$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: DhRYkgx5TT4ufkvk9CQsRlcwY2b+13XSj+TLyyc0bz0= Subject key identifier: 54:DF:4D:99:78:F1:E1:17:52:57:BC:4A:53:95:A3:27:F7:5C:D6:A1 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 48BB48A9B428CB0306A5F0FD0E4584DD8C00705E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: 53 Signing time: Sat 18 May 2024 12:50:34 +0000 Manifest this update: Sat 18 May 2024 12:45:34 +0000 Manifest next update: Tue 21 May 2024 16:03:34 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: vFJiwS//vXhaAMtZ8r+AIjLoVQf2ky5N4hZcDDZIWhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 16:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bb:48:a9:b4:28:cb:03:06:a5:f0:fd:0e:45:84:dd:8c:00:70:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: May 18 12:45:34 2024 GMT Not After : May 21 16:03:34 2024 GMT Subject: CN=54DF4D9978F1E1175257BC4A5395A327F75CD6A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:bf:d3:15:1c:df:6d:0b:f3:7c:3e:37:5c: f8:da:61:21:6e:56:67:de:92:d8:a8:e2:88:81:67: 26:08:65:aa:4f:0b:df:cd:d2:e2:c4:93:4c:1b:2b: 6c:94:ad:9e:56:df:55:3e:5f:44:fb:84:7a:36:5e: a4:f6:80:c1:08:9d:42:76:0e:1f:45:e8:70:f1:17: 2e:17:a9:f9:88:8c:73:bc:16:05:5e:5d:9b:67:0d: 6e:6e:09:85:cf:bb:7c:be:ef:e0:1d:0d:8a:13:43: d1:54:5e:96:c2:d8:7c:c0:e2:5f:fd:7c:b4:44:7b: 66:92:28:c9:3f:d3:85:5a:d5:f7:48:8d:b5:0f:d8: 68:88:b2:4c:a7:01:06:02:e4:b2:69:00:8a:4d:0c: 78:c7:cd:69:78:4a:ae:02:ee:b7:ff:9c:5b:ad:bb: cb:0f:4d:b5:d0:8e:ee:e6:3c:c5:05:92:a9:bc:87: 38:7d:f6:16:7b:28:03:fa:fe:d1:7c:4b:df:13:b0: 63:11:67:6f:11:23:eb:e8:22:a7:a9:ed:b6:37:84: 4e:1c:b2:5d:bc:65:6d:dc:c0:af:61:1c:da:db:ca: 4c:2b:da:64:8e:a5:0f:9e:8c:22:8a:96:e5:cf:61: 3d:d8:6e:bc:9c:e4:09:53:2d:93:5c:48:f0:37:e8: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DF:4D:99:78:F1:E1:17:52:57:BC:4A:53:95:A3:27:F7:5C:D6:A1 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:58:29:ee:63:29:2b:50:d2:23:de:f7:29:c7:83:7f:58:3a: 8d:45:cf:76:40:f8:54:7d:e7:00:18:00:fb:bc:1f:de:89:c6: 5f:44:8b:e2:82:be:07:6b:90:e6:62:1b:b7:5a:c2:f3:63:d1: ab:1e:64:4d:ee:bb:64:a0:9f:ef:18:8b:10:a9:97:95:26:07: 4d:cf:49:31:70:45:f4:9e:b9:3b:40:b8:95:b8:03:d6:17:81: ba:59:11:df:09:3f:03:da:26:12:e3:95:27:81:b3:ce:0e:e5: 43:1d:d6:d5:75:b7:71:9a:08:c8:ee:b9:0b:c6:13:31:b2:25: 74:25:c1:ee:43:0e:20:45:b3:20:52:32:a2:29:af:01:0f:6c: e8:0c:d6:a7:eb:5a:d5:0b:6e:74:b6:6e:d2:46:2d:b7:01:a6: e4:70:8f:b5:ee:31:67:c5:a5:c9:d0:2b:f0:b1:10:a0:b0:e2: c6:9a:57:4c:fe:f9:3b:03:ea:9d:05:6b:c1:e6:d1:25:35:8a: f3:d2:e9:a0:3f:83:2c:19:53:0e:20:8a:92:98:2c:43:a4:96: ac:81:36:d7:eb:00:84:8b:40:84:8b:4d:c4:8c:1e:5b:cd:dc: 99:b1:91:aa:ae:6d:56:fb:3c:7c:a7:fc:f9:5f:57:95:40:6d: 88:eb:67:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLtIqbQoywMGpfD9DkWE3YwAcF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNDA1MTgxMjQ1MzRaFw0yNDA1MjExNjAzMzRaMDMxMTAvBgNV BAMTKDU0REY0RDk5NzhGMUUxMTc1MjU3QkM0QTUzOTVBMzI3Rjc1Q0Q2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK17/TFRzfbQvzfD43XPjaYSFu Vmfektio4oiBZyYIZapPC9/N0uLEk0wbK2yUrZ5W31U+X0T7hHo2XqT2gMEInUJ2 Dh9F6HDxFy4XqfmIjHO8FgVeXZtnDW5uCYXPu3y+7+AdDYoTQ9FUXpbC2HzA4l/9 fLREe2aSKMk/04Va1fdIjbUP2GiIskynAQYC5LJpAIpNDHjHzWl4Sq4C7rf/nFut u8sPTbXQju7mPMUFkqm8hzh99hZ7KAP6/tF8S98TsGMRZ28RI+voIqep7bY3hE4c sl28ZW3cwK9hHNrbykwr2mSOpQ+ejCKKluXPYT3Ybryc5AlTLZNcSPA36O2JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVN9NmXjx4RdSV7xKU5WjJ/dc1qEwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlYKe5jKStQ0iPe9ynHg39YOo1Fz3ZA+FR9 5wAYAPu8H96Jxl9Ei+KCvgdrkOZiG7dawvNj0aseZE3uu2Sgn+8YixCpl5UmB03P STFwRfSeuTtAuJW4A9YXgbpZEd8JPwPaJhLjlSeBs84O5UMd1tV1t3GaCMjuuQvG EzGyJXQlwe5DDiBFsyBSMqIprwEPbOgM1qfrWtULbnS2btJGLbcBpuRwj7XuMWfF pcnQK/CxEKCw4saaV0z++TsD6p0Fa8Hm0SU1ivPS6aA/gywZUw4gipKYLEOklqyB NtfrAISLQISLTcSMHlvN3JmxkaqubVb7PHyn/PlfV5VAbYjrZy0= -----END CERTIFICATE-----Generated at Sat May 18 13:30:07 2024 by rpki-client on console-fra.rpki-client.org