$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: XzcLXSejeB9CfofMa4Bj7DypObUn08W9EzPTOssS+qk= Subject key identifier: 10:1F:64:AA:6F:B2:1B:6C:55:51:90:F0:EE:53:E8:F0:EC:31:53:83 Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 417F96D260B3651A9D347F3CA172D4184442CE09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: F9 Signing time: Sat 18 May 2024 12:50:46 +0000 Manifest this update: Sat 18 May 2024 12:45:46 +0000 Manifest next update: Tue 21 May 2024 18:27:46 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: emwELna6CDZxHhHgkqBYQzO6eAhj9PgTNtohJ8XdCyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7f:96:d2:60:b3:65:1a:9d:34:7f:3c:a1:72:d4:18:44:42:ce:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: May 18 12:45:46 2024 GMT Not After : May 21 18:27:46 2024 GMT Subject: CN=101F64AA6FB21B6C555190F0EE53E8F0EC315383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:b8:cf:d5:3a:e1:c8:be:71:e0:46:13:b8: 91:8f:ad:a2:ba:cc:68:3d:e0:fa:8b:b4:4d:43:4d: 16:4d:17:4d:ed:45:71:e5:be:10:6c:dc:f2:e6:ee: 5c:33:f8:66:6f:9e:4d:02:35:10:7d:38:67:05:37: ae:b2:a9:05:12:cd:d7:43:c1:79:18:2a:3e:e4:09: fb:0b:39:8c:e1:2c:64:3b:bc:c2:41:fa:07:21:57: 47:b7:c1:c0:e6:47:e1:5d:4c:30:86:f6:fa:09:83: 2f:e5:67:fc:67:6b:12:60:c8:28:cd:ae:9a:7d:e9: 8e:a3:8e:70:03:d0:34:7d:cb:94:e4:eb:c9:aa:f4: 90:47:cf:5b:f0:c8:cb:52:c5:32:3a:21:32:d1:08: a5:5e:82:27:fb:9d:96:06:d1:2e:0c:c7:24:a4:34: 50:d3:cc:b5:06:5f:f0:5e:67:da:0e:90:84:e9:02: a1:46:ed:c5:69:38:6f:66:8a:09:ed:32:e9:cf:37: 2e:90:7e:ae:6e:00:7b:a7:90:d9:c6:fe:14:ff:7c: ab:bf:31:7a:fb:1a:14:71:5a:08:6b:72:2c:96:a5: 04:39:5a:58:d6:df:da:04:6d:07:58:a9:14:2f:c6: b5:5c:a4:68:b0:e4:bb:c5:da:33:cf:7b:f0:73:2e: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1F:64:AA:6F:B2:1B:6C:55:51:90:F0:EE:53:E8:F0:EC:31:53:83 X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c1:93:51:9f:9c:f9:49:58:69:ec:93:8d:32:2b:71:5b:d8: 41:03:e7:6d:b7:1e:cc:8d:e8:30:20:9f:43:19:fe:72:38:c5: e5:68:33:5f:1e:7f:95:f9:77:82:6d:9d:d1:5d:7d:b5:fc:29: e0:54:fe:75:11:44:b8:73:c7:ca:1b:43:35:27:fa:b7:bd:e8: da:68:1a:69:64:39:40:91:b7:cd:68:fd:2e:2c:79:7c:c0:61: 0e:7b:de:d8:5e:8a:9c:c8:d8:52:eb:ee:b3:53:97:8d:eb:9f: f9:bc:26:0c:00:97:67:ac:24:ef:67:8f:8e:38:52:c3:33:7d: 3c:b0:fe:d5:4e:39:3b:1a:4f:ee:b9:f3:bb:48:f9:cf:65:5d: 1b:32:6b:97:aa:e7:f4:a9:54:bd:87:54:69:41:14:6b:da:2f: 5e:da:9f:a2:84:a4:be:2f:cf:67:0a:c2:8a:36:53:ac:36:eb: a8:56:95:b1:12:4d:94:1f:b1:e7:18:2a:ee:3d:f8:5b:4c:13: a8:30:79:30:72:74:7a:44:2c:92:41:8f:b4:ec:5d:96:5f:c1: 15:02:fb:ee:50:0e:cb:63:44:ef:1d:c1:6d:a0:18:c7:48:c4: c3:c0:58:9e:8d:79:b7:4e:cd:6d:67:f0:50:5e:2e:9f:da:06: 2d:6e:23:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQX+W0mCzZRqdNH88oXLUGERCzgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNDA1MTgxMjQ1NDZaFw0yNDA1MjExODI3NDZaMDMxMTAvBgNV BAMTKDEwMUY2NEFBNkZCMjFCNkM1NTUxOTBGMEVFNTNFOEYwRUMzMTUzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLO7jP1TrhyL5x4EYTuJGPraK6 zGg94PqLtE1DTRZNF03tRXHlvhBs3PLm7lwz+GZvnk0CNRB9OGcFN66yqQUSzddD wXkYKj7kCfsLOYzhLGQ7vMJB+gchV0e3wcDmR+FdTDCG9voJgy/lZ/xnaxJgyCjN rpp96Y6jjnAD0DR9y5Tk68mq9JBHz1vwyMtSxTI6ITLRCKVegif7nZYG0S4MxySk NFDTzLUGX/BeZ9oOkITpAqFG7cVpOG9migntMunPNy6Qfq5uAHunkNnG/hT/fKu/ MXr7GhRxWghrciyWpQQ5WljW39oEbQdYqRQvxrVcpGiw5LvF2jPPe/BzLggXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEB9kqm+yG2xVUZDw7lPo8OwxU4MwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHBk1GfnPlJWGnsk40yK3Fb2EED5223HsyN 6DAgn0MZ/nI4xeVoM18ef5X5d4JtndFdfbX8KeBU/nURRLhzx8obQzUn+re96Npo GmlkOUCRt81o/S4seXzAYQ573theipzI2FLr7rNTl43rn/m8JgwAl2esJO9nj444 UsMzfTyw/tVOOTsaT+6587tI+c9lXRsya5eq5/SpVL2HVGlBFGvaL17an6KEpL4v z2cKwoo2U6w266hWlbESTZQfsecYKu49+FtME6gweTBydHpELJJBj7TsXZZfwRUC ++5QDstjRO8dwW2gGMdIxMPAWJ6NebdOzW1n8FBeLp/aBi1uI3I= -----END CERTIFICATE-----Generated at Sat May 18 13:30:07 2024 by rpki-client on console-fra.rpki-client.org