$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: 0FIIWjh8Cz41ej7/lcgoFq9617cEIAaD0sit7p6gdYo= Subject key identifier: 32:A3:28:FD:84:0D:59:11:60:CA:74:75:AE:08:8F:B8:29:1A:CA:8C Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 5E940B983EDE3BE154A1E5FDA615BD1898A2A8A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: 57 Signing time: Sat 18 May 2024 15:20:49 +0000 Manifest this update: Sat 18 May 2024 15:15:49 +0000 Manifest next update: Tue 21 May 2024 17:39:49 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: O8CllrB4zJk7MPNB1Dwgwf9RMOgStz4s/LUo31TFk0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:94:0b:98:3e:de:3b:e1:54:a1:e5:fd:a6:15:bd:18:98:a2:a8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: May 18 15:15:49 2024 GMT Not After : May 21 17:39:49 2024 GMT Subject: CN=32A328FD840D591160CA7475AE088FB8291ACA8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:85:0f:c0:e5:2e:19:10:91:be:7b:f1:09: b1:36:0b:58:dd:d4:97:f1:64:9f:61:ff:4a:b7:4a: 70:22:79:c2:3c:b6:7b:3f:cc:e4:0d:7a:6e:53:7b: 20:e6:87:e3:b7:f6:06:5b:c2:3c:8d:ec:65:00:17: ea:d9:76:ed:84:85:26:d6:1f:ed:87:81:f2:48:24: a8:5b:86:52:37:5a:ec:29:cc:ce:6e:89:be:63:fb: 71:62:4a:28:0f:b5:ba:88:8e:b3:ff:e0:be:ae:a2: 72:fc:79:50:84:f6:06:61:90:85:89:ff:bd:21:76: 82:64:81:e1:c4:eb:8d:9c:b9:e2:03:0f:77:f5:11: 3d:ba:22:8d:ce:72:a7:2a:bb:ad:d2:09:97:4d:0a: 19:bd:76:9a:4c:f9:67:dd:b5:19:87:e8:47:71:8f: d3:75:88:fa:04:d2:bb:50:80:0c:f4:68:ed:73:de: 0f:fe:42:bb:af:c5:56:df:a3:30:65:98:67:ac:4e: 6c:55:88:20:9c:8e:92:50:83:ab:82:53:70:e5:4f: 5b:e6:4e:f3:0e:6a:01:9a:66:c4:aa:f6:5b:b5:e9: 6d:9e:f4:d7:2e:ea:bb:bf:b5:14:23:41:79:d9:99: ad:7c:5a:44:7c:82:9c:4d:d5:c8:e7:a8:af:d3:c0: ff:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A3:28:FD:84:0D:59:11:60:CA:74:75:AE:08:8F:B8:29:1A:CA:8C X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:33:ee:c3:61:90:bc:f0:74:f7:04:77:53:38:11:32:7c:da: 30:79:52:c2:8a:15:bd:8c:19:00:40:6f:e9:e8:ce:70:2f:39: a5:08:65:67:54:33:98:37:1b:55:79:4c:5c:0b:b9:1b:80:03: a3:be:61:ba:16:44:dd:a4:48:d4:76:82:35:8a:a5:28:d1:5f: 94:77:75:ab:2d:88:07:fe:1f:cb:c9:26:72:09:a8:27:87:5e: 73:74:59:35:4b:3a:50:a2:33:41:94:95:0d:c2:55:6e:16:a7: 0f:63:7a:79:2c:cd:e3:c5:fe:9b:66:72:cd:75:58:9e:e6:f8: 9d:13:16:7b:1d:40:0d:f9:b6:92:90:bb:5b:98:a9:8f:bb:1e: d4:63:e7:d3:fa:ff:c7:3e:49:34:09:45:08:48:cd:7b:66:8e: 8b:10:b3:cf:77:85:33:57:4d:db:bc:9f:dc:78:6e:90:42:30: 12:94:5c:c2:2f:92:09:24:ad:30:89:7b:2a:a9:6a:4f:63:a4: 44:ca:9e:54:86:7c:2d:5f:d7:30:7c:9f:58:66:1b:5e:6b:1f: 4e:88:cd:30:99:76:56:c7:a8:bb:b4:ad:6b:56:b2:43:c3:ed: f7:4f:4a:54:6e:90:43:86:55:bb:47:20:0a:63:8e:63:8f:9c: f0:f5:28:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpQLmD7eO+FUoeX9phW9GJiiqKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNDA1MTgxNTE1NDlaFw0yNDA1MjExNzM5NDlaMDMxMTAvBgNV BAMTKDMyQTMyOEZEODQwRDU5MTE2MENBNzQ3NUFFMDg4RkI4MjkxQUNBOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnYUPwOUuGRCRvnvxCbE2C1jd 1JfxZJ9h/0q3SnAiecI8tns/zOQNem5TeyDmh+O39gZbwjyN7GUAF+rZdu2EhSbW H+2HgfJIJKhbhlI3WuwpzM5uib5j+3FiSigPtbqIjrP/4L6uonL8eVCE9gZhkIWJ /70hdoJkgeHE642cueIDD3f1ET26Io3Ocqcqu63SCZdNChm9dppM+WfdtRmH6Edx j9N1iPoE0rtQgAz0aO1z3g/+QruvxVbfozBlmGesTmxViCCcjpJQg6uCU3DlT1vm TvMOagGaZsSq9lu16W2e9Ncu6ru/tRQjQXnZma18WkR8gpxN1cjnqK/TwP/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMqMo/YQNWRFgynR1rgiPuCkayowwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMoz7sNhkLzwdPcEd1M4ETJ82jB5UsKKFb2M GQBAb+noznAvOaUIZWdUM5g3G1V5TFwLuRuAA6O+YboWRN2kSNR2gjWKpSjRX5R3 dastiAf+H8vJJnIJqCeHXnN0WTVLOlCiM0GUlQ3CVW4Wpw9jenkszePF/ptmcs11 WJ7m+J0TFnsdQA35tpKQu1uYqY+7HtRj59P6/8c+STQJRQhIzXtmjosQs893hTNX Tdu8n9x4bpBCMBKUXMIvkgkkrTCJeyqpak9jpETKnlSGfC1f1zB8n1hmG15rH06I zTCZdlbHqLu0rWtWskPD7fdPSlRukEOGVbtHIApjjmOPnPD1KD0= -----END CERTIFICATE-----Generated at Sat May 18 16:19:20 2024 by rpki-client on console-fra.rpki-client.org