$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: MzsHnzAhrkwbTwVLGK1E+vpM+jCxQbjiP52K+9tnzfE= Subject key identifier: C3:F1:A8:FD:96:19:B6:20:53:F9:54:51:F1:D2:CD:4F:26:E8:DE:8E Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 74032BF6912284E57BC5A1C87C149D957E5754AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: 3D Signing time: Sat 18 May 2024 18:01:11 +0000 Manifest this update: Sat 18 May 2024 17:56:11 +0000 Manifest next update: Wed 22 May 2024 01:57:11 +0000 Files and hashes: 1: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: 9rBwRN49qZSfQOq/PJPZZ86cWqUflu4bpufTxS6Szqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:03:2b:f6:91:22:84:e5:7b:c5:a1:c8:7c:14:9d:95:7e:57:54:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: May 18 17:56:11 2024 GMT Not After : May 22 01:57:11 2024 GMT Subject: CN=C3F1A8FD9619B62053F95451F1D2CD4F26E8DE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:f8:35:8a:f9:ec:6b:3b:8a:4b:f9:f9:88: ca:73:98:c8:a7:14:d7:66:44:96:00:b9:58:c0:46: 4f:f8:df:5b:82:c7:88:ab:d5:ab:b8:e5:4a:49:ef: 0c:8b:4b:78:6d:34:4a:bb:77:9e:ff:2e:7d:6b:a2: ef:f8:28:d5:15:dd:18:08:b9:4c:a5:01:8a:62:77: af:af:4e:4a:41:69:cd:ec:b1:2d:8e:67:7d:bc:08: a3:03:ca:52:46:b0:9e:74:f4:75:41:64:a1:3f:6e: 33:9c:f7:4d:9d:a8:53:c7:c8:fe:69:04:f2:46:e6: 81:98:ae:b5:5a:38:58:0f:56:37:15:49:f0:d4:e8: 3d:12:c5:8e:61:1c:4f:e1:f0:f3:29:09:c0:29:9f: ef:75:25:80:df:40:60:32:f8:67:e7:53:4a:0b:c9: ed:ca:e1:5f:03:14:cf:27:0e:8b:19:d3:43:86:40: 69:36:9a:82:2e:38:4d:4b:5d:a6:a0:84:14:97:0a: a2:ca:44:c8:34:28:91:03:0d:91:55:bf:b2:77:5e: a1:3d:e4:1f:04:d8:0d:50:c1:08:f2:02:f8:d4:7e: 68:4c:4f:11:39:20:20:30:8c:80:c3:7d:3e:c2:b3: 5d:7b:07:a5:4b:72:1c:42:e0:53:15:06:73:1b:ab: 63:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F1:A8:FD:96:19:B6:20:53:F9:54:51:F1:D2:CD:4F:26:E8:DE:8E X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b1:81:12:90:f4:b0:66:0a:07:af:b3:dc:fa:3b:1e:0c:d3: bc:c3:96:97:85:6d:22:3b:10:d8:16:d4:1e:47:f5:b0:67:bf: 7e:0f:4b:e9:e1:5e:e7:52:b4:8d:5a:ab:77:9b:9a:9b:79:4e: 66:57:b9:38:48:57:14:02:c5:56:bb:fc:1a:6e:4b:63:86:79: bc:e2:25:c0:e0:2d:c5:27:72:18:b0:e0:e3:0f:77:10:9b:b9: 72:90:5b:0a:7a:dc:c2:52:52:75:20:95:a9:b5:90:2a:8a:aa: 6a:c3:a2:06:b1:17:01:31:f7:ed:0e:5a:76:76:fe:6c:b1:58: 05:65:d8:f1:d9:15:d3:e9:5d:86:67:40:03:e9:f3:9f:c1:09: 2f:4a:54:0f:d9:96:33:73:b7:13:fc:07:f1:c8:79:e6:e0:9f: 8e:ed:2f:da:7d:eb:12:73:c1:1f:31:23:40:cc:df:d4:ac:a7: 8b:b3:2b:8d:d5:8b:38:08:72:3b:24:35:52:dc:d1:9c:83:2e: 44:a7:ac:a2:83:3d:c9:0c:c2:98:92:fc:a7:0b:aa:24:15:b9: 3d:0b:54:ff:39:79:00:03:6d:28:c9:50:25:53:f4:73:1f:d0: 47:76:8c:24:5f:6a:16:69:82:26:1a:35:1f:a6:f0:76:c5:0c: 3c:89:79:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdAMr9pEihOV7xaHIfBSdlX5XVKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNDA1MTgxNzU2MTFaFw0yNDA1MjIwMTU3MTFaMDMxMTAvBgNV BAMTKEMzRjFBOEZEOTYxOUI2MjA1M0Y5NTQ1MUYxRDJDRDRGMjZFOERFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFvg1ivnsazuKS/n5iMpzmMin FNdmRJYAuVjARk/431uCx4ir1au45UpJ7wyLS3htNEq7d57/Ln1rou/4KNUV3RgI uUylAYpid6+vTkpBac3ssS2OZ328CKMDylJGsJ509HVBZKE/bjOc902dqFPHyP5p BPJG5oGYrrVaOFgPVjcVSfDU6D0SxY5hHE/h8PMpCcApn+91JYDfQGAy+GfnU0oL ye3K4V8DFM8nDosZ00OGQGk2moIuOE1LXaaghBSXCqLKRMg0KJEDDZFVv7J3XqE9 5B8E2A1QwQjyAvjUfmhMTxE5ICAwjIDDfT7Cs117B6VLchxC4FMVBnMbq2ORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/Go/ZYZtiBT+VRR8dLNTybo3o4wHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaxgRKQ9LBmCgevs9z6Ox4M07zDlpeFbSI7 ENgW1B5H9bBnv34PS+nhXudStI1aq3ebmpt5TmZXuThIVxQCxVa7/BpuS2OGebzi JcDgLcUnchiw4OMPdxCbuXKQWwp63MJSUnUglam1kCqKqmrDogaxFwEx9+0OWnZ2 /myxWAVl2PHZFdPpXYZnQAPp85/BCS9KVA/ZljNztxP8B/HIeebgn47tL9p96xJz wR8xI0DM39Ssp4uzK43VizgIcjskNVLc0ZyDLkSnrKKDPckMwpiS/KcLqiQVuT0L VP85eQADbSjJUCVT9HMf0Ed2jCRfahZpgiYaNR+m8HbFDDyJeYg= -----END CERTIFICATE-----Generated at Sat May 18 18:46:23 2024 by rpki-client on console-fra.rpki-client.org