$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: oUkKkNiy9ypTL4Avl4/6XrM/y0wFT0QUZgGCKKJLpno= Subject key identifier: 0A:B1:CB:60:0C:95:CC:9D:9B:CC:46:50:94:C0:32:8A:45:AC:1B:39 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 55205AB8E0108C6433B0E5D292AC233D95DDA851 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 012B Signing time: Sat 18 May 2024 04:11:41 +0000 Manifest this update: Sat 18 May 2024 04:06:41 +0000 Manifest next update: Tue 21 May 2024 12:55:41 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: EXVv0VkuisR8Am6vw8T9d0Bz9xiQf94xPQByyTWE8Kk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:20:5a:b8:e0:10:8c:64:33:b0:e5:d2:92:ac:23:3d:95:dd:a8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: May 18 04:06:41 2024 GMT Not After : May 21 12:55:41 2024 GMT Subject: CN=0AB1CB600C95CC9D9BCC465094C0328A45AC1B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:48:ad:6a:78:f3:b7:58:63:f1:93:dd:35:2e: fd:c4:a6:58:c5:0f:c7:13:2b:26:e7:6e:4c:9a:75: d4:71:2d:1d:dc:de:36:c5:2b:42:b6:bd:bf:b1:5f: ba:7f:71:e9:76:db:d8:84:82:fe:fc:2b:c3:a6:3c: ae:6d:c2:0b:c1:f7:26:b0:27:2e:f0:df:ca:ec:36: 57:99:62:1b:fe:82:8c:b1:5e:dd:6e:c0:60:02:40: d4:e0:78:26:f8:eb:35:56:df:d5:93:17:49:c3:cd: 5d:a8:48:0e:19:4e:64:f6:f6:e3:7e:92:5c:b7:0e: d0:07:05:b0:12:ff:be:b2:b1:51:a8:13:44:ad:45: 5d:d6:db:a6:1b:21:65:0d:c6:07:11:45:b8:79:f4: e0:1b:92:5e:53:af:8e:e8:40:f5:85:11:ad:3c:6c: a4:65:02:cf:3b:80:f7:69:39:54:76:d5:97:ce:86: eb:8c:1f:bd:b9:81:17:5c:95:ec:ae:a6:90:ac:71: ba:38:69:42:0c:6a:5d:80:9c:eb:b8:14:0b:d7:8c: c5:ad:fe:66:65:c7:0d:b8:03:4b:d3:7a:c4:ea:9b: aa:58:b6:90:1d:e9:f7:52:f8:7b:07:65:de:50:6e: 1f:5d:d0:91:02:c1:9a:c4:c9:4f:3d:47:0c:85:64: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B1:CB:60:0C:95:CC:9D:9B:CC:46:50:94:C0:32:8A:45:AC:1B:39 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:3b:5f:f5:24:92:c4:73:8d:1a:06:49:d2:43:8d:aa:f3:7b: f2:6e:7e:19:23:e0:c2:02:fe:c4:fb:c0:fd:71:d0:f0:c4:f4: 8d:70:0e:28:74:21:84:75:bf:ed:8e:64:57:ca:c2:88:94:87: 85:5d:54:2f:bd:ae:56:20:95:8e:cb:bd:73:b4:de:19:c4:d6: ae:df:e0:0a:b7:b0:00:a7:2c:1d:16:a9:79:fd:71:27:e1:57: f3:c0:32:16:99:0e:09:6d:1b:73:4e:28:46:15:c6:ff:06:39: fb:78:21:4b:3d:87:a6:23:ac:61:ca:42:0a:ce:1e:df:0e:48: c8:c9:24:d2:8b:69:07:7d:cf:f8:f7:0c:56:a8:f9:01:3d:74: 22:3b:8f:07:91:d5:f6:93:4f:e5:66:17:a6:3d:d1:56:97:66: bc:a1:7b:93:61:3b:04:33:1e:0b:aa:e5:af:51:6e:25:e5:44: 49:56:bd:0d:b1:55:46:fb:bc:ff:d6:f8:f5:d0:76:b5:a7:d9: cb:19:5e:49:6a:cb:53:d9:93:47:7c:fe:2f:9e:1f:e3:56:9b: d5:10:80:b3:15:f8:1b:41:a4:3a:09:b7:26:0e:4c:06:ed:52: 79:ce:45:49:0d:b4:a9:1d:c1:57:67:16:93:96:6e:d0:d8:14: c7:bc:3b:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSBauOAQjGQzsOXSkqwjPZXdqFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNDA1MTgwNDA2NDFaFw0yNDA1MjExMjU1NDFaMDMxMTAvBgNV BAMTKDBBQjFDQjYwMEM5NUNDOUQ5QkNDNDY1MDk0QzAzMjhBNDVBQzFCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbSK1qePO3WGPxk901Lv3EpljF D8cTKybnbkyaddRxLR3c3jbFK0K2vb+xX7p/cel229iEgv78K8OmPK5twgvB9yaw Jy7w38rsNleZYhv+goyxXt1uwGACQNTgeCb46zVW39WTF0nDzV2oSA4ZTmT29uN+ kly3DtAHBbAS/76ysVGoE0StRV3W26YbIWUNxgcRRbh59OAbkl5Tr47oQPWFEa08 bKRlAs87gPdpOVR21ZfOhuuMH725gRdcleyuppCscbo4aUIMal2AnOu4FAvXjMWt /mZlxw24A0vTesTqm6pYtpAd6fdS+HsHZd5Qbh9d0JECwZrEyU89RwyFZOizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCrHLYAyVzJ2bzEZQlMAyikWsGzkwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALU7X/UkksRzjRoGSdJDjarze/Jufhkj4MIC /sT7wP1x0PDE9I1wDih0IYR1v+2OZFfKwoiUh4VdVC+9rlYglY7LvXO03hnE1q7f 4Aq3sACnLB0WqXn9cSfhV/PAMhaZDgltG3NOKEYVxv8GOft4IUs9h6YjrGHKQgrO Ht8OSMjJJNKLaQd9z/j3DFao+QE9dCI7jweR1faTT+VmF6Y90VaXZryhe5NhOwQz Hguq5a9RbiXlRElWvQ2xVUb7vP/W+PXQdrWn2csZXklqy1PZk0d8/i+eH+NWm9UQ gLMV+BtBpDoJtyYOTAbtUnnORUkNtKkdwVdnFpOWbtDYFMe8O0o= -----END CERTIFICATE-----Generated at Sat May 18 04:52:51 2024 by rpki-client on console-ams.rpki-client.org