$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft File: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft (raw, json) Hash identifier: 0aD8lQaI+Xu7ZuWkAeQ5H+52v+imNc/bgSweDPpuN5o= Subject key identifier: 15:8B:6A:99:57:5B:FA:80:0D:7F:04:0D:83:A9:78:E3:0C:0F:C8:A6 Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 Certificate issuer: /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Certificate serial: 221C6B246FFAD7B4E40312BC58BC7D3FA787DAC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft Manifest number: 0432 Signing time: Sat 18 May 2024 07:32:04 +0000 Manifest this update: Sat 18 May 2024 07:27:04 +0000 Manifest next update: Tue 21 May 2024 10:50:04 +0000 Files and hashes: 1: EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl (hash: BIapG14EjeSjiOCDejDDdHkATYibjHQwEL+Fk3NNDeA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 10:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1c:6b:24:6f:fa:d7:b4:e4:03:12:bc:58:bc:7d:3f:a7:87:da:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02 Validity Not Before: May 18 07:27:04 2024 GMT Not After : May 21 10:50:04 2024 GMT Subject: CN=158B6A99575BFA800D7F040D83A978E30C0FC8A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:dd:05:a3:d1:d1:fe:93:ea:e1:0a:e5:3b: 3b:3a:65:9b:b5:5e:d3:e2:34:34:16:c3:9a:89:17: 6b:1c:aa:c4:b8:21:ac:01:b6:7e:88:e2:a3:eb:28: fb:14:1a:05:c0:a6:5a:46:b8:17:3a:89:3a:47:22: cd:81:0b:08:64:c1:3b:69:c9:a7:7d:8a:45:fc:28: a3:32:f5:0c:e3:9e:30:69:5d:a7:ca:40:fd:ba:ec: e2:d9:af:d9:b1:a7:ca:dc:9f:7b:14:8f:b6:02:c2: 22:63:0d:f1:72:25:4f:57:ed:cb:5d:5d:69:6c:d6: c8:c6:21:b4:21:5d:9a:3c:62:55:c7:2f:33:72:e3: f7:ed:a3:c9:44:c9:77:fd:0b:6b:27:e2:6b:fa:49: b1:65:c7:4a:48:81:64:ef:b2:03:d8:b3:b4:ea:8d: 01:67:9b:e7:fd:14:f5:42:f6:34:cb:57:82:8a:e0: 5d:1d:3c:04:f5:69:3c:6f:8b:32:db:8c:56:70:9c: 72:9c:b8:a4:be:b2:46:64:8d:83:d8:4a:91:5e:ae: d8:56:7a:02:23:0d:60:7f:9b:28:cb:06:e8:c1:61: ee:57:25:17:b6:52:8b:6e:92:5b:02:6c:55:0b:8c: b7:e9:b3:ed:fb:ce:b1:05:f8:fd:b5:32:6d:a7:54: 00:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8B:6A:99:57:5B:FA:80:0D:7F:04:0D:83:A9:78:E3:0C:0F:C8:A6 X509v3 Authority Key Identifier: keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b9:f5:d5:fc:b2:8c:d5:85:95:bc:a3:9a:c2:86:d3:9b:b9: 69:b9:52:c4:da:78:50:d8:6e:1b:7b:1f:99:2c:46:30:fa:03: ee:fa:1b:48:be:4b:2a:48:bc:4d:a1:48:57:9f:3c:11:83:01: c9:fc:73:0f:e4:f1:67:32:a2:f2:8d:1e:0e:e6:b7:37:13:15: 59:da:53:29:8b:72:62:05:a6:c1:69:9e:88:e0:b6:ec:d6:c2: e5:c8:7f:9c:70:df:1f:7e:8b:92:98:fe:05:42:04:d4:66:3b: fd:e0:5c:33:0e:6e:37:ef:30:c8:61:56:2e:86:79:89:a5:0b: b1:2c:8a:51:b4:68:9d:c4:4a:44:94:38:d0:4e:28:5f:5e:a4: 39:21:bc:dc:89:6b:3f:51:85:cc:77:93:15:a2:91:63:64:33: 5c:71:f2:d2:ce:74:9e:f4:f4:71:11:c5:a7:0c:fb:11:93:fb: 18:68:1c:c7:5b:47:ef:a5:77:e0:5c:fe:ba:06:fd:64:c3:4c: 17:c1:0a:65:08:30:bb:55:08:e1:36:fe:a8:d4:d7:69:5c:90: 64:c8:6b:22:81:6c:f0:67:ae:d3:0d:22:ce:eb:e8:67:41:67: 3b:77:84:2a:5a:1e:92:06:e5:e5:25:ec:22:95:35:d6:7a:6f: 01:58:38:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIhxrJG/617TkAxK8WLx9P6eH2sgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4 MzhFMkUwMjAeFw0yNDA1MTgwNzI3MDRaFw0yNDA1MjExMDUwMDRaMDMxMTAvBgNV BAMTKDE1OEI2QTk5NTc1QkZBODAwRDdGMDQwRDgzQTk3OEUzMEMwRkM4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpN0Fo9HR/pPq4QrlOzs6ZZu1 XtPiNDQWw5qJF2scqsS4IawBtn6I4qPrKPsUGgXAplpGuBc6iTpHIs2BCwhkwTtp yad9ikX8KKMy9QzjnjBpXafKQP267OLZr9mxp8rcn3sUj7YCwiJjDfFyJU9X7ctd XWls1sjGIbQhXZo8YlXHLzNy4/fto8lEyXf9C2sn4mv6SbFlx0pIgWTvsgPYs7Tq jQFnm+f9FPVC9jTLV4KK4F0dPAT1aTxvizLbjFZwnHKcuKS+skZkjYPYSpFerthW egIjDWB/myjLBujBYe5XJRe2UotuklsCbFULjLfps+37zrEF+P21Mm2nVADrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFYtqmVdb+oANfwQNg6l44wwPyKYwHwYDVR0j BBgwFoAU78R2q4Cl0K2fzKoUQcH2QYOOLgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZThmZGViMC0zNTEzLTRmM2QtOTI1OS04MmI5ZDE5YTM1NTYvMC9FRkM0NzZBQjgw QTVEMEFEOUZDQ0FBMTQ0MUMxRjY0MTgzOEUyRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2NDE4MzhF MkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4ZmRlYjAtMzUxMy00ZjNkLTky NTktODJiOWQxOWEzNTU2LzAvRUZDNDc2QUI4MEE1RDBBRDlGQ0NBQTE0NDFDMUY2 NDE4MzhFMkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFS59dX8sozVhZW8o5rChtObuWm5UsTaeFDY bht7H5ksRjD6A+76G0i+SypIvE2hSFefPBGDAcn8cw/k8WcyovKNHg7mtzcTFVna UymLcmIFpsFpnojgtuzWwuXIf5xw3x9+i5KY/gVCBNRmO/3gXDMObjfvMMhhVi6G eYmlC7EsilG0aJ3ESkSUONBOKF9epDkhvNyJaz9Rhcx3kxWikWNkM1xx8tLOdJ70 9HERxacM+xGT+xhoHMdbR++ld+Bc/roG/WTDTBfBCmUIMLtVCOE2/qjU12lckGTI ayKBbPBnrtMNIs7r6GdBZzt3hCpaHpIG5eUl7CKVNdZ6bwFYOCQ= -----END CERTIFICATE-----Generated at Sat May 18 08:29:49 2024 by rpki-client on console-ams.rpki-client.org