$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft File: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft (raw, json) Hash identifier: pbG/udPnDxpxRKPizAsaLFK5H55luexW8bff8ADCrT4= Subject key identifier: 0B:9C:5E:10:D1:0F:68:7D:E9:7D:BC:CC:2C:CE:2D:F4:0A:06:B8:B3 Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Certificate serial: 4824072ABC3974C388913361A439EF16689E6938 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft Manifest number: 042F Signing time: Sat 18 May 2024 21:40:37 +0000 Manifest this update: Sat 18 May 2024 21:35:37 +0000 Manifest next update: Wed 22 May 2024 09:39:37 +0000 Files and hashes: 1: 5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl (hash: C7rNKmvwTtwqVIleXL+lJrhoTCDZu+jw7PLtQ1fzZkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:24:07:2a:bc:39:74:c3:88:91:33:61:a4:39:ef:16:68:9e:69:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948 Validity Not Before: May 18 21:35:37 2024 GMT Not After : May 22 09:39:37 2024 GMT Subject: CN=0B9C5E10D10F687DE97DBCCC2CCE2DF40A06B8B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:0a:3a:b7:2d:46:4d:03:f1:d0:4f:fd:a0: 8c:cc:d5:d7:1b:dc:1a:6e:5b:a9:46:4d:6f:43:13: 28:ba:1d:55:3f:e6:71:dd:6c:31:62:5a:0b:d8:b2: f8:1b:b4:df:ed:74:f2:8d:77:e5:40:ef:22:62:26: 1e:df:f6:26:2b:98:1d:6d:4e:d8:0b:69:aa:a0:03: 81:65:93:7a:29:fb:5c:55:b8:a0:6f:ee:23:de:76: f1:28:e0:72:22:97:eb:d8:d1:69:ac:86:f9:09:19: 19:98:60:aa:1d:3c:de:57:bf:7f:cc:62:36:19:c1: df:7f:f2:d3:9f:85:1a:be:15:6c:16:b0:4c:25:11: 6e:a5:1d:61:8a:d9:7e:65:1d:34:17:22:37:c8:0f: a3:8f:8d:c1:fb:b2:c6:42:c3:f2:96:90:d6:a0:a3: 72:47:6c:db:d6:1a:71:17:e6:f6:b7:16:27:bc:83: c7:3d:48:9f:6c:8b:ae:8b:94:50:e5:55:b2:3f:30: 11:4b:04:69:c6:bc:f4:ff:17:4b:ea:81:fa:c8:9e: 6d:c2:67:4c:69:7d:be:54:40:bc:42:99:81:ec:25: eb:af:b5:72:6c:b5:d9:67:5f:9f:82:68:f9:3b:93: e3:c1:e8:78:02:e3:b1:d8:06:5d:7e:a8:d4:d8:d2: 73:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9C:5E:10:D1:0F:68:7D:E9:7D:BC:CC:2C:CE:2D:F4:0A:06:B8:B3 X509v3 Authority Key Identifier: keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b6:09:08:55:55:ea:9e:4e:b0:f2:53:d9:41:81:0d:89:28: d3:d7:c6:9b:b7:d1:a3:6a:f7:78:3b:12:8f:c4:b8:03:f5:7b: 32:18:c2:3e:6a:ce:f2:a1:47:d1:8c:48:c9:17:8b:29:23:97: 7e:cd:48:d4:24:9e:fc:db:ef:c5:8b:02:0d:37:25:84:a5:f6: f6:37:3f:77:80:6a:4d:2b:78:1e:36:fa:ba:73:7c:06:8f:86: 4d:81:8f:7d:20:9c:03:94:b5:b2:97:84:e8:68:de:a3:87:39: 92:8d:eb:33:97:33:90:36:f1:e9:da:05:45:75:31:34:ad:a0: 26:13:31:55:e4:a2:1d:aa:96:08:17:b8:cd:03:d6:ea:c5:6d: 52:15:50:38:98:10:4e:20:12:2b:bc:f5:bc:ad:8a:cf:23:82: 1a:64:e5:fe:4f:f1:7e:ce:1e:11:cc:f9:72:15:21:c8:74:03: 08:4f:aa:47:86:db:7a:69:a1:9d:de:3c:21:56:12:d3:b8:4e: 41:cb:d0:5d:22:4e:cc:4a:e5:16:db:23:47:e9:de:3a:45:bb: 55:ee:56:2c:68:dc:af:44:c8:ba:54:ec:37:d4:be:d9:fa:fc: 9a:cd:0e:98:b1:80:19:a9:23:02:59:df:46:f9:35:3b:ee:ba: bd:4a:ca:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCQHKrw5dMOIkTNhpDnvFmieaTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OURE MEM3OTk0ODAeFw0yNDA1MTgyMTM1MzdaFw0yNDA1MjIwOTM5MzdaMDMxMTAvBgNV BAMTKDBCOUM1RTEwRDEwRjY4N0RFOTdEQkNDQzJDQ0UyREY0MEEwNkI4QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtQo6ty1GTQPx0E/9oIzM1dcb 3BpuW6lGTW9DEyi6HVU/5nHdbDFiWgvYsvgbtN/tdPKNd+VA7yJiJh7f9iYrmB1t TtgLaaqgA4Flk3op+1xVuKBv7iPedvEo4HIil+vY0WmshvkJGRmYYKodPN5Xv3/M YjYZwd9/8tOfhRq+FWwWsEwlEW6lHWGK2X5lHTQXIjfID6OPjcH7ssZCw/KWkNag o3JHbNvWGnEX5va3Fie8g8c9SJ9si66LlFDlVbI/MBFLBGnGvPT/F0vqgfrInm3C Z0xpfb5UQLxCmYHsJeuvtXJstdlnX5+CaPk7k+PB6HgC47HYBl1+qNTY0nPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC5xeENEPaH3pfbzMLM4t9AoGuLMwHwYDVR0j BBgwFoAUWxIhA9PBxzCuzlmn7SinndDHmUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTcyZWVmOS1lYzZhLTQ1NTgtODE4MS1hMTFmZTY1YjhmZjgvMC81QjEyMjEwM0Qz QzFDNzMwQUVDRTU5QTdFRDI4QTc5REQwQzc5OTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3OUREMEM3 OTk0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjE3MmVlZjktZWM2YS00NTU4LTgx ODEtYTExZmU2NWI4ZmY4LzAvNUIxMjIxMDNEM0MxQzczMEFFQ0U1OUE3RUQyOEE3 OUREMEM3OTk0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy2CQhVVeqeTrDyU9lBgQ2JKNPXxpu30aNq 93g7Eo/EuAP1ezIYwj5qzvKhR9GMSMkXiykjl37NSNQknvzb78WLAg03JYSl9vY3 P3eAak0reB42+rpzfAaPhk2Bj30gnAOUtbKXhOho3qOHOZKN6zOXM5A28enaBUV1 MTStoCYTMVXkoh2qlggXuM0D1urFbVIVUDiYEE4gEiu89bytis8jghpk5f5P8X7O HhHM+XIVIch0AwhPqkeG23ppoZ3ePCFWEtO4TkHL0F0iTsxK5RbbI0fp3jpFu1Xu Vixo3K9EyLpU7DfUvtn6/JrNDpixgBmpIwJZ30b5NTvuur1KylA= -----END CERTIFICATE-----Generated at Sat May 18 22:13:40 2024 by rpki-client on console-fra.rpki-client.org