$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: YXYrc9lwxfsq7MTz/q4e00Tca6gninpcWSVZMxA6p+U= Subject key identifier: 24:E0:72:72:10:20:4B:97:24:55:9F:47:4D:0F:D1:DB:1C:22:63:3A Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 3A86C7D85709C5912EBBC8A9833BE793C5FC3F0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 0436 Signing time: Wed 29 May 2024 16:21:38 +0000 Manifest this update: Wed 29 May 2024 16:16:38 +0000 Manifest next update: Sat 01 Jun 2024 16:39:38 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: RUqhRAcbNf4Y6vlTTPLt4YX6bf2EbYIXPbh390CO88I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 16:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:86:c7:d8:57:09:c5:91:2e:bb:c8:a9:83:3b:e7:93:c5:fc:3f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: May 29 16:16:38 2024 GMT Not After : Jun 1 16:39:38 2024 GMT Subject: CN=24E0727210204B9724559F474D0FD1DB1C22633A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6f:12:39:c6:76:a5:5c:22:ea:8d:a2:b0:31: 6e:46:b7:db:d4:db:b7:fa:12:3d:62:e7:73:dc:86: 5f:0b:7f:ad:5c:7c:fe:a0:ba:77:bd:45:43:48:b4: 68:21:e2:52:09:65:10:b2:70:ff:70:89:b5:71:92: d4:d9:97:55:be:ec:7f:8c:1c:02:44:95:9c:3b:f3: 61:4f:83:90:b8:13:1f:71:95:71:b6:c1:9a:88:08: e4:dd:80:48:cd:25:36:32:59:8f:9e:c7:0e:94:ba: 7a:0d:7c:20:1b:4f:03:a0:04:75:f1:8e:20:3e:55: af:7b:7c:c6:a7:59:33:1e:39:91:aa:8e:cb:fd:08: 48:59:c4:dd:80:30:7b:c8:23:50:d3:7d:ba:1a:92: dd:32:ee:6a:4e:8b:61:f0:bb:54:8f:e4:c0:04:f5: 54:ee:ec:51:f5:4d:bf:f4:cb:7f:12:3a:48:b7:ea: 7a:ad:e2:1e:f5:44:79:44:3d:6f:8d:c7:f5:0c:62: 60:88:e4:0a:55:be:76:42:8a:9c:5a:06:1d:30:a1: fb:79:1e:6e:fa:31:36:ad:99:77:59:72:7f:4b:1a: b2:57:ac:6b:75:1b:b3:08:c6:63:15:8c:29:44:16: fe:c8:cf:92:43:9d:b2:54:be:0a:98:2e:dc:87:2d: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E0:72:72:10:20:4B:97:24:55:9F:47:4D:0F:D1:DB:1C:22:63:3A X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:de:a8:36:f6:b9:41:71:30:40:84:06:e9:a7:95:60:01:b6: b4:1b:77:4b:b0:ce:a7:07:7d:3a:6b:2f:c1:00:fd:f6:af:8e: d7:05:7f:d6:a9:c9:62:41:30:a6:bc:a7:6f:4d:56:4b:85:57: 47:0e:2b:01:f1:3a:e0:d0:13:26:27:8c:01:78:4a:21:d5:1c: 90:f2:a9:26:39:ee:d9:fc:11:80:fd:d2:aa:cf:0d:ee:d7:f5: bf:06:86:e1:92:33:d2:45:31:47:d2:63:f9:95:5a:e5:bc:8f: d3:c9:95:98:af:89:09:72:37:dd:3a:d0:10:f6:52:93:2c:c6: 30:5c:75:aa:6e:8d:a2:5e:24:ea:6a:cf:5c:38:76:df:2a:81: 47:5c:55:f5:95:27:aa:b3:28:d5:76:83:0d:e5:7e:ef:76:a8: db:b2:78:ae:18:eb:41:a2:45:5f:7b:9b:e7:f7:d5:4a:92:ca: e9:36:26:4d:e3:57:2d:dc:f0:8a:d7:30:d3:a1:40:c4:3c:c2: 96:51:34:84:cd:9f:c4:c5:61:88:32:8d:2b:f3:d8:03:5e:15: 7f:8c:54:d2:eb:c2:48:e1:06:c4:54:a1:d5:3c:11:6b:84:92: 71:6a:e8:0d:6d:93:d1:6a:31:98:ee:a2:45:e7:7a:12:51:47: 4c:d8:b4:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOobH2FcJxZEuu8ipgzvnk8X8Pw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNDA1MjkxNjE2MzhaFw0yNDA2MDExNjM5MzhaMDMxMTAvBgNV BAMTKDI0RTA3MjcyMTAyMDRCOTcyNDU1OUY0NzREMEZEMURCMUMyMjYzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbxI5xnalXCLqjaKwMW5Gt9vU 27f6Ej1i53Pchl8Lf61cfP6gune9RUNItGgh4lIJZRCycP9wibVxktTZl1W+7H+M HAJElZw782FPg5C4Ex9xlXG2wZqICOTdgEjNJTYyWY+exw6UunoNfCAbTwOgBHXx jiA+Va97fManWTMeOZGqjsv9CEhZxN2AMHvII1DTfboakt0y7mpOi2Hwu1SP5MAE 9VTu7FH1Tb/0y38SOki36nqt4h71RHlEPW+Nx/UMYmCI5ApVvnZCipxaBh0woft5 Hm76MTatmXdZcn9LGrJXrGt1G7MIxmMVjClEFv7Iz5JDnbJUvgqYLtyHLSjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJOBychAgS5ckVZ9HTQ/R2xwiYzowHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjeqDb2uUFxMECEBumnlWABtrQbd0uwzqcH fTprL8EA/favjtcFf9apyWJBMKa8p29NVkuFV0cOKwHxOuDQEyYnjAF4SiHVHJDy qSY57tn8EYD90qrPDe7X9b8GhuGSM9JFMUfSY/mVWuW8j9PJlZiviQlyN9060BD2 UpMsxjBcdapujaJeJOpqz1w4dt8qgUdcVfWVJ6qzKNV2gw3lfu92qNuyeK4Y60Gi RV97m+f31UqSyuk2Jk3jVy3c8IrXMNOhQMQ8wpZRNITNn8TFYYgyjSvz2ANeFX+M VNLrwkjhBsRUodU8EWuEknFq6A1tk9FqMZjuokXnehJRR0zYtG4= -----END CERTIFICATE-----Generated at Wed May 29 17:52:12 2024 by rpki-client on console-ams.rpki-client.org