$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: a0vcuThWWKpCBDtwDTsOsPaTkqDG0gsR6CPc1O+jQyc= Subject key identifier: EA:C5:6D:88:39:07:3D:40:C0:77:02:A9:3E:27:EF:3E:0A:6F:57:3D Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 364D854165BA3ADFC4C486DE1750E3C96BBF9C66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 016B Signing time: Sun 19 May 2024 03:02:06 +0000 Manifest this update: Sun 19 May 2024 02:57:06 +0000 Manifest next update: Wed 22 May 2024 13:57:06 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: Upy44CZJn3PvxBt03GJ34dx7+gtUZa/Cqb725FVI/M4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4d:85:41:65:ba:3a:df:c4:c4:86:de:17:50:e3:c9:6b:bf:9c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: May 19 02:57:06 2024 GMT Not After : May 22 13:57:06 2024 GMT Subject: CN=EAC56D8839073D40C07702A93E27EF3E0A6F573D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:da:61:e6:bb:9b:54:0f:93:a8:6e:e6:c8: 52:09:c2:7c:fc:21:27:4b:1e:94:d9:53:dc:dc:73: 65:e0:bb:57:4e:ee:65:3b:1f:46:4d:2e:d9:51:c6: be:d1:04:c7:10:15:6a:ac:fd:7b:d2:c1:77:06:a4: 80:2a:0c:c6:68:62:f2:8b:da:24:57:5b:31:d7:c0: c2:6c:26:ff:89:37:a5:5c:84:12:67:84:6d:17:c8: cb:8b:e7:b8:bd:6b:93:dd:6a:22:9f:90:dd:8f:e1: 10:ab:c4:f6:4a:7f:50:5b:35:67:07:59:57:a4:57: 62:a8:d1:05:b5:55:3a:1a:70:29:dd:26:ac:19:c8: 90:6b:03:33:1b:2f:f2:33:c0:c0:a2:7a:6d:ec:66: a2:8b:c7:8d:f9:1c:0f:bf:a6:eb:dd:e6:25:97:79: f5:f8:7e:b4:87:7a:75:e6:83:28:d6:89:8f:77:5b: 9c:4c:63:32:9a:f4:6c:c1:4a:11:71:a7:59:74:3b: 52:83:b6:d3:d4:85:b6:e1:43:f6:8c:c7:86:13:9d: 76:a1:19:da:17:62:2a:3a:f6:ce:c9:e0:7f:46:fe: 65:d7:92:2f:eb:64:36:8e:d3:bc:77:40:ac:ce:24: c8:86:aa:5f:12:01:c3:75:bc:eb:e3:23:60:66:04: 8a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C5:6D:88:39:07:3D:40:C0:77:02:A9:3E:27:EF:3E:0A:6F:57:3D X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ee:90:cb:60:bb:4e:f5:ff:c2:ac:05:0c:2b:69:ac:93:e6: aa:f4:2e:30:1b:cc:c1:66:2f:9c:1c:c2:e6:43:59:03:29:29: 84:a7:a8:d3:10:be:10:22:c6:0a:cb:62:cc:38:5c:4c:3c:9b: 97:21:cb:f5:d6:30:3c:e7:74:ad:c1:2e:b4:80:03:08:4c:5b: 43:78:e8:fc:82:49:a1:d5:33:0f:fe:4e:9a:f4:f7:79:5f:09: ce:92:08:de:8a:c5:59:cd:36:11:99:74:ab:00:52:39:8a:ca: 9b:ff:c8:62:15:77:0d:32:0e:df:32:dc:2c:7c:cc:f1:e9:f2: 5e:f2:55:6c:bf:2e:a6:4d:2a:07:a7:e6:6a:e9:c3:93:1a:d7: 21:54:c9:05:1f:72:3f:e5:a5:86:81:eb:ee:59:62:42:29:bb: eb:62:96:dd:88:b8:00:fa:42:bb:f3:98:0b:3e:50:d3:5e:15: dc:ec:dc:64:e8:8a:1a:23:ba:86:f5:8f:59:ad:3c:66:10:db: f9:7d:75:49:7e:00:b7:3e:01:c7:2c:a5:28:02:41:78:79:b2: 15:81:e1:46:dc:f5:36:c1:00:5b:80:21:94:dc:77:85:78:14: fd:2f:81:a7:d7:be:14:06:52:03:0f:7e:17:88:e7:05:19:e0: 1d:52:f3:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNk2FQWW6Ot/ExIbeF1DjyWu/nGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNDA1MTkwMjU3MDZaFw0yNDA1MjIxMzU3MDZaMDMxMTAvBgNV BAMTKEVBQzU2RDg4MzkwNzNENDBDMDc3MDJBOTNFMjdFRjNFMEE2RjU3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCG9ph5rubVA+TqG7myFIJwnz8 ISdLHpTZU9zcc2Xgu1dO7mU7H0ZNLtlRxr7RBMcQFWqs/XvSwXcGpIAqDMZoYvKL 2iRXWzHXwMJsJv+JN6VchBJnhG0XyMuL57i9a5PdaiKfkN2P4RCrxPZKf1BbNWcH WVekV2Ko0QW1VToacCndJqwZyJBrAzMbL/IzwMCiem3sZqKLx435HA+/puvd5iWX efX4frSHenXmgyjWiY93W5xMYzKa9GzBShFxp1l0O1KDttPUhbbhQ/aMx4YTnXah GdoXYio69s7J4H9G/mXXki/rZDaO07x3QKzOJMiGql8SAcN1vOvjI2BmBIodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6sVtiDkHPUDAdwKpPifvPgpvVz0wHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLukMtgu071/8KsBQwraayT5qr0LjAbzMFm L5wcwuZDWQMpKYSnqNMQvhAixgrLYsw4XEw8m5chy/XWMDzndK3BLrSAAwhMW0N4 6PyCSaHVMw/+Tpr093lfCc6SCN6KxVnNNhGZdKsAUjmKypv/yGIVdw0yDt8y3Cx8 zPHp8l7yVWy/LqZNKgen5mrpw5Ma1yFUyQUfcj/lpYaB6+5ZYkIpu+tilt2IuAD6 QrvzmAs+UNNeFdzs3GToihojuob1j1mtPGYQ2/l9dUl+ALc+AccspSgCQXh5shWB 4Ubc9TbBAFuAIZTcd4V4FP0vgafXvhQGUgMPfheI5wUZ4B1S85E= -----END CERTIFICATE-----Generated at Sun May 19 03:37:36 2024 by rpki-client on console-ams.rpki-client.org