$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft File: 11B369E1CF41EB03E35A2711FF1FE0F687242467.mft (raw, json) Hash identifier: brMI+OY/QBclfsqCD7Thau6MUsuyC4uAyczBAGPraEQ= Subject key identifier: DE:59:8C:93:59:FF:7C:30:26:4B:D2:AF:7A:A4:50:78:C9:7D:47:C2 Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 Certificate issuer: /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Certificate serial: 3D24810D2CE598B23F1342EF98A9FF14751C62D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft Manifest number: 014A Signing time: Wed 29 May 2024 13:40:00 +0000 Manifest this update: Wed 29 May 2024 13:35:00 +0000 Manifest next update: Sat 01 Jun 2024 21:26:00 +0000 Files and hashes: 1: 11B369E1CF41EB03E35A2711FF1FE0F687242467.crl (hash: v1zc7LrlTau7P29mv9lH+SL9/jZTNooz+mcFaJod2fY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 20:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:24:81:0d:2c:e5:98:b2:3f:13:42:ef:98:a9:ff:14:75:1c:62:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467 Validity Not Before: May 29 13:35:00 2024 GMT Not After : Jun 1 21:26:00 2024 GMT Subject: CN=DE598C9359FF7C30264BD2AF7AA45078C97D47C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d0:3e:a3:b6:67:ad:15:82:e7:eb:cf:f0:4f: 40:c3:1b:64:09:e1:0b:36:b6:0b:e8:37:2f:fe:5c: 2d:bf:e4:eb:01:fa:00:85:73:62:01:7c:36:09:68: 6e:05:f1:f9:82:c9:79:a5:cf:b5:be:a7:64:5b:ab: 7b:b7:b7:ec:18:7a:30:e6:e9:ea:17:fc:de:4e:fc: 3a:35:a9:68:6f:fc:d1:54:9c:24:80:fd:2a:39:2f: ae:8b:94:ca:b5:e2:6c:02:6e:cd:0d:9b:ad:68:4f: 54:c0:28:eb:28:a4:0e:42:b6:26:6f:77:dc:9c:5b: 2f:26:6e:0a:ec:5d:bf:df:33:b0:92:98:1d:4e:68: 32:72:c2:30:59:fb:81:81:44:de:0c:15:20:6a:7e: 9e:91:74:95:bb:e0:5f:1a:95:70:26:44:73:b7:32: a8:bb:b4:9d:1e:83:e8:51:ec:09:51:44:5d:d5:66: 73:16:14:2f:44:1d:a5:97:cc:e0:72:e4:5b:72:0b: 7a:fc:8f:f3:10:e7:d1:51:0d:6f:94:70:b5:ed:8a: 10:b3:fd:84:7a:3e:01:e1:6b:d8:c9:e8:09:b4:c3: 92:d7:42:d6:4d:92:a9:3e:2d:02:7d:79:97:0b:52: 0b:59:82:a6:6b:2f:29:b3:cb:d0:38:5c:f1:a6:85: 71:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:59:8C:93:59:FF:7C:30:26:4B:D2:AF:7A:A4:50:78:C9:7D:47:C2 X509v3 Authority Key Identifier: keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:cc:2a:11:3c:20:5f:94:29:21:f0:a3:9a:b9:d2:96:e1:25: 77:cb:c4:01:b6:4a:39:38:27:f5:dd:8d:41:f6:32:a4:a2:59: 3a:ea:53:d8:b3:d2:88:6f:47:cd:54:d9:11:dd:5b:2c:99:82: dd:0d:4d:ae:41:09:d7:75:8e:fc:d9:27:95:03:cb:9d:b1:f0: a0:00:49:37:7d:67:67:19:7d:fe:03:1f:12:ae:04:e1:90:e5: 1e:3d:96:66:08:14:5b:a9:2b:f4:be:ad:fc:4c:45:80:6d:2d: 61:8e:07:14:45:fc:77:be:17:21:09:07:ce:b9:84:0e:1a:ee: 1d:d9:c7:b5:1b:51:3e:7c:0c:f4:f1:48:a3:24:66:fc:fc:4e: fb:8e:ae:06:07:bf:a2:67:43:1e:8e:7c:64:d7:34:bd:07:b8: 8f:aa:11:59:0b:2c:20:e1:2b:5d:02:f8:29:7e:86:9a:32:e8: 02:93:d3:ff:71:3d:7d:9b:9d:b3:fb:6f:2c:b6:3e:37:56:67: 1f:37:04:8f:2a:66:0f:0e:e8:c2:15:f6:da:41:b0:08:3a:9c: fc:df:3d:11:c8:32:a2:89:32:c5:7e:5d:aa:00:bd:2c:cf:83: 4d:1f:24:99:a9:95:c2:d4:bd:50:0f:37:bb:cd:49:14:2a:cd: 67:5c:43:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSSBDSzlmLI/E0LvmKn/FHUcYtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4 NzI0MjQ2NzAeFw0yNDA1MjkxMzM1MDBaFw0yNDA2MDEyMTI2MDBaMDMxMTAvBgNV BAMTKERFNTk4QzkzNTlGRjdDMzAyNjRCRDJBRjdBQTQ1MDc4Qzk3RDQ3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ0D6jtmetFYLn68/wT0DDG2QJ 4Qs2tgvoNy/+XC2/5OsB+gCFc2IBfDYJaG4F8fmCyXmlz7W+p2Rbq3u3t+wYejDm 6eoX/N5O/Do1qWhv/NFUnCSA/So5L66LlMq14mwCbs0Nm61oT1TAKOsopA5CtiZv d9ycWy8mbgrsXb/fM7CSmB1OaDJywjBZ+4GBRN4MFSBqfp6RdJW74F8alXAmRHO3 Mqi7tJ0eg+hR7AlRRF3VZnMWFC9EHaWXzOBy5FtyC3r8j/MQ59FRDW+UcLXtihCz /YR6PgHha9jJ6Am0w5LXQtZNkqk+LQJ9eZcLUgtZgqZrLymzy9A4XPGmhXFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3lmMk1n/fDAmS9KveqRQeMl9R8IwHwYDVR0j BBgwFoAUEbNp4c9B6wPjWicR/x/g9ockJGcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTA5NjJmNy02N2VhLTQ3MGUtYTUyNC03YWUxZTQwZmQ1YjcvMC8xMUIzNjlFMUNG NDFFQjAzRTM1QTI3MTFGRjFGRTBGNjg3MjQyNDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUwRjY4NzI0 MjQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmUwOTYyZjctNjdlYS00NzBlLWE1 MjQtN2FlMWU0MGZkNWI3LzAvMTFCMzY5RTFDRjQxRUIwM0UzNUEyNzExRkYxRkUw RjY4NzI0MjQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHMKhE8IF+UKSHwo5q50pbhJXfLxAG2Sjk4 J/XdjUH2MqSiWTrqU9iz0ohvR81U2RHdWyyZgt0NTa5BCdd1jvzZJ5UDy52x8KAA STd9Z2cZff4DHxKuBOGQ5R49lmYIFFupK/S+rfxMRYBtLWGOBxRF/He+FyEJB865 hA4a7h3Zx7UbUT58DPTxSKMkZvz8TvuOrgYHv6JnQx6OfGTXNL0HuI+qEVkLLCDh K10C+Cl+hpoy6AKT0/9xPX2bnbP7byy2PjdWZx83BI8qZg8O6MIV9tpBsAg6nPzf PRHIMqKJMsV+XaoAvSzPg00fJJmplcLUvVAPN7vNSRQqzWdcQ4k= -----END CERTIFICATE-----Generated at Wed May 29 17:52:12 2024 by rpki-client on console-ams.rpki-client.org