$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft File: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft (raw, json) Hash identifier: NwOrISw/NWuKiJRFsUQhxmPYrgo3D501DqAQfD//W3I= Subject key identifier: C4:21:7A:C4:39:AA:91:0C:CC:1F:FA:EB:AA:FA:50:33:AD:72:67:3D Authority key identifier: 94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C Certificate issuer: /CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Certificate serial: 374979EC27DD48B3DFC19477B962010A5EDE76F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft Manifest number: 2F Signing time: Sun 19 May 2024 15:40:36 +0000 Manifest this update: Sun 19 May 2024 15:35:36 +0000 Manifest next update: Thu 23 May 2024 02:10:36 +0000 Files and hashes: 1: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl (hash: 6tI0OiVHMGBTBv6seOzM98nX1h/5jhN02qlpPJENjbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:49:79:ec:27:dd:48:b3:df:c1:94:77:b9:62:01:0a:5e:de:76:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Validity Not Before: May 19 15:35:36 2024 GMT Not After : May 23 02:10:36 2024 GMT Subject: CN=C4217AC439AA910CCC1FFAEBAAFA5033AD72673D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5d:0b:56:f2:af:79:0e:1a:5d:bd:1d:e0:d1: 22:b6:b7:a0:9d:ec:a6:16:1c:86:81:24:67:eb:b6: 86:81:b0:49:f1:a7:76:0f:86:08:c2:85:76:6c:8a: a6:dd:39:8f:bf:09:68:30:2f:b6:3a:14:d9:2d:a3: e8:bf:16:ea:f5:eb:80:af:8e:b2:24:37:94:60:d9: d7:8a:dc:42:1a:2f:3b:d6:c3:72:9e:47:ec:d6:58: 97:c8:7f:99:c6:31:aa:74:4f:db:fb:9c:79:16:50: 66:3d:3a:a8:6f:fc:f9:30:1f:a2:27:d3:bb:61:7e: df:52:17:68:94:51:3c:ec:c9:5e:06:12:d8:e2:df: 3f:58:2b:e1:7f:3d:1a:e1:7b:17:07:53:be:d0:be: cc:b6:73:4f:92:45:25:4b:78:e0:6c:47:b9:5e:54: b2:2c:b4:8e:30:d0:f8:6e:77:38:c3:52:c5:5d:9e: 3a:6e:d5:64:8d:03:56:c2:f3:70:ef:9e:d7:e2:91: f2:4f:00:42:47:d9:0e:16:34:d3:d7:1d:2f:33:fa: e3:98:fc:6d:a8:79:33:d5:11:27:9f:8a:01:15:4c: 83:d1:93:fd:20:a2:1e:f5:6b:83:3a:ba:bb:c6:c9: d8:b1:da:7d:19:eb:99:fa:92:b1:a6:8a:0a:11:ac: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:21:7A:C4:39:AA:91:0C:CC:1F:FA:EB:AA:FA:50:33:AD:72:67:3D X509v3 Authority Key Identifier: keyid:94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:34:a8:ca:11:b2:b1:28:48:17:7c:1b:0b:be:1c:e7:e5:79: 24:c1:a4:fa:76:36:91:be:bc:73:8b:e2:43:53:ba:61:11:13: c7:2c:c2:0c:7f:fb:a8:2c:0a:cc:7b:91:ba:d4:6d:63:49:83: 38:16:83:e9:37:84:1b:29:4d:3e:99:b5:d7:e2:9a:84:db:02: 2a:29:e9:0b:76:c6:c5:e1:96:65:20:a9:85:30:ec:29:c0:b4: 85:1e:35:88:7f:8a:ad:a5:01:e3:d9:ed:08:b1:86:10:13:f8: 74:eb:9b:9e:02:24:8c:0b:57:9c:d7:da:3d:42:68:18:f0:be: 19:1c:df:99:7a:20:50:90:e8:dc:ff:05:e4:41:fb:5a:c1:93: a8:78:f6:da:1b:fb:37:00:28:f9:9a:ad:43:6b:3f:29:53:dc: bb:17:61:f2:84:d9:e9:1b:56:0b:92:99:c7:55:8d:07:75:1b: cf:0d:d0:93:1b:4d:d2:e2:2d:86:7c:28:77:d2:7a:05:36:0b: 0a:d1:33:d7:04:0b:1b:25:d8:f6:79:8d:3c:2d:31:10:e3:03: d7:b1:42:5e:60:62:0e:5e:4c:94:33:b1:2f:01:e0:8c:92:39: d0:65:90:61:ef:81:f0:95:9c:cb:6f:18:c5:44:94:5a:2c:a1: 74:7e:64:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0l57CfdSLPfwZR3uWIBCl7edvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNG NTA5MkU0QzAeFw0yNDA1MTkxNTM1MzZaFw0yNDA1MjMwMjEwMzZaMDMxMTAvBgNV BAMTKEM0MjE3QUM0MzlBQTkxMENDQzFGRkFFQkFBRkE1MDMzQUQ3MjY3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XQtW8q95DhpdvR3g0SK2t6Cd 7KYWHIaBJGfrtoaBsEnxp3YPhgjChXZsiqbdOY+/CWgwL7Y6FNkto+i/Fur164Cv jrIkN5Rg2deK3EIaLzvWw3KeR+zWWJfIf5nGMap0T9v7nHkWUGY9Oqhv/PkwH6In 07thft9SF2iUUTzsyV4GEtji3z9YK+F/PRrhexcHU77Qvsy2c0+SRSVLeOBsR7le VLIstI4w0PhudzjDUsVdnjpu1WSNA1bC83DvntfikfJPAEJH2Q4WNNPXHS8z+uOY /G2oeTPVESefigEVTIPRk/0goh71a4M6urvGydix2n0Z65n6krGmigoRrNGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxCF6xDmqkQzMH/rrqvpQM61yZz0wHwYDVR0j BBgwFoAUlK6hGtwP53QJTKSmZoDD7PUJLkwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRmYzM0MC1hZjY5LTRlOGUtYTc3Ny03NDdkZDgyOWRjM2YvMC85NEFFQTExQURD MEZFNzc0MDk0Q0E0QTY2NjgwQzNFQ0Y1MDkyRTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNGNTA5 MkU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0ZmMzNDAtYWY2OS00ZThlLWE3 NzctNzQ3ZGQ4MjlkYzNmLzAvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMz RUNGNTA5MkU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg0qMoRsrEoSBd8Gwu+HOfleSTBpPp2NpG+ vHOL4kNTumERE8cswgx/+6gsCsx7kbrUbWNJgzgWg+k3hBspTT6ZtdfimoTbAiop 6Qt2xsXhlmUgqYUw7CnAtIUeNYh/iq2lAePZ7QixhhAT+HTrm54CJIwLV5zX2j1C aBjwvhkc35l6IFCQ6Nz/BeRB+1rBk6h49tob+zcAKPmarUNrPylT3LsXYfKE2ekb VguSmcdVjQd1G88N0JMbTdLiLYZ8KHfSegU2CwrRM9cECxsl2PZ5jTwtMRDjA9ex Ql5gYg5eTJQzsS8B4IySOdBlkGHvgfCVnMtvGMVElFosoXR+ZLI= -----END CERTIFICATE-----Generated at Sun May 19 16:36:51 2024 by rpki-client on console-fra.rpki-client.org