$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: ZrxIQUDoql2Ssd4ywb8bxZBPToIDCJVUb//sfw9kELo= Subject key identifier: 78:A4:CF:F7:70:1A:78:B5:E2:3E:2F:51:0F:D2:B7:24:39:17:A7:FD Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 1762813CEDD5374644F3537A7CC7D17C796A0C2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 0151 Signing time: Sat 18 May 2024 09:30:44 +0000 Manifest this update: Sat 18 May 2024 09:25:44 +0000 Manifest next update: Tue 21 May 2024 12:02:44 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: 92RY9+EI4djHpwESouJwVi7A5wXRHXdNfpwkzDyAn64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 12:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:62:81:3c:ed:d5:37:46:44:f3:53:7a:7c:c7:d1:7c:79:6a:0c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: May 18 09:25:44 2024 GMT Not After : May 21 12:02:44 2024 GMT Subject: CN=78A4CFF7701A78B5E23E2F510FD2B7243917A7FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:7f:c9:c5:ec:e5:1a:10:56:fb:85:41:d0: b7:43:de:6e:c3:0c:05:e8:e9:c7:8b:b8:e0:98:89: f8:64:95:d2:86:1c:e4:bb:13:da:5c:ce:ac:f8:6b: 45:82:05:32:9b:22:6e:b0:aa:e7:9a:86:3b:40:20: b0:8b:22:ab:29:09:1a:18:1a:8e:a2:bb:cf:41:73: 72:bc:05:c8:24:76:02:02:93:30:0e:1d:5a:30:c8: 54:e1:63:21:36:16:79:50:ed:e6:d3:6c:47:af:a3: 45:55:a4:e2:65:35:60:43:ce:b3:06:f7:50:d7:07: f2:be:07:e6:f4:c0:d6:a5:b9:a3:d9:35:4c:96:e7: 6f:19:f1:f1:6c:0b:04:a6:d8:1e:e8:cc:bd:88:d2: cf:b0:48:3c:f0:96:ec:9e:57:69:16:54:4f:ee:e1: 56:54:83:0d:05:50:58:09:d3:fa:ed:5a:9c:68:14: 36:e6:fe:2d:1d:9e:61:c5:ce:1b:8b:64:7a:4d:11: a8:a0:d5:4b:f2:22:2f:4d:97:7e:e5:68:e2:07:8d: ab:bd:3e:e1:67:97:21:09:05:65:43:7c:ce:44:68: 01:ec:78:b7:bf:01:a7:64:bc:26:6e:7c:c2:af:17: a3:64:73:3c:83:be:10:ab:87:e4:c1:62:7b:61:cf: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A4:CF:F7:70:1A:78:B5:E2:3E:2F:51:0F:D2:B7:24:39:17:A7:FD X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c4:bf:09:a3:e0:c8:2e:ce:6b:56:8c:4f:32:a2:b5:a2:da: e1:2c:e4:84:f5:20:ba:e8:4e:f9:0d:04:91:22:00:12:fa:3a: bb:38:59:19:39:ba:29:38:d7:65:6e:74:9d:7a:22:bc:42:94: e3:b4:cf:ff:9a:6d:43:ac:de:b0:e8:c8:7b:22:bc:12:69:98: 09:e8:53:33:b4:00:3c:8b:d3:16:25:96:e8:e7:27:43:83:b6: 6f:50:05:6f:22:ff:dc:3d:31:be:f8:fd:95:62:6a:cb:e6:50: cd:28:81:e5:22:a9:e4:38:89:97:93:27:c5:60:2b:96:37:a6: 06:eb:18:bb:c1:61:da:03:1e:0e:ac:6b:fd:47:36:65:09:10: a0:d9:b7:03:d5:8d:c7:a3:dc:1b:a1:12:40:61:e1:71:4b:cb: b2:c1:15:37:67:68:f1:b0:b3:24:4d:c3:4f:1b:1e:bc:bf:fd: 1c:85:ad:c7:33:03:14:dd:09:b8:0f:48:f8:eb:5b:d7:3b:bc: 7f:a7:69:4c:57:9d:1b:93:21:fd:61:29:95:5f:0d:e7:74:c3: d7:10:3d:8c:65:01:dd:4b:a9:f4:22:b1:99:1f:cc:7c:87:84: 28:ec:b9:9a:fb:e6:54:ca:51:f1:e6:94:06:44:25:aa:28:9a: f4:66:df:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2KBPO3VN0ZE81N6fMfRfHlqDCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNDA1MTgwOTI1NDRaFw0yNDA1MjExMjAyNDRaMDMxMTAvBgNV BAMTKDc4QTRDRkY3NzAxQTc4QjVFMjNFMkY1MTBGRDJCNzI0MzkxN0E3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPH/JxezlGhBW+4VB0LdD3m7D DAXo6ceLuOCYifhkldKGHOS7E9pczqz4a0WCBTKbIm6wqueahjtAILCLIqspCRoY Go6iu89Bc3K8BcgkdgICkzAOHVowyFThYyE2FnlQ7ebTbEevo0VVpOJlNWBDzrMG 91DXB/K+B+b0wNaluaPZNUyW528Z8fFsCwSm2B7ozL2I0s+wSDzwluyeV2kWVE/u 4VZUgw0FUFgJ0/rtWpxoFDbm/i0dnmHFzhuLZHpNEaig1UvyIi9Nl37laOIHjau9 PuFnlyEJBWVDfM5EaAHseLe/AadkvCZufMKvF6NkczyDvhCrh+TBYnthzyORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeKTP93AaeLXiPi9RD9K3JDkXp/0wHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDEvwmj4MguzmtWjE8yorWi2uEs5IT1ILro TvkNBJEiABL6Ors4WRk5uik412VudJ16IrxClOO0z/+abUOs3rDoyHsivBJpmAno UzO0ADyL0xYllujnJ0ODtm9QBW8i/9w9Mb74/ZViasvmUM0ogeUiqeQ4iZeTJ8Vg K5Y3pgbrGLvBYdoDHg6sa/1HNmUJEKDZtwPVjcej3BuhEkBh4XFLy7LBFTdnaPGw syRNw08bHry//RyFrcczAxTdCbgPSPjrW9c7vH+naUxXnRuTIf1hKZVfDed0w9cQ PYxlAd1LqfQisZkfzHyHhCjsuZr75lTKUfHmlAZEJaoomvRm38A= -----END CERTIFICATE-----Generated at Sat May 18 09:57:32 2024 by rpki-client on console-fra.rpki-client.org