$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: PnILCDlmKcpIJmlE+tb/rs7/OgkSQOetAEuyeEpftt8= Subject key identifier: BD:22:2A:79:6A:B1:5F:F2:55:A4:CC:A7:17:BB:3C:15:BC:05:58:7F Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 3BD2E5DF782DF9284D4A2B0D06D1ACD59A032059 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 016D Signing time: Sat 18 May 2024 15:10:03 +0000 Manifest this update: Sat 18 May 2024 15:05:03 +0000 Manifest next update: Tue 21 May 2024 17:28:03 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: 1bXhbaz/SIRupyr+Jflu0rk8vgBI9FuJm5v7RwZzxn4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d2:e5:df:78:2d:f9:28:4d:4a:2b:0d:06:d1:ac:d5:9a:03:20:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: May 18 15:05:03 2024 GMT Not After : May 21 17:28:03 2024 GMT Subject: CN=BD222A796AB15FF255A4CCA717BB3C15BC05587F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:25:4c:9c:d3:3d:cc:21:79:ff:d2:dd:8a:42: fb:80:e7:6f:03:cc:6d:bb:79:ed:5d:19:db:a7:f6: c5:49:6f:41:02:59:c9:24:14:2b:46:2a:53:81:49: 87:96:e9:7a:27:4b:38:7b:72:e6:1d:03:c4:7c:d3: 51:fd:23:a8:2c:14:ea:27:71:9e:9d:8b:5b:3b:01: f4:9e:15:d3:c9:dc:bf:3d:6c:6a:eb:21:92:8b:cf: 28:5a:8b:ab:80:ed:fe:af:05:43:4f:c9:4f:6c:5d: 8d:62:f1:2f:4a:63:e5:2c:58:17:a5:1b:33:76:33: ff:01:e6:0d:bc:e7:32:19:0c:49:71:a4:79:36:14: c6:55:19:70:1d:66:08:43:3b:1b:23:58:40:bb:e8: 2a:31:09:04:bf:2f:59:69:4a:be:eb:0b:bd:8e:aa: 9d:c0:13:a3:8e:0f:5a:de:f9:88:4c:00:80:27:0b: 28:53:7d:0a:e1:ca:dd:84:de:ee:ff:21:07:5e:cd: ea:7e:68:23:8d:ce:60:e6:a1:be:39:c1:4b:26:c0: d1:c7:d6:3d:de:97:3c:1b:db:53:4c:79:78:b6:dd: 12:b2:50:15:fc:97:f1:a8:bd:90:0e:b2:bd:90:0f: c4:37:10:06:e3:32:e1:fc:7c:f2:f6:0d:fa:43:b2: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:22:2A:79:6A:B1:5F:F2:55:A4:CC:A7:17:BB:3C:15:BC:05:58:7F X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1e:fa:65:ef:c0:8e:b5:00:20:c9:85:b0:bc:d8:eb:70:12: e4:0e:36:24:ca:49:ac:ae:07:ae:3f:2b:b1:ab:a3:4c:92:97: 30:4b:27:21:58:9d:bd:fd:95:1e:e4:b5:b5:ec:09:0a:f5:67: 7b:16:94:cb:6d:88:87:85:f1:ad:72:24:17:a0:72:30:74:10: d8:90:98:0a:86:05:14:d2:ae:39:7f:3a:f2:16:e1:ef:d6:59: d9:af:10:34:e2:4f:bb:e2:fa:b5:84:c1:26:68:ef:12:bf:b4: 29:df:dc:03:68:8c:93:23:49:12:6c:b8:11:b4:db:9c:c7:b3: b8:6d:62:c9:43:48:f3:d8:b0:7e:72:fd:0e:1e:5b:61:85:e6: 60:a3:f9:36:e2:8d:ab:17:b2:b5:ef:87:93:87:e2:61:28:d7: 8e:50:e3:12:38:5d:49:ce:4a:65:87:ca:2a:7f:aa:19:39:21: 1b:61:ff:7a:81:2e:33:c5:06:ca:bf:8d:ee:c1:db:c8:34:4c: 7e:c7:98:5b:07:53:1d:08:0c:7a:15:4a:16:61:bc:cd:a4:29: d7:71:88:6c:8c:3d:a5:ac:da:c6:b1:8c:b1:dd:ec:98:90:56: f0:85:db:57:7d:76:0a:37:8d:c4:dd:62:a7:b7:d4:86:3f:0e: 0f:cd:54:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9Ll33gt+ShNSisNBtGs1ZoDIFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNDA1MTgxNTA1MDNaFw0yNDA1MjExNzI4MDNaMDMxMTAvBgNV BAMTKEJEMjIyQTc5NkFCMTVGRjI1NUE0Q0NBNzE3QkIzQzE1QkMwNTU4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJUyc0z3MIXn/0t2KQvuA528D zG27ee1dGdun9sVJb0ECWckkFCtGKlOBSYeW6XonSzh7cuYdA8R801H9I6gsFOon cZ6di1s7AfSeFdPJ3L89bGrrIZKLzyhai6uA7f6vBUNPyU9sXY1i8S9KY+UsWBel GzN2M/8B5g285zIZDElxpHk2FMZVGXAdZghDOxsjWEC76CoxCQS/L1lpSr7rC72O qp3AE6OOD1re+YhMAIAnCyhTfQrhyt2E3u7/IQdezep+aCONzmDmob45wUsmwNHH 1j3elzwb21NMeXi23RKyUBX8l/GovZAOsr2QD8Q3EAbjMuH8fPL2DfpDspiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvSIqeWqxX/JVpMynF7s8FbwFWH8wHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4e+mXvwI61ACDJhbC82OtwEuQONiTKSayu B64/K7Gro0ySlzBLJyFYnb39lR7ktbXsCQr1Z3sWlMttiIeF8a1yJBegcjB0ENiQ mAqGBRTSrjl/OvIW4e/WWdmvEDTiT7vi+rWEwSZo7xK/tCnf3ANojJMjSRJsuBG0 25zHs7htYslDSPPYsH5y/Q4eW2GF5mCj+TbijasXsrXvh5OH4mEo145Q4xI4XUnO SmWHyip/qhk5IRth/3qBLjPFBsq/je7B28g0TH7HmFsHUx0IDHoVShZhvM2kKddx iGyMPaWs2saxjLHd7JiQVvCF21d9dgo3jcTdYqe31IY/Dg/NVBY= -----END CERTIFICATE-----Generated at Sat May 18 16:19:19 2024 by rpki-client on console-fra.rpki-client.org