$ rpki-client -vvf repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft File: D00472C77B42BC0E23D929360AA568BBAE2AA668.mft (raw, json) Hash identifier: uY9yA5oWcCWPzKU19Q2frfXOt9ikjeEJRYiWeIbOU0I= Subject key identifier: FB:3F:8E:71:26:AD:9D:56:93:73:1E:F5:A0:97:E8:13:E2:D8:59:4A Authority key identifier: D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 Certificate issuer: /CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Certificate serial: 3A054E48964F62F50FF24E8C7544F9C230A7D78D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft Manifest number: 0156 Signing time: Fri 17 May 2024 23:00:03 +0000 Manifest this update: Fri 17 May 2024 22:55:03 +0000 Manifest next update: Tue 21 May 2024 01:59:03 +0000 Files and hashes: 1: D00472C77B42BC0E23D929360AA568BBAE2AA668.crl (hash: gdgY5OjWeBDns11gXg5KxeIWbDB6VnDro1t6V4JHG/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 01:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:05:4e:48:96:4f:62:f5:0f:f2:4e:8c:75:44:f9:c2:30:a7:d7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Validity Not Before: May 17 22:55:03 2024 GMT Not After : May 21 01:59:03 2024 GMT Subject: CN=FB3F8E7126AD9D5693731EF5A097E813E2D8594A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:29:70:1a:86:3a:dd:5b:8c:39:74:e4:64: c6:c6:c6:9d:81:08:4e:bd:c9:21:c7:18:3f:87:e1: fc:a6:fd:bc:a1:38:91:f2:28:e7:75:91:c0:43:0e: a3:29:f5:bb:8f:04:80:62:27:64:8e:af:ed:44:2a: f8:98:b5:bb:54:54:01:d5:f9:23:0c:74:27:d4:e3: 6d:85:c4:0a:14:83:33:97:11:9f:8a:9d:a1:63:0f: 4b:43:c3:02:36:46:86:d7:ba:fc:ac:54:da:18:cb: 79:0d:35:30:60:8f:07:7f:2e:8e:07:5c:79:84:6f: 2e:1e:82:c4:20:13:ad:67:51:35:ec:e5:12:e1:86: 2c:fa:95:ef:34:2a:78:22:49:26:4f:41:0d:55:e1: 2f:c1:7c:f9:6a:e5:b4:fc:3c:d1:d6:a0:82:e1:56: 16:5b:31:20:81:1c:47:3f:c7:6e:46:03:e8:dc:40: 32:11:8e:49:66:61:05:b5:fb:5d:f6:dc:65:10:3a: 8a:b6:45:e7:44:e6:4b:9b:c7:bc:da:06:1e:8a:07: 28:b5:9f:47:9c:b3:10:cc:7f:70:8f:f8:7d:ba:c7: 12:ec:97:53:71:39:5f:e6:5c:f0:85:b9:13:e1:14: eb:9c:a1:bb:1a:fa:a7:2e:7c:94:70:b0:b1:4a:2b: 15:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3F:8E:71:26:AD:9D:56:93:73:1E:F5:A0:97:E8:13:E2:D8:59:4A X509v3 Authority Key Identifier: keyid:D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:96:2e:19:49:f9:4e:70:cd:16:02:e4:ed:c9:6d:ca:ad:fe: 3d:8d:b9:a7:9f:97:24:12:f0:02:48:4f:1f:e0:a6:29:9f:b7: e1:ad:a4:81:31:a0:90:00:60:51:78:17:fe:35:0b:5c:37:64: 28:d1:ea:e2:98:a8:fc:cc:a5:2b:30:fe:77:a2:0e:54:7d:5a: 58:5b:77:89:47:7a:6a:5a:45:b8:49:45:d2:a3:1d:78:e8:34: 65:10:ef:29:54:6f:aa:b5:b2:25:d4:76:84:f9:2b:6d:63:a9: 2a:90:3d:0a:34:8f:81:e5:8e:67:94:49:1e:4b:15:b4:89:e9: 20:4c:ad:0c:ef:08:cd:2b:61:0b:63:27:7c:d6:c2:c7:80:90: e8:2e:a1:a2:66:03:d9:e1:64:47:82:58:6f:23:78:aa:cf:be: 0d:ef:2a:fc:91:13:a3:26:6b:e6:39:5a:78:6b:f2:7a:57:82: 5f:ff:52:55:47:0f:83:ab:4e:a6:1a:e9:15:55:b2:93:b6:97: e0:84:f8:01:cc:9c:06:34:24:e2:65:69:38:b2:db:44:bf:76: dc:43:99:2e:87:de:90:e1:e6:5b:8e:40:89:c7:17:60:dd:d2: 9e:00:2c:83:79:9c:04:10:26:b6:22:4b:8c:32:22:cd:39:07: 0f:a9:bb:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgVOSJZPYvUP8k6MdUT5wjCn140wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJB RTJBQTY2ODAeFw0yNDA1MTcyMjU1MDNaFw0yNDA1MjEwMTU5MDNaMDMxMTAvBgNV BAMTKEZCM0Y4RTcxMjZBRDlENTY5MzczMUVGNUEwOTdFODEzRTJEODU5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89ilwGoY63VuMOXTkZMbGxp2B CE69ySHHGD+H4fym/byhOJHyKOd1kcBDDqMp9buPBIBiJ2SOr+1EKviYtbtUVAHV +SMMdCfU422FxAoUgzOXEZ+KnaFjD0tDwwI2RobXuvysVNoYy3kNNTBgjwd/Lo4H XHmEby4egsQgE61nUTXs5RLhhiz6le80KngiSSZPQQ1V4S/BfPlq5bT8PNHWoILh VhZbMSCBHEc/x25GA+jcQDIRjklmYQW1+1323GUQOoq2RedE5kubx7zaBh6KByi1 n0ecsxDMf3CP+H26xxLsl1NxOV/mXPCFuRPhFOucobsa+qcufJRwsLFKKxX7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+z+OcSatnVaTcx71oJfoE+LYWUowHwYDVR0j BBgwFoAU0ARyx3tCvA4j2Sk2CqVou64qpmgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE3MzY5YS1iY2MxLTQyYmMtYjhiMi1mOTZkNTBkMzc0OWQvMC9EMDA0NzJDNzdC NDJCQzBFMjNEOTI5MzYwQUE1NjhCQkFFMkFBNjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJBRTJB QTY2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4 YjItZjk2ZDUwZDM3NDlkLzAvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4 QkJBRTJBQTY2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMaWLhlJ+U5wzRYC5O3Jbcqt/j2NuaeflyQS 8AJITx/gpimft+GtpIExoJAAYFF4F/41C1w3ZCjR6uKYqPzMpSsw/neiDlR9Wlhb d4lHempaRbhJRdKjHXjoNGUQ7ylUb6q1siXUdoT5K21jqSqQPQo0j4HljmeUSR5L FbSJ6SBMrQzvCM0rYQtjJ3zWwseAkOguoaJmA9nhZEeCWG8jeKrPvg3vKvyRE6Mm a+Y5Wnhr8npXgl//UlVHD4OrTqYa6RVVspO2l+CE+AHMnAY0JOJlaTiy20S/dtxD mS6H3pDh5luOQInHF2Dd0p4ALIN5nAQQJrYiS4wyIs05Bw+pux8= -----END CERTIFICATE-----Generated at Fri May 17 23:32:46 2024 by rpki-client on console-fra.rpki-client.org