$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: A4ts5RKqzpx8VoTJ2GJ9VvsAsrYBfjJudPzZLO4IRX0= Subject key identifier: F6:5B:8F:74:FC:BE:5A:96:C2:D4:D8:59:3A:A1:B3:CA:5E:2D:F1:45 Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 58145058588AA6C118F496153216B2BE8A4FFB61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 8B Signing time: Sat 18 May 2024 14:52:00 +0000 Manifest this update: Sat 18 May 2024 14:47:00 +0000 Manifest next update: Tue 21 May 2024 19:00:00 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: xSrZJnyvtlTM+HrEEQJ85XQkH9lkoHu0s+/A9xpeaa0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:14:50:58:58:8a:a6:c1:18:f4:96:15:32:16:b2:be:8a:4f:fb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: May 18 14:47:00 2024 GMT Not After : May 21 19:00:00 2024 GMT Subject: CN=F65B8F74FCBE5A96C2D4D8593AA1B3CA5E2DF145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:71:7a:dc:e0:a6:e4:95:ac:30:6e:4b:37: 7f:65:23:c3:d8:c3:e2:3b:80:cb:57:3a:ed:fa:f2: e4:31:bf:64:54:30:4e:12:d3:bc:c6:5d:32:c1:43: 0e:ec:91:9c:2f:b3:7c:b5:a1:18:9f:78:40:19:c0: 13:bd:12:8a:9b:2e:01:e1:97:f4:a7:b8:54:a6:80: 78:bd:c4:5a:05:7a:84:b8:19:1a:ba:e8:9c:42:03: 24:4f:46:cd:d8:59:79:fe:08:38:2d:76:e4:2b:44: 19:2b:5b:d2:ba:d9:ce:7e:c6:64:4c:6a:b6:69:e8: 80:d5:eb:c9:73:c0:42:1a:49:18:c4:a1:73:cb:40: d1:d0:1a:40:9a:06:d5:f1:4f:b6:10:ff:42:90:72: 7e:16:c6:47:2e:a1:7f:76:bb:fa:76:dc:9d:90:09: b0:da:2a:88:d1:7c:a2:05:e2:a4:b9:25:53:97:55: f3:16:29:d8:dd:27:64:5b:e0:3f:ba:ae:c3:10:03: 65:cf:6b:a0:c7:85:40:34:3c:7b:f5:f5:db:09:5a: e3:c8:36:54:c1:0b:3c:b5:28:17:56:bf:93:61:51: 90:99:5e:83:fa:69:7d:b8:1a:85:62:91:00:eb:05: cd:ab:26:6c:11:a1:49:0c:1c:37:61:1d:3f:16:c1: 42:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5B:8F:74:FC:BE:5A:96:C2:D4:D8:59:3A:A1:B3:CA:5E:2D:F1:45 X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1b:bb:ff:df:04:cf:c4:f0:54:ac:0d:c9:36:37:24:d4:d3: a8:08:19:9b:99:2a:89:95:98:76:75:15:d8:a0:61:36:f2:90: c9:5c:a8:47:a5:dd:19:02:51:15:cd:73:1b:02:50:3c:c5:2d: c4:ca:13:73:47:41:56:78:fd:8f:b1:78:39:97:80:79:0d:24: 2b:bb:44:fd:5b:ef:44:c2:6b:c6:03:5c:54:c5:d5:68:50:3f: 79:d6:c5:93:c0:63:7f:cd:b9:de:47:2d:89:80:97:89:c1:39: 7d:a7:5e:36:d5:5c:5f:87:6a:13:1e:7d:00:4d:0d:9a:b8:dd: a3:e1:3d:07:c2:a9:90:d9:1c:52:ea:5c:68:42:b7:65:a1:9d: 05:92:45:05:6e:b2:05:6d:24:07:36:e1:a6:12:e2:92:f4:7c: eb:1d:21:b6:9c:32:38:7e:4c:27:89:93:ee:3b:05:0d:5f:1c: 14:98:fb:20:e0:aa:33:89:bc:df:2b:cc:f9:4b:ae:fc:dc:f6: ca:ab:d5:c2:8d:5a:2e:1d:4c:7b:51:04:3c:57:39:41:33:ae: 70:92:44:3e:f4:cb:7c:fb:0e:1d:91:91:f1:3c:f6:7c:00:28: ba:af:be:e8:ce:5f:6e:2c:3a:0c:80:75:0e:16:b5:8e:94:95: b7:53:5c:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWBRQWFiKpsEY9JYVMhayvopP+2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNDA1MTgxNDQ3MDBaFw0yNDA1MjExOTAwMDBaMDMxMTAvBgNV BAMTKEY2NUI4Rjc0RkNCRTVBOTZDMkQ0RDg1OTNBQTFCM0NBNUUyREYxNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbnF63OCm5JWsMG5LN39lI8PY w+I7gMtXOu368uQxv2RUME4S07zGXTLBQw7skZwvs3y1oRifeEAZwBO9EoqbLgHh l/SnuFSmgHi9xFoFeoS4GRq66JxCAyRPRs3YWXn+CDgtduQrRBkrW9K62c5+xmRM arZp6IDV68lzwEIaSRjEoXPLQNHQGkCaBtXxT7YQ/0KQcn4WxkcuoX92u/p23J2Q CbDaKojRfKIF4qS5JVOXVfMWKdjdJ2Rb4D+6rsMQA2XPa6DHhUA0PHv19dsJWuPI NlTBCzy1KBdWv5NhUZCZXoP6aX24GoVikQDrBc2rJmwRoUkMHDdhHT8WwUIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9luPdPy+WpbC1NhZOqGzyl4t8UUwHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgbu//fBM/E8FSsDck2NyTU06gIGZuZKomV mHZ1FdigYTbykMlcqEel3RkCURXNcxsCUDzFLcTKE3NHQVZ4/Y+xeDmXgHkNJCu7 RP1b70TCa8YDXFTF1WhQP3nWxZPAY3/Nud5HLYmAl4nBOX2nXjbVXF+HahMefQBN DZq43aPhPQfCqZDZHFLqXGhCt2WhnQWSRQVusgVtJAc24aYS4pL0fOsdIbacMjh+ TCeJk+47BQ1fHBSY+yDgqjOJvN8rzPlLrvzc9sqr1cKNWi4dTHtRBDxXOUEzrnCS RD70y3z7Dh2RkfE89nwAKLqvvujOX24sOgyAdQ4WtY6UlbdTXEM= -----END CERTIFICATE-----Generated at Sat May 18 15:57:28 2024 by rpki-client on console-ams.rpki-client.org