$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: pl7fDBFcgkp8PGzlgs3FoItaFt9lvglkp8iHR/93XMM= Subject key identifier: 59:63:EE:35:65:07:73:B1:2E:0E:0C:50:CA:A1:B4:E8:D2:45:0C:ED Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 21AC3D18D1763CB5B34617ACC04833F7C485F2E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 041F Signing time: Fri 17 May 2024 19:51:53 +0000 Manifest this update: Fri 17 May 2024 19:46:53 +0000 Manifest next update: Tue 21 May 2024 04:32:53 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: gOIxQFsOvya0d8IvccJzZjD/bW1wjplwp9wsUk9eLwA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 04:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ac:3d:18:d1:76:3c:b5:b3:46:17:ac:c0:48:33:f7:c4:85:f2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: May 17 19:46:53 2024 GMT Not After : May 21 04:32:53 2024 GMT Subject: CN=5963EE35650773B12E0E0C50CAA1B4E8D2450CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:9a:eb:2d:a5:0c:a9:c1:dc:0f:1e:10:42: 95:9a:2a:23:63:b6:3e:19:15:5f:ca:ed:7f:a1:70: 75:77:b9:fd:b0:87:7c:ec:07:d9:79:99:6a:c2:97: 5b:b6:1f:8f:2c:34:44:47:d0:d1:04:da:9b:c4:2b: bd:02:c5:b9:9d:b3:7d:02:8b:e8:c4:0e:e8:42:8b: 1b:b8:58:99:b0:3b:4e:6d:46:f2:cf:58:ec:df:e4: eb:15:90:ef:6e:3a:fe:53:f8:cb:fb:bc:04:db:49: dd:c6:28:a2:ca:16:be:e5:a4:c9:48:79:72:a0:94: 88:b5:12:59:f8:8f:7e:39:9f:1f:b7:d0:4a:b3:46: 72:96:ae:4f:dd:56:58:f4:7d:2d:8f:04:50:d6:f1: 39:ad:57:c4:18:c1:d3:4d:56:fb:83:6e:16:78:80: 2e:0f:31:ed:e2:cd:69:7c:27:9b:1d:df:9b:59:9c: 7d:2b:db:13:c3:e1:35:92:e1:b5:61:21:2b:8b:97: 01:39:b0:44:84:50:9d:6b:64:3b:b0:17:92:da:f2: ce:d5:2e:f9:e7:51:82:e9:b4:c8:97:f7:0c:24:de: 11:2f:f1:4c:32:03:5a:57:ca:8d:2a:be:81:f6:e5: 70:81:29:60:e3:8d:de:4b:f9:b8:fc:f5:6c:6f:08: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:63:EE:35:65:07:73:B1:2E:0E:0C:50:CA:A1:B4:E8:D2:45:0C:ED X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:eb:48:30:69:78:ac:3e:a4:a7:fa:23:44:55:e9:de:d8:ea: 6b:24:36:f9:75:3c:36:14:71:7d:9c:74:65:34:61:7a:5d:53: b2:8f:c1:1e:e1:d1:f1:7d:7c:fa:fc:01:c1:c7:91:59:70:dd: da:00:3b:51:a4:fb:4a:81:62:5e:7b:92:16:74:6b:3f:4c:56: 73:d5:9e:21:a1:82:20:49:32:74:dc:e8:c4:69:df:30:bd:06: 44:08:96:c9:da:f1:d0:52:50:0a:4c:50:b4:eb:a3:01:94:0a: b7:7f:02:27:49:07:16:5c:23:3e:40:6e:8c:1f:c8:d2:01:36: ae:6a:63:f8:fd:1b:27:71:63:cc:72:f4:76:31:d3:af:a8:3e: 98:de:42:47:35:42:d1:81:04:84:1c:b0:fd:b0:bf:c6:4f:da: bf:54:1c:90:b8:e0:9d:8f:82:d9:4f:27:c6:e7:04:26:f9:03: 81:bf:25:1f:04:74:35:a0:8e:3a:f9:c0:0c:f8:05:c4:64:45: 97:d6:ba:bd:ee:69:4d:ed:70:78:14:ab:7a:89:5d:11:b4:ed: 18:5f:fd:20:76:69:6d:59:9b:18:24:ed:d5:db:7c:2b:7d:1b: 60:82:13:ec:a4:d9:6d:de:26:db:58:4b:39:d8:42:ea:66:17: 03:06:29:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIaw9GNF2PLWzRheswEgz98SF8ugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNDA1MTcxOTQ2NTNaFw0yNDA1MjEwNDMyNTNaMDMxMTAvBgNV BAMTKDU5NjNFRTM1NjUwNzczQjEyRTBFMEM1MENBQTFCNEU4RDI0NTBDRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HZrrLaUMqcHcDx4QQpWaKiNj tj4ZFV/K7X+hcHV3uf2wh3zsB9l5mWrCl1u2H48sNERH0NEE2pvEK70Cxbmds30C i+jEDuhCixu4WJmwO05tRvLPWOzf5OsVkO9uOv5T+Mv7vATbSd3GKKLKFr7lpMlI eXKglIi1Eln4j345nx+30EqzRnKWrk/dVlj0fS2PBFDW8TmtV8QYwdNNVvuDbhZ4 gC4PMe3izWl8J5sd35tZnH0r2xPD4TWS4bVhISuLlwE5sESEUJ1rZDuwF5La8s7V LvnnUYLptMiX9wwk3hEv8UwyA1pXyo0qvoH25XCBKWDjjd5L+bj89WxvCI1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWWPuNWUHc7EuDgxQyqG06NJFDO0wHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbrSDBpeKw+pKf6I0RV6d7Y6mskNvl1PDYU cX2cdGU0YXpdU7KPwR7h0fF9fPr8AcHHkVlw3doAO1Gk+0qBYl57khZ0az9MVnPV niGhgiBJMnTc6MRp3zC9BkQIlsna8dBSUApMULTrowGUCrd/AidJBxZcIz5Abowf yNIBNq5qY/j9GydxY8xy9HYx06+oPpjeQkc1QtGBBIQcsP2wv8ZP2r9UHJC44J2P gtlPJ8bnBCb5A4G/JR8EdDWgjjr5wAz4BcRkRZfWur3uaU3tcHgUq3qJXRG07Rhf /SB2aW1Zmxgk7dXbfCt9G2CCE+yk2W3eJttYSznYQupmFwMGKR4= -----END CERTIFICATE-----Generated at Fri May 17 21:06:47 2024 by rpki-client on console-ams.rpki-client.org