$ rpki-client -vvf repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft File: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft (raw, json) Hash identifier: CNXj8Ktr9LbELaM1bzHUFT5BiNNjBTb8lHFs9UyasWg= Subject key identifier: 0D:2D:DD:3F:D9:6B:31:F8:C6:2E:3C:DF:EC:09:35:EB:39:9B:B3:4F Authority key identifier: 50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 Certificate issuer: /CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Certificate serial: 1266F995AF3812A3CCC62CEC963619C249B46F7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft Manifest number: 029C Signing time: Sun 19 May 2024 05:20:34 +0000 Manifest this update: Sun 19 May 2024 05:15:34 +0000 Manifest next update: Wed 22 May 2024 12:28:34 +0000 Files and hashes: 1: 507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl (hash: gHPU6zV7kXA5vpkLZN6VbfOE8O2+3s/AYFtTxlMVV8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:66:f9:95:af:38:12:a3:cc:c6:2c:ec:96:36:19:c2:49:b4:6f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507CD1ABEB911954F33A18A2DF9A31CE320DAF97 Validity Not Before: May 19 05:15:34 2024 GMT Not After : May 22 12:28:34 2024 GMT Subject: CN=0D2DDD3FD96B31F8C62E3CDFEC0935EB399BB34F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:18:e1:f7:de:90:71:36:a1:4d:5d:64:a5: f4:9b:52:ba:1c:07:23:65:9b:2a:51:b8:fa:0f:48: 84:60:55:bf:a2:1f:64:8f:3e:e9:ba:0d:bc:f2:e0: 2c:53:f5:38:3c:52:e8:8d:8c:fe:0a:e2:02:bc:e4: ba:a7:27:24:ad:02:3a:fd:b7:3f:cc:98:17:df:9c: df:da:21:73:a5:f2:90:9e:be:da:4e:14:f3:c5:0a: e7:27:77:41:71:3c:31:9e:91:f1:db:08:62:4e:e0: b4:66:de:79:0f:5e:03:4e:ac:e7:8e:cf:2a:0d:3b: 92:ae:ec:b7:92:f9:47:4c:ec:a0:36:8e:b3:8b:2e: bc:82:5f:84:4e:13:6c:4a:61:eb:3d:9b:38:5d:c4: 95:83:8c:23:7f:40:5c:e5:75:3c:b0:05:89:3d:d0: eb:bf:67:aa:52:73:19:d4:12:bf:9c:01:45:53:5e: b2:9c:91:99:f7:4f:27:0e:1f:55:b3:4d:e3:ca:55: 19:2e:03:ab:0c:0a:0d:fc:b3:44:8b:17:84:a2:79: 9d:e3:b3:bb:af:2e:52:d1:19:e2:dd:25:ea:ad:43: 54:f1:e8:e3:48:3a:be:ae:fc:ce:a4:aa:6d:d9:ef: 03:1f:89:77:58:fb:97:d7:70:23:83:7d:11:7f:27: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2D:DD:3F:D9:6B:31:F8:C6:2E:3C:DF:EC:09:35:EB:39:9B:B3:4F X509v3 Authority Key Identifier: keyid:50:7C:D1:AB:EB:91:19:54:F3:3A:18:A2:DF:9A:31:CE:32:0D:AF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/afcaf27d-64e9-474b-a73b-35adbe9b2f01/0/507CD1ABEB911954F33A18A2DF9A31CE320DAF97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e3:ca:15:30:16:23:9f:8b:6d:eb:9a:b3:7c:54:0f:f0:a0: 8b:39:a0:9d:62:89:57:2c:1d:79:e3:b8:60:c4:3d:27:fc:33: a4:28:94:d0:1f:dc:c4:64:00:a3:b0:4d:e0:63:cd:92:05:d2: 88:8a:ab:37:59:f0:31:de:47:43:49:b1:43:0a:73:d6:e1:3e: 7f:12:a5:42:87:b7:b9:25:b7:10:4e:73:50:b5:28:1e:a8:46: f3:a0:10:87:52:77:6c:6d:b4:d7:73:a8:e5:4c:23:a9:9c:02: 01:33:01:25:cd:99:db:15:8a:1f:af:e9:35:7a:b9:95:96:5c: 5d:14:86:18:27:13:b2:2c:04:31:78:5b:46:01:70:06:31:60: 8a:6d:9d:b1:d3:b6:42:f7:f3:3f:97:25:05:53:b3:3c:26:5d: 94:38:45:e1:43:bc:2d:d0:c2:b6:89:ae:33:f2:3f:f4:91:12: ea:8f:c2:b8:0e:27:9d:d1:cc:df:58:48:77:a3:50:75:1a:16: 0c:00:bb:90:87:94:85:cb:7e:f7:c1:a8:bf:11:5f:6d:a0:57: 5f:86:7e:0b:39:8d:2e:5b:c8:b3:a7:a5:fb:40:57:6f:01:99: b2:dd:65:1f:d4:e5:a7:06:86:cd:4c:d2:0c:83:23:5f:69:d4: 6c:a1:3c:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmb5la84EqPMxizsljYZwkm0b38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0Uz MjBEQUY5NzAeFw0yNDA1MTkwNTE1MzRaFw0yNDA1MjIxMjI4MzRaMDMxMTAvBgNV BAMTKDBEMkRERDNGRDk2QjMxRjhDNjJFM0NERkVDMDkzNUVCMzk5QkIzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbIRjh996QcTahTV1kpfSbUroc ByNlmypRuPoPSIRgVb+iH2SPPum6Dbzy4CxT9Tg8UuiNjP4K4gK85LqnJyStAjr9 tz/MmBffnN/aIXOl8pCevtpOFPPFCucnd0FxPDGekfHbCGJO4LRm3nkPXgNOrOeO zyoNO5Ku7LeS+UdM7KA2jrOLLryCX4ROE2xKYes9mzhdxJWDjCN/QFzldTywBYk9 0Ou/Z6pScxnUEr+cAUVTXrKckZn3TycOH1WzTePKVRkuA6sMCg38s0SLF4SieZ3j s7uvLlLRGeLdJeqtQ1Tx6ONIOr6u/M6kqm3Z7wMfiXdY+5fXcCODfRF/J8thAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDS3dP9lrMfjGLjzf7Ak16zmbs08wHwYDVR0j BBgwFoAUUHzRq+uRGVTzOhii35oxzjINr5cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZmNhZjI3ZC02NGU5LTQ3NGItYTczYi0zNWFkYmU5YjJmMDEvMC81MDdDRDFBQkVC OTExOTU0RjMzQTE4QTJERjlBMzFDRTMyMERBRjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMxQ0UzMjBE QUY5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWZjYWYyN2QtNjRlOS00NzRiLWE3 M2ItMzVhZGJlOWIyZjAxLzAvNTA3Q0QxQUJFQjkxMTk1NEYzM0ExOEEyREY5QTMx Q0UzMjBEQUY5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzjyhUwFiOfi23rmrN8VA/woIs5oJ1iiVcs HXnjuGDEPSf8M6QolNAf3MRkAKOwTeBjzZIF0oiKqzdZ8DHeR0NJsUMKc9bhPn8S pUKHt7kltxBOc1C1KB6oRvOgEIdSd2xttNdzqOVMI6mcAgEzASXNmdsVih+v6TV6 uZWWXF0UhhgnE7IsBDF4W0YBcAYxYIptnbHTtkL38z+XJQVTszwmXZQ4ReFDvC3Q wraJrjPyP/SREuqPwrgOJ53RzN9YSHejUHUaFgwAu5CHlIXLfvfBqL8RX22gV1+G fgs5jS5byLOnpftAV28BmbLdZR/U5acGhs1M0gyDI19p1GyhPNI= -----END CERTIFICATE-----Generated at Sun May 19 06:14:09 2024 by rpki-client on console-ams.rpki-client.org