$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: yh7VY3QVl2IUS+KUyg904t6E8ZkSqWZ5fGPU+j5+d+A= Subject key identifier: 63:33:67:67:3C:5E:44:52:F7:B7:AA:18:F5:33:FD:A4:CC:63:96:07 Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 2471B1DE0C14E81AC1854155B1AF32FFA9D33D6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 43 Signing time: Wed 29 May 2024 00:41:01 +0000 Manifest this update: Wed 29 May 2024 00:36:01 +0000 Manifest next update: Sat 01 Jun 2024 08:01:01 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: gAOy0wJKcDopdSPM/yZhz1fQPjrUlBGxZsceKbbQgqo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:71:b1:de:0c:14:e8:1a:c1:85:41:55:b1:af:32:ff:a9:d3:3d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: May 29 00:36:01 2024 GMT Not After : Jun 1 08:01:01 2024 GMT Subject: CN=633367673C5E4452F7B7AA18F533FDA4CC639607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:f4:29:6b:c2:b2:21:55:47:27:23:f4:b5: 90:4a:c9:a2:dc:62:26:18:9d:f6:4d:31:ae:bf:32: ff:2e:b9:3a:aa:e7:5e:10:98:64:86:bb:76:2f:1b: 3a:81:43:81:22:ff:6d:dd:77:bf:5f:8f:ae:7b:f0: 0a:62:66:f1:46:e8:c6:88:03:39:62:e8:1c:90:3f: ed:d5:f2:5d:7c:b8:17:81:dc:76:71:39:72:bd:08: 35:ce:71:6f:9c:e9:bf:0d:4e:f5:05:cd:77:c2:e7: d8:b6:11:c2:0a:d0:1a:21:2f:37:af:c3:bd:09:3c: ef:37:ad:23:35:fd:f6:7f:9c:43:db:38:16:18:6a: 6c:c0:e9:a6:46:a7:18:e8:f0:18:fc:f0:14:cf:86: 50:7f:05:29:52:c0:ea:25:0e:07:6d:96:0e:9b:6e: a6:64:24:e7:06:19:10:ae:f8:f1:2b:14:bc:4f:ea: a0:40:6e:fc:15:14:e2:3c:08:9f:44:42:3f:28:8f: 9f:49:af:a4:2a:bc:f7:47:3c:82:85:df:70:f5:de: aa:4c:23:f3:06:c4:23:8b:05:82:3a:e1:73:7e:bb: 47:df:92:a0:d4:68:16:d5:9e:67:5a:2d:05:64:e4: b1:57:56:5a:a7:f5:12:f3:6f:0b:a1:47:1d:59:7f: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:33:67:67:3C:5E:44:52:F7:B7:AA:18:F5:33:FD:A4:CC:63:96:07 X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:06:44:64:36:7c:02:62:77:65:7e:f1:71:fb:4b:0c:2a:f3: 6b:75:0e:36:12:39:f1:5d:73:58:73:79:d1:97:f4:5f:a2:eb: d2:bb:52:ed:47:0e:a5:20:f5:58:00:e7:47:e5:46:62:e6:45: 71:81:6c:ef:06:64:a6:9b:b6:92:2b:b4:1e:53:6d:0d:72:59: 34:cb:1a:bd:b2:19:54:f3:f0:f3:a7:a5:ae:cf:2c:c4:1f:d0: c2:27:81:22:b2:14:fb:49:ed:21:7c:dd:e8:72:29:6f:05:db: e4:95:bf:44:42:a7:67:f7:02:76:ed:2e:a6:67:d6:d5:67:2a: 08:52:ed:33:f8:b2:cf:11:3f:b6:30:5d:a7:a9:27:d8:b7:b9: 9a:94:a4:da:7a:71:43:c7:45:ce:3b:8d:0e:56:0b:3e:3e:ee: ea:a5:b2:d6:bd:9f:7b:4d:72:cf:9f:28:d7:1e:87:bb:03:04: f7:25:c1:d9:81:71:36:8f:0c:66:0d:27:74:44:7b:60:24:32: 5f:43:e6:c6:98:2b:b6:7d:4c:87:25:b2:7d:c8:b5:36:02:98: 68:4d:35:05:f6:5f:dc:05:04:d9:31:c9:b5:85:87:46:32:16: 07:e9:99:2e:47:39:f1:4d:9c:59:0c:de:97:7b:de:0a:d7:9b: 57:8e:67:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHGx3gwU6BrBhUFVsa8y/6nTPWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNDA1MjkwMDM2MDFaFw0yNDA2MDEwODAxMDFaMDMxMTAvBgNV BAMTKDYzMzM2NzY3M0M1RTQ0NTJGN0I3QUExOEY1MzNGREE0Q0M2Mzk2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1fQpa8KyIVVHJyP0tZBKyaLc YiYYnfZNMa6/Mv8uuTqq514QmGSGu3YvGzqBQ4Ei/23dd79fj6578ApiZvFG6MaI Azli6ByQP+3V8l18uBeB3HZxOXK9CDXOcW+c6b8NTvUFzXfC59i2EcIK0BohLzev w70JPO83rSM1/fZ/nEPbOBYYamzA6aZGpxjo8Bj88BTPhlB/BSlSwOolDgdtlg6b bqZkJOcGGRCu+PErFLxP6qBAbvwVFOI8CJ9EQj8oj59Jr6QqvPdHPIKF33D13qpM I/MGxCOLBYI64XN+u0ffkqDUaBbVnmdaLQVk5LFXVlqn9RLzbwuhRx1Zf70LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzNnZzxeRFL3t6oY9TP9pMxjlgcwHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoGRGQ2fAJid2V+8XH7Swwq82t1DjYSOfFd c1hzedGX9F+i69K7Uu1HDqUg9VgA50flRmLmRXGBbO8GZKabtpIrtB5TbQ1yWTTL Gr2yGVTz8POnpa7PLMQf0MIngSKyFPtJ7SF83ehyKW8F2+SVv0RCp2f3AnbtLqZn 1tVnKghS7TP4ss8RP7YwXaepJ9i3uZqUpNp6cUPHRc47jQ5WCz4+7uqlsta9n3tN cs+fKNceh7sDBPclwdmBcTaPDGYNJ3REe2AkMl9D5saYK7Z9TIclsn3ItTYCmGhN NQX2X9wFBNkxybWFh0YyFgfpmS5HOfFNnFkM3pd73grXm1eOZw4= -----END CERTIFICATE-----Generated at Wed May 29 02:48:29 2024 by rpki-client on console-fra.rpki-client.org