$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: JcsWGYoSxmOVFEP9pla/UiSRCcfHDcIL8ih1dlPtAPQ= Subject key identifier: 0A:3E:D8:CA:96:70:CC:83:65:E1:26:23:67:2F:39:FD:4E:BF:C1:43 Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 1BFC088D44D37E31F28667164DBED99AEAB5B2CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: D6 Signing time: Sun 19 May 2024 01:40:38 +0000 Manifest this update: Sun 19 May 2024 01:35:38 +0000 Manifest next update: Wed 22 May 2024 11:56:38 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: h5+48M/uPutQIAZQCqT/yu09vXtdpQGKpU80xKylrhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fc:08:8d:44:d3:7e:31:f2:86:67:16:4d:be:d9:9a:ea:b5:b2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: May 19 01:35:38 2024 GMT Not After : May 22 11:56:38 2024 GMT Subject: CN=0A3ED8CA9670CC8365E12623672F39FD4EBFC143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:59:9e:82:43:8b:fa:eb:93:5c:9b:05:f8: cd:65:33:43:16:b7:8e:a2:2d:f7:25:1c:92:5a:82: 13:ad:5b:44:0c:3f:88:18:aa:31:bc:77:05:e8:79: a5:20:d5:29:db:44:63:5f:b5:56:ed:e9:0a:21:43: 33:c5:ad:ad:5e:c0:61:d4:a8:ef:b3:87:22:cd:09: 1e:0f:a6:44:84:39:6b:ea:bc:c0:50:da:38:79:33: 2e:a1:59:f8:4e:5f:ac:ad:c8:d9:8f:93:08:69:d2: 38:29:59:16:84:ad:68:f7:84:dc:26:cc:f2:3c:43: b1:ad:47:be:d2:36:e9:d3:a1:a5:41:12:63:d8:b2: 3f:2e:17:e1:97:d6:25:55:d2:73:54:7a:f6:45:02: 67:b2:7e:46:b1:db:c2:88:a5:b3:34:f6:66:72:06: f4:99:35:88:5f:94:5a:78:aa:2f:8a:5c:08:61:2f: 8a:9f:17:fc:c2:45:77:6b:23:00:7f:fa:36:95:1c: 8a:2a:cb:06:fc:f9:0e:56:51:78:81:5d:99:a5:1f: eb:e8:f4:da:20:6f:d4:a9:ae:7a:34:1d:52:24:8a: 19:e8:94:4a:f9:2c:5a:75:e1:34:3f:b0:ef:fb:d2: 45:f7:db:f5:fc:1f:37:fe:1d:3f:dc:4a:f1:31:4b: 65:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3E:D8:CA:96:70:CC:83:65:E1:26:23:67:2F:39:FD:4E:BF:C1:43 X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:83:00:09:bd:ea:fe:5b:55:c4:4a:b7:41:a5:de:9a:02:e1: 6a:f7:b1:2b:f6:5d:9d:65:49:a0:d9:66:f1:0a:e9:72:d0:58: 5e:0c:73:55:96:08:f0:d8:b8:b4:22:4e:cb:af:56:f3:94:6c: 03:56:37:c0:a9:35:b5:6b:22:02:67:7e:4d:76:4c:c8:93:02: ff:22:b8:5a:96:25:18:6d:bd:b0:e3:d1:a2:07:e3:fc:2b:c6: 55:27:f0:e0:6e:9e:2c:0b:c6:3b:3e:84:86:62:9d:83:ee:dd: a0:3c:1c:4f:17:8c:63:24:7c:52:ad:b9:c7:ed:e2:a5:2e:42: d7:1e:31:16:db:c8:af:ec:98:78:db:9a:2b:48:e7:a3:67:69: fc:cc:f7:2a:07:05:fa:a6:0d:56:3d:0c:a6:d8:37:f9:d7:e2: 4d:3e:87:bc:58:90:b9:a4:a0:43:35:03:6e:b8:93:39:9f:81: 04:22:4b:fc:de:0c:7d:f8:3e:37:31:81:bc:d3:f5:04:0b:80: 79:eb:98:3a:58:0a:e8:c6:4f:67:09:94:03:1e:26:17:9f:19: 30:9b:7a:cb:29:9e:33:95:1b:0c:f1:f0:55:00:52:73:3b:c9: 90:20:fc:41:7d:b8:18:5c:2a:f4:51:65:55:75:67:81:76:d0: a9:f1:c1:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/wIjUTTfjHyhmcWTb7Zmuq1ss0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNDA1MTkwMTM1MzhaFw0yNDA1MjIxMTU2MzhaMDMxMTAvBgNV BAMTKDBBM0VEOENBOTY3MENDODM2NUUxMjYyMzY3MkYzOUZENEVCRkMxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9FmegkOL+uuTXJsF+M1lM0MW t46iLfclHJJaghOtW0QMP4gYqjG8dwXoeaUg1SnbRGNftVbt6QohQzPFra1ewGHU qO+zhyLNCR4PpkSEOWvqvMBQ2jh5My6hWfhOX6ytyNmPkwhp0jgpWRaErWj3hNwm zPI8Q7GtR77SNunToaVBEmPYsj8uF+GX1iVV0nNUevZFAmeyfkax28KIpbM09mZy BvSZNYhflFp4qi+KXAhhL4qfF/zCRXdrIwB/+jaVHIoqywb8+Q5WUXiBXZmlH+vo 9Nogb9Sprno0HVIkihnolEr5LFp14TQ/sO/70kX32/X8Hzf+HT/cSvExS2X9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCj7YypZwzINl4SYjZy85/U6/wUMwHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKDAAm96v5bVcRKt0Gl3poC4Wr3sSv2XZ1l SaDZZvEK6XLQWF4Mc1WWCPDYuLQiTsuvVvOUbANWN8CpNbVrIgJnfk12TMiTAv8i uFqWJRhtvbDj0aIH4/wrxlUn8OBuniwLxjs+hIZinYPu3aA8HE8XjGMkfFKtucft 4qUuQtceMRbbyK/smHjbmitI56NnafzM9yoHBfqmDVY9DKbYN/nX4k0+h7xYkLmk oEM1A264kzmfgQQiS/zeDH34PjcxgbzT9QQLgHnrmDpYCujGT2cJlAMeJhefGTCb esspnjOVGwzx8FUAUnM7yZAg/EF9uBhcKvRRZVV1Z4F20Knxwbk= -----END CERTIFICATE-----Generated at Sun May 19 02:39:08 2024 by rpki-client on console-fra.rpki-client.org