$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: weVf2Ypm64jVwfZ5gWhZnZVd5sLQBBNTp6lLw//grXc= Subject key identifier: E0:E5:14:B0:81:17:71:03:2E:FF:FF:1F:6D:DB:8F:81:BC:5F:5A:42 Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 1B78E7BA5E47B086FA2595503F341A4EAD4C561A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: A3 Signing time: Tue 28 May 2024 14:30:44 +0000 Manifest this update: Tue 28 May 2024 14:25:44 +0000 Manifest next update: Fri 31 May 2024 22:43:44 +0000 Files and hashes: 1: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: cscEpErJK/Cqvg/4gyOZQyVrB+2AsH3xLDAvh83x7A4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 17:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:78:e7:ba:5e:47:b0:86:fa:25:95:50:3f:34:1a:4e:ad:4c:56:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: May 28 14:25:44 2024 GMT Not After : May 31 22:43:44 2024 GMT Subject: CN=E0E514B0811771032EFFFF1F6DDB8F81BC5F5A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:a9:af:5b:77:12:4c:72:6d:da:46:d1:2b: 8d:d7:e2:b1:fa:23:d6:4e:fa:df:c1:36:b4:5d:a5: a2:d6:52:11:b5:cb:66:24:81:27:42:ed:5b:39:f1: 50:fb:b9:51:2f:15:a5:78:ce:c5:d1:f1:f3:b2:1a: ff:3a:2e:70:2e:10:7c:d9:85:3f:f1:df:e7:f5:e6: 85:c7:9b:c9:69:0e:75:ef:3b:12:02:40:4e:64:ad: 93:e9:c7:77:06:ec:8d:1f:eb:50:a5:d4:5c:b5:20: 1e:db:80:b2:5a:23:a7:dd:92:02:cb:fb:62:89:b2: 0f:cd:7a:19:b2:5e:20:8d:f2:a7:98:23:c9:61:15: 25:c5:85:e4:31:19:67:17:d1:fb:ae:9b:c6:8f:a6: c5:96:2b:7d:b1:2d:3b:97:aa:1f:b8:02:70:7e:2e: d2:cc:7c:34:05:56:5e:aa:99:2f:d2:31:ea:5e:cf: 3d:25:33:c0:e0:d3:8c:c3:3b:fd:88:ac:8a:91:cd: 4b:63:5a:ef:29:3d:00:36:52:ab:e0:32:21:c7:73: 1d:29:84:93:01:24:74:08:79:a3:d8:47:fc:b0:1b: 4b:43:d7:9d:ce:77:79:6c:32:ab:cc:79:ed:61:7a: 47:83:9a:15:f0:a2:c4:0d:61:fa:6f:04:84:39:18: 29:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E5:14:B0:81:17:71:03:2E:FF:FF:1F:6D:DB:8F:81:BC:5F:5A:42 X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:84:4f:27:91:79:8c:50:2f:8c:1a:a9:79:79:55:5f:53:81: 5d:e7:31:1d:58:e8:2f:4d:6f:df:1c:75:23:37:f6:8c:5b:96: 0c:3f:23:85:42:19:0c:b1:e5:0c:3d:14:e7:33:92:92:ca:95: 61:83:2f:52:27:6b:07:3c:f8:cd:2a:19:24:01:85:91:6e:33: a5:63:47:a2:90:1d:0f:32:8b:56:aa:91:44:0e:ef:7e:dd:b7: e0:49:c9:f2:18:7b:a3:ae:d2:a2:8e:cb:a2:6b:5a:0e:f4:99: c0:cd:07:b6:31:2e:0f:b8:e2:e5:51:fc:81:1c:4d:e2:b6:f0: 71:64:f9:dc:d8:38:19:c7:5f:19:17:11:e6:8c:22:9f:e7:a7: 29:1c:ec:74:cf:52:12:33:ce:5f:75:8d:90:f1:9a:af:00:1f: 31:70:3e:a9:3d:88:03:2f:2c:1e:a9:c2:bb:2e:ab:87:d8:1c: d5:90:d8:e9:0d:b3:16:93:51:96:6f:eb:7b:c0:01:c7:86:91: 77:78:57:76:fb:6b:a3:77:14:c7:3e:dc:16:8d:89:d3:76:da: 8d:8a:ce:c3:a5:89:b6:92:93:8b:7c:42:5c:55:b1:9e:d3:6d: cb:a9:0a:85:72:79:63:ab:f4:05:2f:96:2f:a8:e5:75:86:f0: ca:23:b1:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3jnul5HsIb6JZVQPzQaTq1MVhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNDA1MjgxNDI1NDRaFw0yNDA1MzEyMjQzNDRaMDMxMTAvBgNV BAMTKEUwRTUxNEIwODExNzcxMDMyRUZGRkYxRjZEREI4RjgxQkM1RjVBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7qmvW3cSTHJt2kbRK43X4rH6 I9ZO+t/BNrRdpaLWUhG1y2YkgSdC7Vs58VD7uVEvFaV4zsXR8fOyGv86LnAuEHzZ hT/x3+f15oXHm8lpDnXvOxICQE5krZPpx3cG7I0f61Cl1Fy1IB7bgLJaI6fdkgLL +2KJsg/NehmyXiCN8qeYI8lhFSXFheQxGWcX0fuum8aPpsWWK32xLTuXqh+4AnB+ LtLMfDQFVl6qmS/SMepezz0lM8Dg04zDO/2IrIqRzUtjWu8pPQA2UqvgMiHHcx0p hJMBJHQIeaPYR/ywG0tD153Od3lsMqvMee1hekeDmhXwosQNYfpvBIQ5GClPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4OUUsIEXcQMu//8fbduPgbxfWkIwHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSETyeReYxQL4waqXl5VV9TgV3nMR1Y6C9N b98cdSM39oxblgw/I4VCGQyx5Qw9FOczkpLKlWGDL1Inawc8+M0qGSQBhZFuM6Vj R6KQHQ8yi1aqkUQO737dt+BJyfIYe6Ou0qKOy6JrWg70mcDNB7YxLg+44uVR/IEc TeK28HFk+dzYOBnHXxkXEeaMIp/npykc7HTPUhIzzl91jZDxmq8AHzFwPqk9iAMv LB6pwrsuq4fYHNWQ2OkNsxaTUZZv63vAAceGkXd4V3b7a6N3FMc+3BaNidN22o2K zsOlibaSk4t8QlxVsZ7TbcupCoVyeWOr9AUvli+o5XWG8MojsXQ= -----END CERTIFICATE-----Generated at Tue May 28 15:24:02 2024 by rpki-client on console-fra.rpki-client.org