$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: phHZttzXJbX1ezxmPmou9KKCsZ2xYBqm3rCpf35gGtc= Subject key identifier: 5E:35:FD:2F:F4:34:F6:A5:C9:2D:C8:06:22:15:0C:25:8A:59:6D:6E Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 27B5030263945C26F8529DB0E8BC286ECAF1FADD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 0155 Signing time: Sat 18 May 2024 22:11:16 +0000 Manifest this update: Sat 18 May 2024 22:06:16 +0000 Manifest next update: Wed 22 May 2024 01:59:16 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: YineDFZzsBbdUtP04ZfncOHe28Lonnjh1UVfe4qHYiw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b5:03:02:63:94:5c:26:f8:52:9d:b0:e8:bc:28:6e:ca:f1:fa:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: May 18 22:06:16 2024 GMT Not After : May 22 01:59:16 2024 GMT Subject: CN=5E35FD2FF434F6A5C92DC80622150C258A596D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:5f:e9:2f:fb:e8:ab:76:8f:06:34:7d:b8: 48:f4:35:6c:a2:4b:e7:15:96:f2:56:9b:19:e0:07: 6a:64:71:28:88:5e:65:53:62:20:02:d3:f7:6a:e8: 59:6b:1b:27:ea:ed:f4:11:82:08:88:f2:11:6e:fc: 44:30:60:e5:b0:80:91:7d:81:1d:9b:79:b7:b7:1d: f7:d8:ba:0d:84:f0:35:18:81:cb:f4:2e:af:60:5b: 75:fa:5d:ef:d9:4a:ce:e5:06:48:65:a9:b2:5d:f2: 26:0e:fd:1e:fc:9d:62:79:e1:e2:54:3e:67:43:ce: 4b:7f:79:e8:94:9e:2d:eb:72:14:2e:d0:26:87:00: d9:a1:81:c8:02:86:18:bf:01:eb:5a:4d:dc:6e:a3: 06:16:22:1f:fe:9a:c3:6d:2b:cf:14:c8:7b:2e:b6: 7e:0c:55:bc:fb:43:27:45:fb:21:af:69:9c:d9:18: e1:b0:a5:22:f9:6d:c3:90:26:4f:28:ea:09:1a:79: 20:31:fa:73:6c:bc:d6:31:53:f7:ba:3e:9a:45:05: 3a:8e:41:b7:62:ee:7f:7b:50:d9:4b:42:74:e3:b6: b4:78:65:2f:fd:0b:cb:91:c2:e2:b6:6f:ea:6b:7a: fe:89:52:3f:75:b1:e8:da:0f:0c:3f:63:48:99:6e: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:35:FD:2F:F4:34:F6:A5:C9:2D:C8:06:22:15:0C:25:8A:59:6D:6E X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b3:e0:64:6d:db:23:b0:58:71:62:3a:00:be:4c:cc:7d:52: e9:62:e7:0a:8f:bf:4e:98:a8:25:5b:ec:3f:b0:d8:46:23:cc: fd:f8:aa:bf:37:cf:0d:8d:7b:74:54:26:ee:f4:90:1d:24:0b: 92:b2:82:be:bd:70:da:df:f7:d0:19:44:21:be:73:e1:8b:c7: 68:77:99:b8:7d:dd:6e:4f:56:5d:10:46:35:ff:9c:3f:21:6d: 46:fc:71:68:51:9b:f3:1b:3d:08:eb:dd:44:9f:10:ee:d3:54: b8:49:c9:dd:a5:b8:da:63:3b:5e:b1:61:94:3f:27:ed:16:39: 29:84:43:ac:e7:de:d6:36:84:85:be:f4:44:a6:34:e3:c4:51: 2f:52:a0:42:d6:07:47:e1:65:6c:85:53:b4:d2:65:a5:a5:71: 7b:4a:77:ab:cb:d7:6d:ea:00:8b:ae:1d:a7:db:a2:10:ef:42: dd:f3:48:48:c0:77:74:ba:53:f6:1f:e7:31:6c:ba:56:3f:2d: 1e:e8:38:a3:cd:a5:01:1a:24:fb:49:07:b0:1e:ac:69:50:49: 1f:20:8c:7e:65:7e:58:92:af:4d:6d:fb:92:b7:62:ed:b5:82: b3:4e:46:b8:80:22:f8:c2:96:e9:55:fa:74:f2:7d:55:e5:a2: 7c:2f:8f:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7UDAmOUXCb4Up2w6Lwobsrx+t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNDA1MTgyMjA2MTZaFw0yNDA1MjIwMTU5MTZaMDMxMTAvBgNV BAMTKDVFMzVGRDJGRjQzNEY2QTVDOTJEQzgwNjIyMTUwQzI1OEE1OTZENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzXV/pL/voq3aPBjR9uEj0NWyi S+cVlvJWmxngB2pkcSiIXmVTYiAC0/dq6FlrGyfq7fQRggiI8hFu/EQwYOWwgJF9 gR2bebe3HffYug2E8DUYgcv0Lq9gW3X6Xe/ZSs7lBkhlqbJd8iYO/R78nWJ54eJU PmdDzkt/eeiUni3rchQu0CaHANmhgcgChhi/AetaTdxuowYWIh/+msNtK88UyHsu tn4MVbz7QydF+yGvaZzZGOGwpSL5bcOQJk8o6gkaeSAx+nNsvNYxU/e6PppFBTqO Qbdi7n97UNlLQnTjtrR4ZS/9C8uRwuK2b+prev6JUj91sejaDww/Y0iZbp3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXjX9L/Q09qXJLcgGIhUMJYpZbW4wHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiz4GRt2yOwWHFiOgC+TMx9Uuli5wqPv06Y qCVb7D+w2EYjzP34qr83zw2Ne3RUJu70kB0kC5Kygr69cNrf99AZRCG+c+GLx2h3 mbh93W5PVl0QRjX/nD8hbUb8cWhRm/MbPQjr3USfEO7TVLhJyd2luNpjO16xYZQ/ J+0WOSmEQ6zn3tY2hIW+9ESmNOPEUS9SoELWB0fhZWyFU7TSZaWlcXtKd6vL123q AIuuHafbohDvQt3zSEjAd3S6U/Yf5zFsulY/LR7oOKPNpQEaJPtJB7AerGlQSR8g jH5lfliSr01t+5K3Yu21grNORriAIvjClulV+nTyfVXlonwvj5Y= -----END CERTIFICATE-----Generated at Sun May 19 00:29:18 2024 by rpki-client on console-ams.rpki-client.org