$ rpki-client -vvf repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft (raw, json) Hash identifier: b70+mr+g4scJ8FnvxFVqMIQrx8pIpRXcebZek1KAm3I= Subject key identifier: F3:57:27:57:98:E8:B3:1B:47:59:27:C6:61:02:A6:72:C8:0B:19:E2 Authority key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Certificate issuer: /CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Certificate serial: 5E29BEDB08A7E89DCCBA10E5F66964F4C17675E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft Manifest number: 8A Signing time: Thu 30 May 2024 08:22:04 +0000 Manifest this update: Thu 30 May 2024 08:17:04 +0000 Manifest next update: Sun 02 Jun 2024 16:58:04 +0000 Files and hashes: 1: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl (hash: genoJSS7YVgOqcUI6607HY4RoHFqudokoZ/ZhliSa2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 10:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:29:be:db:08:a7:e8:9d:cc:ba:10:e5:f6:69:64:f4:c1:76:75:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Validity Not Before: May 30 08:17:04 2024 GMT Not After : Jun 2 16:58:04 2024 GMT Subject: CN=F357275798E8B31B475927C66102A672C80B19E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0e:64:4c:bf:b3:f0:2a:99:89:a4:95:ac:37: fe:68:13:76:ab:15:e1:f2:5e:c7:f1:68:ee:a0:10: 5f:c9:4f:8b:5f:1e:b4:1c:36:b2:74:26:2f:d5:3e: 1e:a6:cf:c3:81:b5:59:97:b4:73:f8:07:ca:91:ee: 99:74:41:a2:3d:4f:8e:d4:6a:d2:16:9f:e5:63:83: 4a:2b:19:9b:53:96:95:1e:ed:bb:64:48:15:41:4a: 80:e4:fe:f7:d9:43:57:b6:77:32:4a:f5:a7:02:23: 80:53:f0:9d:83:8e:32:a2:c0:ee:42:62:14:12:69: 25:e7:02:a6:e8:8d:ee:ae:db:12:d6:23:bd:a6:39: ba:29:1d:45:53:07:98:81:d0:10:6a:37:57:17:92: e1:ad:f8:10:c1:a7:01:62:de:65:7f:d1:49:c1:25: 37:9f:de:c6:9d:96:32:98:71:09:e0:fb:e2:76:e7: 75:8f:94:77:7a:2a:88:9d:f9:74:ef:24:47:d4:8b: ee:a6:1f:9c:19:e3:63:78:ce:b6:fb:82:0a:33:39: 8c:a0:c2:ec:2f:3f:1a:7e:1c:c3:0e:ff:3c:fd:20: 91:9b:a8:0e:f5:60:f5:96:90:88:f4:34:5d:c5:f8: 19:01:2b:a4:7d:94:5e:02:45:37:f1:15:ed:58:31: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:57:27:57:98:E8:B3:1B:47:59:27:C6:61:02:A6:72:C8:0B:19:E2 X509v3 Authority Key Identifier: keyid:C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:77:9d:05:27:63:a6:47:9a:bf:7a:43:ce:b3:da:03:cf:5b: be:af:24:ee:96:10:1c:52:7f:1e:1f:bf:12:eb:67:03:89:0a: 6a:1f:10:68:df:2e:bd:de:c0:99:cc:ac:db:35:8f:67:28:df: a6:0a:b5:13:a7:d3:e6:96:fd:59:a3:d3:89:4b:2e:c7:45:0b: 26:28:bc:9f:78:b2:45:cf:92:93:6e:f5:1d:9e:c9:d7:ee:91: 73:d6:7b:51:e2:f9:ae:68:39:2c:6e:a0:07:42:bc:03:27:2f: 8c:60:67:a6:55:f6:38:77:5c:51:2e:5b:cd:ff:08:f3:3f:86: 35:f0:29:91:18:9b:d8:5c:01:e9:9d:6d:6e:3e:d9:57:3c:6f: ee:9b:28:fc:e4:71:bb:ca:be:a9:1c:9f:1e:a0:fa:d0:b4:56: a0:05:ea:bf:3c:1b:3e:13:96:32:8d:df:e0:71:e3:95:65:5b: d4:6a:07:61:6c:52:aa:28:72:6d:3c:57:ac:15:1d:7c:12:3c: 65:0e:91:27:04:a1:80:3e:76:19:78:7d:d5:ae:a6:e5:75:15: b2:e6:5e:ce:08:45:75:13:df:ee:a6:6b:b5:5e:4b:7d:db:c7: 21:e7:12:e5:b1:33:10:29:57:59:16:eb:95:e0:ec:bd:e4:9c: 89:92:29:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXim+2win6J3MuhDl9mlk9MF2deIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMx RjlBOUZDMjAeFw0yNDA1MzAwODE3MDRaFw0yNDA2MDIxNjU4MDRaMDMxMTAvBgNV BAMTKEYzNTcyNzU3OThFOEIzMUI0NzU5MjdDNjYxMDJBNjcyQzgwQjE5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXDmRMv7PwKpmJpJWsN/5oE3ar FeHyXsfxaO6gEF/JT4tfHrQcNrJ0Ji/VPh6mz8OBtVmXtHP4B8qR7pl0QaI9T47U atIWn+Vjg0orGZtTlpUe7btkSBVBSoDk/vfZQ1e2dzJK9acCI4BT8J2DjjKiwO5C YhQSaSXnAqboje6u2xLWI72mObopHUVTB5iB0BBqN1cXkuGt+BDBpwFi3mV/0UnB JTef3sadljKYcQng++J253WPlHd6Koid+XTvJEfUi+6mH5wZ42N4zrb7ggozOYyg wuwvPxp+HMMO/zz9IJGbqA71YPWWkIj0NF3F+BkBK6R9lF4CRTfxFe1YMakbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU81cnV5josxtHWSfGYQKmcsgLGeIwHwYDVR0j BBgwFoAUySdp/V2XpGdw46EPnVeukx+an8IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMC9DOTI3NjlGRDVE OTdBNDY3NzBFM0ExMEY5RDU3QUU5MzFGOUE5RkMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMxRjlB OUZDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FF OTMxRjlBOUZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZ3nQUnY6ZHmr96Q86z2gPPW76vJO6WEBxS fx4fvxLrZwOJCmofEGjfLr3ewJnMrNs1j2co36YKtROn0+aW/Vmj04lLLsdFCyYo vJ94skXPkpNu9R2eydfukXPWe1Hi+a5oOSxuoAdCvAMnL4xgZ6ZV9jh3XFEuW83/ CPM/hjXwKZEYm9hcAemdbW4+2Vc8b+6bKPzkcbvKvqkcnx6g+tC0VqAF6r88Gz4T ljKN3+Bx45VlW9RqB2FsUqoocm08V6wVHXwSPGUOkScEoYA+dhl4fdWupuV1FbLm Xs4IRXUT3+6ma7VeS33bxyHnEuWxMxApV1kW65Xg7L3knImSKd8= -----END CERTIFICATE-----Generated at Thu May 30 11:34:47 2024 by rpki-client on console-fra.rpki-client.org