$ rpki-client -vvf repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft File: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft (raw, json) Hash identifier: VLXAvB8msjbOCMA5/kIvBc1yOtgin2JDvDsyQN2HyiY= Subject key identifier: 03:5B:9F:12:37:FE:17:56:8C:1F:40:65:42:8A:09:B2:BB:EC:F4:3E Authority key identifier: BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE Certificate issuer: /CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Certificate serial: 699F52834D5186CEF05CA58931624831F5F297CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft Manifest number: 0129 Signing time: Wed 29 May 2024 19:31:18 +0000 Manifest this update: Wed 29 May 2024 19:26:18 +0000 Manifest next update: Sun 02 Jun 2024 06:03:18 +0000 Files and hashes: 1: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl (hash: CnlHSThdwaQig0r1h/iDoiuGSi3PyWFpSrAP216pzos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9f:52:83:4d:51:86:ce:f0:5c:a5:89:31:62:48:31:f5:f2:97:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Validity Not Before: May 29 19:26:18 2024 GMT Not After : Jun 2 06:03:18 2024 GMT Subject: CN=035B9F1237FE17568C1F4065428A09B2BBECF43E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:5a:27:be:d5:35:66:7e:a3:1b:11:cd:ac: e7:a2:7f:6e:12:93:55:e6:6f:68:0e:31:08:68:33: 66:d4:49:2f:93:80:80:b2:e6:9d:38:9b:e3:41:2e: 10:10:c7:81:67:8f:a6:ad:55:b8:e1:1e:b2:14:fd: d9:2c:55:81:d7:8b:f2:66:e1:88:74:59:69:58:86: 0d:3c:a8:73:d1:30:bd:8c:37:c0:74:dd:92:82:84: 25:ea:94:44:48:ae:87:a1:1e:89:e9:76:bc:39:13: 20:c5:b9:53:d7:34:52:fb:53:b9:0a:20:98:fa:ae: 33:2c:37:6b:ff:e0:86:5d:a3:c1:bc:60:32:03:c5: b4:c2:5d:f1:04:5b:4f:83:f4:ea:80:d0:0f:da:a2: 84:7b:99:a9:eb:82:0b:f3:71:2f:1d:6e:af:09:30: b5:ba:87:63:77:5c:f5:22:fb:3e:ab:07:e6:97:76: c6:4c:b2:54:4e:06:ce:14:68:1f:bc:07:fc:93:70: 1b:da:ca:e2:3b:b1:78:4c:ab:05:7e:35:87:ec:56: 0e:91:20:db:1a:19:66:e0:ab:80:3d:e6:30:29:76: 97:f9:50:2e:4b:de:05:83:a4:08:a5:1b:16:89:37: 92:16:9f:dd:96:4c:5a:0f:47:dd:08:05:cd:8a:b6: af:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5B:9F:12:37:FE:17:56:8C:1F:40:65:42:8A:09:B2:BB:EC:F4:3E X509v3 Authority Key Identifier: keyid:BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4a:43:e7:0c:86:bc:50:ad:0e:9d:bc:19:98:22:97:12:8c: 30:d5:cd:77:bf:59:a5:12:39:de:e6:a0:a8:a2:fd:80:15:46: 3d:07:fa:59:ac:28:00:2b:86:34:01:52:17:a8:55:59:35:2c: a1:c3:a1:0b:f2:d6:89:c4:7c:67:4b:2f:d9:21:f0:6e:3b:6d: d2:1a:f0:69:fb:3d:61:3b:5b:9e:b9:b8:79:d6:e8:b1:0f:f8: c3:4c:9a:19:83:40:e2:0f:c6:6c:3a:40:d3:6b:53:4a:8c:17: 17:6f:1f:02:7e:0b:9a:69:8e:7d:e4:34:77:cc:08:dc:76:30: f6:fe:53:c9:a4:08:6e:30:7a:2d:8b:bf:47:84:e1:7f:68:a0: 91:a3:7b:52:ae:bc:5d:5f:9f:83:bc:9a:cb:4a:d8:e0:70:4d: e0:e4:4a:eb:6f:7e:8f:fd:59:d2:c7:22:09:d2:63:2a:de:45: 0a:7a:30:98:85:7e:e7:6d:3d:41:69:50:78:7b:f1:41:d8:ce: 73:6d:7b:a9:b9:6b:94:6b:42:59:6f:d8:6b:72:6d:91:c2:33: 22:91:16:39:ce:8d:5b:89:22:32:51:2c:50:57:b6:ea:9c:47: 93:b9:a4:b1:4a:0d:72:a6:08:8b:df:a9:90:5e:65:ef:23:37: 9e:0d:83:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZ9Sg01Rhs7wXKWJMWJIMfXyl88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5 QUYzQkNCRTAeFw0yNDA1MjkxOTI2MThaFw0yNDA2MDIwNjAzMThaMDMxMTAvBgNV BAMTKDAzNUI5RjEyMzdGRTE3NTY4QzFGNDA2NTQyOEEwOUIyQkJFQ0Y0M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1i1onvtU1Zn6jGxHNrOeif24S k1Xmb2gOMQhoM2bUSS+TgICy5p04m+NBLhAQx4Fnj6atVbjhHrIU/dksVYHXi/Jm 4Yh0WWlYhg08qHPRML2MN8B03ZKChCXqlERIroehHonpdrw5EyDFuVPXNFL7U7kK IJj6rjMsN2v/4IZdo8G8YDIDxbTCXfEEW0+D9OqA0A/aooR7manrggvzcS8dbq8J MLW6h2N3XPUi+z6rB+aXdsZMslROBs4UaB+8B/yTcBvayuI7sXhMqwV+NYfsVg6R INsaGWbgq4A95jApdpf5UC5L3gWDpAilGxaJN5IWn92WTFoPR90IBc2Ktq8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA1ufEjf+F1aMH0BlQooJsrvs9D4wHwYDVR0j BBgwFoAUvA7P3dCBzlEyvsnP3Bo5CprzvL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODZhMTNiZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC9CQzBFQ0ZEREQw ODFDRTUxMzJCRUM5Q0ZEQzFBMzkwQTlBRjNCQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5QUYz QkNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5 MEE5QUYzQkNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdKQ+cMhrxQrQ6dvBmYIpcSjDDVzXe/WaUS Od7moKii/YAVRj0H+lmsKAArhjQBUheoVVk1LKHDoQvy1onEfGdLL9kh8G47bdIa 8Gn7PWE7W565uHnW6LEP+MNMmhmDQOIPxmw6QNNrU0qMFxdvHwJ+C5ppjn3kNHfM CNx2MPb+U8mkCG4wei2Lv0eE4X9ooJGje1KuvF1fn4O8mstK2OBwTeDkSutvfo/9 WdLHIgnSYyreRQp6MJiFfudtPUFpUHh78UHYznNte6m5a5RrQllv2GtybZHCMyKR FjnOjVuJIjJRLFBXtuqcR5O5pLFKDXKmCIvfqZBeZe8jN54Ngxg= -----END CERTIFICATE-----Generated at Wed May 29 20:52:56 2024 by rpki-client on console-fra.rpki-client.org