$ rpki-client -vvf repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft File: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft (raw, json) Hash identifier: QiOEJI1UMglruztVK//9EyjJNbSFvgI7XY87pZEijIo= Subject key identifier: C6:EC:FF:C4:59:64:03:B3:07:CE:2E:41:BC:E3:D2:09:F1:3B:0B:70 Authority key identifier: 73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 Certificate issuer: /CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Certificate serial: 510A5C65287D876C6554D1736E727E0D7E816E44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft Manifest number: 01AF Signing time: Sat 18 May 2024 10:00:54 +0000 Manifest this update: Sat 18 May 2024 09:55:54 +0000 Manifest next update: Tue 21 May 2024 19:30:54 +0000 Files and hashes: 1: 732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl (hash: IkhqXhLk00s2mFUjTIm+Na3mlSewpCis3HanHk5m71I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:0a:5c:65:28:7d:87:6c:65:54:d1:73:6e:72:7e:0d:7e:81:6e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732F46D74C7A8C5D888A7091A706F3A09EFE96A3 Validity Not Before: May 18 09:55:54 2024 GMT Not After : May 21 19:30:54 2024 GMT Subject: CN=C6ECFFC4596403B307CE2E41BCE3D209F13B0B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:c5:e0:26:d4:11:6a:08:8d:8f:0c:fa:ea: d9:8c:0f:a2:6c:13:31:81:29:79:cb:b5:31:0f:bd: 1c:48:97:88:79:93:56:6e:bf:3b:be:83:2d:f9:d7: d2:d4:01:46:53:11:e8:40:17:54:0a:9e:af:15:49: 54:68:76:5e:fa:af:14:e2:ab:99:7f:75:9a:82:21: 28:4c:6c:9d:62:f9:4e:45:cf:dc:c7:fe:c7:b7:0f: 97:de:e2:bf:1e:8a:e3:df:ec:8c:5f:30:64:cd:3d: b1:f7:61:2c:49:19:9d:c5:7a:84:a8:c0:6c:55:b6: 46:85:4c:5e:cb:ab:31:c0:5d:a4:89:43:71:1f:91: a2:2b:ae:dd:1e:21:38:a9:f4:12:5e:22:9d:a8:76: cf:2b:d7:0f:3a:43:ce:44:76:9d:17:15:40:c5:72: 8a:7c:99:ef:b5:e1:64:62:0c:f2:7e:f4:75:29:35: 52:19:b3:fb:1f:5c:de:86:ca:76:2d:4f:0a:3b:a9: 85:e2:0a:8a:88:8c:e9:81:f8:1b:df:2c:aa:07:b8: f9:21:1d:ab:22:4c:48:54:de:fd:ed:e8:bc:3b:02: 98:92:6f:14:fd:8b:fe:1b:05:fa:c4:d2:dd:8c:ce: d7:57:ca:ad:0d:f2:34:08:84:07:42:77:f5:77:24: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EC:FF:C4:59:64:03:B3:07:CE:2E:41:BC:E3:D2:09:F1:3B:0B:70 X509v3 Authority Key Identifier: keyid:73:2F:46:D7:4C:7A:8C:5D:88:8A:70:91:A7:06:F3:A0:9E:FE:96:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/150d1aa1-4c7f-448b-b2bb-02c57151f210/0/732F46D74C7A8C5D888A7091A706F3A09EFE96A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:df:61:cd:d4:c9:ee:f3:a1:bc:57:43:75:a1:d6:76:b6:f7: 74:7c:61:44:55:e5:98:cb:8a:9f:fe:1d:99:55:d0:bf:af:67: 1e:b5:79:07:79:16:9e:fe:6b:68:d7:43:f0:c7:07:c4:f1:1a: ba:c8:b0:df:69:ba:a6:f4:77:48:d8:99:de:56:39:95:c9:49: f2:f2:64:31:48:e5:8d:96:5e:d5:0a:c3:a3:68:38:9d:f4:a6: b1:52:f2:52:e1:d3:c6:f3:29:15:da:60:a8:3a:82:0a:02:86: fd:04:51:fa:e9:90:e1:1c:08:23:82:c9:84:1b:20:71:95:84: 6b:37:e1:41:c4:e5:5d:c8:69:4e:51:2e:aa:7c:f3:db:ad:95: f2:1e:70:bf:dc:e2:56:b6:88:3b:06:63:d4:18:e4:fd:49:84: 6c:34:7e:13:d4:3f:fa:99:9f:67:e9:20:f7:3e:3e:eb:ed:23: da:37:3e:20:23:09:25:87:45:0c:98:88:f9:ca:75:0e:11:7f: d3:a7:94:99:38:d5:16:d9:23:92:40:84:b4:21:78:26:80:35: cd:60:9f:ff:bd:92:f6:dd:d9:85:0d:68:9a:c9:cc:db:48:51: 08:48:86:86:dc:71:7a:8c:8d:da:92:f1:da:b1:90:52:6b:09: 58:e1:ec:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUQpcZSh9h2xlVNFzbnJ+DX6BbkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5 RUZFOTZBMzAeFw0yNDA1MTgwOTU1NTRaFw0yNDA1MjExOTMwNTRaMDMxMTAvBgNV BAMTKEM2RUNGRkM0NTk2NDAzQjMwN0NFMkU0MUJDRTNEMjA5RjEzQjBCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6sXgJtQRagiNjwz66tmMD6Js EzGBKXnLtTEPvRxIl4h5k1Zuvzu+gy3519LUAUZTEehAF1QKnq8VSVRodl76rxTi q5l/dZqCIShMbJ1i+U5Fz9zH/se3D5fe4r8eiuPf7IxfMGTNPbH3YSxJGZ3FeoSo wGxVtkaFTF7LqzHAXaSJQ3EfkaIrrt0eITip9BJeIp2ods8r1w86Q85Edp0XFUDF cop8me+14WRiDPJ+9HUpNVIZs/sfXN6GynYtTwo7qYXiCoqIjOmB+BvfLKoHuPkh HasiTEhU3v3t6Lw7ApiSbxT9i/4bBfrE0t2MztdXyq0N8jQIhAdCd/V3JHNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxuz/xFlkA7MHzi5BvOPSCfE7C3AwHwYDVR0j BBgwFoAUcy9G10x6jF2IinCRpwbzoJ7+lqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTBkMWFhMS00YzdmLTQ0OGItYjJiYi0wMmM1NzE1MWYyMTAvMC83MzJGNDZENzRD N0E4QzVEODg4QTcwOTFBNzA2RjNBMDlFRkU5NkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYzQTA5RUZF OTZBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUwZDFhYTEtNGM3Zi00NDhiLWIy YmItMDJjNTcxNTFmMjEwLzAvNzMyRjQ2RDc0QzdBOEM1RDg4OEE3MDkxQTcwNkYz QTA5RUZFOTZBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPfYc3Uye7zobxXQ3Wh1na293R8YURV5ZjL ip/+HZlV0L+vZx61eQd5Fp7+a2jXQ/DHB8TxGrrIsN9puqb0d0jYmd5WOZXJSfLy ZDFI5Y2WXtUKw6NoOJ30prFS8lLh08bzKRXaYKg6ggoChv0EUfrpkOEcCCOCyYQb IHGVhGs34UHE5V3IaU5RLqp889utlfIecL/c4la2iDsGY9QY5P1JhGw0fhPUP/qZ n2fpIPc+PuvtI9o3PiAjCSWHRQyYiPnKdQ4Rf9OnlJk41RbZI5JAhLQheCaANc1g n/+9kvbd2YUNaJrJzNtIUQhIhobccXqMjdqS8dqxkFJrCVjh7Lw= -----END CERTIFICATE-----Generated at Sat May 18 10:34:19 2024 by rpki-client on console-fra.rpki-client.org