$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: Fmjo+aZ4d9pzUoHOCGpJ/+hei5ELDvkRnOFnif246yo= Subject key identifier: D9:33:87:F0:16:CB:43:72:DB:7D:2E:B1:3E:B6:8C:FE:D8:87:BD:97 Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 170170943D2CF20A4AB6D5E5B4412A03B2C52ACB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 02AD Signing time: Sun 12 May 2024 11:10:56 +0000 Manifest this update: Sun 12 May 2024 11:05:56 +0000 Manifest next update: Wed 15 May 2024 16:31:56 +0000 Files and hashes: 1: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: VU3acEpQUygYzWXeXG8xwI9eUd6DT0ku7RrnPC+UvfE=) 2: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: vQHXwA344Pp/iKj5lZNlXEhLUE22nOyVTmzGR/5sqgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 19:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:01:70:94:3d:2c:f2:0a:4a:b6:d5:e5:b4:41:2a:03:b2:c5:2a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: May 12 11:05:56 2024 GMT Not After : May 15 16:31:56 2024 GMT Subject: CN=D93387F016CB4372DB7D2EB13EB68CFED887BD97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:24:38:2a:b5:22:de:c2:ef:8e:18:bb:71:19: 14:88:45:56:06:99:9e:83:a7:9e:db:fc:e0:1b:b6: 40:68:1f:98:13:ff:d0:5a:bd:10:96:4c:fe:35:93: 2d:06:0c:64:55:b1:19:ee:61:02:73:73:2b:be:b1: 6c:44:b8:a9:e2:fb:5c:53:e0:d9:e1:a0:79:d8:5d: 51:17:61:96:1e:46:f7:dc:07:0a:ee:43:6f:0b:0d: d2:93:65:ed:e1:a9:59:37:46:70:da:1d:05:35:d4: 06:3d:fe:10:c7:1f:e0:fa:42:b6:6a:51:da:54:6d: 2e:94:a6:04:ae:ad:35:e5:fd:0b:24:43:1f:b1:1f: db:a6:12:e7:b5:87:fb:32:2e:86:1e:a3:f7:24:3d: e8:ef:c5:d5:be:ca:f3:9d:f3:f4:ab:74:2c:38:ea: 43:db:ba:62:54:aa:ae:44:bd:3e:57:1f:ac:32:95: 3a:1e:50:00:c9:d7:7f:ba:5d:a1:8f:8c:58:b3:75: 57:39:a6:fe:56:a3:92:07:01:f1:58:5a:e1:07:e8: 46:9a:a6:20:66:a2:4c:8a:2e:9f:e4:c5:30:14:cc: f2:e7:8c:c0:9a:ba:f5:8f:dd:27:d7:e0:46:ba:e8: f4:33:1a:94:cc:03:df:b2:88:31:cd:4c:42:a8:2e: 34:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:33:87:F0:16:CB:43:72:DB:7D:2E:B1:3E:B6:8C:FE:D8:87:BD:97 X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0c:ca:d3:44:28:d9:26:04:bd:cb:9e:e6:be:51:91:2b:da: 98:4e:33:a6:da:ec:e3:be:b7:c8:a6:e6:8b:13:54:6d:a3:cf: a8:7e:2a:10:d9:b9:b8:17:84:e5:bc:7d:e0:be:7b:3f:e1:2f: 89:81:bc:23:06:cf:b3:fd:fb:c7:f4:7d:27:3c:92:f7:01:0e: 87:f9:d8:52:29:7d:b0:87:ed:43:be:18:63:9f:91:6b:5f:b9: 31:af:e2:19:dd:74:d4:5b:38:68:e4:06:29:23:76:14:57:c1: bb:62:7d:a8:14:b0:3d:eb:1a:7f:d4:1e:1d:b1:a5:23:fb:6a: a7:50:ff:e2:04:46:e2:43:4e:8f:54:f8:f9:a4:9e:65:47:1c: 15:c2:03:9b:5a:d7:b8:3d:a0:20:9f:75:83:3f:27:d6:09:53: 82:d3:bb:e0:40:f4:db:70:70:19:0a:ca:05:bc:31:2a:02:70: 45:e1:aa:9b:60:28:3d:b9:4e:b5:7b:59:e4:a7:a3:ef:ca:d8: f3:fb:ce:6f:a4:cb:81:1f:c6:ed:64:ab:3e:52:a0:ad:bf:b9: 0e:cc:63:ff:1c:72:9e:d5:1a:c0:28:de:92:99:f3:68:34:a9: 3d:5c:c2:ae:b2:f4:2c:18:1c:d5:07:93:07:de:cd:fa:86:8c: 8b:83:f0:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwFwlD0s8gpKttXltEEqA7LFKsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNDA1MTIxMTA1NTZaFw0yNDA1MTUxNjMxNTZaMDMxMTAvBgNV BAMTKEQ5MzM4N0YwMTZDQjQzNzJEQjdEMkVCMTNFQjY4Q0ZFRDg4N0JEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqJDgqtSLewu+OGLtxGRSIRVYG mZ6Dp57b/OAbtkBoH5gT/9BavRCWTP41ky0GDGRVsRnuYQJzcyu+sWxEuKni+1xT 4NnhoHnYXVEXYZYeRvfcBwruQ28LDdKTZe3hqVk3RnDaHQU11AY9/hDHH+D6QrZq UdpUbS6UpgSurTXl/QskQx+xH9umEue1h/syLoYeo/ckPejvxdW+yvOd8/SrdCw4 6kPbumJUqq5EvT5XH6wylToeUADJ13+6XaGPjFizdVc5pv5Wo5IHAfFYWuEH6Eaa piBmokyKLp/kxTAUzPLnjMCauvWP3SfX4Ea66PQzGpTMA9+yiDHNTEKoLjQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2TOH8BbLQ3LbfS6xPraM/tiHvZcwHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcMytNEKNkmBL3Lnua+UZEr2phOM6ba7OO+ t8im5osTVG2jz6h+KhDZubgXhOW8feC+ez/hL4mBvCMGz7P9+8f0fSc8kvcBDof5 2FIpfbCH7UO+GGOfkWtfuTGv4hnddNRbOGjkBikjdhRXwbtifagUsD3rGn/UHh2x pSP7aqdQ/+IERuJDTo9U+PmknmVHHBXCA5ta17g9oCCfdYM/J9YJU4LTu+BA9Ntw cBkKygW8MSoCcEXhqptgKD25TrV7WeSno+/K2PP7zm+ky4Efxu1kqz5SoK2/uQ7M Y/8ccp7VGsAo3pKZ82g0qT1cwq6y9CwYHNUHkwfezfqGjIuD8NM= -----END CERTIFICATE-----Generated at Sun May 12 12:09:41 2024 by rpki-client on console-fra.rpki-client.org