$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: YRqPav86flVp2ddzlOB/WqY04q4c3/W4nY0gRGPm/Ck= Subject key identifier: AD:38:47:26:CC:4C:71:7E:4B:B0:A6:1F:05:F6:23:30:DE:02:01:E4 Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 42845B940A0EF39E6D7705CF0208FB7DEABC3D40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 03EA Signing time: Sat 18 May 2024 19:30:58 +0000 Manifest this update: Sat 18 May 2024 19:25:58 +0000 Manifest next update: Tue 21 May 2024 23:20:58 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: 2u94jAc1/f/h9Evz8YxSMIK2CQfZyNQG0SQO6GeOERw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:84:5b:94:0a:0e:f3:9e:6d:77:05:cf:02:08:fb:7d:ea:bc:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: May 18 19:25:58 2024 GMT Not After : May 21 23:20:58 2024 GMT Subject: CN=AD384726CC4C717E4BB0A61F05F62330DE0201E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b4:27:09:fe:28:b0:c4:49:2d:36:10:95:c6: 77:14:b3:55:d1:e3:6d:be:a2:7a:3b:14:8c:b4:b7: 6a:be:50:53:82:33:f1:aa:e6:a6:82:ce:6b:d9:e9: 2d:d1:ef:d0:97:11:05:d6:1e:38:30:4b:32:47:e0: d3:ad:f8:03:61:ca:72:25:54:8c:e2:40:3a:55:0f: 63:ed:aa:8e:75:dd:a9:84:03:18:72:67:47:e9:b1: a0:9a:ae:32:7a:bf:59:cc:fd:7c:87:d0:f1:e3:07: d5:c7:93:ec:0e:c7:cc:78:7a:03:24:64:de:4c:98: 87:43:8f:df:0c:34:dd:3b:a4:5f:e0:8a:bb:e5:e4: 33:c0:c0:15:52:95:eb:b6:cc:42:6e:34:f0:9e:cb: 57:3e:9f:e6:50:2a:9c:e6:76:92:b1:19:41:84:7b: c9:7d:c5:60:43:2c:4e:b3:53:c4:e7:b8:d4:f8:0e: 42:43:b6:b4:3b:25:a4:dd:b1:fc:bf:5d:1f:eb:7c: c5:e2:db:f1:ff:41:67:1a:59:a0:0e:e5:a0:b9:9a: 5e:ea:ff:45:18:e7:47:95:25:2f:a8:b2:1c:27:cb: 7f:25:d7:d6:32:50:cf:cd:ee:bd:b6:34:ec:c7:5d: a5:f2:13:66:f1:20:ca:ba:b0:b2:e1:f3:9f:62:23: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:38:47:26:CC:4C:71:7E:4B:B0:A6:1F:05:F6:23:30:DE:02:01:E4 X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:d9:f7:00:12:8d:9e:e1:c0:9a:43:a4:3b:88:9c:a3:87:04: a9:9c:52:19:98:00:67:59:14:cb:e7:65:bf:f9:37:a6:aa:60: b0:5d:4f:93:44:8f:07:db:5e:63:1f:e3:a4:c8:c8:3c:52:8f: f8:06:d5:47:b6:58:fa:3f:0f:cc:f4:f3:f5:75:f5:5b:f1:eb: d5:af:86:20:16:58:f6:b2:9a:88:0e:b2:37:84:c9:6c:0f:bf: f0:cb:ae:a0:f2:4f:c3:dc:92:cb:6d:95:d0:38:6d:4b:12:84: a1:5a:a7:ce:c9:bb:39:b2:b4:d8:d4:70:eb:32:9a:d2:52:58: 73:70:7d:b2:8f:d7:54:51:f6:f7:d9:de:ac:1a:d7:fe:a8:43: b2:30:2f:c5:45:1d:91:a0:ce:8c:9f:8c:c8:3d:68:88:38:8d: c4:9d:b6:69:83:08:65:a6:f8:06:19:1c:8d:fb:a8:bc:44:49: 17:9d:8b:8d:b2:bf:75:29:c6:33:ba:db:01:f2:95:5b:51:b4: 1c:40:8c:09:5e:72:aa:82:37:64:e2:3a:47:c6:f8:dd:1b:46: ff:31:a4:a0:03:5b:78:95:f4:21:d4:fe:e0:15:48:41:83:39: 17:f4:43:be:68:99:5e:a4:6d:4f:a7:ee:04:91:b3:39:2f:f5: 40:a3:3f:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQoRblAoO855tdwXPAgj7feq8PUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNDA1MTgxOTI1NThaFw0yNDA1MjEyMzIwNThaMDMxMTAvBgNV BAMTKEFEMzg0NzI2Q0M0QzcxN0U0QkIwQTYxRjA1RjYyMzMwREUwMjAxRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxtCcJ/iiwxEktNhCVxncUs1XR 422+ono7FIy0t2q+UFOCM/Gq5qaCzmvZ6S3R79CXEQXWHjgwSzJH4NOt+ANhynIl VIziQDpVD2Ptqo513amEAxhyZ0fpsaCarjJ6v1nM/XyH0PHjB9XHk+wOx8x4egMk ZN5MmIdDj98MNN07pF/girvl5DPAwBVSleu2zEJuNPCey1c+n+ZQKpzmdpKxGUGE e8l9xWBDLE6zU8TnuNT4DkJDtrQ7JaTdsfy/XR/rfMXi2/H/QWcaWaAO5aC5ml7q /0UY50eVJS+oshwny38l19YyUM/N7r22NOzHXaXyE2bxIMq6sLLh859iI+Y5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrThHJsxMcX5LsKYfBfYjMN4CAeQwHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbZ9wASjZ7hwJpDpDuInKOHBKmcUhmYAGdZ FMvnZb/5N6aqYLBdT5NEjwfbXmMf46TIyDxSj/gG1Ue2WPo/D8z08/V19Vvx69Wv hiAWWPaymogOsjeEyWwPv/DLrqDyT8PcksttldA4bUsShKFap87JuzmytNjUcOsy mtJSWHNwfbKP11RR9vfZ3qwa1/6oQ7IwL8VFHZGgzoyfjMg9aIg4jcSdtmmDCGWm +AYZHI37qLxESRedi42yv3UpxjO62wHylVtRtBxAjAlecqqCN2TiOkfG+N0bRv8x pKADW3iV9CHU/uAVSEGDORf0Q75omV6kbU+n7gSRszkv9UCjP7Y= -----END CERTIFICATE-----Generated at Sat May 18 20:15:34 2024 by rpki-client on console-ams.rpki-client.org