$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: rfEhtXx8CchMf2KOIvGF09E7vFeB22SP8CIQOf2ulPE= Subject key identifier: 13:02:0B:99:E3:43:83:6F:4C:14:32:1F:8F:15:4E:F5:52:95:47:60 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 57F5A07239173C8615E8BCF6A9EC4FEA5565200E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 0148 Signing time: Thu 30 May 2024 01:20:39 +0000 Manifest this update: Thu 30 May 2024 01:15:39 +0000 Manifest next update: Sun 02 Jun 2024 05:10:39 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: WVz2+0O6Zoe3KBdykDBS7C8+eyPczFaXfA2POjm68BI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 01:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f5:a0:72:39:17:3c:86:15:e8:bc:f6:a9:ec:4f:ea:55:65:20:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: May 30 01:15:39 2024 GMT Not After : Jun 2 05:10:39 2024 GMT Subject: CN=13020B99E343836F4C14321F8F154EF552954760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:8d:86:a7:eb:94:9b:2e:2d:59:c7:19:fb: 3e:61:f2:6d:9d:87:0a:b6:5d:01:af:b5:e7:bc:c0: c3:a7:cd:fb:35:ff:84:44:76:59:01:66:dd:f4:62: b5:42:10:cd:ea:1c:46:c6:61:25:64:d3:6f:1d:7b: 8b:71:8a:31:67:1b:f7:49:c9:58:3c:8e:75:d0:9d: 82:ab:d5:a4:78:ae:71:fe:8d:f0:b8:e0:5b:70:aa: 97:71:53:6e:e5:38:67:72:03:a8:49:33:a5:79:24: cc:77:78:e8:bd:a9:63:e8:f8:45:14:e8:61:19:83: ac:8c:08:3f:e0:a5:0e:f5:88:77:fb:bb:f8:97:63: 93:49:a1:94:de:3a:1a:f4:de:04:a4:50:f3:5d:b2: 92:0c:cf:ee:8a:bd:92:1c:cf:66:db:33:40:d8:3d: e5:f4:7c:30:b3:16:c3:25:b7:1f:7a:fc:fc:9d:20: 2a:58:7b:82:f3:93:e9:5c:19:1c:ea:20:cb:10:c0: 81:e7:ec:3b:26:76:a4:55:c8:de:e2:48:c4:41:c8: 50:c8:be:aa:63:c9:b9:94:fc:c9:70:61:fa:da:86: 07:5f:0b:f3:e8:a9:61:58:21:46:af:f2:24:cd:fb: 45:d1:26:f6:ea:70:81:31:1f:fa:45:f6:39:ec:29: 1b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:02:0B:99:E3:43:83:6F:4C:14:32:1F:8F:15:4E:F5:52:95:47:60 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5b:d1:6e:36:e4:37:da:dd:5a:b3:22:1e:fa:ab:b3:0a:f3: 10:b8:fa:29:5d:b0:6a:fc:65:00:cc:76:dc:2c:f1:72:18:20: d7:f6:66:34:75:62:34:b9:c4:76:d4:36:60:f1:53:88:59:2d: 2b:3b:7e:24:90:a2:38:70:fb:72:ed:47:9a:79:b1:33:4c:a0: e9:c6:0d:c2:37:c0:cf:f0:55:54:78:f2:1a:cc:9c:12:a9:32: 01:2b:c7:f3:b3:86:4a:a1:4f:c1:10:45:f5:56:53:35:f5:f6: 93:e6:1a:23:3b:a3:22:f7:53:4f:b5:5e:ce:f3:a4:ff:26:d1: 0b:94:2e:e8:a0:d4:02:84:ff:ae:58:19:77:71:89:5b:38:c8: bc:c2:c0:4d:65:6a:b2:a1:aa:88:80:ca:d2:42:6c:12:c4:47: 51:a5:1d:98:71:c1:f5:d0:a2:27:29:1c:3e:29:71:ed:05:87: 04:fb:7b:95:12:88:14:b2:b4:49:b1:4e:8c:da:39:51:4f:ed: 87:f8:17:43:c1:99:42:90:d1:d5:e6:ea:7e:72:bf:dd:f9:f5: 31:93:e4:91:e3:fe:20:61:c9:ae:71:8c:12:52:5a:ae:d5:0f: 6b:d4:e5:61:cf:ec:de:22:66:53:63:b9:d9:01:52:6a:ba:ca: d0:28:a0:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/WgcjkXPIYV6Lz2qexP6lVlIA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNDA1MzAwMTE1MzlaFw0yNDA2MDIwNTEwMzlaMDMxMTAvBgNV BAMTKDEzMDIwQjk5RTM0MzgzNkY0QzE0MzIxRjhGMTU0RUY1NTI5NTQ3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiWY2Gp+uUmy4tWccZ+z5h8m2d hwq2XQGvtee8wMOnzfs1/4REdlkBZt30YrVCEM3qHEbGYSVk028de4txijFnG/dJ yVg8jnXQnYKr1aR4rnH+jfC44FtwqpdxU27lOGdyA6hJM6V5JMx3eOi9qWPo+EUU 6GEZg6yMCD/gpQ71iHf7u/iXY5NJoZTeOhr03gSkUPNdspIMz+6KvZIcz2bbM0DY PeX0fDCzFsMltx96/PydICpYe4Lzk+lcGRzqIMsQwIHn7DsmdqRVyN7iSMRByFDI vqpjybmU/MlwYfrahgdfC/PoqWFYIUav8iTN+0XRJvbqcIExH/pF9jnsKRufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEwILmeNDg29MFDIfjxVO9VKVR2AwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZb0W425Dfa3VqzIh76q7MK8xC4+ildsGr8 ZQDMdtws8XIYINf2ZjR1YjS5xHbUNmDxU4hZLSs7fiSQojhw+3LtR5p5sTNMoOnG DcI3wM/wVVR48hrMnBKpMgErx/OzhkqhT8EQRfVWUzX19pPmGiM7oyL3U0+1Xs7z pP8m0QuULuig1AKE/65YGXdxiVs4yLzCwE1larKhqoiAytJCbBLER1GlHZhxwfXQ oicpHD4pce0FhwT7e5USiBSytEmxTozaOVFP7Yf4F0PBmUKQ0dXm6n5yv9359TGT 5JHj/iBhya5xjBJSWq7VD2vU5WHP7N4iZlNjudkBUmq6ytAooGM= -----END CERTIFICATE-----Generated at Thu May 30 03:37:49 2024 by rpki-client on console-ams.rpki-client.org