$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: ZllOgLrHWnDWXYcseMLxvBnS59LA6oEBEiJRFl/Ny7Q= Subject key identifier: D6:1E:72:BA:CC:B9:21:08:13:03:D4:CB:32:3B:BF:78:F9:24:C1:D5 Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 762528EEF0BE8C067ACC38631D99B14498762EF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 03EC Signing time: Wed 29 May 2024 04:30:55 +0000 Manifest this update: Wed 29 May 2024 04:25:55 +0000 Manifest next update: Sat 01 Jun 2024 06:31:55 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: c0Jxpw0rcGlKZhL9pCLd7VNhPtNvP7+f2C///sg9Eb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:25:28:ee:f0:be:8c:06:7a:cc:38:63:1d:99:b1:44:98:76:2e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: May 29 04:25:55 2024 GMT Not After : Jun 1 06:31:55 2024 GMT Subject: CN=D61E72BACCB921081303D4CB323BBF78F924C1D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:33:ed:02:8a:19:42:d2:2d:60:28:35:95: 2c:a2:63:f5:09:c1:f0:9d:f1:26:9d:6e:b0:4c:84: 6f:1d:b3:0b:99:dc:42:37:da:cc:52:2b:1a:90:cc: ce:f0:20:4c:d7:33:68:22:c0:7a:3c:d1:a5:5e:37: 3e:78:07:1c:fb:d0:c1:4f:af:7c:d9:6e:90:4c:e3: 8e:03:1e:41:aa:b4:d3:e0:dd:30:e4:e5:39:34:e0: 90:ca:1c:5c:20:38:72:c3:bd:d1:07:e4:04:51:89: 71:34:9d:78:48:df:ae:df:23:86:60:45:99:02:e9: eb:aa:b5:11:55:ec:7a:69:21:ce:5a:c0:ab:35:9b: c7:6b:48:38:a2:42:4b:53:ac:05:02:9a:5c:db:3c: 89:49:86:4d:bb:4d:ab:a7:db:ed:55:52:fd:d3:4c: 2b:36:39:2f:37:7e:60:7c:2f:f9:fc:5d:d5:08:e6: 0d:90:b6:0b:e5:ad:a9:0b:b0:ec:4d:01:7c:40:0c: 49:68:bd:30:fa:a2:cc:01:46:71:d5:18:f7:47:3c: e4:97:4b:5e:ee:48:0d:2e:bb:f3:be:de:e0:b9:b2: c2:3e:90:14:61:8e:21:c9:74:20:24:c8:70:86:af: 11:29:e7:21:72:03:22:46:36:71:f2:0a:c9:53:70: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1E:72:BA:CC:B9:21:08:13:03:D4:CB:32:3B:BF:78:F9:24:C1:D5 X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e3:ea:3a:9b:0b:aa:e3:ed:e0:84:72:e5:64:c9:14:c5:23: ad:fe:59:5b:c7:fb:12:7f:6c:1e:46:8c:b2:58:ee:e1:8a:21: 34:cf:f8:14:f6:1b:f4:b8:4e:e4:6b:54:68:05:be:71:8b:47: 12:ac:98:13:9c:e9:78:0e:3c:08:6a:34:42:70:d5:1c:cb:ae: d5:72:49:8b:0c:bc:30:69:42:43:72:9d:c9:1b:3f:94:c3:a0: a1:df:e2:b7:d4:29:fc:54:aa:54:94:68:bb:35:77:37:c6:d1: ea:6e:70:92:4e:59:83:9e:31:8c:d9:18:b2:9d:a2:7d:4e:d7: dc:e0:44:9b:3b:68:b5:e1:a4:d8:19:25:35:af:5a:16:5c:b0: d4:c4:ec:b6:ad:99:b2:4d:fc:ec:9f:ee:b9:02:d2:a2:35:df: 51:21:f0:7c:7b:5c:bc:d8:a7:e4:41:d6:a2:8c:5e:cf:1e:d4: b5:2e:29:75:52:f1:ff:f8:1b:ee:22:0f:8c:3c:3c:7c:20:17: 05:ea:6d:70:9e:36:2d:0d:7d:13:5e:e9:54:e8:ff:a9:5f:87: 5f:fc:cd:30:2f:7f:35:6b:e5:3b:1b:09:ae:04:8a:bf:dd:da: c8:1e:ac:13:d6:05:5f:e9:d2:ca:39:4e:b5:e1:07:5b:ff:f5: fe:73:81:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdiUo7vC+jAZ6zDhjHZmxRJh2LvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNDA1MjkwNDI1NTVaFw0yNDA2MDEwNjMxNTVaMDMxMTAvBgNV BAMTKEQ2MUU3MkJBQ0NCOTIxMDgxMzAzRDRDQjMyM0JCRjc4RjkyNEMxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGaDPtAooZQtItYCg1lSyiY/UJ wfCd8SadbrBMhG8dswuZ3EI32sxSKxqQzM7wIEzXM2giwHo80aVeNz54Bxz70MFP r3zZbpBM444DHkGqtNPg3TDk5Tk04JDKHFwgOHLDvdEH5ARRiXE0nXhI367fI4Zg RZkC6euqtRFV7HppIc5awKs1m8drSDiiQktTrAUCmlzbPIlJhk27Taun2+1VUv3T TCs2OS83fmB8L/n8XdUI5g2QtgvlrakLsOxNAXxADElovTD6oswBRnHVGPdHPOSX S17uSA0uu/O+3uC5ssI+kBRhjiHJdCAkyHCGrxEp5yFyAyJGNnHyCslTcC7DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1h5yusy5IQgTA9TLMju/ePkkwdUwHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPj6jqbC6rj7eCEcuVkyRTFI63+WVvH+xJ/ bB5GjLJY7uGKITTP+BT2G/S4TuRrVGgFvnGLRxKsmBOc6XgOPAhqNEJw1RzLrtVy SYsMvDBpQkNynckbP5TDoKHf4rfUKfxUqlSUaLs1dzfG0epucJJOWYOeMYzZGLKd on1O19zgRJs7aLXhpNgZJTWvWhZcsNTE7LatmbJN/Oyf7rkC0qI131Eh8Hx7XLzY p+RB1qKMXs8e1LUuKXVS8f/4G+4iD4w8PHwgFwXqbXCeNi0NfRNe6VTo/6lfh1/8 zTAvfzVr5TsbCa4Eir/d2sgerBPWBV/p0so5TrXhB1v/9f5zgW8= -----END CERTIFICATE-----Generated at Wed May 29 05:26:16 2024 by rpki-client on console-fra.rpki-client.org