$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft File: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft (raw, json) Hash identifier: oEb9mgnLwFaTDa+6hbcWEQ08Jo8zoEq9mQjrtany31I= Subject key identifier: 25:8B:38:A6:8E:B8:E9:D4:0D:5B:40:BA:43:83:34:A9:3B:EA:3E:48 Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Certificate serial: 095D0839B279C45DB0F30FCE2CA3171C6827F36C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft Manifest number: 013B Signing time: Sat 18 May 2024 12:31:22 +0000 Manifest this update: Sat 18 May 2024 12:26:22 +0000 Manifest next update: Tue 21 May 2024 23:18:22 +0000 Files and hashes: 1: 47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl (hash: 3z52iquQdIfhAN8lMtRXtvV6BK3ylUnIA/w15OnW/EY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5d:08:39:b2:79:c4:5d:b0:f3:0f:ce:2c:a3:17:1c:68:27:f3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D Validity Not Before: May 18 12:26:22 2024 GMT Not After : May 21 23:18:22 2024 GMT Subject: CN=258B38A68EB8E9D40D5B40BA438334A93BEA3E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:89:5a:96:6e:2b:dd:6d:73:c2:32:99:8d: 5b:55:16:17:7e:99:45:3f:61:4c:b3:69:69:49:b6: 76:0c:d4:ce:0e:47:0a:9d:be:5e:26:17:64:3d:0f: 90:bd:c6:64:96:5d:34:1b:9d:2f:2c:83:53:e6:fd: 10:5d:9f:03:5f:be:81:79:4b:5c:f3:5c:07:54:d3: 5d:1e:22:be:9f:36:38:75:a5:84:ad:1e:57:a4:ae: 01:60:f7:4a:b7:4a:4a:39:dd:e4:db:54:72:aa:e3: ca:67:c4:ac:a5:21:e8:ea:8d:d2:eb:c5:8b:86:94: 14:e4:8f:46:e7:12:ad:6e:a6:b4:0a:34:ac:08:01: 31:7f:47:83:3d:c9:b8:84:d8:61:37:6b:5b:75:39: b6:40:cf:bf:5c:cf:bd:ec:e7:c4:d6:aa:ae:4c:9a: c2:a8:da:62:4c:a4:33:c8:d6:84:4d:fe:3c:df:a8: ff:ea:58:3f:cd:ea:ea:73:dd:f0:ef:1e:31:aa:4c: c1:ae:1d:6f:bd:cb:94:f3:39:8f:79:06:93:b2:c4: bc:0b:af:6d:b9:d9:3a:c4:ff:80:be:a1:81:ed:de: a8:aa:00:ae:dc:8b:6a:a0:24:bb:bb:84:f2:3c:74: c0:08:d5:5c:a6:ce:6b:af:d2:06:86:cd:9b:d5:16: 5d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8B:38:A6:8E:B8:E9:D4:0D:5B:40:BA:43:83:34:A9:3B:EA:3E:48 X509v3 Authority Key Identifier: keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:d8:91:27:20:1d:4c:34:dd:ba:df:40:8c:a0:28:98:69:a1: dc:3c:22:16:74:68:20:75:c9:5a:df:19:79:a7:98:5b:ab:fc: 73:a8:52:07:72:d8:6c:ea:f0:3c:6d:70:8e:3a:b7:43:87:80: 38:68:77:7c:94:d8:e4:83:36:8c:ba:97:96:17:ed:44:f3:83: e8:6d:21:f1:3b:2d:55:2f:67:43:5f:5b:e3:e5:c8:b1:21:f2: 14:e7:53:08:ef:c3:91:19:13:3c:2c:52:3b:5b:4d:bf:7c:0f: 3f:6e:c4:c6:b1:4c:9c:90:ef:01:2f:1f:e5:65:5c:a3:6e:2e: f3:7f:89:50:07:e0:74:aa:40:ee:ce:ef:77:0d:cb:a1:e5:48: 07:a2:a0:18:10:4b:81:31:e9:8d:3e:89:b2:85:cb:46:5e:cb: 52:84:a4:86:83:87:63:b7:3f:cf:cc:26:77:ee:44:30:99:ab: f6:e6:4b:a8:81:10:d2:a7:07:7b:74:93:4b:e6:0e:3a:0e:a4: cf:ad:b4:7b:f3:bb:b7:ee:6f:22:3d:79:4e:5e:f7:87:a6:c8: b3:b2:b0:f0:4a:b9:10:60:87:79:10:6c:2c:ce:b3:c9:67:af: 44:b6:e3:ec:ba:6c:51:47:33:a7:e1:ed:7c:4d:5a:11:65:60: fc:87:4a:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCV0IObJ5xF2w8w/OLKMXHGgn82wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURG QzlDQzk3RDAeFw0yNDA1MTgxMjI2MjJaFw0yNDA1MjEyMzE4MjJaMDMxMTAvBgNV BAMTKDI1OEIzOEE2OEVCOEU5RDQwRDVCNDBCQTQzODMzNEE5M0JFQTNFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOu4lalm4r3W1zwjKZjVtVFhd+ mUU/YUyzaWlJtnYM1M4ORwqdvl4mF2Q9D5C9xmSWXTQbnS8sg1Pm/RBdnwNfvoF5 S1zzXAdU010eIr6fNjh1pYStHlekrgFg90q3Sko53eTbVHKq48pnxKylIejqjdLr xYuGlBTkj0bnEq1uprQKNKwIATF/R4M9ybiE2GE3a1t1ObZAz79cz73s58TWqq5M msKo2mJMpDPI1oRN/jzfqP/qWD/N6upz3fDvHjGqTMGuHW+9y5TzOY95BpOyxLwL r2252TrE/4C+oYHt3qiqAK7ci2qgJLu7hPI8dMAI1Vymzmuv0gaGzZvVFl2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYs4po646dQNW0C6Q4M0qTvqPkgwHwYDVR0j BBgwFoAUR6wy4r4lIyQcFZdcxs/IrfycyX0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTA3NjRkNC1mMmJkLTQyYmMtODZjNC0yYTYxYjYyM2E0OWIvMC80N0FDMzJFMkJF MjUyMzI0MUMxNTk3NUNDNkNGQzhBREZDOUNDOTdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4QURGQzlD Qzk3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwNzY0ZDQtZjJiZC00MmJjLTg2 YzQtMmE2MWI2MjNhNDliLzAvNDdBQzMyRTJCRTI1MjMyNDFDMTU5NzVDQzZDRkM4 QURGQzlDQzk3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnYkScgHUw03brfQIygKJhpodw8IhZ0aCB1 yVrfGXmnmFur/HOoUgdy2Gzq8DxtcI46t0OHgDhod3yU2OSDNoy6l5YX7UTzg+ht IfE7LVUvZ0NfW+PlyLEh8hTnUwjvw5EZEzwsUjtbTb98Dz9uxMaxTJyQ7wEvH+Vl XKNuLvN/iVAH4HSqQO7O73cNy6HlSAeioBgQS4Ex6Y0+ibKFy0Zey1KEpIaDh2O3 P8/MJnfuRDCZq/bmS6iBENKnB3t0k0vmDjoOpM+ttHvzu7fubyI9eU5e94emyLOy sPBKuRBgh3kQbCzOs8lnr0S24+y6bFFHM6fh7XxNWhFlYPyHSic= -----END CERTIFICATE-----Generated at Sat May 18 13:30:07 2024 by rpki-client on console-fra.rpki-client.org