$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: La4Thjmo82rTpxG+KeEjnHFxSMIhBuCVAHxXktVA8Yo= Subject key identifier: 47:4A:4E:67:D4:47:F7:76:ED:F5:16:24:91:D8:7A:AC:7C:AD:4B:AD Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 3CD938B019057C14FF3AFBF3BDA488F5FADD44EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 0153 Signing time: Sat 18 May 2024 07:01:06 +0000 Manifest this update: Sat 18 May 2024 06:56:06 +0000 Manifest next update: Tue 21 May 2024 13:49:06 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: fG08qxBvIJ6iLJi3zV6Q6Iq+lkw4ZmVEv9g3b8kRO40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 13:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d9:38:b0:19:05:7c:14:ff:3a:fb:f3:bd:a4:88:f5:fa:dd:44:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: May 18 06:56:06 2024 GMT Not After : May 21 13:49:06 2024 GMT Subject: CN=474A4E67D447F776EDF5162491D87AAC7CAD4BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:71:b3:4c:18:db:e9:7d:9a:36:88:f1:42: 30:6c:d5:6a:a9:6a:b3:46:e2:5c:bb:fb:b9:33:05: 38:c2:54:39:da:5c:91:2c:4a:b1:f7:61:fc:30:a4: cf:88:6e:e1:ae:ef:4c:0f:92:e0:5d:f6:56:0a:27: b8:09:81:47:1b:91:a9:27:55:49:f6:ae:40:e3:89: 6b:f3:05:7f:47:fa:76:fb:63:e9:34:94:9b:ef:21: b9:af:bd:b7:42:44:2b:d7:3a:c8:cf:c8:88:1a:65: f3:44:34:b4:26:d5:f4:8b:0a:57:94:23:9e:ff:cf: 67:27:72:b0:7a:1d:d9:b4:8c:67:95:0f:0d:50:04: fe:81:c8:70:7c:0f:21:f5:ad:95:40:04:af:2f:68: 99:a1:58:72:81:52:ed:e9:a6:6e:c7:df:a3:8e:c9: 4a:74:82:2c:dd:b3:23:78:60:44:38:7b:be:a6:62: bd:ff:45:19:d5:b0:61:01:e6:5b:1a:90:00:dd:ad: c4:f7:2d:e6:24:d6:39:00:6c:6d:5b:6b:aa:0b:b4: 55:4a:8b:ba:ef:67:4d:57:e2:b4:3e:0e:fb:32:68: 55:a4:3f:a2:d2:40:f4:67:b2:d5:0c:3f:1d:62:15: 5b:4e:65:74:8a:07:a2:9a:02:f5:56:2e:20:cb:1b: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4A:4E:67:D4:47:F7:76:ED:F5:16:24:91:D8:7A:AC:7C:AD:4B:AD X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:02:3a:d3:9a:dc:b8:00:3c:7c:90:4d:0f:f6:50:36:3d:d7: 7a:bf:3c:70:3c:a7:26:33:89:3f:6d:6a:44:72:3d:8e:c0:21: 03:7b:12:bc:de:11:7c:ca:4f:b5:11:87:28:47:dd:7b:60:af: 48:f0:55:9b:24:86:a7:36:19:81:8f:f4:e0:f1:65:75:01:2a: 2b:eb:6f:1d:b2:d0:84:ce:42:38:a4:08:29:54:74:9a:a2:3e: a0:ac:bc:19:76:0c:b7:e9:dd:cf:d0:12:5a:ac:e2:28:42:7a: 07:f9:b1:21:79:ad:24:53:0e:29:ef:f3:b3:f9:05:21:1b:a6: 9a:a4:ea:75:13:e4:76:84:77:04:80:17:46:76:c8:0a:76:47: 3a:ea:60:10:ae:63:f3:b4:b2:bb:e1:1c:4e:75:36:ed:24:9c: b7:f8:8f:0b:31:69:24:60:74:64:2e:fa:87:08:ae:c5:bd:bb: 08:88:34:37:a0:00:3e:bb:0d:2c:51:eb:f4:b5:76:dd:fa:80: ab:57:9a:7d:4b:1f:6a:36:99:f6:4b:8c:45:ec:35:ba:6a:53: 11:0b:49:a9:17:8e:a5:17:9e:fe:03:66:99:2e:b6:ab:9e:28: a2:7f:7f:e2:f5:8a:44:5d:26:57:1c:9e:d5:53:78:a7:95:92: 2d:07:09:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPNk4sBkFfBT/OvvzvaSI9frdROowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNDA1MTgwNjU2MDZaFw0yNDA1MjExMzQ5MDZaMDMxMTAvBgNV BAMTKDQ3NEE0RTY3RDQ0N0Y3NzZFREY1MTYyNDkxRDg3QUFDN0NBRDRCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTXnGzTBjb6X2aNojxQjBs1Wqp arNG4ly7+7kzBTjCVDnaXJEsSrH3YfwwpM+IbuGu70wPkuBd9lYKJ7gJgUcbkakn VUn2rkDjiWvzBX9H+nb7Y+k0lJvvIbmvvbdCRCvXOsjPyIgaZfNENLQm1fSLCleU I57/z2cncrB6Hdm0jGeVDw1QBP6ByHB8DyH1rZVABK8vaJmhWHKBUu3ppm7H36OO yUp0gizdsyN4YEQ4e76mYr3/RRnVsGEB5lsakADdrcT3LeYk1jkAbG1ba6oLtFVK i7rvZ01X4rQ+DvsyaFWkP6LSQPRnstUMPx1iFVtOZXSKB6KaAvVWLiDLG02zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR0pOZ9RH93bt9RYkkdh6rHytS60wHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABYCOtOa3LgAPHyQTQ/2UDY913q/PHA8pyYz iT9takRyPY7AIQN7ErzeEXzKT7URhyhH3Xtgr0jwVZskhqc2GYGP9ODxZXUBKivr bx2y0ITOQjikCClUdJqiPqCsvBl2DLfp3c/QElqs4ihCegf5sSF5rSRTDinv87P5 BSEbppqk6nUT5HaEdwSAF0Z2yAp2RzrqYBCuY/O0srvhHE51Nu0knLf4jwsxaSRg dGQu+ocIrsW9uwiINDegAD67DSxR6/S1dt36gKtXmn1LH2o2mfZLjEXsNbpqUxEL SakXjqUXnv4DZpkutqueKKJ/f+L1ikRdJlccntVTeKeVki0HCYc= -----END CERTIFICATE-----Generated at Sat May 18 07:39:10 2024 by rpki-client on console-ams.rpki-client.org