$ rpki-client -vvf repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft File: 47FF2FBD96536B4FD610282F11EC87790C683CEF.mft (raw, json) Hash identifier: Xc6J78K6eE63qWxknjYmOxGcvVBKI+/gGBPXaLo0iHI= Subject key identifier: AA:58:92:4B:E9:C6:A8:E8:03:93:87:00:DD:CE:1F:65:FE:56:67:F8 Authority key identifier: 47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF Certificate issuer: /CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Certificate serial: 5F9FE25693A1FA4DBD3FA5A03D3DADB6AB0C6BE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft Manifest number: 38 Signing time: Sat 18 May 2024 10:41:50 +0000 Manifest this update: Sat 18 May 2024 10:36:50 +0000 Manifest next update: Tue 21 May 2024 20:33:50 +0000 Files and hashes: 1: 47FF2FBD96536B4FD610282F11EC87790C683CEF.crl (hash: 2WI6vfBAB9GzBmozSJ+/2zEtmcso8KPQLruV2KYeb0A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 14:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:9f:e2:56:93:a1:fa:4d:bd:3f:a5:a0:3d:3d:ad:b6:ab:0c:6b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47FF2FBD96536B4FD610282F11EC87790C683CEF Validity Not Before: May 18 10:36:50 2024 GMT Not After : May 21 20:33:50 2024 GMT Subject: CN=AA58924BE9C6A8E803938700DDCE1F65FE5667F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f8:57:bd:78:29:56:65:31:4b:63:a8:0c:80: 36:b7:6a:14:85:3e:0a:f7:bd:e6:a4:a7:3c:2d:41: aa:5f:61:e2:de:95:d3:8b:6b:41:aa:98:36:47:67: 18:e6:a0:26:87:89:39:63:c4:66:a1:6e:62:6e:a2: 36:7d:23:c3:59:84:a0:ef:c1:53:d2:56:42:dc:72: 8e:61:44:83:ca:0c:13:2c:68:83:28:90:c6:69:6b: 81:01:2c:1b:84:cc:70:e1:d9:da:2c:51:3a:d6:f9: 53:28:ab:e3:18:2c:7a:d5:a7:7d:a7:80:b7:36:1d: b0:4e:cf:ab:c2:b2:d8:88:2b:ee:f2:13:96:35:d4: 23:be:cb:e5:fc:4a:de:0d:67:0d:85:14:d5:e7:2d: 23:6c:62:11:69:d7:90:9d:f9:9e:91:54:4f:19:96: 70:43:53:2d:95:8b:5e:03:c8:7a:cc:fb:7c:f9:06: 98:69:a5:7f:32:f6:70:ec:44:52:05:bd:9c:f7:56: e0:97:2a:d5:41:0a:2f:fc:73:51:48:ab:ea:2f:58: e5:a9:9b:cf:ca:00:a9:ed:ab:01:7a:31:f0:e8:e5: 61:c9:41:04:26:86:5e:ca:8b:c5:01:5a:2c:2c:8d: cd:91:72:8b:ca:60:5b:70:78:ef:a0:f7:0a:74:3e: 1b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:58:92:4B:E9:C6:A8:E8:03:93:87:00:DD:CE:1F:65:FE:56:67:F8 X509v3 Authority Key Identifier: keyid:47:FF:2F:BD:96:53:6B:4F:D6:10:28:2F:11:EC:87:79:0C:68:3C:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47FF2FBD96536B4FD610282F11EC87790C683CEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/734f13e8-deef-48a8-a2e0-5a63ad159efa/0/47FF2FBD96536B4FD610282F11EC87790C683CEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:77:f4:1c:a3:59:ef:9b:d9:5e:6a:02:c3:b3:f9:e4:06:dd: 0a:8b:91:8b:d1:7b:40:c3:d5:45:eb:35:aa:c8:9b:2f:08:99: 7f:69:41:f4:a4:1e:87:ed:04:65:10:55:64:90:4c:7f:03:4e: 85:45:7e:8f:d6:49:ec:9e:08:df:21:e2:e9:50:79:44:05:48: 6e:10:61:25:6c:11:2b:ba:30:ee:49:b2:b4:dd:12:14:99:c9: 70:39:20:79:54:54:5f:b6:c4:4d:47:f0:56:23:5d:ec:58:15: db:6d:3d:36:ef:c2:a0:3b:69:41:8c:c0:a9:7b:99:13:c6:e1: 9b:f3:2e:86:3e:b3:88:a0:17:b2:c3:f6:03:f3:fe:12:ef:1d: d1:34:86:4c:a0:05:28:37:b4:14:65:57:d0:bb:76:11:a9:ee: 82:32:31:84:68:04:56:12:f5:f8:ea:b9:b5:c3:8a:ae:7f:d3: db:ae:cf:d2:db:ea:85:e6:f5:0c:cb:f5:4b:ed:9c:3d:da:0d: d9:a7:20:ec:14:cf:29:45:66:0d:d0:f7:96:3e:b5:8c:21:09: 58:29:ac:1d:92:c9:7e:b1:1a:a1:ec:2d:f6:7f:60:d3:9c:79: 0a:30:e1:86:5b:3d:6f:cd:34:ab:a5:3b:34:f9:2f:1c:47:c6: 2b:7b:e9:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5/iVpOh+k29P6WgPT2ttqsMa+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3Nzkw QzY4M0NFRjAeFw0yNDA1MTgxMDM2NTBaFw0yNDA1MjEyMDMzNTBaMDMxMTAvBgNV BAMTKEFBNTg5MjRCRTlDNkE4RTgwMzkzODcwMEREQ0UxRjY1RkU1NjY3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+Fe9eClWZTFLY6gMgDa3ahSF Pgr3veakpzwtQapfYeLeldOLa0GqmDZHZxjmoCaHiTljxGahbmJuojZ9I8NZhKDv wVPSVkLcco5hRIPKDBMsaIMokMZpa4EBLBuEzHDh2dosUTrW+VMoq+MYLHrVp32n gLc2HbBOz6vCstiIK+7yE5Y11CO+y+X8St4NZw2FFNXnLSNsYhFp15Cd+Z6RVE8Z lnBDUy2Vi14DyHrM+3z5BphppX8y9nDsRFIFvZz3VuCXKtVBCi/8c1FIq+ovWOWp m8/KAKntqwF6MfDo5WHJQQQmhl7Ki8UBWiwsjc2RcovKYFtweO+g9wp0PhuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqliSS+nGqOgDk4cA3c4fZf5WZ/gwHwYDVR0j BBgwFoAUR/8vvZZTa0/WECgvEeyHeQxoPO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzRmMTNlOC1kZWVmLTQ4YTgtYTJlMC01YTYzYWQxNTllZmEvMC80N0ZGMkZCRDk2 NTM2QjRGRDYxMDI4MkYxMUVDODc3OTBDNjgzQ0VGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3NzkwQzY4 M0NFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzM0ZjEzZTgtZGVlZi00OGE4LWEy ZTAtNWE2M2FkMTU5ZWZhLzAvNDdGRjJGQkQ5NjUzNkI0RkQ2MTAyODJGMTFFQzg3 NzkwQzY4M0NFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZ39ByjWe+b2V5qAsOz+eQG3QqLkYvRe0DD 1UXrNarImy8ImX9pQfSkHoftBGUQVWSQTH8DToVFfo/WSeyeCN8h4ulQeUQFSG4Q YSVsESu6MO5JsrTdEhSZyXA5IHlUVF+2xE1H8FYjXexYFdttPTbvwqA7aUGMwKl7 mRPG4ZvzLoY+s4igF7LD9gPz/hLvHdE0hkygBSg3tBRlV9C7dhGp7oIyMYRoBFYS 9fjqubXDiq5/09uuz9Lb6oXm9QzL9UvtnD3aDdmnIOwUzylFZg3Q95Y+tYwhCVgp rB2SyX6xGqHsLfZ/YNOceQow4YZbPW/NNKulOzT5LxxHxit76fw= -----END CERTIFICATE-----Generated at Sat May 18 11:25:22 2024 by rpki-client on console-ams.rpki-client.org