$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: hN1LHH3q7z7S+oi0Rg+Aee2Q2oSlGVdeMXayLa8XTjA= Subject key identifier: 55:3C:3D:A8:ED:E7:0F:DF:D0:05:FB:2C:BD:04:CA:2A:65:44:F9:A0 Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 4C7167AC640414B79485524239637BFF11735729 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 0111 Signing time: Sat 18 May 2024 03:50:48 +0000 Manifest this update: Sat 18 May 2024 03:45:48 +0000 Manifest next update: Tue 21 May 2024 11:58:48 +0000 Files and hashes: 1: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: mbAxBI6H/Sq6sgMngf4PziUmZmO3P2VrISwBNb62jGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:71:67:ac:64:04:14:b7:94:85:52:42:39:63:7b:ff:11:73:57:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: May 18 03:45:48 2024 GMT Not After : May 21 11:58:48 2024 GMT Subject: CN=553C3DA8EDE70FDFD005FB2CBD04CA2A6544F9A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:61:c0:74:6a:83:7e:12:00:f8:86:20:85:97: 78:05:30:97:c3:e0:ad:87:4a:42:85:4a:f3:bd:0d: 8c:eb:2c:96:b1:76:37:3a:23:c4:e9:e7:55:d3:83: 8b:d5:56:f1:46:d9:a3:48:26:86:b3:6f:52:99:e2: 99:0c:ed:87:c1:ed:97:c0:77:64:97:43:dc:55:6a: 88:d6:e9:b4:6f:86:42:5a:3a:9e:bb:62:c3:89:ce: 73:a1:b4:68:3d:d4:b5:99:d9:9e:48:65:f7:06:97: b6:51:55:83:90:18:74:04:e0:78:73:f2:13:63:78: 9a:34:6d:dd:f9:2f:bf:b4:a9:fb:81:db:f2:ef:1c: 70:a1:ae:41:6f:da:fa:93:ed:9a:73:18:b0:d6:9d: b3:66:40:cc:d4:8a:56:8b:ce:0c:8b:c6:25:56:09: 14:36:f1:3f:31:69:37:f3:43:e6:88:bf:ae:89:2b: 3a:a5:56:56:ba:c6:15:ec:81:15:c1:9e:ae:da:94: 85:94:6f:14:8d:18:cd:f8:01:7d:85:1b:29:c4:af: 3a:27:c5:9d:63:1b:d4:ed:66:37:64:04:05:9a:3d: 4d:ac:d6:8d:9a:57:f9:b9:89:99:10:37:b3:ec:8c: b1:e5:88:21:c9:eb:94:6a:47:f0:23:a4:b2:3d:9a: 55:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3C:3D:A8:ED:E7:0F:DF:D0:05:FB:2C:BD:04:CA:2A:65:44:F9:A0 X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3c:91:83:b7:fb:b9:7f:d2:90:46:1f:88:ae:ee:07:65:c5: 5a:cf:72:26:92:91:4f:b3:8d:5a:ef:5d:3b:49:a3:28:a5:55: bb:65:b8:ad:02:76:cc:86:f0:ea:eb:7a:0e:d8:9f:c5:cc:c7: 3c:93:9a:93:f0:1e:8c:b3:d4:dd:6f:d0:84:19:33:e2:d8:29: bc:35:20:b4:5a:ac:76:cd:0e:06:fc:39:f0:fa:53:94:15:ba: e7:21:08:29:65:7d:4a:9b:b8:53:06:cb:68:0b:b1:ad:69:bc: d5:85:03:7c:bf:50:cf:54:8a:83:6c:38:ef:f4:36:fa:1f:5c: d8:3e:2f:c4:61:1e:cc:05:85:fb:81:9e:f4:23:3f:4e:f5:d5: a1:e9:09:b6:2b:38:e9:7e:29:48:82:9e:f7:9f:d4:1a:2f:d0: ec:99:34:98:7d:50:04:a4:de:80:78:6c:c4:a5:ae:11:43:c3: d6:d5:b7:ba:79:7e:06:21:33:13:1e:16:08:b4:a3:e7:97:45: ca:41:72:70:8f:dd:34:14:df:74:7a:87:d0:9f:80:81:b2:a0: e6:d9:2f:f1:13:f2:f4:04:ba:75:c8:0d:73:c9:65:37:da:aa: 6b:f6:ab:19:80:6b:c1:cc:a8:86:0c:01:ab:84:ca:69:39:a9: 73:4f:4f:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHFnrGQEFLeUhVJCOWN7/xFzVykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNDA1MTgwMzQ1NDhaFw0yNDA1MjExMTU4NDhaMDMxMTAvBgNV BAMTKDU1M0MzREE4RURFNzBGREZEMDA1RkIyQ0JEMDRDQTJBNjU0NEY5QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYcB0aoN+EgD4hiCFl3gFMJfD 4K2HSkKFSvO9DYzrLJaxdjc6I8Tp51XTg4vVVvFG2aNIJoazb1KZ4pkM7YfB7ZfA d2SXQ9xVaojW6bRvhkJaOp67YsOJznOhtGg91LWZ2Z5IZfcGl7ZRVYOQGHQE4Hhz 8hNjeJo0bd35L7+0qfuB2/LvHHChrkFv2vqT7ZpzGLDWnbNmQMzUilaLzgyLxiVW CRQ28T8xaTfzQ+aIv66JKzqlVla6xhXsgRXBnq7alIWUbxSNGM34AX2FGynErzon xZ1jG9TtZjdkBAWaPU2s1o2aV/m5iZkQN7PsjLHliCHJ65RqR/AjpLI9mlWvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVTw9qO3nD9/QBfssvQTKKmVE+aAwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ8kYO3+7l/0pBGH4iu7gdlxVrPciaSkU+z jVrvXTtJoyilVbtluK0CdsyG8Orreg7Yn8XMxzyTmpPwHoyz1N1v0IQZM+LYKbw1 ILRarHbNDgb8OfD6U5QVuuchCCllfUqbuFMGy2gLsa1pvNWFA3y/UM9UioNsOO/0 NvofXNg+L8RhHswFhfuBnvQjP0711aHpCbYrOOl+KUiCnvef1Bov0OyZNJh9UASk 3oB4bMSlrhFDw9bVt7p5fgYhMxMeFgi0o+eXRcpBcnCP3TQU33R6h9CfgIGyoObZ L/ET8vQEunXIDXPJZTfaqmv2qxmAa8HMqIYMAauEymk5qXNPTxA= -----END CERTIFICATE-----Generated at Sat May 18 04:39:31 2024 by rpki-client on console-fra.rpki-client.org