$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: QFdFBmYQ1tQFMsEvzwYeoo0Le7kRxyvUBF6dRhKPJGg= Subject key identifier: 42:92:6D:93:3A:1D:B2:9B:DC:3C:A3:01:1D:13:05:DD:70:40:1F:72 Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 4A25AA5125364D89B662FE8CFA41B2A84CDDE135 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 01ED Signing time: Sun 19 May 2024 17:20:32 +0000 Manifest this update: Sun 19 May 2024 17:15:32 +0000 Manifest next update: Wed 22 May 2024 19:32:32 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: 7znr1jqkvmZdC+lL0yul7v9bELj+vIGd0zR9YzOOBGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:25:aa:51:25:36:4d:89:b6:62:fe:8c:fa:41:b2:a8:4c:dd:e1:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: May 19 17:15:32 2024 GMT Not After : May 22 19:32:32 2024 GMT Subject: CN=42926D933A1DB29BDC3CA3011D1305DD70401F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:04:64:59:a3:5a:d9:cf:37:51:fb:ba:57:a9: f2:fe:18:76:03:2a:60:70:5d:dd:a4:71:d4:57:a9: 13:b8:ce:49:0d:96:bd:48:43:22:5b:84:aa:4c:56: 95:f5:2a:0e:f7:84:e9:c4:c0:56:ef:36:48:b4:61: 59:0b:63:22:29:8b:3d:fc:bf:c4:34:7a:cc:c8:79: 55:0a:37:37:8f:d0:3c:dc:5b:e7:80:bc:97:26:34: d4:5c:5e:d1:77:fc:d1:9d:5d:dd:a5:b6:09:0b:7b: a3:26:8d:a2:23:ef:b6:02:fb:27:c3:25:ed:1b:e8: 47:dc:0b:9d:96:e0:c4:ef:38:e8:0c:ae:d2:f6:12: 07:e2:81:a9:c2:29:52:9f:57:36:bb:e3:75:35:16: 37:0f:97:ac:ed:4c:ba:6c:f8:64:c7:9b:a1:54:46: 28:f4:aa:0d:08:fb:8b:b4:07:c3:28:5a:e3:04:48: 55:d6:01:7c:01:cc:d1:f5:90:ff:04:15:26:8d:cb: bf:69:3a:00:df:18:1e:7d:72:3b:4e:49:b5:70:90: 54:a3:18:9d:14:ba:2d:a3:4b:eb:74:64:19:96:84: 3b:b5:82:d4:e8:b4:9c:52:c6:3b:3f:0a:08:84:7f: d9:e2:bd:9a:1e:8b:59:a7:ff:83:bb:df:de:5f:f7: 43:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:92:6D:93:3A:1D:B2:9B:DC:3C:A3:01:1D:13:05:DD:70:40:1F:72 X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9b:b5:06:19:07:d1:db:5a:d1:0a:42:19:a2:22:19:46:c9: a3:55:95:bb:86:b6:13:97:9d:52:15:fc:ea:bd:51:20:03:f4: 67:4a:c5:2f:76:40:2d:e9:30:b4:c6:c6:60:f5:f9:6f:91:e8: f4:74:5f:c9:21:03:a6:3a:ef:aa:b0:5e:5d:e5:e5:fc:46:5c: 7c:b9:91:94:b6:04:d3:65:51:74:4c:87:29:a1:09:f3:11:f5: 56:23:59:69:3f:c3:b3:d6:5c:52:f6:94:4a:a9:93:1e:25:d5: a7:18:24:84:89:e2:f5:8a:3e:03:76:7f:ba:f5:de:28:c5:2f: 6c:e4:a7:31:2d:c2:f6:c9:32:6e:78:af:b8:74:b9:e6:0c:11: 43:bf:08:a4:1f:f0:ee:ee:c4:60:6e:f8:53:7f:dd:59:4e:95: 16:22:45:44:39:01:65:1d:aa:58:2d:0a:8c:f0:5d:b7:db:21: 9a:9d:73:78:78:79:33:73:bc:dd:2f:ce:8a:e8:d9:8e:2c:e7: 90:85:f1:2e:9e:99:9c:09:4c:0f:4b:4a:65:8f:02:ea:d7:21: 39:e4:8a:34:dd:c2:77:e2:4c:19:6e:9d:4b:4e:21:5c:3a:76: 82:16:2d:06:54:45:41:b3:27:2f:a1:c0:53:c3:bc:21:65:32: b3:48:7c:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiWqUSU2TYm2Yv6M+kGyqEzd4TUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNDA1MTkxNzE1MzJaFw0yNDA1MjIxOTMyMzJaMDMxMTAvBgNV BAMTKDQyOTI2RDkzM0ExREIyOUJEQzNDQTMwMTFEMTMwNURENzA0MDFGNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXBGRZo1rZzzdR+7pXqfL+GHYD KmBwXd2kcdRXqRO4zkkNlr1IQyJbhKpMVpX1Kg73hOnEwFbvNki0YVkLYyIpiz38 v8Q0eszIeVUKNzeP0DzcW+eAvJcmNNRcXtF3/NGdXd2ltgkLe6MmjaIj77YC+yfD Je0b6EfcC52W4MTvOOgMrtL2EgfiganCKVKfVza743U1FjcPl6ztTLps+GTHm6FU Rij0qg0I+4u0B8MoWuMESFXWAXwBzNH1kP8EFSaNy79pOgDfGB59cjtOSbVwkFSj GJ0Uui2jS+t0ZBmWhDu1gtTotJxSxjs/CgiEf9nivZoei1mn/4O7395f90OrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQpJtkzodspvcPKMBHRMF3XBAH3IwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2btQYZB9HbWtEKQhmiIhlGyaNVlbuGthOX nVIV/Oq9USAD9GdKxS92QC3pMLTGxmD1+W+R6PR0X8khA6Y676qwXl3l5fxGXHy5 kZS2BNNlUXRMhymhCfMR9VYjWWk/w7PWXFL2lEqpkx4l1acYJISJ4vWKPgN2f7r1 3ijFL2zkpzEtwvbJMm54r7h0ueYMEUO/CKQf8O7uxGBu+FN/3VlOlRYiRUQ5AWUd qlgtCozwXbfbIZqdc3h4eTNzvN0vzoro2Y4s55CF8S6emZwJTA9LSmWPAurXITnk ijTdwnfiTBlunUtOIVw6doIWLQZURUGzJy+hwFPDvCFlMrNIfPY= -----END CERTIFICATE-----Generated at Sun May 19 18:34:48 2024 by rpki-client on console-ams.rpki-client.org