$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft File: 12345F115AC4B62A51F5274C54C81E86463BD0BA.mft (raw, json) Hash identifier: llkixrIGrf1LQ57Eqvl5H4DKy6gsoeAHfUJvEwo0hVo= Subject key identifier: 37:1A:88:60:E6:4E:0F:53:9C:3F:A0:FA:20:53:73:38:DC:A1:74:7D Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 7951AC0503DF8579FF12F6E5C426CF15899DCCF3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft Manifest number: 0436 Signing time: Fri 24 May 2024 06:50:31 +0000 Manifest this update: Fri 24 May 2024 06:45:31 +0000 Manifest next update: Mon 27 May 2024 09:35:31 +0000 Files and hashes: 1: 12345F115AC4B62A51F5274C54C81E86463BD0BA.crl (hash: 2cIyPdjKsO/E55isPSutAJM6ZgtpkG7u4niZaK5bpow=) 2: 55E79C1D60B12E58D121B265CA67C0BD60D4CF92.cer (hash: FCwchNTIXQpDSuD5+meN7UoYwGYoBfy2iyvxtholuYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 09:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:51:ac:05:03:df:85:79:ff:12:f6:e5:c4:26:cf:15:89:9d:cc:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: May 24 06:45:31 2024 GMT Not After : May 27 09:35:31 2024 GMT Subject: CN=371A8860E64E0F539C3FA0FA20537338DCA1747D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:8d:91:fb:4d:bc:36:e4:6a:e8:f3:e3:a1: d7:69:88:d4:42:ac:72:49:97:72:2f:a8:ce:8c:f1: bb:58:15:73:0e:88:e1:c4:67:84:7c:f4:70:69:bb: d9:d6:a8:36:64:d4:10:f1:c3:0e:6f:6e:a6:e3:b5: a5:b6:0a:04:87:9a:a1:6f:78:a4:5f:31:ab:83:9c: 10:d3:f6:6e:b9:44:17:30:41:af:e6:c2:98:e8:c9: e0:7f:f3:f2:dc:45:56:74:08:b2:0f:b2:a8:34:fd: 65:7f:02:fd:3b:18:9d:ba:d3:8d:fb:78:39:1b:46: 4a:b2:50:a1:83:7d:52:cd:0a:31:95:da:62:ec:1b: 79:6a:8c:26:93:ef:91:fd:4c:70:0a:96:e4:15:37: 0c:81:ed:37:37:d9:2e:a5:89:59:59:31:2e:93:94: 3d:7c:69:29:1e:cd:2b:cd:d6:52:04:70:26:a4:c7: 99:43:7e:05:46:bd:4d:5a:ad:8f:42:22:58:0d:3b: 33:34:03:c1:8b:91:f7:bd:88:a8:44:b0:ea:b4:f6: dc:e0:aa:95:ab:d5:d0:43:25:ae:47:80:dd:45:b9: 54:27:c0:76:ac:ba:28:ea:08:61:49:08:6c:4a:93: a2:9a:32:50:9e:01:be:91:2e:4f:9d:e0:4b:ea:36: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1A:88:60:E6:4E:0F:53:9C:3F:A0:FA:20:53:73:38:DC:A1:74:7D X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:bb:71:79:3a:ac:e9:86:2c:2e:e6:a4:d3:fe:b6:78:29:bd: 91:ee:65:eb:77:e0:4e:f1:7b:a9:96:e1:a1:a8:fe:c4:85:04: f2:a9:a1:a3:27:41:04:d3:93:8f:11:75:5b:8f:9f:81:d7:35: a2:4a:02:fd:3e:7c:eb:59:6b:a8:99:24:0e:8c:b0:ff:64:0e: d6:96:8d:af:22:9e:85:28:6f:6c:f3:17:1e:f5:0f:4c:ed:c1: 46:50:78:72:a3:81:a5:ec:4e:1f:5f:b1:9a:f1:ef:c2:16:dd: a9:7b:5d:c6:aa:ab:e1:ab:f5:b2:3f:f3:ce:f3:0a:5a:d8:0f: cb:3b:7f:cb:77:6a:78:f4:c1:cf:ef:68:a5:41:de:e2:30:3c: 02:05:dd:7f:1c:ef:88:5f:13:7d:eb:07:37:1f:2f:1d:a8:f3: 04:6b:f2:00:54:b3:28:7b:dc:7d:5e:0b:38:f0:b4:a4:c1:c7: dc:05:85:57:07:27:c1:8f:b4:1a:ff:e8:0d:fa:46:23:9f:f7: ca:19:65:1e:58:fd:4f:e1:70:c1:51:ef:b5:f4:24:9f:65:8c: 07:29:71:33:e4:cc:b6:68:aa:f5:12:95:b6:a2:a6:43:73:e2: 4a:ad:eb:93:ef:4b:5a:eb:fa:df:fc:7c:99:35:d9:3e:b4:d4: d1:cc:d4:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUeVGsBQPfhXn/EvblxCbPFYmdzPMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI0MDUyNDA2NDUzMVoX DTI0MDUyNzA5MzUzMVowMzExMC8GA1UEAxMoMzcxQTg4NjBFNjRFMEY1MzlDM0ZB MEZBMjA1MzczMzhEQ0ExNzQ3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANijjZH7Tbw25Gro8+Oh12mI1EKsckmXci+ozozxu1gVcw6I4cRnhHz0cGm7 2daoNmTUEPHDDm9upuO1pbYKBIeaoW94pF8xq4OcENP2brlEFzBBr+bCmOjJ4H/z 8txFVnQIsg+yqDT9ZX8C/TsYnbrTjft4ORtGSrJQoYN9Us0KMZXaYuwbeWqMJpPv kf1McAqW5BU3DIHtNzfZLqWJWVkxLpOUPXxpKR7NK83WUgRwJqTHmUN+BUa9TVqt j0IiWA07MzQDwYuR972IqESw6rT23OCqlavV0EMlrkeA3UW5VCfAdqy6KOoIYUkI bEqTopoyUJ4BvpEuT53gS+o2mV8CAwEAAaOCAgkwggIFMB0GA1UdDgQWBBQ3Gohg 5k4PU5w/oPogU3M43KF0fTAfBgNVHSMEGDAWgBQSNF8RWsS2KlH1J0xUyB6GRjvQ ujAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVBQzRCNjJB NTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CMzIy QTVGNDFENjYxMUUyQTNGMjdGN0M3MkZEMUZGMi9FalJmRVZyRXRpcFI5U2RNVk1n ZWhrWTcwTG8uY2VyMHQGCCsGAQUFBwELBGgwZjBkBggrBgEFBQcwC4ZYcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMC8xMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2btxeTqs 6YYsLuak0/62eCm9ke5l63fgTvF7qZbhoaj+xIUE8qmhoydBBNOTjxF1W4+fgdc1 okoC/T5861lrqJkkDoyw/2QO1paNryKehShvbPMXHvUPTO3BRlB4cqOBpexOH1+x mvHvwhbdqXtdxqqr4av1sj/zzvMKWtgPyzt/y3dqePTBz+9opUHe4jA8AgXdfxzv iF8TfesHNx8vHajzBGvyAFSzKHvcfV4LOPC0pMHH3AWFVwcnwY+0Gv/oDfpGI5/3 yhllHlj9T+FwwVHvtfQkn2WMBylxM+TMtmiq9RKVtqKmQ3PiSq3rk+9LWuv63/x8 mTXZPrTU0czUhA== -----END CERTIFICATE-----Generated at Fri May 24 07:26:11 2024 by rpki-client on console-fra.rpki-client.org