$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: KBRod1GbS20EVd0E5jqgs08+3FKUyqaMFQmBUm1burk= Subject key identifier: C5:90:3C:62:54:9A:72:7D:C6:09:4D:FF:A5:3A:D9:53:4A:00:46:F5 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 4127EB1AE8D9EEF293B4143C794F4778C463A271 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: 07 Signing time: Wed 26 Jun 2024 12:41:48 +0000 Manifest this update: Wed 26 Jun 2024 12:36:48 +0000 Manifest next update: Sat 29 Jun 2024 22:20:48 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: cdDyv3borFqzAHSYi37kljhMZcrUtXo8mLIT2j91Yvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 29 Jun 2024 17:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:27:eb:1a:e8:d9:ee:f2:93:b4:14:3c:79:4f:47:78:c4:63:a2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Jun 26 12:36:48 2024 GMT Not After : Jun 29 22:20:48 2024 GMT Subject: CN=C5903C62549A727DC6094DFFA53AD9534A0046F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:db:c0:f5:b3:67:c1:ba:3f:73:89:19:2f: 9c:5a:a2:83:0a:53:4c:b0:87:c9:bb:f0:2e:f3:6e: be:dd:37:e3:5d:c3:0e:74:6e:48:56:93:88:20:f5: 02:81:ca:be:a1:6f:5e:fc:56:f6:5b:a5:e4:19:77: ce:3b:1b:aa:69:75:b7:9f:12:f6:d8:3c:79:38:b7: 8d:69:1a:06:c8:8a:d7:d0:4f:0d:a5:11:e6:db:a9: 17:b7:1c:85:11:77:fe:6f:04:54:d6:0c:9c:98:28: 3c:45:a4:a3:2e:75:29:5d:54:57:c5:7d:5d:d8:e1: c7:e8:6b:f1:a3:2c:4f:a7:b5:11:8f:48:cb:f1:8d: fc:be:18:5a:7c:1f:d0:71:67:9e:7f:e5:8e:42:fd: 37:67:66:ef:90:e0:c8:df:be:9a:d8:29:86:28:a9: 8d:08:59:59:99:12:1f:9c:30:c2:35:21:2a:02:57: c4:7f:81:5a:ce:cc:a8:9a:2a:df:d7:e5:6d:f4:37: 99:69:52:8a:25:53:8c:53:6f:d2:88:db:24:30:d8: ad:18:8e:4a:4d:98:a3:1d:a4:3f:aa:d3:6f:56:0c: 95:c3:83:1f:55:0d:15:6d:f4:11:d4:8d:c7:61:1f: dd:32:68:fb:9d:bd:f3:ae:73:c7:d0:ed:a8:ad:a9: 65:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:90:3C:62:54:9A:72:7D:C6:09:4D:FF:A5:3A:D9:53:4A:00:46:F5 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b3:00:4a:22:8e:c2:5a:fd:2b:25:54:89:88:ed:2c:4c:30: 06:c3:e8:54:c7:95:56:d4:cd:ad:a9:a7:cd:ce:4b:96:61:31: bc:9a:71:a0:bb:cd:a0:a9:e0:af:7e:df:25:32:2d:ae:1f:32: 11:2d:43:f9:29:f6:29:a0:10:c2:b2:85:6d:ac:be:c3:18:81: 22:8f:a6:68:56:46:79:78:09:13:2f:9f:8a:04:04:3b:32:e2: 1c:f1:80:2e:35:c3:c1:6f:cd:0e:09:80:b9:5a:9e:0d:f7:49: 28:7f:b2:9a:1e:87:49:d5:2a:e1:ec:7d:c2:6c:42:b0:6a:ad: 79:de:e1:f5:6f:e9:3f:99:98:cb:81:69:c1:40:ee:0f:88:0c: 6f:b4:f1:44:d8:88:0f:a7:cc:d8:20:d5:08:cd:c6:0f:46:34: a0:3a:cf:e4:ea:c6:73:d3:15:29:ee:5e:ba:52:e0:1e:72:04: ad:bb:84:e3:5a:4a:95:83:0d:c5:c7:3c:95:f8:bb:7d:0f:9b: b2:35:23:bd:3a:81:71:1d:81:30:5b:a7:f6:c8:c5:85:60:58: aa:5e:9c:a1:1f:81:ce:36:c6:9b:36:d9:09:85:4e:27:b1:72: 7c:92:a3:52:7e:77:75:49:41:b0:28:f1:e8:4d:6a:fd:fb:32: fd:88:55:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQSfrGujZ7vKTtBQ8eU9HeMRjonEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNDA2MjYxMjM2NDhaFw0yNDA2MjkyMjIwNDhaMDMxMTAvBgNV BAMTKEM1OTAzQzYyNTQ5QTcyN0RDNjA5NERGRkE1M0FEOTUzNEEwMDQ2RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHu9vA9bNnwbo/c4kZL5xaooMK U0ywh8m78C7zbr7dN+Ndww50bkhWk4gg9QKByr6hb178VvZbpeQZd847G6ppdbef EvbYPHk4t41pGgbIitfQTw2lEebbqRe3HIURd/5vBFTWDJyYKDxFpKMudSldVFfF fV3Y4cfoa/GjLE+ntRGPSMvxjfy+GFp8H9BxZ55/5Y5C/TdnZu+Q4MjfvprYKYYo qY0IWVmZEh+cMMI1ISoCV8R/gVrOzKiaKt/X5W30N5lpUoolU4xTb9KI2yQw2K0Y jkpNmKMdpD+q029WDJXDgx9VDRVt9BHUjcdhH90yaPudvfOuc8fQ7aitqWV1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxZA8YlSacn3GCU3/pTrZU0oARvUwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECzAEoijsJa/SslVImI7SxMMAbD6FTHlVbU za2pp83OS5ZhMbyacaC7zaCp4K9+3yUyLa4fMhEtQ/kp9imgEMKyhW2svsMYgSKP pmhWRnl4CRMvn4oEBDsy4hzxgC41w8FvzQ4JgLlang33SSh/spoeh0nVKuHsfcJs QrBqrXne4fVv6T+ZmMuBacFA7g+IDG+08UTYiA+nzNgg1QjNxg9GNKA6z+TqxnPT FSnuXrpS4B5yBK27hONaSpWDDcXHPJX4u30Pm7I1I706gXEdgTBbp/bIxYVgWKpe nKEfgc42xps22QmFTiexcnySo1J+d3VJQbAo8ehNav37Mv2IVQA= -----END CERTIFICATE-----Generated at Wed Jun 26 15:39:43 2024 by rpki-client on console-ams.rpki-client.org