$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: NWDOnSNPbOQWrrJkejo1VUoKefgS0sXlI8cThQQuFUk= Subject key identifier: B1:3B:17:BC:C6:ED:E4:CF:D4:24:05:01:B6:98:71:FD:26:C2:FD:5C Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 5D74421CFA698AD5E04D5F4AE969729D54495A5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 012F Signing time: Sun 19 May 2024 02:01:20 +0000 Manifest this update: Sun 19 May 2024 01:56:20 +0000 Manifest next update: Wed 22 May 2024 09:07:20 +0000 Files and hashes: 1: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: 78257M0yIEkattLu++q/Al8tnGsve73i+XxGiQXC3C0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:74:42:1c:fa:69:8a:d5:e0:4d:5f:4a:e9:69:72:9d:54:49:5a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: May 19 01:56:20 2024 GMT Not After : May 22 09:07:20 2024 GMT Subject: CN=B13B17BCC6EDE4CFD4240501B69871FD26C2FD5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:70:e0:97:a9:db:d8:04:91:26:7e:24:4a: 44:d7:b5:22:b4:e3:a9:28:89:46:27:58:b9:c1:85: 79:13:17:5a:7e:eb:8c:dd:49:34:bb:68:fd:4e:c2: 18:e8:88:36:90:e8:cb:3e:1a:17:5b:0d:c3:47:89: a5:0a:48:55:8e:42:6a:6b:4a:12:8a:78:6d:92:d2: 64:bc:e6:2e:6e:4c:0c:27:b2:7b:eb:1c:b3:c7:35: ab:34:62:3a:18:2b:fa:e8:4c:d3:d1:4e:98:4c:e1: 1c:9e:67:02:8e:da:cc:17:99:f4:db:30:38:d9:19: 4b:ba:32:61:71:26:e1:4b:6e:b1:07:68:44:de:06: b0:52:05:65:97:07:fd:50:7a:6a:77:e7:af:c2:a7: 91:ce:6a:ed:86:5b:0b:d9:80:61:1e:09:e9:75:1e: 00:8b:18:b6:e2:bc:9b:85:41:f5:c3:04:18:8e:24: 18:ed:ff:bc:17:73:10:c5:c1:3c:d3:62:49:c2:9e: a3:8d:3a:ae:9e:d1:af:aa:ad:5a:ab:65:74:aa:ed: 15:87:cc:d0:c5:46:8b:90:8f:ff:c1:ad:6e:d6:a5: e8:25:c6:06:9c:5a:97:c7:53:16:43:41:d7:57:69: c1:12:0d:65:cb:2e:8b:66:f3:b2:20:01:57:63:63: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3B:17:BC:C6:ED:E4:CF:D4:24:05:01:B6:98:71:FD:26:C2:FD:5C X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fc:8a:5e:af:08:35:51:c5:78:1a:2d:52:ff:f7:2e:ec:82: 8f:3a:1f:93:0c:32:3d:84:e8:85:11:0b:69:41:1d:fe:e6:c5: 95:44:d4:30:f2:4b:6b:b4:9c:33:ee:a4:88:06:3e:ba:95:0c: 71:f8:0d:39:93:c3:dc:22:ab:8b:98:80:a9:02:0b:18:dd:4e: 50:27:6e:77:6e:e4:1f:a4:24:72:dc:95:5f:35:3c:b1:c6:6e: da:0b:95:5e:98:b7:e6:df:9c:0e:f5:95:a2:77:71:0a:5d:e0: a5:ab:00:1f:fc:5d:b9:db:fc:5c:30:d0:a3:db:a8:24:c7:20: f6:97:ee:1c:5d:9d:8e:d2:86:b3:3f:40:5b:63:ed:0c:c0:fe: 53:53:e1:47:41:b7:84:b6:f4:b5:ba:1d:0f:fe:bd:29:96:3a: d4:84:22:4e:b0:ee:15:70:fe:9d:fa:06:ca:a6:d3:44:2f:85: 25:db:b6:f7:e4:17:35:dd:d4:08:12:18:4a:26:8d:aa:e9:2c: f2:e1:92:e2:d7:4b:47:7e:c5:43:ea:66:86:2d:d9:83:75:a4: 25:a4:74:4d:c5:bc:b2:66:ac:90:8b:41:46:6f:a4:ae:96:51: e9:87:20:36:ce:a0:cc:97:78:80:64:a8:56:38:ed:4b:ef:ad: 0c:e7:6b:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXXRCHPppitXgTV9K6WlynVRJWlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNDA1MTkwMTU2MjBaFw0yNDA1MjIwOTA3MjBaMDMxMTAvBgNV BAMTKEIxM0IxN0JDQzZFREU0Q0ZENDI0MDUwMUI2OTg3MUZEMjZDMkZENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHXDgl6nb2ASRJn4kSkTXtSK0 46koiUYnWLnBhXkTF1p+64zdSTS7aP1OwhjoiDaQ6Ms+GhdbDcNHiaUKSFWOQmpr ShKKeG2S0mS85i5uTAwnsnvrHLPHNas0YjoYK/roTNPRTphM4RyeZwKO2swXmfTb MDjZGUu6MmFxJuFLbrEHaETeBrBSBWWXB/1Qemp356/Cp5HOau2GWwvZgGEeCel1 HgCLGLbivJuFQfXDBBiOJBjt/7wXcxDFwTzTYknCnqONOq6e0a+qrVqrZXSq7RWH zNDFRouQj//BrW7WpeglxgacWpfHUxZDQddXacESDWXLLotm87IgAVdjY4kXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsTsXvMbt5M/UJAUBtphx/SbC/VwwHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFr8il6vCDVRxXgaLVL/9y7sgo86H5MMMj2E 6IURC2lBHf7mxZVE1DDyS2u0nDPupIgGPrqVDHH4DTmTw9wiq4uYgKkCCxjdTlAn bndu5B+kJHLclV81PLHGbtoLlV6Yt+bfnA71laJ3cQpd4KWrAB/8Xbnb/Fww0KPb qCTHIPaX7hxdnY7ShrM/QFtj7QzA/lNT4UdBt4S29LW6HQ/+vSmWOtSEIk6w7hVw /p36Bsqm00QvhSXbtvfkFzXd1AgSGEomjarpLPLhkuLXS0d+xUPqZoYt2YN1pCWk dE3FvLJmrJCLQUZvpK6WUemHIDbOoMyXeIBkqFY47UvvrQzna7A= -----END CERTIFICATE-----Generated at Sun May 19 02:39:08 2024 by rpki-client on console-fra.rpki-client.org