$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: Z72FUD8VZQp76Ww+tEFFC/C/CgnF+5tNc4beShEgUoQ= Subject key identifier: A4:37:15:36:1A:E5:ED:D7:A1:A6:AB:FF:63:3B:82:27:63:A4:27:5E Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 767E335B44392D4F5B71449D5B6033FD25D740EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 0149 Signing time: Wed 29 May 2024 12:31:35 +0000 Manifest this update: Wed 29 May 2024 12:26:35 +0000 Manifest next update: Sat 01 Jun 2024 19:30:35 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: kyhLWE3o4k+5UVoO0MlR9fGfX1xlcIbTNZ4WQi1A0Lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 14:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7e:33:5b:44:39:2d:4f:5b:71:44:9d:5b:60:33:fd:25:d7:40:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: May 29 12:26:35 2024 GMT Not After : Jun 1 19:30:35 2024 GMT Subject: CN=A43715361AE5EDD7A1A6ABFF633B822763A4275E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:45:dc:4c:8b:ba:49:97:49:ea:2e:13:5a: 06:78:31:08:33:08:a0:86:b2:61:a3:7f:4c:a0:42: 23:44:8f:d4:3d:21:d4:75:a8:f3:59:a6:e1:64:36: 2c:71:e9:8a:99:fe:30:7d:60:6f:26:19:e9:c4:e9: e1:56:19:19:99:b0:46:d3:c7:5d:44:42:1f:19:53: fb:00:c9:18:c0:a6:0e:df:b4:cb:57:76:b3:64:4b: 2b:c7:8b:b3:b4:c5:0b:7e:19:8d:1e:fc:01:b9:eb: d9:a2:49:5a:6d:1a:e8:43:c3:30:0f:2b:98:69:aa: 2c:3d:71:b5:0a:7e:94:72:79:2c:d5:25:f4:53:18: 1e:f5:7c:0e:46:0f:db:46:d8:59:2a:19:fd:bc:cf: a7:20:60:3f:f3:62:f3:67:01:5f:82:56:15:8b:d9: 2a:fb:a0:d1:4a:9f:d7:f0:94:0f:48:12:98:33:19: 25:50:5c:5b:25:46:48:bb:c9:6c:d4:a2:bd:e1:3b: fe:48:e6:94:57:d3:2d:61:87:e8:a2:3d:1f:84:f8: 13:85:32:2f:d4:26:5a:71:1b:20:e6:22:ae:cb:4e: e3:a9:53:5a:0a:76:00:6f:7e:b7:3b:c2:2f:0a:c8: f0:6b:e5:19:ab:a5:b5:d8:67:ae:f6:be:36:eb:10: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:37:15:36:1A:E5:ED:D7:A1:A6:AB:FF:63:3B:82:27:63:A4:27:5E X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:bb:7f:80:06:27:9d:ca:39:4b:1a:7e:54:66:ae:8c:fd:9f: 02:14:6c:f5:97:5c:2a:3e:14:c3:e2:77:4a:c8:24:c0:23:45: aa:e3:af:95:0d:e2:c6:25:cb:ed:8f:49:c8:11:6e:bb:8f:3b: 08:ad:7b:d3:16:4d:bd:67:8a:2c:56:85:12:e4:12:d8:b2:b0: 5c:3d:d4:b2:49:e1:ea:9f:b5:90:45:e6:38:b6:c2:0a:b3:82: 2f:ef:22:ef:2f:0e:d2:f0:c5:3f:e6:ec:21:11:04:d2:4b:24: 86:ef:f8:c8:7f:33:79:17:f3:cd:99:ff:c8:b9:c5:4e:fd:da: 29:b8:a1:e6:d3:17:47:d5:47:bf:c8:c3:da:e6:44:46:1e:05: 66:ae:fa:eb:99:4e:7d:b1:12:b1:ef:5e:77:69:3c:05:86:3e: 92:4c:2d:98:49:08:ca:fa:e9:14:51:fc:40:23:6b:3b:1e:64: 88:8f:d3:37:f8:4c:45:1a:b8:ef:c0:c1:fb:96:7d:b4:8c:91: 7e:1f:b1:3d:7e:17:5b:4d:c6:91:97:47:61:a7:4e:b6:6c:6f: 94:54:5c:c7:47:fd:2c:a0:a9:5b:c3:be:7e:d4:ed:a6:06:dc: 9b:c1:a1:ff:f5:6c:84:07:b0:6c:7d:4d:75:67:b7:0a:8c:b1: b3:87:f0:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdn4zW0Q5LU9bcUSdW2Az/SXXQO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNDA1MjkxMjI2MzVaFw0yNDA2MDExOTMwMzVaMDMxMTAvBgNV BAMTKEE0MzcxNTM2MUFFNUVERDdBMUE2QUJGRjYzM0I4MjI3NjNBNDI3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvUXcTIu6SZdJ6i4TWgZ4MQgz CKCGsmGjf0ygQiNEj9Q9IdR1qPNZpuFkNixx6YqZ/jB9YG8mGenE6eFWGRmZsEbT x11EQh8ZU/sAyRjApg7ftMtXdrNkSyvHi7O0xQt+GY0e/AG569miSVptGuhDwzAP K5hpqiw9cbUKfpRyeSzVJfRTGB71fA5GD9tG2FkqGf28z6cgYD/zYvNnAV+CVhWL 2Sr7oNFKn9fwlA9IEpgzGSVQXFslRki7yWzUor3hO/5I5pRX0y1hh+iiPR+E+BOF Mi/UJlpxGyDmIq7LTuOpU1oKdgBvfrc7wi8KyPBr5RmrpbXYZ672vjbrEG3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpDcVNhrl7dehpqv/YzuCJ2OkJ14wHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALy7f4AGJ53KOUsaflRmroz9nwIUbPWXXCo+ FMPid0rIJMAjRarjr5UN4sYly+2PScgRbruPOwite9MWTb1niixWhRLkEtiysFw9 1LJJ4eqftZBF5ji2wgqzgi/vIu8vDtLwxT/m7CERBNJLJIbv+Mh/M3kX882Z/8i5 xU792im4oebTF0fVR7/Iw9rmREYeBWau+uuZTn2xErHvXndpPAWGPpJMLZhJCMr6 6RRR/EAjazseZIiP0zf4TEUauO/AwfuWfbSMkX4fsT1+F1tNxpGXR2GnTrZsb5RU XMdH/SygqVvDvn7U7aYG3JvBof/1bIQHsGx9TXVntwqMsbOH8Dk= -----END CERTIFICATE-----Generated at Wed May 29 13:49:13 2024 by rpki-client on console-ams.rpki-client.org