$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: XBfhJVBIwsea36BZxf+gi70BmZhav9nE6kTx9yGFBqM= Subject key identifier: 12:53:90:BC:FE:5F:7F:55:4E:24:47:30:0D:4B:0D:AA:C7:56:AF:4C Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 73DCED791820CC09B60D21DE43580301A4A17AD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 56 Signing time: Fri 17 May 2024 22:00:42 +0000 Manifest this update: Fri 17 May 2024 21:55:42 +0000 Manifest next update: Tue 21 May 2024 08:59:42 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: +3ND4d8xyfkJzpwMLxkiHzq5ANNl1HFlyYdteSML++s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:dc:ed:79:18:20:cc:09:b6:0d:21:de:43:58:03:01:a4:a1:7a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: May 17 21:55:42 2024 GMT Not After : May 21 08:59:42 2024 GMT Subject: CN=125390BCFE5F7F554E2447300D4B0DAAC756AF4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:f3:bd:52:bb:7c:8c:d4:6b:8e:6c:c9:0a: b0:59:9c:4e:42:a2:75:98:45:61:1d:ec:78:63:6a: 7c:9c:c6:19:d1:19:b4:eb:87:4e:71:01:74:98:46: a9:6d:35:ef:5d:21:04:7b:5a:8b:70:bf:d3:4b:77: 4c:19:f6:ef:8a:24:c3:30:90:e4:22:77:a4:08:2c: 1c:4c:09:33:55:7f:00:45:4f:0e:82:30:c8:2e:95: fb:4d:ba:70:53:7b:87:2f:d5:e1:86:2e:38:70:2a: c5:0a:ce:69:be:1c:98:ff:8a:4f:fc:04:02:33:d0: 42:6d:dd:4d:1d:b4:e3:a4:bd:02:b5:1b:3d:5d:e2: b8:72:e9:9e:dd:41:92:3e:ba:c1:74:b7:ea:52:8c: e4:a0:df:57:5e:99:84:82:72:dd:b6:64:a5:ff:48: d0:f7:d6:38:38:10:19:82:37:a7:32:16:05:4f:70: d3:6c:37:ae:57:5c:2b:92:d1:f8:d1:03:12:a6:5a: fa:24:a9:c1:1b:7e:bb:3f:1e:e4:43:9d:f5:22:e4: bb:85:d2:92:41:a9:c0:3d:21:7a:0f:68:27:96:d2: 1b:e0:17:8d:28:fe:4f:7b:3f:52:68:09:33:42:52: 44:c1:5d:ab:71:d6:82:d9:dd:b2:e3:22:1d:31:ea: 80:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:53:90:BC:FE:5F:7F:55:4E:24:47:30:0D:4B:0D:AA:C7:56:AF:4C X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:06:d0:2d:c3:27:f5:dd:89:02:19:79:7a:a9:0f:67:c4:bb: fa:9f:b7:98:8c:0d:39:46:ab:3a:57:13:91:a9:fa:cc:07:a4: ee:13:71:dc:d3:1a:44:97:8b:54:6f:dd:3c:43:76:d6:c7:b0: e6:d1:ba:e1:f9:dd:44:4b:0d:33:53:50:ed:fa:c9:bb:3f:95: 2e:6f:38:9d:2d:14:3a:3d:d1:81:5a:5a:f9:1e:19:4c:df:70: bf:f6:1d:86:74:9a:8f:4d:09:58:49:c9:7b:84:41:fe:b8:6f: c9:46:bd:69:0a:74:04:94:f9:f5:98:ee:df:ad:0b:62:bd:e8: 88:33:bd:c0:e9:4e:7b:ff:fb:10:06:2e:38:c1:2a:d9:58:f5: 18:d7:ce:78:37:8c:bd:bb:d2:7b:fb:22:13:90:23:38:cc:cc: 01:70:85:f4:ea:a2:a2:6c:1e:c5:cc:36:6d:a1:9a:c7:70:dc: 91:ac:66:ca:07:c1:1a:ab:c8:61:66:cc:a6:c0:62:9d:d0:a9: 17:7b:c2:e0:86:51:8c:2f:fb:dc:86:2d:1f:13:6b:25:b1:4e: 17:11:00:a2:e7:e3:79:72:7c:44:00:67:54:50:3a:69:11:2a: f8:55:a4:14:cd:c4:8a:ea:81:42:64:7e:54:b1:22:76:1b:fd: 7e:cd:bb:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9zteRggzAm2DSHeQ1gDAaShetgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNDA1MTcyMTU1NDJaFw0yNDA1MjEwODU5NDJaMDMxMTAvBgNV BAMTKDEyNTM5MEJDRkU1RjdGNTU0RTI0NDczMDBENEIwREFBQzc1NkFGNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHvO9Urt8jNRrjmzJCrBZnE5C onWYRWEd7HhjanycxhnRGbTrh05xAXSYRqltNe9dIQR7Wotwv9NLd0wZ9u+KJMMw kOQid6QILBxMCTNVfwBFTw6CMMgulftNunBTe4cv1eGGLjhwKsUKzmm+HJj/ik/8 BAIz0EJt3U0dtOOkvQK1Gz1d4rhy6Z7dQZI+usF0t+pSjOSg31demYSCct22ZKX/ SND31jg4EBmCN6cyFgVPcNNsN65XXCuS0fjRAxKmWvokqcEbfrs/HuRDnfUi5LuF 0pJBqcA9IXoPaCeW0hvgF40o/k97P1JoCTNCUkTBXatx1oLZ3bLjIh0x6oCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUElOQvP5ff1VOJEcwDUsNqsdWr0wwHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkG0C3DJ/XdiQIZeXqpD2fEu/qft5iMDTlG qzpXE5Gp+swHpO4TcdzTGkSXi1Rv3TxDdtbHsObRuuH53URLDTNTUO36ybs/lS5v OJ0tFDo90YFaWvkeGUzfcL/2HYZ0mo9NCVhJyXuEQf64b8lGvWkKdASU+fWY7t+t C2K96IgzvcDpTnv/+xAGLjjBKtlY9RjXzng3jL270nv7IhOQIzjMzAFwhfTqoqJs HsXMNm2hmsdw3JGsZsoHwRqryGFmzKbAYp3QqRd7wuCGUYwv+9yGLR8TayWxThcR AKLn43lyfEQAZ1RQOmkRKvhVpBTNxIrqgUJkflSxInYb/X7Nu9U= -----END CERTIFICATE-----Generated at Fri May 17 22:53:43 2024 by rpki-client on console-fra.rpki-client.org