$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: 1wY5M/Np4Q4vvUyDrkX1P09NljcRxBVARzao/r/jmc0= Subject key identifier: 60:AD:44:90:F9:61:A7:44:8F:B4:53:B3:F9:D5:78:67:51:E5:59:96 Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: 4FD0C2BB2A89A8140BC613B578AD3FE93CC7D214 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 038F Signing time: Sun 19 May 2024 21:10:02 +0000 Manifest this update: Sun 19 May 2024 21:05:02 +0000 Manifest next update: Thu 23 May 2024 09:07:02 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: dQX+c2/hnCUCfRLUvNt03LKaEcUPWLTLIvqovliy9hk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:d0:c2:bb:2a:89:a8:14:0b:c6:13:b5:78:ad:3f:e9:3c:c7:d2:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: May 19 21:05:02 2024 GMT Not After : May 23 09:07:02 2024 GMT Subject: CN=60AD4490F961A7448FB453B3F9D5786751E55996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:21:ef:0f:08:95:e2:88:4c:cd:11:11:22: 9e:97:bb:88:36:f8:b2:42:41:84:29:30:f9:50:42: d4:b3:ea:7a:7b:b3:53:c2:cc:0b:cf:9f:00:c0:3c: d1:02:61:fa:1e:18:6d:77:4b:43:95:8b:a7:2a:a5: b3:a8:1e:d9:6c:98:84:9a:84:a0:b0:68:60:6a:15: 33:70:13:54:9b:41:f4:c6:ff:b6:4e:0c:5b:56:a0: bc:2b:c4:96:68:97:89:c4:32:6c:19:c9:59:50:ec: 1c:3e:4c:c3:61:aa:59:91:73:54:af:5e:34:8d:11: 1e:77:86:c5:13:ce:ba:5b:39:be:16:cb:7e:34:01: 87:15:a2:05:e8:e9:3a:7f:ff:ec:b8:00:10:bb:bc: 72:10:43:2a:8c:a9:64:72:2e:58:c7:e4:2f:c5:54: d9:98:88:42:6f:65:23:b2:70:6d:11:34:bc:58:ce: 65:93:20:af:94:08:7a:9f:e0:ba:7a:0f:cf:be:98: 82:52:a0:97:f8:11:48:61:87:06:84:42:70:f3:43: 95:c0:3b:95:77:67:07:03:10:e7:cc:96:e6:00:63: 2d:58:54:15:c1:28:cd:7a:95:d9:5c:60:7d:72:9e: a0:d1:62:14:5d:2e:ed:af:6d:1f:80:36:2f:2f:bb: 28:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AD:44:90:F9:61:A7:44:8F:B4:53:B3:F9:D5:78:67:51:E5:59:96 X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:52:42:32:bc:55:ca:06:cc:2d:3f:92:fa:f1:51:8e:d6:d2: f6:d3:b1:80:b9:45:97:91:c2:c7:6a:0c:11:79:b7:aa:2c:2c: 6a:82:67:a4:41:e1:c0:07:4b:46:29:45:a2:fd:55:c6:67:d2: b1:63:04:6d:61:73:59:7d:cb:3e:e4:d4:8f:7a:f8:58:01:9d: 47:a1:e4:72:2e:e6:1f:5a:bb:c1:97:e7:33:23:1a:74:e8:3f: 68:c5:53:f7:cc:19:06:14:e6:e2:e6:61:1d:9a:78:8f:71:dd: f3:bc:27:2b:10:11:f8:1f:35:b0:b1:8a:28:45:5e:42:35:8c: 75:7e:7b:25:cd:9d:f6:1c:92:f5:e3:cb:3c:a9:9a:50:e1:4b: 96:6b:3a:eb:3e:89:84:e5:0d:6a:8f:56:ba:65:be:c4:73:0f: f4:b3:05:c6:3e:aa:ba:19:8a:03:f5:1a:f4:2d:67:36:b7:61: a2:56:eb:8c:a0:58:d3:e1:b1:34:38:a2:09:fb:9d:09:f0:5a: c2:5b:d8:1c:2b:48:04:fb:8b:cb:fc:09:39:b4:bf:72:bb:26: 1f:53:d5:8f:d5:2a:c5:94:f0:eb:25:68:dc:c9:27:82:f3:81: 1a:b9:c2:1b:f3:38:ba:e7:2d:da:a9:96:70:49:f2:15:6c:98: 6c:37:af:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT9DCuyqJqBQLxhO1eK0/6TzH0hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNDA1MTkyMTA1MDJaFw0yNDA1MjMwOTA3MDJaMDMxMTAvBgNV BAMTKDYwQUQ0NDkwRjk2MUE3NDQ4RkI0NTNCM0Y5RDU3ODY3NTFFNTU5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqyHvDwiV4ohMzRERIp6Xu4g2 +LJCQYQpMPlQQtSz6np7s1PCzAvPnwDAPNECYfoeGG13S0OVi6cqpbOoHtlsmISa hKCwaGBqFTNwE1SbQfTG/7ZODFtWoLwrxJZol4nEMmwZyVlQ7Bw+TMNhqlmRc1Sv XjSNER53hsUTzrpbOb4Wy340AYcVogXo6Tp//+y4ABC7vHIQQyqMqWRyLljH5C/F VNmYiEJvZSOycG0RNLxYzmWTIK+UCHqf4Lp6D8++mIJSoJf4EUhhhwaEQnDzQ5XA O5V3ZwcDEOfMluYAYy1YVBXBKM16ldlcYH1ynqDRYhRdLu2vbR+ANi8vuyhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYK1EkPlhp0SPtFOz+dV4Z1HlWZYwHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxSQjK8VcoGzC0/kvrxUY7W0vbTsYC5RZeR wsdqDBF5t6osLGqCZ6RB4cAHS0YpRaL9VcZn0rFjBG1hc1l9yz7k1I96+FgBnUeh 5HIu5h9au8GX5zMjGnToP2jFU/fMGQYU5uLmYR2aeI9x3fO8JysQEfgfNbCxiihF XkI1jHV+eyXNnfYckvXjyzypmlDhS5ZrOus+iYTlDWqPVrplvsRzD/SzBcY+qroZ igP1GvQtZza3YaJW64ygWNPhsTQ4ogn7nQnwWsJb2BwrSAT7i8v8CTm0v3K7Jh9T 1Y/VKsWU8OslaNzJJ4LzgRq5whvzOLrnLdqplnBJ8hVsmGw3r0s= -----END CERTIFICATE-----Generated at Sun May 19 22:11:05 2024 by rpki-client on console-fra.rpki-client.org