$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: Dt0HpDpMSi/rrnthkzD+HTBBxF3duJuAg9u88tJOVI8= Subject key identifier: 44:C8:EE:00:84:F7:CB:9A:8D:27:78:A2:B2:C1:37:CC:66:E1:1A:7D Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 3E908BC458356B79213D66CF17DABA55C00F84B4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 042A Signing time: Sat 27 Apr 2024 10:50:28 +0000 Manifest this update: Sat 27 Apr 2024 10:45:28 +0000 Manifest next update: Tue 30 Apr 2024 13:43:28 +0000 Files and hashes: 1: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: k0I86HacrG2j+DK8CTiJcKqunGu/Ku8Hyq1dwZRwWkI=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: FCwchNTIXQpDSuD5+meN7UoYwGYoBfy2iyvxtholuYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 13:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:90:8b:c4:58:35:6b:79:21:3d:66:cf:17:da:ba:55:c0:0f:84:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Apr 27 10:45:28 2024 GMT Not After : Apr 30 13:43:28 2024 GMT Subject: CN=44C8EE0084F7CB9A8D2778A2B2C137CC66E11A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:d5:22:90:cc:be:ba:53:9e:05:84:dd:8f: 53:92:30:ff:d0:e2:d4:30:59:6b:34:33:78:47:56: 28:af:fb:6b:62:f2:4f:c5:77:96:17:ae:47:39:4f: b2:69:89:2a:6b:f8:c0:68:37:1e:7f:36:7d:7f:5d: b1:b9:27:89:c0:a8:2a:02:98:02:83:fd:cd:cd:79: 24:32:db:65:4f:30:ae:94:3d:0a:4c:bd:3f:ac:5a: 4d:60:9a:dc:91:bb:cc:63:2d:77:2a:20:1f:30:da: 52:f1:e3:5d:ac:bd:90:d7:af:fe:94:4b:66:f3:11: 49:69:38:3d:a1:27:a4:2e:5f:da:f5:f2:83:b4:96: 4d:70:9d:3b:08:aa:bf:d5:9a:54:d5:63:c5:ba:49: 54:be:5e:db:89:15:70:21:29:ca:36:13:1e:3f:0a: 5f:7b:de:e0:6d:8a:98:5d:6a:7d:7c:78:1b:76:15: c1:78:68:c8:5c:c9:2e:ad:77:c0:07:00:d8:90:0e: 2e:7a:e4:fa:66:b9:d3:67:52:60:8e:55:57:51:88: 4d:ba:25:83:4b:80:87:77:b3:b0:e5:cd:8f:bb:6c: 5a:05:e4:30:ce:21:44:ac:89:0f:54:4c:91:9c:a4: 23:fa:2e:9f:53:42:60:e3:71:a1:1a:52:68:b1:bb: db:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C8:EE:00:84:F7:CB:9A:8D:27:78:A2:B2:C1:37:CC:66:E1:1A:7D X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:dc:08:82:a9:7e:d3:46:b7:df:10:88:b8:a7:ce:40:ae:d9: 5f:81:cb:b9:e1:28:2e:9b:ef:ba:59:95:a1:bf:18:98:da:1a: 36:89:7c:43:78:cb:63:4d:9d:14:e1:ce:f6:fc:6e:35:1e:7d: 57:7f:31:f2:2f:6a:e5:01:e7:14:0c:64:b8:6c:6e:6d:c1:40: 00:24:30:2a:18:ce:ef:b7:a3:3a:65:bc:7e:de:24:12:a9:bc: b4:fa:94:b8:01:56:e7:f6:ca:f8:b3:10:3e:c3:82:2c:db:45: 92:32:9e:87:b1:89:e2:c5:24:2b:ad:91:b6:e4:f0:2e:03:4a: 60:d3:2b:ea:8b:0f:fb:95:c0:a3:d4:3a:25:b0:1c:f2:84:cd: ee:7d:e3:17:ce:09:e1:d7:71:e4:7a:e3:c7:81:eb:33:21:89: 55:f7:93:4b:91:ac:4c:a3:30:dd:d6:9b:30:10:c9:9f:71:6e: b0:fa:ae:3a:c4:57:8b:cf:db:a5:7a:86:bd:06:d7:00:7f:70: 83:5a:2e:59:19:80:41:9a:09:60:d1:b6:2e:8c:cd:5a:c6:ca: 6c:6a:c5:55:e1:cd:98:1a:77:9f:cc:e6:40:ad:fd:bb:48:cc: 31:23:ca:bc:60:e8:d1:f2:af:82:c1:54:6c:b9:b9:4c:df:89: f0:8b:74:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUPpCLxFg1a3khPWbPF9q6VcAPhLQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI0MDQyNzEwNDUyOFoX DTI0MDQzMDEzNDMyOFowMzExMC8GA1UEAxMoNDRDOEVFMDA4NEY3Q0I5QThEMjc3 OEEyQjJDMTM3Q0M2NkUxMUE3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQF1SKQzL66U54FhN2PU5Iw/9Di1DBZazQzeEdWKK/7a2LyT8V3lheuRzlP smmJKmv4wGg3Hn82fX9dsbknicCoKgKYAoP9zc15JDLbZU8wrpQ9Cky9P6xaTWCa 3JG7zGMtdyogHzDaUvHjXay9kNev/pRLZvMRSWk4PaEnpC5f2vXyg7SWTXCdOwiq v9WaVNVjxbpJVL5e24kVcCEpyjYTHj8KX3ve4G2KmF1qfXx4G3YVwXhoyFzJLq13 wAcA2JAOLnrk+ma502dSYI5VV1GITbolg0uAh3ezsOXNj7tsWgXkMM4hRKyJD1RM kZykI/oun1NCYONxoRpSaLG729sCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBREyO4A hPfLmo0neKKywTfMZuEafTAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtwIgql+ 00a33xCIuKfOQK7ZX4HLueEoLpvvulmVob8YmNoaNol8Q3jLY02dFOHO9vxuNR59 V38x8i9q5QHnFAxkuGxubcFAACQwKhjO77ejOmW8ft4kEqm8tPqUuAFW5/bK+LMQ PsOCLNtFkjKeh7GJ4sUkK62RtuTwLgNKYNMr6osP+5XAo9Q6JbAc8oTN7n3jF84J 4ddx5Hrjx4HrMyGJVfeTS5GsTKMw3dabMBDJn3FusPquOsRXi8/bpXqGvQbXAH9w g1ouWRmAQZoJYNG2LozNWsbKbGrFVeHNmBp3n8zmQK39u0jMMSPKvGDo0fKvgsFU bLm5TN+J8It0iA== -----END CERTIFICATE-----Generated at Sat Apr 27 13:32:24 2024 by rpki-client on console-ams.rpki-client.org