$ rpki-client -vvf repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft File: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft (raw, json) Hash identifier: AXEpLIIsI5xrLhODUWJ/OXxU2QT0f74erpMqXkl9/+o= Subject key identifier: 15:09:8F:AE:C7:3C:B9:0B:CA:7A:52:E4:04:CD:D2:93:69:5F:F1:20 Authority key identifier: 75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 Certificate issuer: /CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Certificate serial: 7B931F4421CF21D36898D7E05D43C1D421938519 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft Manifest number: D4 Signing time: Wed 29 May 2024 20:51:52 +0000 Manifest this update: Wed 29 May 2024 20:46:52 +0000 Manifest next update: Sun 02 Jun 2024 02:09:52 +0000 Files and hashes: 1: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl (hash: /q68CZiQzjPFQfeoXKSVlxGSVA3y/MLMN1LoNjowHI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 23:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:93:1f:44:21:cf:21:d3:68:98:d7:e0:5d:43:c1:d4:21:93:85:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Validity Not Before: May 29 20:46:52 2024 GMT Not After : Jun 2 02:09:52 2024 GMT Subject: CN=15098FAEC73CB90BCA7A52E404CDD293695FF120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:d4:2c:cf:a3:d1:4f:b6:8c:d5:78:a8:63: 28:8f:f9:1d:8f:e1:5d:a4:e8:f8:3a:e0:99:a2:5c: d7:8c:78:39:44:cc:00:90:98:67:48:a7:1a:b9:0f: 36:58:ea:3f:ee:59:20:7d:e3:82:3b:73:ef:73:f2: cd:e2:88:52:4e:89:43:19:9f:d7:b8:b8:e4:e0:25: 19:4f:fc:6f:b3:d5:74:61:b3:ae:d9:4c:f2:24:f5: 6f:44:63:ba:7d:81:f2:0f:28:89:c1:23:b1:25:33: 45:53:68:b3:e2:c1:1b:77:0a:f8:bb:8a:c0:13:37: d7:df:29:37:37:47:10:99:4f:c0:60:82:f9:94:4b: 5a:f9:6a:de:97:39:1f:a5:a2:48:5d:9e:c2:3e:9b: 60:58:59:b7:38:6f:00:9b:f9:a4:58:53:a4:ac:ee: a5:42:31:9d:56:79:03:ae:a8:09:94:45:d1:c6:30: 34:01:a4:76:ac:8b:12:02:58:0c:16:14:c2:57:d7: c9:7f:35:2e:35:f8:e5:72:d8:e4:ae:46:f9:05:0a: fa:b4:0a:30:36:69:71:d0:30:db:3d:a2:e7:07:f5: 5d:89:f9:2a:8a:d4:94:3a:68:c0:f1:91:a7:45:69: bb:e6:51:a7:c1:a2:e8:75:4c:58:da:02:83:8d:b5: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:09:8F:AE:C7:3C:B9:0B:CA:7A:52:E4:04:CD:D2:93:69:5F:F1:20 X509v3 Authority Key Identifier: keyid:75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:fb:09:6c:1b:07:a8:10:0c:39:5e:e9:15:b6:79:6f:c4:f7: 0e:0e:5b:91:d4:0f:12:4c:3a:05:1e:d0:9f:85:7f:4e:5f:57: 6c:a8:72:26:5d:84:98:ce:01:51:fe:5d:3b:2c:a3:2b:e4:c1: b7:10:5b:b4:06:60:30:83:88:e2:59:cc:4b:6c:b8:b9:2f:a6: 4e:5e:8f:4b:3e:9e:26:75:11:1c:14:e6:3b:57:e1:4c:2d:6d: 82:10:82:6a:af:8e:d0:0e:61:83:32:b0:4e:52:4d:81:e1:e6: d2:42:44:1a:6b:ca:1c:7d:07:67:e6:f4:bb:02:ce:eb:7e:8b: 48:96:9a:4b:79:e1:f4:85:ca:28:bc:95:70:a8:40:e0:16:92: b1:13:0b:50:d7:ab:e2:40:9e:5e:95:fc:13:76:60:24:57:6a: 58:b1:1d:3d:1e:80:1e:46:e6:60:c6:7d:ab:a1:f1:c9:f5:2b: a6:e5:e9:38:8c:ab:c8:ca:65:f9:31:7d:28:fc:4c:5c:fd:99: 9d:4e:d8:e0:41:25:a2:ed:36:61:08:d8:cb:bc:fb:d2:11:0d: 10:65:27:a2:76:cc:90:40:c0:44:c8:c7:f1:e3:10:5b:73:3e: 58:0d:30:7b:39:96:3e:26:d9:62:4e:cc:ea:e7:cc:94:36:6b: 5d:8d:05:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5MfRCHPIdNomNfgXUPB1CGThRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2 QzE3Q0M5NjAeFw0yNDA1MjkyMDQ2NTJaFw0yNDA2MDIwMjA5NTJaMDMxMTAvBgNV BAMTKDE1MDk4RkFFQzczQ0I5MEJDQTdBNTJFNDA0Q0REMjkzNjk1RkYxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYO9Qsz6PRT7aM1XioYyiP+R2P 4V2k6Pg64JmiXNeMeDlEzACQmGdIpxq5DzZY6j/uWSB944I7c+9z8s3iiFJOiUMZ n9e4uOTgJRlP/G+z1XRhs67ZTPIk9W9EY7p9gfIPKInBI7ElM0VTaLPiwRt3Cvi7 isATN9ffKTc3RxCZT8BggvmUS1r5at6XOR+lokhdnsI+m2BYWbc4bwCb+aRYU6Ss 7qVCMZ1WeQOuqAmURdHGMDQBpHasixICWAwWFMJX18l/NS41+OVy2OSuRvkFCvq0 CjA2aXHQMNs9oucH9V2J+SqK1JQ6aMDxkadFabvmUafBouh1TFjaAoONtRB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFQmPrsc8uQvKelLkBM3Sk2lf8SAwHwYDVR0j BBgwFoAUdfh+GfPXyhKKZLsGlffdQWwXzJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmNhZWEzYi1iZDdmLTQ4MWEtOWJjNy1hYTE2MGQwNWQyNjIvMC83NUY4N0UxOUYz RDdDQTEyOEE2NEJCMDY5NUY3REQ0MTZDMTdDQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2QzE3 Q0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RE NDE2QzE3Q0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMb7CWwbB6gQDDle6RW2eW/E9w4OW5HUDxJM OgUe0J+Ff05fV2yociZdhJjOAVH+XTssoyvkwbcQW7QGYDCDiOJZzEtsuLkvpk5e j0s+niZ1ERwU5jtX4UwtbYIQgmqvjtAOYYMysE5STYHh5tJCRBpryhx9B2fm9LsC zut+i0iWmkt54fSFyii8lXCoQOAWkrETC1DXq+JAnl6V/BN2YCRXalixHT0egB5G 5mDGfauh8cn1K6bl6TiMq8jKZfkxfSj8TFz9mZ1O2OBBJaLtNmEI2Mu8+9IRDRBl J6J2zJBAwETIx/HjEFtzPlgNMHs5lj4m2WJOzOrnzJQ2a12NBd8= -----END CERTIFICATE-----Generated at Wed May 29 21:55:25 2024 by rpki-client on console-ams.rpki-client.org