$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: SbbATPy6MPLe9QvMjjNIhwuRRblFGunmi8v5d7rlBlc= Subject key identifier: E8:44:2B:99:58:3B:54:BE:EB:3A:04:14:A6:63:DF:46:11:59:25:86 Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 2E1E4A7352680836E9941855FEE9FC3E173BC154 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: BB Signing time: Thu 30 May 2024 00:01:07 +0000 Manifest this update: Wed 29 May 2024 23:56:07 +0000 Manifest next update: Sun 02 Jun 2024 04:38:07 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: 8CEJYwp+vICvrC97+RAjs4aghq3KWGfluUiHxK1HGFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 01:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:1e:4a:73:52:68:08:36:e9:94:18:55:fe:e9:fc:3e:17:3b:c1:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: May 29 23:56:07 2024 GMT Not After : Jun 2 04:38:07 2024 GMT Subject: CN=E8442B99583B54BEEB3A0414A663DF4611592586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:34:33:46:25:ab:ca:98:da:dd:20:9a:a6:12: 8c:38:a1:f4:a7:8f:d9:24:18:8a:57:32:90:bf:7d: e8:9f:6c:0a:b5:8d:81:cf:97:73:81:e8:4e:df:ec: 50:ea:02:5c:31:34:9b:cd:e5:41:1f:08:84:a2:5c: 7b:f7:72:89:ee:04:d4:83:35:cf:82:5f:d7:57:fd: aa:dd:be:e4:ad:85:82:ae:17:28:67:97:d1:ab:c6: 4a:46:df:24:9f:96:ae:44:4c:0c:34:62:09:90:ec: 01:87:d0:73:32:ff:7c:ea:e8:dd:22:d1:37:21:50: eb:ce:90:2d:66:b2:f2:72:18:24:01:2a:fa:bc:4a: f7:a3:97:72:fa:44:aa:45:c2:95:1c:8a:7e:1f:43: fb:3d:96:39:89:a8:d1:d7:46:ab:42:d8:58:5a:bd: 5b:05:97:4e:fe:72:76:4b:34:b3:9f:7b:e0:c4:a5: 83:a3:14:ce:0b:38:ed:0d:8a:05:2c:32:67:cb:0e: 83:14:c3:0f:1f:66:ea:3a:6f:6b:77:84:15:e9:f3: 37:d0:f3:19:96:b2:b6:20:c6:63:08:5c:04:d5:3d: 0e:25:9c:70:6f:df:8c:8b:89:d5:70:30:f0:f6:39: 22:51:85:b3:e0:dd:19:fa:b1:15:62:13:fb:38:35: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:44:2B:99:58:3B:54:BE:EB:3A:04:14:A6:63:DF:46:11:59:25:86 X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:41:bd:b6:ae:d1:2f:8b:2c:43:3f:73:b3:0d:a3:85:b3:9f: 16:39:65:b2:62:0e:38:0e:c3:2a:0e:09:ae:bb:63:4c:4d:26: d8:12:40:d7:59:29:a6:b8:fa:54:61:7e:34:7c:bc:89:03:83: ee:e5:df:4d:d6:ad:85:a5:e4:7b:2f:fe:d6:d7:2a:f1:0f:34: e1:ba:d0:ef:42:2f:c1:e4:ea:08:6a:e2:7d:d0:b4:b0:cb:c3: 41:05:8b:6a:21:c2:08:97:69:64:33:8b:8a:04:70:0e:81:89: 03:fe:9d:fc:b6:3f:f5:6c:6d:71:87:e1:d2:d8:96:63:76:27: 5a:74:ec:8c:33:20:9b:d4:02:8e:ca:9a:4b:b3:4d:53:ff:1a: 47:41:fc:41:cc:ae:a4:1e:28:f3:e6:b0:30:ce:2e:49:3f:7d: 33:b8:fd:21:17:77:9f:65:bd:ad:18:30:95:75:44:7a:6a:96: f8:15:a4:f8:56:09:2b:c7:86:06:89:3c:62:5d:43:d4:c1:21: 52:bc:a6:1a:44:d9:52:b0:81:6f:f7:29:31:c2:84:91:ba:bb: b5:5e:f9:5a:e6:61:63:43:c9:ba:94:0f:7d:4e:44:7b:0b:df: 98:57:c1:2c:37:b5:20:51:8b:db:92:86:0d:6b:37:a9:4d:4b: 83:f8:b1:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULh5Kc1JoCDbplBhV/un8Phc7wVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNDA1MjkyMzU2MDdaFw0yNDA2MDIwNDM4MDdaMDMxMTAvBgNV BAMTKEU4NDQyQjk5NTgzQjU0QkVFQjNBMDQxNEE2NjNERjQ2MTE1OTI1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgNDNGJavKmNrdIJqmEow4ofSn j9kkGIpXMpC/feifbAq1jYHPl3OB6E7f7FDqAlwxNJvN5UEfCISiXHv3conuBNSD Nc+CX9dX/ardvuSthYKuFyhnl9GrxkpG3ySflq5ETAw0YgmQ7AGH0HMy/3zq6N0i 0TchUOvOkC1msvJyGCQBKvq8Svejl3L6RKpFwpUcin4fQ/s9ljmJqNHXRqtC2Fha vVsFl07+cnZLNLOfe+DEpYOjFM4LOO0NigUsMmfLDoMUww8fZuo6b2t3hBXp8zfQ 8xmWsrYgxmMIXATVPQ4lnHBv34yLidVwMPD2OSJRhbPg3Rn6sRViE/s4NQ1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6EQrmVg7VL7rOgQUpmPfRhFZJYYwHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVBvbau0S+LLEM/c7MNo4WznxY5ZbJiDjgO wyoOCa67Y0xNJtgSQNdZKaa4+lRhfjR8vIkDg+7l303WrYWl5Hsv/tbXKvEPNOG6 0O9CL8Hk6ghq4n3QtLDLw0EFi2ohwgiXaWQzi4oEcA6BiQP+nfy2P/VsbXGH4dLY lmN2J1p07IwzIJvUAo7KmkuzTVP/GkdB/EHMrqQeKPPmsDDOLkk/fTO4/SEXd59l va0YMJV1RHpqlvgVpPhWCSvHhgaJPGJdQ9TBIVK8phpE2VKwgW/3KTHChJG6u7Ve +VrmYWNDybqUD31ORHsL35hXwSw3tSBRi9uShg1rN6lNS4P4sVA= -----END CERTIFICATE-----Generated at Thu May 30 01:36:29 2024 by rpki-client on console-ams.rpki-client.org