$ rpki-client -vvf repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft File: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft (raw, json) Hash identifier: t3VkzDAxMR7iNytxmaNUKNdACT+zQfb3q5g2B8iqynE= Subject key identifier: C1:49:F8:BC:7D:DD:70:16:B1:96:6F:07:73:44:2F:EC:CE:9F:B7:A1 Authority key identifier: 64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 Certificate issuer: /CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Certificate serial: 062AA16A3A86963050E4704E15F0CEC8E7513033 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft Manifest number: 42 Signing time: Sun 19 May 2024 11:20:50 +0000 Manifest this update: Sun 19 May 2024 11:15:50 +0000 Manifest next update: Wed 22 May 2024 21:06:50 +0000 Files and hashes: 1: 64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl (hash: zjWiDsfIPMvBxbNnWA9ItZmA9vYCxmI3F0T54XI87Is=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2a:a1:6a:3a:86:96:30:50:e4:70:4e:15:f0:ce:c8:e7:51:30:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64EB10DDE855CE764FFDFD8EFAE062A45060C522 Validity Not Before: May 19 11:15:50 2024 GMT Not After : May 22 21:06:50 2024 GMT Subject: CN=C149F8BC7DDD7016B1966F0773442FECCE9FB7A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:fc:08:09:02:d5:d5:a6:6b:d6:c9:e5:39: 3f:17:37:5c:c9:52:a3:be:ee:01:7f:a1:30:d9:fd: 32:b2:3e:9c:51:3c:62:1f:e5:65:6f:23:f6:96:d6: f0:46:ff:4b:e5:ec:74:2b:48:95:90:08:c2:09:4b: 51:1f:53:d2:b3:8e:b4:a0:3a:67:69:08:4b:8b:d5: cf:ed:73:3a:a2:da:a5:ee:1c:c6:94:21:f0:72:d0: 7c:8c:0d:76:a3:cb:00:ef:19:00:1a:0d:22:ab:5e: 25:d4:d6:51:55:d8:9b:a1:59:4e:b7:33:3e:62:55: f3:5a:b1:67:6c:9f:da:b8:11:e2:ab:55:27:3e:4a: 12:bd:f3:5e:10:98:90:84:92:20:f3:bc:b8:b4:12: 68:55:fc:dd:92:f7:d7:fb:4a:4d:48:26:ad:10:be: 70:b3:4a:c8:1d:71:55:4a:58:e3:24:0e:41:76:40: a6:53:34:f1:c7:3e:d5:4a:b5:84:c6:43:8f:6c:b2: 7f:d7:69:0d:c0:26:ec:c4:6e:b7:1b:ab:93:7b:c8: d8:63:eb:7c:a2:e5:bb:40:98:4d:2b:97:60:f0:ca: 83:56:2b:f9:ca:1a:12:52:a3:64:5d:e0:e8:5f:6c: 1f:62:71:79:4c:71:1a:ce:d9:57:ad:61:5b:40:c5: ba:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:49:F8:BC:7D:DD:70:16:B1:96:6F:07:73:44:2F:EC:CE:9F:B7:A1 X509v3 Authority Key Identifier: keyid:64:EB:10:DD:E8:55:CE:76:4F:FD:FD:8E:FA:E0:62:A4:50:60:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64EB10DDE855CE764FFDFD8EFAE062A45060C522.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7099e42-2e9f-4e8a-99e8-ad50453b066f/0/64EB10DDE855CE764FFDFD8EFAE062A45060C522.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2d:0f:76:aa:78:1b:50:50:f3:05:a5:e1:c8:d9:d3:87:e1: 74:9c:95:05:45:cd:cd:db:52:23:7d:63:ca:a2:a8:be:23:9b: 2a:bc:1a:97:8f:17:ab:d4:0e:6a:7e:a6:27:75:c9:c6:92:08: e5:29:49:d9:f9:49:de:00:9c:1f:5e:d9:ee:fd:e1:b7:a3:b8: 8b:b6:ec:73:c6:c7:38:00:5a:d0:6f:c0:08:5a:89:23:5a:31: bb:d8:2b:55:d9:2e:10:52:fc:36:2d:81:93:46:48:37:29:f6: a5:a9:52:47:37:6c:ab:e6:96:fa:a0:ff:fe:9a:f7:31:80:84: 1b:a8:fa:1a:91:5c:5c:bc:cd:3b:9b:63:c6:91:e7:78:4d:b5: 96:f8:07:d3:f8:f5:53:20:b4:55:64:5c:8d:5f:73:56:d9:a9: 10:f8:94:cf:c8:40:f8:59:5c:56:b7:7d:cc:f3:73:48:f8:e4: c2:07:61:39:eb:26:6c:bf:46:ee:87:d3:bc:3c:7d:c6:32:a5: 6b:d1:5d:70:37:b1:87:a7:58:9a:e3:8c:3d:c2:4b:84:a9:77: c3:72:25:b5:d9:1d:a0:29:a9:53:63:f3:2a:3b:29:a9:7c:91: d8:9d:a4:92:2a:79:8e:2a:9f:4e:a1:5f:c0:51:62:64:28:64: c5:f8:90:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBiqhajqGljBQ5HBOFfDOyOdRMDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1 MDYwQzUyMjAeFw0yNDA1MTkxMTE1NTBaFw0yNDA1MjIyMTA2NTBaMDMxMTAvBgNV BAMTKEMxNDlGOEJDN0RERDcwMTZCMTk2NkYwNzczNDQyRkVDQ0U5RkI3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82PwICQLV1aZr1snlOT8XN1zJ UqO+7gF/oTDZ/TKyPpxRPGIf5WVvI/aW1vBG/0vl7HQrSJWQCMIJS1EfU9KzjrSg OmdpCEuL1c/tczqi2qXuHMaUIfBy0HyMDXajywDvGQAaDSKrXiXU1lFV2JuhWU63 Mz5iVfNasWdsn9q4EeKrVSc+ShK9814QmJCEkiDzvLi0EmhV/N2S99f7Sk1IJq0Q vnCzSsgdcVVKWOMkDkF2QKZTNPHHPtVKtYTGQ49ssn/XaQ3AJuzEbrcbq5N7yNhj 63yi5btAmE0rl2DwyoNWK/nKGhJSo2Rd4OhfbB9icXlMcRrO2VetYVtAxbppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwUn4vH3dcBaxlm8Hc0Qv7M6ft6EwHwYDVR0j BBgwFoAUZOsQ3ehVznZP/f2O+uBipFBgxSIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzA5OWU0Mi0yZTlmLTRlOGEtOTllOC1hZDUwNDUzYjA2NmYvMC82NEVCMTBEREU4 NTVDRTc2NEZGREZEOEVGQUUwNjJBNDUwNjBDNTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYyQTQ1MDYw QzUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTcwOTllNDItMmU5Zi00ZThhLTk5 ZTgtYWQ1MDQ1M2IwNjZmLzAvNjRFQjEwRERFODU1Q0U3NjRGRkRGRDhFRkFFMDYy QTQ1MDYwQzUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4tD3aqeBtQUPMFpeHI2dOH4XSclQVFzc3b UiN9Y8qiqL4jmyq8GpePF6vUDmp+pid1ycaSCOUpSdn5Sd4AnB9e2e794bejuIu2 7HPGxzgAWtBvwAhaiSNaMbvYK1XZLhBS/DYtgZNGSDcp9qWpUkc3bKvmlvqg//6a 9zGAhBuo+hqRXFy8zTubY8aR53hNtZb4B9P49VMgtFVkXI1fc1bZqRD4lM/IQPhZ XFa3fczzc0j45MIHYTnrJmy/Ru6H07w8fcYypWvRXXA3sYenWJrjjD3CS4Spd8Ny JbXZHaApqVNj8yo7Kal8kdidpJIqeY4qn06hX8BRYmQoZMX4kCU= -----END CERTIFICATE-----Generated at Sun May 19 12:05:07 2024 by rpki-client on console-fra.rpki-client.org