$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft File: F389B5570A768F4811B6377427EE5A9710A3078F.mft (raw, json) Hash identifier: FlOzNJEMzbspUB++bjZQojxSl+Xhi99xVw2jk33mRT4= Subject key identifier: 02:B6:59:CC:3F:D5:14:0D:05:7F:53:81:62:3A:BB:89:CF:7A:07:5E Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F Certificate issuer: /CN=F389B5570A768F4811B6377427EE5A9710A3078F Certificate serial: 0DEF0165A8CBADCC7801A205639C0E3C6DFB614B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft Manifest number: 0278 Signing time: Fri 17 May 2024 18:00:45 +0000 Manifest this update: Fri 17 May 2024 17:55:45 +0000 Manifest next update: Mon 20 May 2024 18:25:45 +0000 Files and hashes: 1: F389B5570A768F4811B6377427EE5A9710A3078F.crl (hash: yhq+StrzMb7E1+te2bwlXGL6hRr3zv9qjxDKNzoeLM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 18:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ef:01:65:a8:cb:ad:cc:78:01:a2:05:63:9c:0e:3c:6d:fb:61:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F Validity Not Before: May 17 17:55:45 2024 GMT Not After : May 20 18:25:45 2024 GMT Subject: CN=02B659CC3FD5140D057F5381623ABB89CF7A075E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:75:fb:b1:1b:0b:84:d9:c6:ff:95:7f:84:11: e7:50:a8:9c:0d:0d:aa:e4:c0:b0:ae:40:02:d9:38: ad:15:c2:c6:a4:73:12:02:27:30:03:12:b7:b9:7c: 9f:fd:d9:cf:fd:4a:ab:99:ec:64:35:2c:db:34:05: e8:61:4e:c1:f0:8f:e2:40:19:95:d2:89:39:6f:91: 62:6d:70:1f:b9:d9:f4:f8:1f:97:b8:91:1d:5e:8b: 58:cb:9f:e0:9a:4d:df:4c:f9:13:5a:1c:1d:66:98: b6:4f:59:68:ec:04:3f:4e:d0:5a:ef:ed:07:ee:b2: bf:69:f1:d1:42:d7:2b:4b:87:bc:b6:0a:b8:ca:88: eb:59:83:e1:f4:71:b1:b2:79:ef:8f:6b:10:5c:4c: 9a:67:7b:b0:b0:22:53:80:52:cf:50:e5:24:a4:46: 7e:5c:9c:7b:e9:ef:40:1d:d5:d8:06:59:08:e8:66: e0:34:7a:67:07:c7:e7:7e:95:87:71:ae:ed:ce:fb: a0:9d:47:2b:0b:ce:76:92:1f:9a:3b:ab:a3:85:74: 35:6d:cd:65:18:76:0f:ad:99:d2:c5:04:86:b3:83: be:79:c7:a0:83:6a:5d:ac:0c:e8:82:4f:d5:79:ee: 89:2e:b8:aa:36:ce:c8:29:f4:95:a9:58:ff:21:56: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B6:59:CC:3F:D5:14:0D:05:7F:53:81:62:3A:BB:89:CF:7A:07:5E X509v3 Authority Key Identifier: keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:31:71:ef:ed:85:85:b2:a6:23:53:26:70:5e:70:12:1b:e6: 6c:de:2d:71:1f:0a:d7:a2:03:8b:b0:ab:13:be:2c:08:b4:6c: b0:b2:39:d8:6f:ed:e7:d0:1b:31:c8:9e:75:34:a6:4c:cb:bf: b0:3d:16:86:36:03:e4:ca:dd:b3:1a:e7:23:fb:e5:f3:73:cd: 0f:75:d5:8b:78:3c:df:c4:33:4f:ac:98:ae:01:fd:f9:8f:a5: c1:34:2f:3e:63:26:75:99:a0:1b:25:fa:45:96:15:c1:fe:84: 67:dc:bb:92:19:f6:71:66:f8:a1:c3:e7:01:72:4a:43:6e:58: 8f:40:6c:05:dc:d0:e8:2f:5d:7c:af:09:86:5b:72:95:d2:00: 0e:c1:2a:e6:76:55:cf:2e:6e:60:55:73:bd:49:96:0c:ad:1e: 49:1c:eb:37:8a:d8:02:6e:47:b8:7d:fe:6a:e3:9e:ab:40:97: 75:15:08:51:14:f9:4a:db:0b:65:81:e8:0d:ba:d7:c4:b6:43: 7f:5d:ac:ab:6a:ac:47:39:c2:68:0c:a9:ec:ef:b0:e7:18:5a: 7e:7d:fe:13:e0:d1:31:38:49:48:27:76:ab:07:35:51:ab:18: 07:72:c3:40:4b:f4:3b:67:34:41:8d:79:e7:2a:f0:92:5a:2b: a2:f6:b3:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDe8BZajLrcx4AaIFY5wOPG37YUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcx MEEzMDc4RjAeFw0yNDA1MTcxNzU1NDVaFw0yNDA1MjAxODI1NDVaMDMxMTAvBgNV BAMTKDAyQjY1OUNDM0ZENTE0MEQwNTdGNTM4MTYyM0FCQjg5Q0Y3QTA3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZdfuxGwuE2cb/lX+EEedQqJwN DarkwLCuQALZOK0VwsakcxICJzADEre5fJ/92c/9SquZ7GQ1LNs0BehhTsHwj+JA GZXSiTlvkWJtcB+52fT4H5e4kR1ei1jLn+CaTd9M+RNaHB1mmLZPWWjsBD9O0Frv 7Qfusr9p8dFC1ytLh7y2CrjKiOtZg+H0cbGyee+PaxBcTJpne7CwIlOAUs9Q5SSk Rn5cnHvp70Ad1dgGWQjoZuA0emcHx+d+lYdxru3O+6CdRysLznaSH5o7q6OFdDVt zWUYdg+tmdLFBIazg755x6CDal2sDOiCT9V57okuuKo2zsgp9JWpWP8hVgyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUArZZzD/VFA0Ff1OBYjq7ic96B14wHwYDVR0j BBgwFoAU84m1Vwp2j0gRtjd0J+5alxCjB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzhhYjNlMC1jYTY4LTQyZjYtOThmNi02NTRhMjUyYTg2NDgvMC9GMzg5QjU1NzBB NzY4RjQ4MTFCNjM3NzQyN0VFNUE5NzEwQTMwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcxMEEz MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVB OTcxMEEzMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQxce/thYWypiNTJnBecBIb5mzeLXEfCtei A4uwqxO+LAi0bLCyOdhv7efQGzHInnU0pkzLv7A9FoY2A+TK3bMa5yP75fNzzQ91 1Yt4PN/EM0+smK4B/fmPpcE0Lz5jJnWZoBsl+kWWFcH+hGfcu5IZ9nFm+KHD5wFy SkNuWI9AbAXc0OgvXXyvCYZbcpXSAA7BKuZ2Vc8ubmBVc71JlgytHkkc6zeK2AJu R7h9/mrjnqtAl3UVCFEU+UrbC2WB6A2618S2Q39drKtqrEc5wmgMqezvsOcYWn59 /hPg0TE4SUgndqsHNVGrGAdyw0BL9DtnNEGNeecq8JJaK6L2s/g= -----END CERTIFICATE-----Generated at Fri May 17 20:01:48 2024 by rpki-client on console-ams.rpki-client.org