$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: skSFBHZ8UIsXC7b0tQFkd/WiGCAHQAcpPRvIQDgHOks= Subject key identifier: C7:71:76:C4:BE:FB:D3:47:6C:0B:FF:64:47:D3:1E:E2:61:C3:B4:57 Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 76BB4B771E482977CB15F0A7A344E71A754D5198 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 012D Signing time: Wed 29 May 2024 07:51:22 +0000 Manifest this update: Wed 29 May 2024 07:46:22 +0000 Manifest next update: Sat 01 Jun 2024 15:37:22 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: I/cMPFxj34VFKVue+wao2sB0ZDoSCE5sluwEPZNfscA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:bb:4b:77:1e:48:29:77:cb:15:f0:a7:a3:44:e7:1a:75:4d:51:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: May 29 07:46:22 2024 GMT Not After : Jun 1 15:37:22 2024 GMT Subject: CN=C77176C4BEFBD3476C0BFF6447D31EE261C3B457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a1:da:26:f9:8b:1a:e0:2e:70:56:7b:ec:a4: 83:cb:3f:3e:0b:42:0b:84:e5:48:ae:2d:56:69:60: 4d:61:33:ee:4b:39:ad:dd:18:8c:16:c3:28:c6:73: fe:16:1a:58:39:cb:5f:ee:cd:53:97:7e:50:8c:10: 07:13:14:e6:11:5c:ab:ec:f6:f1:e8:8d:0c:29:b6: bb:1e:28:e7:11:d3:83:6e:3e:09:a4:0c:b8:61:00: 8f:49:35:ab:47:76:d5:cf:41:83:8c:ed:02:90:fc: b0:d7:61:a7:2c:4d:51:70:e5:7c:57:3f:29:f0:53: 63:6f:6d:df:d5:af:ef:76:64:48:bc:35:5e:cd:a1: 4b:2a:25:14:71:4e:d7:10:38:bb:3d:62:02:26:95: d7:5c:67:2a:40:d6:63:5b:5d:f7:32:2e:4c:99:b9: a9:de:97:55:aa:cc:0e:1b:5a:b6:c2:30:9c:5f:33: 0d:e0:58:16:87:b4:8d:46:66:55:62:96:14:6d:d8: b3:c5:ef:2a:f8:77:0a:d7:c8:d9:0a:c3:de:a3:a2: 52:72:ed:f1:1b:c6:aa:bc:3b:b3:fd:b7:c1:08:5e: a9:49:fc:f3:08:6c:87:95:47:44:e7:ba:3c:e5:41: 71:e3:62:84:5e:84:e3:6d:d9:d3:f6:1e:18:d2:79: a9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:71:76:C4:BE:FB:D3:47:6C:0B:FF:64:47:D3:1E:E2:61:C3:B4:57 X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:93:aa:94:9e:13:d9:d7:23:80:cb:0d:1d:41:13:d1:92:bd: a0:f8:db:99:9a:ee:57:ed:38:d7:95:d3:31:a9:28:23:f4:0a: 9b:7f:51:1a:bc:7a:e5:a5:c6:db:fa:45:f4:83:53:87:a6:4a: 25:90:aa:b4:f4:b4:c7:b8:89:db:b8:84:a3:14:cb:4c:df:53: 92:51:53:d8:09:eb:fa:f6:9f:07:df:05:50:60:a1:35:f1:8d: 3a:b0:44:ad:25:b7:32:b3:19:66:94:49:3d:e6:d6:a9:3b:e1: a6:3f:06:da:6c:3e:cc:75:5d:a6:7f:9c:1b:8b:f5:b2:5b:49: 0b:b5:69:bf:b3:68:02:94:46:fb:c0:af:83:14:49:7c:d2:ef: 69:17:d8:01:bd:0b:12:a4:7c:c7:74:82:01:8b:bf:7d:f2:f9: 82:e4:4a:17:c9:9a:1c:3e:a7:17:24:de:5a:6c:bc:9a:69:9b: 77:5a:0c:a8:70:b7:13:f4:e4:fb:a9:b3:3d:31:f8:ff:90:2e: 97:8f:d3:a1:ca:2c:bf:c2:a8:2f:89:a4:21:f1:52:66:a4:02: 3e:27:0b:c6:39:f6:1b:95:8b:82:20:a1:62:f7:94:c2:0f:f3: a3:63:e1:60:48:d2:ee:d5:a8:6f:bc:75:d4:01:41:21:8c:a2: 48:a2:36:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdrtLdx5IKXfLFfCno0TnGnVNUZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNDA1MjkwNzQ2MjJaFw0yNDA2MDExNTM3MjJaMDMxMTAvBgNV BAMTKEM3NzE3NkM0QkVGQkQzNDc2QzBCRkY2NDQ3RDMxRUUyNjFDM0I0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtodom+Ysa4C5wVnvspIPLPz4L QguE5UiuLVZpYE1hM+5LOa3dGIwWwyjGc/4WGlg5y1/uzVOXflCMEAcTFOYRXKvs 9vHojQwptrseKOcR04NuPgmkDLhhAI9JNatHdtXPQYOM7QKQ/LDXYacsTVFw5XxX PynwU2Nvbd/Vr+92ZEi8NV7NoUsqJRRxTtcQOLs9YgImlddcZypA1mNbXfcyLkyZ uanel1WqzA4bWrbCMJxfMw3gWBaHtI1GZlVilhRt2LPF7yr4dwrXyNkKw96jolJy 7fEbxqq8O7P9t8EIXqlJ/PMIbIeVR0TnujzlQXHjYoRehONt2dP2HhjSealJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx3F2xL7700dsC/9kR9Me4mHDtFcwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmTqpSeE9nXI4DLDR1BE9GSvaD425ma7lft ONeV0zGpKCP0Cpt/URq8euWlxtv6RfSDU4emSiWQqrT0tMe4idu4hKMUy0zfU5JR U9gJ6/r2nwffBVBgoTXxjTqwRK0ltzKzGWaUST3m1qk74aY/BtpsPsx1XaZ/nBuL 9bJbSQu1ab+zaAKURvvAr4MUSXzS72kX2AG9CxKkfMd0ggGLv33y+YLkShfJmhw+ pxck3lpsvJppm3daDKhwtxP05Pupsz0x+P+QLpeP06HKLL/CqC+JpCHxUmakAj4n C8Y59huVi4IgoWL3lMIP86Nj4WBI0u7VqG+8ddQBQSGMokiiNmY= -----END CERTIFICATE-----Generated at Wed May 29 09:15:13 2024 by rpki-client on console-fra.rpki-client.org