$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: STChckvn2WbFwpi+vEErveb/lqbe4lH7kIsCKkK0ElI= Subject key identifier: 51:75:E1:C6:3E:22:B7:DC:48:38:2D:3C:98:DF:D5:00:B4:04:63:10 Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 0F1F4EC69F935D4B7C99E1ED6DAB75CAF1EF3EF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 012A Signing time: Fri 17 May 2024 20:50:51 +0000 Manifest this update: Fri 17 May 2024 20:45:51 +0000 Manifest next update: Tue 21 May 2024 00:11:51 +0000 Files and hashes: 1: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: YuVfUzOoWL9K0rSSaYUlvWdGUYnYS0+ncC0XBY9Tl8A=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: qmPd3rp91rRp/ei9QpPSmZi8oVBO4WQDn6hJMxnnyNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 00:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:1f:4e:c6:9f:93:5d:4b:7c:99:e1:ed:6d:ab:75:ca:f1:ef:3e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: May 17 20:45:51 2024 GMT Not After : May 21 00:11:51 2024 GMT Subject: CN=5175E1C63E22B7DC48382D3C98DFD500B4046310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:a3:28:79:ec:de:db:79:65:cb:8d:2b:9b: 5e:a0:7b:c2:0f:2b:1b:d7:8e:10:5a:4d:41:52:73: 20:15:c3:03:00:6e:0a:c5:ca:a4:26:9e:67:81:fc: a6:59:be:7a:57:dd:60:f9:2b:3f:d3:fa:a0:30:77: 70:58:9a:cd:9f:de:56:e0:1c:86:57:54:f1:bd:ab: 52:8c:60:d1:b6:2a:79:ab:d5:d0:d7:a3:48:ea:bc: e1:75:ae:f4:be:ca:90:4d:51:a8:9b:88:3d:64:d9: 14:7c:4f:7f:b9:cd:b0:d2:18:9a:8c:af:2e:6a:4c: cd:cd:f8:11:fa:ad:da:fb:5e:c1:b6:8f:6f:10:c4: ea:5f:17:48:1a:d8:8a:83:e5:e7:64:e1:6a:bd:3b: 41:42:c4:0e:14:f9:d0:10:e6:a2:11:8e:b6:e6:6a: 6b:27:b2:e5:a5:71:29:07:c3:03:b6:e7:fe:48:63: 37:08:b3:8a:3a:e5:6a:5b:68:cd:cb:65:9b:a5:61: 86:e2:5d:7b:37:82:82:bc:a2:8a:de:d6:68:e7:a3: 05:dd:ad:e8:0a:df:ac:2b:23:ef:36:6e:f9:dd:2a: c2:1a:a2:2e:61:bf:5f:bd:06:88:d6:00:14:d2:d2: 96:d4:0c:8a:ed:82:e5:47:cb:27:54:fb:03:0d:76: 0c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:75:E1:C6:3E:22:B7:DC:48:38:2D:3C:98:DF:D5:00:B4:04:63:10 X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a6:3b:98:58:e4:de:8c:7d:98:ab:a4:f5:81:b7:75:9e:34: b4:ff:aa:56:e9:1f:12:dd:4b:5b:7f:43:eb:b3:b3:d2:dd:f1: fe:20:c6:04:77:07:54:10:0a:5f:c0:fb:34:58:63:5d:db:f7: 09:50:b9:34:0d:8d:4a:b8:1c:89:35:0b:31:a7:ff:df:0a:67: 90:36:69:9d:e6:2a:ce:e2:d1:cb:10:ea:f5:05:7d:55:b2:86: 9c:82:4e:63:7f:ad:7f:6a:ed:76:23:32:5c:78:1b:38:c0:24: 66:0c:11:be:8c:f6:12:49:f8:a5:77:05:0d:84:cf:28:ae:f1: a0:b4:7c:82:93:8a:a8:b6:ad:26:8f:4a:29:26:b5:d4:48:48: bf:a7:b0:44:4c:f8:bd:f0:69:63:d8:8a:79:0c:22:fc:46:47: 34:c5:f5:cd:8f:8a:e8:b7:4a:42:f3:1c:e7:82:9c:d6:e8:6f: 29:19:15:74:e8:33:ba:15:e0:90:fe:9b:03:12:80:46:83:6b: a4:be:16:f8:23:a7:c2:13:08:13:10:80:82:d0:e5:09:81:8c: 94:83:5f:63:2f:73:91:60:1c:a0:d4:86:e0:ce:ed:e5:6c:c0: 0c:b2:1d:99:40:a8:8d:03:ad:cb:04:2e:d1:91:2b:9f:3e:80: fd:a1:9e:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDx9Oxp+TXUt8meHtbat1yvHvPvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNDA1MTcyMDQ1NTFaFw0yNDA1MjEwMDExNTFaMDMxMTAvBgNV BAMTKDUxNzVFMUM2M0UyMkI3REM0ODM4MkQzQzk4REZENTAwQjQwNDYzMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBz6Moeeze23lly40rm16ge8IP KxvXjhBaTUFScyAVwwMAbgrFyqQmnmeB/KZZvnpX3WD5Kz/T+qAwd3BYms2f3lbg HIZXVPG9q1KMYNG2Knmr1dDXo0jqvOF1rvS+ypBNUaibiD1k2RR8T3+5zbDSGJqM ry5qTM3N+BH6rdr7XsG2j28QxOpfF0ga2IqD5edk4Wq9O0FCxA4U+dAQ5qIRjrbm amsnsuWlcSkHwwO25/5IYzcIs4o65WpbaM3LZZulYYbiXXs3goK8oore1mjnowXd regK36wrI+82bvndKsIaoi5hv1+9BojWABTS0pbUDIrtguVHyydU+wMNdgzFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUXXhxj4it9xIOC08mN/VALQEYxAwHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACumO5hY5N6MfZirpPWBt3WeNLT/qlbpHxLd S1t/Q+uzs9Ld8f4gxgR3B1QQCl/A+zRYY13b9wlQuTQNjUq4HIk1CzGn/98KZ5A2 aZ3mKs7i0csQ6vUFfVWyhpyCTmN/rX9q7XYjMlx4GzjAJGYMEb6M9hJJ+KV3BQ2E zyiu8aC0fIKTiqi2rSaPSikmtdRISL+nsERM+L3waWPYinkMIvxGRzTF9c2Piui3 SkLzHOeCnNbobykZFXToM7oV4JD+mwMSgEaDa6S+Fvgjp8ITCBMQgILQ5QmBjJSD X2Mvc5FgHKDUhuDO7eVswAyyHZlAqI0DrcsELtGRK58+gP2hntQ= -----END CERTIFICATE-----Generated at Fri May 17 21:38:07 2024 by rpki-client on console-fra.rpki-client.org