdN6GFWC7u0QZYiXBd5q86PkxUUGbKK3245nyao Ks7n390K9hX+ROfyNSWJeJrexIcD87im6qpkaUkLYg21YAEy7n8= -----END CERTIFICATE-----Generated at Wed May 29 21:55:26 2024 by rpki-client on console-ams.rpki-client.org