$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: al0SVMmPyJua3VV1joqooQYBn2/WbLXwA09Z9jj/ElE= Subject key identifier: 33:FF:DA:E6:2C:F6:9B:BA:E4:D4:9A:BD:2D:41:09:89:FD:21:F3:AB Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 20483B1CCD8814B3994EDCDEF7FB43FEA65FD570 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 03C9 Signing time: Sun 19 May 2024 13:31:20 +0000 Manifest this update: Sun 19 May 2024 13:26:20 +0000 Manifest next update: Wed 22 May 2024 20:32:20 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: DDma96EUoxrtIW18Vqiy98S/jDJ4+Y9VdwkDpO3VhFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:48:3b:1c:cd:88:14:b3:99:4e:dc:de:f7:fb:43:fe:a6:5f:d5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: May 19 13:26:20 2024 GMT Not After : May 22 20:32:20 2024 GMT Subject: CN=33FFDAE62CF69BBAE4D49ABD2D410989FD21F3AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:e7:60:0f:54:bb:f9:2f:9c:e0:17:1e:e5: 49:75:44:23:1f:8d:a0:e8:7f:4a:a4:a3:1c:18:5b: f3:65:ae:d4:10:b7:a3:41:88:64:0b:5a:8e:d5:f6: b2:99:ed:1d:4c:8c:e2:00:a5:24:21:17:cd:7a:c7: 67:fa:61:f7:1a:b3:bf:2f:02:51:09:3e:19:a8:00: 36:86:d6:7d:d9:ff:4a:73:4e:b9:41:bb:c5:26:e1: e6:61:c4:26:64:e6:98:fd:92:0d:19:e1:d6:cf:2d: 76:b5:96:0e:10:90:d1:ec:41:66:b2:d2:54:8c:d7: 01:03:de:a8:a1:50:da:73:38:75:ed:81:c2:0e:4b: c5:31:4a:e7:db:cc:8f:e4:15:ee:44:e7:96:a5:03: 8c:46:5b:f8:b6:d8:e1:48:de:47:85:2a:1c:70:e0: bb:9f:34:dd:01:19:4d:48:a1:e9:b7:75:16:f0:a7: 7b:48:d9:ea:82:a9:ce:f3:98:a9:5b:b5:83:50:56: e7:49:0a:af:56:38:d3:da:97:c8:34:1b:57:66:af: 6a:34:ed:a9:03:b3:cf:55:4d:c0:50:70:41:8c:45: 7a:df:a0:70:ff:e1:9e:2a:1d:48:6a:9d:89:e6:0a: 02:56:75:ac:e5:44:18:f3:38:64:0a:af:5f:bc:48: f1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FF:DA:E6:2C:F6:9B:BA:E4:D4:9A:BD:2D:41:09:89:FD:21:F3:AB X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:30:0d:9c:01:aa:08:6f:8b:dc:9c:8a:26:88:41:96:e7:21: 9e:62:55:69:b7:ea:48:ce:64:e1:ed:5a:76:30:f0:81:2a:93: 5f:54:a2:43:d7:b2:c2:22:24:03:cb:fc:30:56:57:11:5e:a1: 7e:36:5c:ba:80:2c:f9:7a:8a:54:db:66:e5:8c:60:b1:4d:e3: 66:a8:92:82:84:5f:48:59:60:8a:95:ed:48:03:09:f2:0e:da: d9:45:72:28:b2:63:b1:dd:b5:de:ea:fb:df:45:bd:62:de:58: 27:af:5a:ec:bd:56:01:f5:d0:53:64:52:66:71:0f:12:9c:64: 83:9d:9a:00:86:bd:bd:50:11:f3:19:25:47:27:9e:86:32:74: a1:2f:bf:bc:3d:6b:93:5a:cc:0e:49:b6:96:9b:8e:f3:fd:f3: aa:25:52:02:cd:55:7b:c9:1c:48:0c:4c:1c:95:1c:62:51:f9: 2f:8b:95:fc:24:08:cf:6a:59:a4:6d:16:aa:f3:40:92:ad:58: 22:77:ac:a7:e4:36:df:66:35:8a:cc:a1:62:64:bf:52:1a:24: 2a:8f:08:7f:37:de:32:94:b3:dd:3d:7b:d2:71:05:6f:a6:cc: 91:a0:43:5a:d3:87:56:bb:80:f2:d9:d4:f9:cf:c3:ef:d7:73: ce:8b:ee:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIEg7HM2IFLOZTtze9/tD/qZf1XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNDA1MTkxMzI2MjBaFw0yNDA1MjIyMDMyMjBaMDMxMTAvBgNV BAMTKDMzRkZEQUU2MkNGNjlCQkFFNEQ0OUFCRDJENDEwOTg5RkQyMUYzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOOdgD1S7+S+c4Bce5Ul1RCMf jaDof0qkoxwYW/NlrtQQt6NBiGQLWo7V9rKZ7R1MjOIApSQhF816x2f6Yfcas78v AlEJPhmoADaG1n3Z/0pzTrlBu8Um4eZhxCZk5pj9kg0Z4dbPLXa1lg4QkNHsQWay 0lSM1wED3qihUNpzOHXtgcIOS8UxSufbzI/kFe5E55alA4xGW/i22OFI3keFKhxw 4LufNN0BGU1Ioem3dRbwp3tI2eqCqc7zmKlbtYNQVudJCq9WONPal8g0G1dmr2o0 7akDs89VTcBQcEGMRXrfoHD/4Z4qHUhqnYnmCgJWdazlRBjzOGQKr1+8SPEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM//a5iz2m7rk1Jq9LUEJif0h86swHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8wDZwBqghvi9yciiaIQZbnIZ5iVWm36kjO ZOHtWnYw8IEqk19UokPXssIiJAPL/DBWVxFeoX42XLqALPl6ilTbZuWMYLFN42ao koKEX0hZYIqV7UgDCfIO2tlFciiyY7Hdtd7q+99FvWLeWCevWuy9VgH10FNkUmZx DxKcZIOdmgCGvb1QEfMZJUcnnoYydKEvv7w9a5NazA5JtpabjvP986olUgLNVXvJ HEgMTByVHGJR+S+LlfwkCM9qWaRtFqrzQJKtWCJ3rKfkNt9mNYrMoWJkv1IaJCqP CH833jKUs909e9JxBW+mzJGgQ1rTh1a7gPLZ1PnPw+/Xc86L7kI= -----END CERTIFICATE-----Generated at Sun May 19 14:37:50 2024 by rpki-client on console-ams.rpki-client.org