$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: YSsDjutMGl1mULdrrg6XLlwInmBNxDSArOCHjhFo0+Y= Subject key identifier: C1:EE:2E:7C:9D:0A:1A:33:0B:D5:4F:28:F8:A5:AE:37:C6:07:F0:36 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 71B77B2B3913718667AC7C00CF27444C849006EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 015E Signing time: Sun 19 May 2024 05:31:30 +0000 Manifest this update: Sun 19 May 2024 05:26:30 +0000 Manifest next update: Wed 22 May 2024 12:21:30 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: cjquze5vy9OMCFqqHrYV1T03+MA5fGMGaShukD2D/nY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:b7:7b:2b:39:13:71:86:67:ac:7c:00:cf:27:44:4c:84:90:06:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: May 19 05:26:30 2024 GMT Not After : May 22 12:21:30 2024 GMT Subject: CN=C1EE2E7C9D0A1A330BD54F28F8A5AE37C607F036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:0f:89:ec:f2:9b:0f:00:35:92:af:55:37: 59:60:b7:bb:19:ce:f7:2f:62:2d:3d:0f:52:91:fa: 2e:6b:93:a0:3d:0f:b6:f9:a0:c9:7d:d8:59:c8:5a: b2:85:d8:c3:81:05:18:c6:e6:27:c4:01:ec:2e:b0: a8:14:5e:a1:95:37:6d:53:76:49:8a:95:d5:16:dc: 70:f2:83:76:a1:12:de:20:1b:54:9f:be:fb:c2:e2: 0a:5b:de:15:c1:a8:9c:31:46:f0:ec:38:44:ea:ef: 9b:7a:93:2f:c5:7a:5e:c2:c2:a8:c9:cd:8c:49:91: 2b:95:ab:6d:80:5a:70:20:02:2f:d8:c8:7f:3d:40: a2:1b:9d:1b:b8:b5:21:3e:68:d5:f9:16:2a:16:bf: 35:55:2e:c7:13:fc:63:8b:93:8e:c2:d7:e8:46:59: e0:eb:14:c6:9c:58:85:9c:a2:c1:dd:11:a3:27:25: 58:90:31:dc:4c:ab:b9:b9:c7:ff:fe:0f:27:b5:fb: 40:d9:31:2e:54:11:d6:b0:60:12:8c:05:0f:0e:3e: d3:12:28:f4:61:41:b5:c8:be:60:b7:49:f1:d4:3d: 6d:14:ea:39:13:0e:7f:e9:e4:ae:7a:54:58:ce:97: f0:88:f2:89:21:1e:63:2e:db:fe:2e:f3:5f:54:39: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EE:2E:7C:9D:0A:1A:33:0B:D5:4F:28:F8:A5:AE:37:C6:07:F0:36 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:f5:ff:37:81:0d:5b:c5:f5:bb:57:01:e8:b1:c6:b7:21:89: 01:13:86:10:52:c5:61:be:82:e6:39:49:05:77:a2:2b:8d:fa: 23:c8:7a:25:34:3d:49:70:ac:66:ef:5e:7b:cb:37:40:a9:38: 39:3f:57:1c:28:e3:9e:4a:7c:a5:75:d1:21:0c:dc:04:f8:8b: 1e:f3:85:3a:30:7e:06:cb:34:dd:1a:80:08:e9:e4:92:53:7d: 5d:49:6c:43:90:77:bd:07:e1:9e:69:3f:7c:cb:34:0e:2a:0f: af:97:3e:15:49:61:ea:ff:e6:51:fa:0b:ed:66:77:04:22:23: 0e:11:a1:fa:95:0e:a7:47:0a:7c:81:f1:21:0c:f4:99:59:9e: de:30:56:fb:1b:bc:aa:4c:a2:f9:1d:13:46:14:42:df:0f:49: 40:c3:cf:72:bc:c2:e7:a2:2d:2f:9d:43:29:05:1e:df:a9:7c: 1e:a6:79:87:df:5c:a8:0b:0a:83:8f:34:93:51:a2:9a:d4:6a: 66:39:42:e7:7a:76:bb:16:7c:a4:e8:30:79:33:17:7a:4f:ce: b3:02:37:f0:46:9c:af:5a:73:40:14:2b:28:37:d7:b2:9c:01: 5d:d3:60:ce:73:df:4f:7e:93:cb:97:ad:ed:31:69:be:05:31: 77:8d:c0:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcbd7KzkTcYZnrHwAzydETISQBu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNDA1MTkwNTI2MzBaFw0yNDA1MjIxMjIxMzBaMDMxMTAvBgNV BAMTKEMxRUUyRTdDOUQwQTFBMzMwQkQ1NEYyOEY4QTVBRTM3QzYwN0YwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNg+J7PKbDwA1kq9VN1lgt7sZ zvcvYi09D1KR+i5rk6A9D7b5oMl92FnIWrKF2MOBBRjG5ifEAewusKgUXqGVN21T dkmKldUW3HDyg3ahEt4gG1SfvvvC4gpb3hXBqJwxRvDsOETq75t6ky/Fel7CwqjJ zYxJkSuVq22AWnAgAi/YyH89QKIbnRu4tSE+aNX5FioWvzVVLscT/GOLk47C1+hG WeDrFMacWIWcosHdEaMnJViQMdxMq7m5x//+Dye1+0DZMS5UEdawYBKMBQ8OPtMS KPRhQbXIvmC3SfHUPW0U6jkTDn/p5K56VFjOl/CI8okhHmMu2/4u819UOSk7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwe4ufJ0KGjML1U8o+KWuN8YH8DYwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALv1/zeBDVvF9btXAeixxrchiQEThhBSxWG+ guY5SQV3oiuN+iPIeiU0PUlwrGbvXnvLN0CpODk/Vxwo455KfKV10SEM3AT4ix7z hTowfgbLNN0agAjp5JJTfV1JbEOQd70H4Z5pP3zLNA4qD6+XPhVJYer/5lH6C+1m dwQiIw4RofqVDqdHCnyB8SEM9JlZnt4wVvsbvKpMovkdE0YUQt8PSUDDz3K8wuei LS+dQykFHt+pfB6meYffXKgLCoOPNJNRoprUamY5Qud6drsWfKToMHkzF3pPzrMC N/BGnK9ac0AUKyg317KcAV3TYM5z309+k8uXre0xab4FMXeNwHM= -----END CERTIFICATE-----Generated at Sun May 19 06:14:08 2024 by rpki-client on console-ams.rpki-client.org