$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: TBBSmOD8823ZDWjgzyoMggERV0OWBk9l7R71W6XWNug= Subject key identifier: FE:DA:41:55:04:41:68:44:08:6C:06:25:A0:23:79:BE:22:1A:64:5F Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 1010BB76F8978E1A4DCB29F540DF59BE9E379A4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: 0A Signing time: Thu 27 Jun 2024 00:21:15 +0000 Manifest this update: Thu 27 Jun 2024 00:16:15 +0000 Manifest next update: Sun 30 Jun 2024 01:55:15 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: V63GucJqgS8D8bdkjdnpGev/KhPT1vVTQC5Taxv4yQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 30 Jun 2024 01:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:10:bb:76:f8:97:8e:1a:4d:cb:29:f5:40:df:59:be:9e:37:9a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Jun 27 00:16:15 2024 GMT Not After : Jun 30 01:55:15 2024 GMT Subject: CN=FEDA415504416844086C0625A02379BE221A645F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:d1:45:f9:f6:20:d2:d4:29:1c:0e:f6:25: f3:b1:48:b1:05:c5:80:76:74:e5:8c:5d:8f:8e:98: cc:af:94:32:36:17:57:15:2a:b7:03:e8:09:39:5e: 0a:9a:e1:8a:81:ed:7e:64:04:51:dd:08:7e:34:34: 8e:bd:a4:41:be:b5:89:3b:60:f7:c6:8a:e7:03:e1: cd:99:df:fe:2c:6f:a3:a6:3d:bf:ef:70:85:62:a1: 45:70:53:45:e3:1e:9d:ba:e7:2a:8c:59:a8:e6:27: 9b:59:83:ed:36:f2:10:4c:30:b9:a6:08:7b:b1:f7: 8b:32:35:a3:38:30:d4:ea:b1:ec:30:3a:04:9b:80: 96:49:43:27:b1:65:8e:19:d1:89:5a:4a:be:58:80: b0:ba:05:a5:df:c1:4e:d9:c6:58:77:25:a4:f4:1d: bb:df:a4:a6:b4:2d:a2:3f:77:1f:b5:5c:0d:80:f7: 5f:83:4a:83:3b:85:03:2c:10:0f:94:23:ae:a9:87: 7f:72:de:42:d6:a9:24:4a:4c:41:61:84:4b:2c:9f: 5d:54:e8:26:85:6a:06:ac:58:2e:28:cc:d2:30:11: a9:6f:c3:06:1c:32:69:c8:f5:00:88:a3:c5:bf:ce: 26:b3:14:94:c9:25:22:bd:84:9c:3f:6c:9c:ce:68: dc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DA:41:55:04:41:68:44:08:6C:06:25:A0:23:79:BE:22:1A:64:5F X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:bc:bf:e6:ef:3c:18:5f:17:c8:fe:90:65:b3:0b:46:cb:48: 4e:70:2b:90:2e:5f:d9:92:1c:f5:a6:36:6c:94:1c:bf:5e:7c: 49:a0:5b:65:29:4a:b3:2c:9d:95:c1:9c:9b:da:c0:18:3c:4b: 3e:f1:b4:92:14:83:1e:48:17:24:a0:08:26:7d:d6:b3:5e:f1: a2:91:17:36:fa:bf:0d:b3:64:8a:14:b7:e7:57:b3:46:74:1c: d7:6f:0b:3c:9d:4e:ce:75:97:06:1a:37:ad:af:9a:95:86:6e: 3c:88:67:7b:f3:7d:45:67:01:30:e2:42:57:56:03:b3:7f:9f: 37:80:4c:9d:1a:16:a5:f7:d6:df:57:c5:0e:0d:77:05:eb:e8: fc:cb:1f:54:fb:0f:8b:ca:d7:b9:b9:a0:4c:cb:ae:42:6a:fc: 1b:a8:e1:11:a7:b3:1a:df:16:aa:3b:b7:d7:28:f9:b7:69:66: b4:95:17:ec:9e:13:a3:a8:64:96:71:b9:00:50:dd:c3:cc:2a: 90:35:65:7e:db:28:e4:fa:b3:ce:78:71:4a:6f:a4:e7:b0:a5: 2f:7c:71:f7:56:45:0e:f8:7a:78:92:e1:98:7a:47:60:f6:f3: d3:76:7c:89:4d:12:23:bc:76:e9:bf:dc:2c:72:1a:01:49:55: 0d:6d:4f:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBC7dviXjhpNyyn1QN9Zvp43mk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNDA2MjcwMDE2MTVaFw0yNDA2MzAwMTU1MTVaMDMxMTAvBgNV BAMTKEZFREE0MTU1MDQ0MTY4NDQwODZDMDYyNUEwMjM3OUJFMjIxQTY0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk8dFF+fYg0tQpHA72JfOxSLEF xYB2dOWMXY+OmMyvlDI2F1cVKrcD6Ak5Xgqa4YqB7X5kBFHdCH40NI69pEG+tYk7 YPfGiucD4c2Z3/4sb6OmPb/vcIVioUVwU0XjHp265yqMWajmJ5tZg+028hBMMLmm CHux94syNaM4MNTqsewwOgSbgJZJQyexZY4Z0YlaSr5YgLC6BaXfwU7Zxlh3JaT0 HbvfpKa0LaI/dx+1XA2A91+DSoM7hQMsEA+UI66ph39y3kLWqSRKTEFhhEssn11U 6CaFagasWC4ozNIwEalvwwYcMmnI9QCIo8W/ziazFJTJJSK9hJw/bJzOaNxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/tpBVQRBaEQIbAYloCN5viIaZF8wHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABa8v+bvPBhfF8j+kGWzC0bLSE5wK5AuX9mS HPWmNmyUHL9efEmgW2UpSrMsnZXBnJvawBg8Sz7xtJIUgx5IFySgCCZ91rNe8aKR Fzb6vw2zZIoUt+dXs0Z0HNdvCzydTs51lwYaN62vmpWGbjyIZ3vzfUVnATDiQldW A7N/nzeATJ0aFqX31t9XxQ4NdwXr6PzLH1T7D4vK17m5oEzLrkJq/Buo4RGnsxrf Fqo7t9co+bdpZrSVF+yeE6OoZJZxuQBQ3cPMKpA1ZX7bKOT6s854cUpvpOewpS98 cfdWRQ74eniS4Zh6R2D289N2fIlNEiO8dum/3CxyGgFJVQ1tT9w= -----END CERTIFICATE-----Generated at Thu Jun 27 01:20:31 2024 by rpki-client on console-fra.rpki-client.org