$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: 3TOoI6Ht8Z1ygk54CCFealxQQEZMKuQ/IE1pdkZNfqM= Subject key identifier: 16:36:AF:4F:6A:68:9A:DA:EE:68:65:3D:94:EA:3D:8A:EF:F2:D7:15 Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 4D1365393595935E6F593D2914CA3FB7DF0F6021 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 017A Signing time: Wed 29 May 2024 14:21:56 +0000 Manifest this update: Wed 29 May 2024 14:16:56 +0000 Manifest next update: Sat 01 Jun 2024 19:37:56 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: IJRVghsm51XfnZ+OSMEg32ewIxgLPw9VmX+288G2EeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 19:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:13:65:39:35:95:93:5e:6f:59:3d:29:14:ca:3f:b7:df:0f:60:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: May 29 14:16:56 2024 GMT Not After : Jun 1 19:37:56 2024 GMT Subject: CN=1636AF4F6A689ADAEE68653D94EA3D8AEFF2D715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:f7:09:b5:1f:75:12:81:67:d1:0c:14:f0: 52:df:c5:0d:45:47:0c:6b:a5:49:f5:24:c9:70:bc: fe:b4:72:52:ce:f5:92:6d:c7:0b:74:5f:be:f7:c7: b6:f9:53:d3:3d:61:a5:a8:94:2d:be:ca:e3:4f:04: a3:f9:f0:61:c2:66:b1:21:7d:11:b8:df:7b:e0:64: 3a:55:c7:58:ba:39:7e:15:af:8d:a9:80:96:3a:73: b9:01:87:68:af:dd:4e:f3:00:3d:7a:bf:61:f1:8f: 61:d0:72:a1:01:7c:9c:c1:33:13:79:74:bf:98:32: 10:7b:bb:e1:7f:11:22:2e:04:7e:59:1e:48:01:54: 9b:be:2f:eb:e9:fd:da:f0:ea:04:15:c5:ec:2b:ad: d1:e8:8e:5b:1c:06:57:1d:f0:9e:39:8e:f8:b2:c3: c8:4c:07:ff:e9:95:97:66:be:ec:e1:8c:f6:17:d3: c4:1a:ec:69:a1:f9:75:64:b0:f2:84:e2:3c:f8:ac: 64:1b:9a:c1:8c:c4:d1:a9:6a:26:77:cf:09:e0:84: 7d:c3:e7:54:f4:d2:e5:55:1f:b0:c0:f6:f4:a5:a6: df:ca:53:d5:a7:6b:0d:c4:4c:0b:0d:7c:0c:a1:69: 18:03:76:ee:fc:91:e3:4d:b4:0c:d6:0e:a5:37:b2: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:36:AF:4F:6A:68:9A:DA:EE:68:65:3D:94:EA:3D:8A:EF:F2:D7:15 X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:63:4b:0b:0f:51:15:a5:16:0b:b0:17:66:dd:84:34:02:2f: 32:ce:86:bc:4e:95:eb:01:84:95:5f:eb:1b:a5:5b:ce:eb:1b: 2f:28:03:99:40:6f:14:6c:8c:2f:f2:0d:99:7f:f4:dd:91:fc: 2d:41:fc:16:7b:f5:c9:de:80:d7:25:9c:49:ed:3a:5a:5c:6a: b2:69:f1:d7:0e:b6:79:42:70:43:9e:aa:98:01:52:2a:f7:4e: 03:fb:51:c0:bc:cc:47:b4:bb:34:23:1f:00:6c:10:4e:42:dd: 17:e3:54:c4:00:72:e7:95:7d:0a:d0:7f:3e:0f:66:21:1a:9c: aa:d2:1a:a0:da:e9:44:d4:18:7e:19:05:78:53:03:66:18:d4: d7:37:83:86:4a:04:22:08:d0:27:49:26:8f:b8:4d:a9:e0:c5: db:c6:d6:78:f2:0b:e1:b3:2d:59:75:cd:fb:cb:6e:92:9c:96: 46:0e:4c:bd:31:05:8f:e6:8d:42:46:c2:a4:10:61:f9:bf:9d: 92:e7:bd:a6:8a:c6:14:65:05:c5:0f:eb:67:16:b3:b5:26:d3: c2:86:8b:4b:50:ce:77:b0:5b:5e:8c:f5:18:a8:9f:2a:01:b6: cf:f1:da:0c:f7:36:1d:12:dc:fa:6f:c4:77:bc:78:6f:f5:f8: b1:c6:b7:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTRNlOTWVk15vWT0pFMo/t98PYCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNDA1MjkxNDE2NTZaFw0yNDA2MDExOTM3NTZaMDMxMTAvBgNV BAMTKDE2MzZBRjRGNkE2ODlBREFFRTY4NjUzRDk0RUEzRDhBRUZGMkQ3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqPcJtR91EoFn0QwU8FLfxQ1F RwxrpUn1JMlwvP60clLO9ZJtxwt0X773x7b5U9M9YaWolC2+yuNPBKP58GHCZrEh fRG433vgZDpVx1i6OX4Vr42pgJY6c7kBh2iv3U7zAD16v2Hxj2HQcqEBfJzBMxN5 dL+YMhB7u+F/ESIuBH5ZHkgBVJu+L+vp/drw6gQVxewrrdHojlscBlcd8J45jviy w8hMB//plZdmvuzhjPYX08Qa7Gmh+XVksPKE4jz4rGQbmsGMxNGpaiZ3zwnghH3D 51T00uVVH7DA9vSlpt/KU9Wnaw3ETAsNfAyhaRgDdu78keNNtAzWDqU3su2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFjavT2pomtruaGU9lOo9iu/y1xUwHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBjSwsPURWlFguwF2bdhDQCLzLOhrxOlesB hJVf6xulW87rGy8oA5lAbxRsjC/yDZl/9N2R/C1B/BZ79cnegNclnEntOlpcarJp 8dcOtnlCcEOeqpgBUir3TgP7UcC8zEe0uzQjHwBsEE5C3RfjVMQAcueVfQrQfz4P ZiEanKrSGqDa6UTUGH4ZBXhTA2YY1Nc3g4ZKBCII0CdJJo+4TangxdvG1njyC+Gz LVl1zfvLbpKclkYOTL0xBY/mjUJGwqQQYfm/nZLnvaaKxhRlBcUP62cWs7Um08KG i0tQznewW16M9RionyoBts/x2gz3Nh0S3PpvxHe8eG/1+LHGt8M= -----END CERTIFICATE-----Generated at Wed May 29 17:52:36 2024 by rpki-client on console-ams.rpki-client.org