$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: wilGj08PB5BCBizk8YHxRqOjCeb++AxXQOmS8Yig7AU= Subject key identifier: 59:20:FE:CD:2A:BC:41:5B:37:A9:70:43:B6:8E:61:CD:D6:90:7D:B5 Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 4D41317625DB7E58A831BBD64AFE9B7232E74651 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 03CF Signing time: Sat 18 May 2024 11:01:40 +0000 Manifest this update: Sat 18 May 2024 10:56:40 +0000 Manifest next update: Tue 21 May 2024 17:30:40 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: ym8lA5ulELR7RM4B6wYGugb9q4788K8OT07VQw9u2MY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 17:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:41:31:76:25:db:7e:58:a8:31:bb:d6:4a:fe:9b:72:32:e7:46:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: May 18 10:56:40 2024 GMT Not After : May 21 17:30:40 2024 GMT Subject: CN=5920FECD2ABC415B37A97043B68E61CDD6907DB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:c7:83:38:74:48:46:cf:5d:9a:69:78:5b: c4:c1:b6:eb:99:6b:e1:0a:cf:58:88:c8:59:51:af: d9:a0:f7:eb:31:ea:38:cf:fd:7d:9a:02:0d:97:32: 26:f4:d8:16:a3:3c:9d:fd:4d:0e:db:8d:6e:ae:28: af:b1:ee:c2:a6:fe:33:ae:49:7a:6b:3f:22:aa:55: b9:14:eb:e6:91:9f:89:c8:2b:a6:6c:5f:79:5a:ce: 22:86:1d:ee:ee:c7:de:a8:8c:ef:21:4c:ad:c0:b2: 91:0a:24:d7:b1:47:8c:4c:d7:48:0f:75:d1:59:0e: 7a:8f:e6:d5:bc:85:c6:31:7d:57:21:99:99:63:28: b2:c3:47:a6:bc:67:cc:27:05:2d:7a:ed:b1:3a:fa: b3:3d:ad:86:aa:9b:cf:e2:00:ca:9b:4a:2b:dc:28: c8:f6:88:2d:d6:0b:1f:cf:a0:73:5d:a7:65:65:cb: 1a:dc:7c:76:f6:fb:bf:e3:57:57:21:80:f0:29:a4: b1:7c:0d:2a:a9:4e:bf:ac:23:bb:a6:86:d2:45:77: 44:81:cf:b2:21:5a:b5:76:b2:19:d3:5b:c4:ad:37: d9:24:d6:8c:5d:ba:ad:88:46:40:23:bf:74:a1:a7: ba:57:f5:ea:cf:41:aa:5e:a7:11:cc:41:ba:b5:b2: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:20:FE:CD:2A:BC:41:5B:37:A9:70:43:B6:8E:61:CD:D6:90:7D:B5 X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c4:3c:bb:a0:6f:e2:b5:92:a9:61:57:9c:76:de:a7:e6:de: e0:8c:18:a4:d7:2a:3d:9a:05:8f:42:84:46:27:4f:49:a6:a5: 33:fe:dd:3f:31:d0:2d:8b:59:47:c5:ab:4e:96:ec:17:25:40: a7:c2:95:1b:3b:68:ad:de:e4:bf:56:e6:10:3f:bf:eb:92:bc: d8:bc:5c:22:2a:a6:c7:03:d2:c8:db:1c:3c:1e:13:a3:cb:30: 95:d6:bc:5d:52:e1:76:94:24:4b:5e:71:8b:c7:4b:c1:ad:3a: da:2f:eb:56:67:c5:50:95:d2:ee:c3:9a:c3:d5:a7:39:dc:60: c7:5e:78:90:d3:7e:4f:ee:dc:8d:bd:fc:bc:1c:e2:74:42:93: 51:37:e2:b0:11:70:38:98:f2:5a:c2:e3:b1:72:10:23:c7:49: 7f:74:d6:be:46:e8:80:22:96:d9:77:27:59:40:0d:91:7d:3a: 16:fc:ea:b1:c7:dc:8b:c4:c1:2f:2e:a3:ba:7a:a3:a1:ce:54: 15:b9:ac:0d:06:6f:e3:a4:d1:06:1c:a8:8f:3b:98:b7:6a:f4: 04:89:48:68:b1:d7:fc:60:0e:6d:b7:c2:d7:3d:40:92:e8:7a: 13:c7:6f:9a:00:f6:ea:bd:68:ff:a6:2a:ea:a5:31:4a:15:83: f9:73:88:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTUExdiXbflioMbvWSv6bcjLnRlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNDA1MTgxMDU2NDBaFw0yNDA1MjExNzMwNDBaMDMxMTAvBgNV BAMTKDU5MjBGRUNEMkFCQzQxNUIzN0E5NzA0M0I2OEU2MUNERDY5MDdEQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG7ceDOHRIRs9dmml4W8TBtuuZ a+EKz1iIyFlRr9mg9+sx6jjP/X2aAg2XMib02BajPJ39TQ7bjW6uKK+x7sKm/jOu SXprPyKqVbkU6+aRn4nIK6ZsX3laziKGHe7ux96ojO8hTK3AspEKJNexR4xM10gP ddFZDnqP5tW8hcYxfVchmZljKLLDR6a8Z8wnBS167bE6+rM9rYaqm8/iAMqbSivc KMj2iC3WCx/PoHNdp2VlyxrcfHb2+7/jV1chgPAppLF8DSqpTr+sI7umhtJFd0SB z7IhWrV2shnTW8StN9kk1oxduq2IRkAjv3Shp7pX9erPQapepxHMQbq1suE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWSD+zSq8QVs3qXBDto5hzdaQfbUwHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTEPLugb+K1kqlhV5x23qfm3uCMGKTXKj2a BY9ChEYnT0mmpTP+3T8x0C2LWUfFq06W7BclQKfClRs7aK3e5L9W5hA/v+uSvNi8 XCIqpscD0sjbHDweE6PLMJXWvF1S4XaUJEtecYvHS8GtOtov61ZnxVCV0u7DmsPV pzncYMdeeJDTfk/u3I29/Lwc4nRCk1E34rARcDiY8lrC47FyECPHSX901r5G6IAi ltl3J1lADZF9Ohb86rHH3IvEwS8uo7p6o6HOVBW5rA0Gb+Ok0QYcqI87mLdq9ASJ SGix1/xgDm23wtc9QJLoehPHb5oA9uq9aP+mKuqlMUoVg/lziB0= -----END CERTIFICATE-----Generated at Sat May 18 12:39:38 2024 by rpki-client on console-ams.rpki-client.org