$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: wkh/dR+C1NPwnQi4tZMZqSiVGKvCGsnymFosQNb6Xvk= Subject key identifier: C2:55:21:5A:3F:1E:64:8A:81:34:2F:35:70:22:8A:13:28:B6:6B:92 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 540CEB248AE666912679D88A611CC920E774CDA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 3D Signing time: Thu 30 May 2024 08:00:39 +0000 Manifest this update: Thu 30 May 2024 07:55:39 +0000 Manifest next update: Sun 02 Jun 2024 18:07:39 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: h3XP8xrOwVApbEdQI6U99vm5JnqcxsVtw8kMC/iyM+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 10:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0c:eb:24:8a:e6:66:91:26:79:d8:8a:61:1c:c9:20:e7:74:cd:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: May 30 07:55:39 2024 GMT Not After : Jun 2 18:07:39 2024 GMT Subject: CN=C255215A3F1E648A81342F3570228A1328B66B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:86:7b:bc:39:57:d1:19:cb:c2:a7:62:54: 51:27:d9:01:69:93:69:9d:54:95:c4:a0:ec:59:8e: a4:cb:c6:95:d2:23:27:0b:19:50:17:ed:80:09:9b: d0:c2:91:02:d4:e7:bb:e0:55:40:7e:f1:56:08:46: e3:72:38:36:35:0b:3f:a8:33:ea:d7:9a:01:64:25: ab:f0:b6:fd:b9:23:54:d1:90:91:2c:ef:f6:e1:43: de:6b:0c:be:61:d5:22:69:70:02:f9:29:11:9f:c1: ac:f4:94:b1:ea:e3:d8:b0:61:71:2c:89:30:6b:53: 88:17:a1:dd:53:88:a1:bb:83:84:3b:ff:d1:8b:20: 02:37:d6:54:01:dd:41:7d:59:0b:f9:6d:91:eb:b2: 1b:75:e9:e3:5d:45:55:52:5e:98:18:c3:6f:2e:3d: 96:4b:d2:a7:2c:2c:8e:35:c0:f9:3b:14:c8:f0:23: 56:ac:5c:6f:2e:e5:74:bc:1d:02:e3:6f:10:ab:73: ab:28:91:e7:da:b6:df:70:78:73:3f:a5:cd:33:5b: 51:9c:31:60:fd:c3:58:7d:cf:fc:e6:40:b0:ca:51: 97:fe:65:aa:42:32:0f:98:86:08:5d:f8:d8:d3:4b: 73:b0:35:33:88:f6:c5:ef:c7:c0:d8:ba:4f:a7:c7: be:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:55:21:5A:3F:1E:64:8A:81:34:2F:35:70:22:8A:13:28:B6:6B:92 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8c:a5:6e:d6:bf:d0:9f:e7:0d:a1:8f:11:ca:99:93:cd:c9: af:2f:77:e6:60:2b:44:f7:56:8c:d8:63:02:dc:f7:f8:ae:f4: e7:00:2f:14:56:b8:e2:37:c0:89:e9:a3:fc:f1:ef:af:3e:ff: 16:19:8f:e6:3f:30:6d:9e:5e:06:ac:0e:70:2d:5d:89:75:42: 91:85:a5:b1:a0:62:58:06:c3:48:18:ad:98:17:76:5f:e2:3f: ba:a8:22:75:bc:ed:8b:6d:dc:7a:76:d1:e0:7d:88:65:9f:66: cc:23:eb:7c:9b:d2:92:aa:ff:b8:3e:ed:bc:2d:cd:25:8c:5c: 11:42:2c:67:3d:2f:9d:77:a0:63:00:82:c3:41:39:fc:b9:ef: 8b:22:6a:fe:b3:96:09:ee:14:67:45:05:ab:a6:8f:66:63:e1: 9c:12:ec:05:ab:6d:3d:59:2d:ae:80:a9:7f:fc:30:8f:32:d0: 38:6f:62:6c:11:c5:e1:26:84:a2:78:06:18:f0:15:7e:76:48: 57:50:4c:cc:e1:92:e2:79:54:e1:6a:56:67:73:7d:78:4d:86: 97:a3:f3:c0:24:b8:95:61:10:60:ad:f4:42:f8:18:cc:80:27: 76:d8:3b:b0:7e:3c:93:e2:37:89:6a:c0:7a:33:9c:0d:a4:fc: a8:1b:63:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVAzrJIrmZpEmediKYRzJIOd0zaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNDA1MzAwNzU1MzlaFw0yNDA2MDIxODA3MzlaMDMxMTAvBgNV BAMTKEMyNTUyMTVBM0YxRTY0OEE4MTM0MkYzNTcwMjI4QTEzMjhCNjZCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4E4Z7vDlX0RnLwqdiVFEn2QFp k2mdVJXEoOxZjqTLxpXSIycLGVAX7YAJm9DCkQLU57vgVUB+8VYIRuNyODY1Cz+o M+rXmgFkJavwtv25I1TRkJEs7/bhQ95rDL5h1SJpcAL5KRGfwaz0lLHq49iwYXEs iTBrU4gXod1TiKG7g4Q7/9GLIAI31lQB3UF9WQv5bZHrsht16eNdRVVSXpgYw28u PZZL0qcsLI41wPk7FMjwI1asXG8u5XS8HQLjbxCrc6sokefatt9weHM/pc0zW1Gc MWD9w1h9z/zmQLDKUZf+ZapCMg+Yhghd+NjTS3OwNTOI9sXvx8DYuk+nx76TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwlUhWj8eZIqBNC81cCKKEyi2a5IwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+MpW7Wv9Cf5w2hjxHKmZPNya8vd+ZgK0T3 VozYYwLc9/iu9OcALxRWuOI3wInpo/zx768+/xYZj+Y/MG2eXgasDnAtXYl1QpGF pbGgYlgGw0gYrZgXdl/iP7qoInW87Ytt3Hp20eB9iGWfZswj63yb0pKq/7g+7bwt zSWMXBFCLGc9L513oGMAgsNBOfy574siav6zlgnuFGdFBaumj2Zj4ZwS7AWrbT1Z La6AqX/8MI8y0DhvYmwRxeEmhKJ4BhjwFX52SFdQTMzhkuJ5VOFqVmdzfXhNhpej 88AkuJVhEGCt9EL4GMyAJ3bYO7B+PJPiN4lqwHoznA2k/KgbY0Q= -----END CERTIFICATE-----Generated at Thu May 30 11:27:40 2024 by rpki-client on console-ams.rpki-client.org