$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft File: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft (raw, json) Hash identifier: /kes7ZfM9FPBEGfeO4yrb2j+d30yBSKzGZ3tbUClhO0= Subject key identifier: 11:B1:74:D7:FC:5E:CD:E9:D8:7C:EA:70:93:FE:39:10:33:EF:E0:81 Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Certificate serial: 2347B45891FC01176FB582B7A57F5F3C8B821D65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft Manifest number: 043F Signing time: Thu 30 May 2024 00:20:58 +0000 Manifest this update: Thu 30 May 2024 00:15:58 +0000 Manifest next update: Sun 02 Jun 2024 01:37:58 +0000 Files and hashes: 1: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl (hash: gzKhQrHHS6jhCyBBB9PebZOCFKblFDkEPpdYbFTPtbs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 01:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:47:b4:58:91:fc:01:17:6f:b5:82:b7:a5:7f:5f:3c:8b:82:1d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Validity Not Before: May 30 00:15:58 2024 GMT Not After : Jun 2 01:37:58 2024 GMT Subject: CN=11B174D7FC5ECDE9D87CEA7093FE391033EFE081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:f6:56:a7:1f:6d:47:44:25:61:15:50:39: 51:c0:53:36:52:f9:fa:ab:3e:c2:c8:06:1c:89:52: 91:5a:62:1c:cd:8c:29:88:b8:f3:3b:c3:a6:7d:05: e4:b8:4b:32:e7:21:09:93:34:0d:26:e9:f7:f7:12: d8:d2:e9:54:bf:8f:7d:29:28:68:a3:cb:13:a8:6d: ab:2b:a0:2b:01:71:71:fc:2c:1e:87:e8:89:14:99: 05:bc:f9:4d:bc:cb:51:fc:9b:3b:0e:1e:cd:f6:35: 8c:63:70:5d:07:b1:20:9c:e7:d8:7d:69:79:b5:cb: 42:6d:c9:fd:62:fa:f2:80:2b:58:4a:16:e0:7f:1d: e3:9e:c7:c2:ec:e3:f8:a8:36:af:77:94:e7:4b:6f: 88:2b:8a:0c:8f:bd:74:32:f1:47:c7:c2:14:59:b7: e5:f0:46:97:82:3a:5c:db:78:cf:ef:3c:91:0b:af: 0e:ef:52:b1:30:d4:c5:90:f2:36:a8:f9:78:9a:74: 10:b0:ae:d4:79:56:a4:5d:39:13:2b:68:e0:de:78: f3:5a:fd:4a:bc:e4:ba:e3:82:7f:cb:12:52:1c:93: a1:12:e1:c6:aa:ce:f3:96:25:25:a7:a3:32:7d:3c: 44:e4:40:71:c9:c2:73:27:78:e9:08:57:e0:2f:42: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B1:74:D7:FC:5E:CD:E9:D8:7C:EA:70:93:FE:39:10:33:EF:E0:81 X509v3 Authority Key Identifier: keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ea:ca:92:9a:89:ab:64:d0:a3:4a:04:86:8e:85:8f:20:f7: 1e:d2:74:0b:73:18:98:4a:aa:07:5e:c1:51:33:a6:15:d7:9d: 4e:23:3d:7a:ef:aa:ea:a7:77:f5:b9:aa:d7:c8:c7:9e:a7:1c: e5:da:71:e6:25:e6:04:10:5e:44:8a:16:98:b4:a5:b2:57:d5: 71:0f:b5:44:bf:ec:2c:7a:f7:d8:47:2f:28:85:7c:8a:d1:c4: fd:cd:dc:fb:aa:05:63:22:d0:88:86:4b:3f:f4:b3:e3:19:20: 2b:55:f9:3d:58:db:08:bf:47:25:59:73:f1:2c:09:00:f8:55: 34:7b:75:70:15:3d:b6:15:f4:17:cf:57:4f:86:9d:67:21:2e: 0c:45:f8:13:f7:63:1d:f2:e9:cb:4f:7e:61:c1:01:d6:63:45: f6:63:00:e3:bb:d0:52:a8:3b:c8:4f:7c:52:ec:69:92:47:d8: a2:af:cc:c2:04:73:75:4f:62:8d:c7:ae:55:35:da:c4:b0:be: c0:e6:e3:d6:ba:30:4b:f2:08:24:7a:d7:6c:6b:3f:48:1e:49: 22:4e:50:06:1c:eb:33:24:38:ce:93:36:6e:b6:28:91:e6:be: d6:f6:a6:c3:d2:3d:e5:cb:ae:81:21:b6:66:71:56:df:ff:8c: 0b:b8:af:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0e0WJH8ARdvtYK3pX9fPIuCHWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFC NjdENjFFQTAeFw0yNDA1MzAwMDE1NThaFw0yNDA2MDIwMTM3NThaMDMxMTAvBgNV BAMTKDExQjE3NEQ3RkM1RUNERTlEODdDRUE3MDkzRkUzOTEwMzNFRkUwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJvZWpx9tR0QlYRVQOVHAUzZS +fqrPsLIBhyJUpFaYhzNjCmIuPM7w6Z9BeS4SzLnIQmTNA0m6ff3EtjS6VS/j30p KGijyxOobasroCsBcXH8LB6H6IkUmQW8+U28y1H8mzsOHs32NYxjcF0HsSCc59h9 aXm1y0Jtyf1i+vKAK1hKFuB/HeOex8Ls4/ioNq93lOdLb4grigyPvXQy8UfHwhRZ t+XwRpeCOlzbeM/vPJELrw7vUrEw1MWQ8jao+XiadBCwrtR5VqRdORMraODeePNa /Uq85Lrjgn/LElIck6ES4caqzvOWJSWnozJ9PETkQHHJwnMneOkIV+AvQk27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEbF01/xezenYfOpwk/45EDPv4IEwHwYDVR0j BBgwFoAUWNfcUw87pKzQSIBiFw4VgbZ9YeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhM2EzOS1lMGVjLTRmYzEtOWI1NC0zNTNlMDdmMDA1ZGQvMC81OEQ3REM1MzBG M0JBNEFDRDA0ODgwNjIxNzBFMTU4MUI2N0Q2MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFCNjdE NjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1 ODFCNjdENjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfqypKaiatk0KNKBIaOhY8g9x7SdAtzGJhK qgdewVEzphXXnU4jPXrvquqnd/W5qtfIx56nHOXaceYl5gQQXkSKFpi0pbJX1XEP tUS/7Cx699hHLyiFfIrRxP3N3PuqBWMi0IiGSz/0s+MZICtV+T1Y2wi/RyVZc/Es CQD4VTR7dXAVPbYV9BfPV0+GnWchLgxF+BP3Yx3y6ctPfmHBAdZjRfZjAOO70FKo O8hPfFLsaZJH2KKvzMIEc3VPYo3HrlU12sSwvsDm49a6MEvyCCR612xrP0geSSJO UAYc6zMkOM6TNm62KJHmvtb2psPSPeXLroEhtmZxVt//jAu4r40= -----END CERTIFICATE-----Generated at Thu May 30 01:36:07 2024 by rpki-client on console-ams.rpki-client.org