$ rpki-client -vvf repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft File: 71876CD3DD087E9543A347F614A4D24A87A40F95.mft (raw, json) Hash identifier: rNcRaL9LLpcDdmv9EmwYQrcqOhrNBuBPEAxfdhfVj/M= Subject key identifier: FF:71:AC:F1:DD:2F:F8:B8:99:6D:BF:AC:E5:3E:48:EA:B3:36:4C:B0 Authority key identifier: 71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 Certificate issuer: /CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Certificate serial: 5E3EEBA1B1CE1A0F5ABDF4BA059BF9D3D3CCC9B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft Manifest number: DC Signing time: Sun 19 May 2024 11:00:41 +0000 Manifest this update: Sun 19 May 2024 10:55:41 +0000 Manifest next update: Wed 22 May 2024 16:45:41 +0000 Files and hashes: 1: 71876CD3DD087E9543A347F614A4D24A87A40F95.crl (hash: /IACIImXA1M5kcUM0KMltwNNsFn0s2idVGsIvCI2QWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3e:eb:a1:b1:ce:1a:0f:5a:bd:f4:ba:05:9b:f9:d3:d3:cc:c9:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71876CD3DD087E9543A347F614A4D24A87A40F95 Validity Not Before: May 19 10:55:41 2024 GMT Not After : May 22 16:45:41 2024 GMT Subject: CN=FF71ACF1DD2FF8B8996DBFACE53E48EAB3364CB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:29:ce:66:21:b9:64:35:1a:7c:8f:1c:f5:69: 15:a3:3d:5d:58:56:bf:bc:b7:70:a4:9a:7e:4a:de: 49:51:60:f7:51:63:82:5f:6c:50:e0:3a:9f:01:cc: c5:77:36:62:78:5e:80:5c:c6:f3:67:d3:c3:7f:57: 47:20:3d:22:79:5c:52:7f:b5:32:4f:98:90:a6:b5: 9a:36:9b:1d:d4:60:1b:82:58:da:1e:c1:33:92:17: b9:90:dd:09:72:5d:6c:3f:d3:d1:5a:58:ce:47:eb: f2:15:cf:71:53:97:f5:ad:c1:29:80:3e:64:b3:b4: 3f:2d:7b:fb:00:59:ea:ee:bc:d6:da:d4:05:b8:67: 81:7e:40:25:89:dd:97:4c:06:b7:61:9d:b5:f8:2c: b3:ef:09:3f:78:7a:28:4b:5c:8c:cc:69:34:1c:12: 41:70:e0:c5:33:42:36:94:37:ac:33:f2:52:20:62: 1f:27:95:3c:43:08:3a:54:29:81:9a:6f:1e:4f:e5: 71:dc:31:68:30:8f:29:83:c5:6a:2c:73:9b:0a:14: ff:3a:03:60:06:3e:5c:04:11:af:71:d1:fa:02:ba: d3:89:cb:3f:db:a6:8f:f9:17:a1:30:10:47:f4:45: 47:42:6c:b6:27:c6:c0:8c:c8:1a:77:cf:fd:05:52: d3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:71:AC:F1:DD:2F:F8:B8:99:6D:BF:AC:E5:3E:48:EA:B3:36:4C:B0 X509v3 Authority Key Identifier: keyid:71:87:6C:D3:DD:08:7E:95:43:A3:47:F6:14:A4:D2:4A:87:A4:0F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71876CD3DD087E9543A347F614A4D24A87A40F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5deca82-89ab-4582-8e82-8ec8a51fec42/0/71876CD3DD087E9543A347F614A4D24A87A40F95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:84:10:8b:6f:46:63:c2:31:60:d5:08:69:ce:a8:d3:b4:71: 4e:e9:c5:b6:d1:3f:d6:b3:cb:b8:da:2b:50:6f:bc:89:16:64: 6a:5a:1e:34:bc:74:88:cf:50:92:de:34:d8:c3:9d:58:89:52: 11:4a:71:aa:88:dc:0b:ec:09:6f:e7:7e:e9:11:0f:15:8c:45: 88:a4:54:69:e6:fa:b4:ba:52:fb:16:d4:1e:21:de:5f:9a:a6: 19:7e:6c:c9:27:a2:26:31:99:09:ac:2d:43:50:2b:50:48:32: b2:bf:f4:ab:e3:5d:1a:74:ba:04:a1:c5:0a:22:96:be:fd:40: b4:34:bb:61:fb:4a:e0:0e:4a:92:bb:cd:51:1c:d8:06:6c:09: 9b:64:a7:52:1e:eb:64:29:cd:67:22:8f:a4:e2:35:d8:3a:0d: 15:6e:67:65:eb:fd:fc:c4:ee:25:64:63:34:ce:a4:d1:1f:09: 61:65:90:b5:35:02:7a:d5:56:64:4d:61:4d:a7:4a:5f:f2:99: f6:22:3e:ac:44:36:3a:d6:18:d3:af:88:01:c9:63:e6:9c:63: 1e:03:12:8e:09:82:f3:0e:51:1e:ef:c5:28:0a:b4:22:a0:71: af:1c:98:84:29:83:9b:bc:b2:a2:2c:de:23:88:a0:bc:05:c8: 5e:f9:18:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXj7robHOGg9avfS6BZv509PMybYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4 N0E0MEY5NTAeFw0yNDA1MTkxMDU1NDFaFw0yNDA1MjIxNjQ1NDFaMDMxMTAvBgNV BAMTKEZGNzFBQ0YxREQyRkY4Qjg5OTZEQkZBQ0U1M0U0OEVBQjMzNjRDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRKc5mIblkNRp8jxz1aRWjPV1Y Vr+8t3Ckmn5K3klRYPdRY4JfbFDgOp8BzMV3NmJ4XoBcxvNn08N/V0cgPSJ5XFJ/ tTJPmJCmtZo2mx3UYBuCWNoewTOSF7mQ3QlyXWw/09FaWM5H6/IVz3FTl/WtwSmA PmSztD8te/sAWeruvNba1AW4Z4F+QCWJ3ZdMBrdhnbX4LLPvCT94eihLXIzMaTQc EkFw4MUzQjaUN6wz8lIgYh8nlTxDCDpUKYGabx5P5XHcMWgwjymDxWosc5sKFP86 A2AGPlwEEa9x0foCutOJyz/bpo/5F6EwEEf0RUdCbLYnxsCMyBp3z/0FUtO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/3Gs8d0v+LiZbb+s5T5I6rM2TLAwHwYDVR0j BBgwFoAUcYds090IfpVDo0f2FKTSSoekD5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWRlY2E4Mi04OWFiLTQ1ODItOGU4Mi04ZWM4YTUxZmVjNDIvMC83MTg3NkNEM0RE MDg3RTk1NDNBMzQ3RjYxNEE0RDI0QTg3QTQwRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQyNEE4N0E0 MEY5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVkZWNhODItODlhYi00NTgyLThl ODItOGVjOGE1MWZlYzQyLzAvNzE4NzZDRDNERDA4N0U5NTQzQTM0N0Y2MTRBNEQy NEE4N0E0MEY5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWEEItvRmPCMWDVCGnOqNO0cU7pxbbRP9az y7jaK1BvvIkWZGpaHjS8dIjPUJLeNNjDnViJUhFKcaqI3AvsCW/nfukRDxWMRYik VGnm+rS6UvsW1B4h3l+aphl+bMknoiYxmQmsLUNQK1BIMrK/9KvjXRp0ugShxQoi lr79QLQ0u2H7SuAOSpK7zVEc2AZsCZtkp1Ie62QpzWcij6TiNdg6DRVuZ2Xr/fzE 7iVkYzTOpNEfCWFlkLU1AnrVVmRNYU2nSl/ymfYiPqxENjrWGNOviAHJY+acYx4D Eo4JgvMOUR7vxSgKtCKgca8cmIQpg5u8sqIs3iOIoLwFyF75GAU= -----END CERTIFICATE-----Generated at Sun May 19 12:34:32 2024 by rpki-client on console-ams.rpki-client.org