$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: 59CNr1tLLjON2JXHvxC9dEvWV/NzNHbn67Cxsdx8aq0= Subject key identifier: 7F:1A:FA:F0:55:F4:94:87:B9:35:AD:78:54:E5:DD:5E:1C:AE:86:D7 Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 7E195FFFA88E0B07D2B8E85FB438AD7798AA8CC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: 2A Signing time: Sat 18 May 2024 06:41:10 +0000 Manifest this update: Sat 18 May 2024 06:36:10 +0000 Manifest next update: Tue 21 May 2024 10:12:10 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: uxlNoTxc0U9PueCHL0e7bgmypC0z6Eybnfeu40LEovU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 10:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:19:5f:ff:a8:8e:0b:07:d2:b8:e8:5f:b4:38:ad:77:98:aa:8c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: May 18 06:36:10 2024 GMT Not After : May 21 10:12:10 2024 GMT Subject: CN=7F1AFAF055F49487B935AD7854E5DD5E1CAE86D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:62:f5:b9:e6:a1:0d:35:1e:03:10:39:0d: 6d:6c:50:02:31:1a:cb:64:24:b6:ea:3c:87:62:2a: 7e:8a:7e:6f:09:6c:6e:6e:25:e8:77:ef:c4:26:32: 41:09:d6:12:9e:e2:98:da:2c:a8:ee:5a:a6:5d:e9: 1f:33:40:f0:0f:d7:7d:65:eb:6b:07:ee:1f:43:3d: 2f:81:9a:ac:30:f4:6e:f0:d0:eb:95:85:00:5e:19: c1:25:c2:5a:e5:7d:ef:df:a9:66:87:10:ea:94:42: 14:0c:58:7c:ea:b1:68:5c:44:74:3d:2e:84:00:ad: 17:78:3b:b2:80:fc:43:43:53:7e:3c:f5:4b:76:92: cd:8d:ec:66:5f:1c:f1:d9:1d:c5:b0:d6:e6:48:99: f6:ea:ab:19:d7:1a:66:e3:e5:96:b0:33:ef:90:9a: b2:db:81:3f:af:a4:fb:16:8c:71:ee:57:1d:09:13: 02:95:08:43:e8:f8:87:42:80:e8:c3:15:9f:85:80: 5b:b5:3f:bc:f9:3b:92:59:15:ae:e3:c1:a4:ed:ef: c6:84:ca:5d:59:9f:b0:e6:fa:d2:bb:26:bc:f3:99: a2:e3:29:26:f0:49:c1:85:a1:eb:e9:4f:51:e0:2f: 74:5f:af:33:1c:14:d4:16:ad:a1:e9:d3:ff:dc:84: b0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1A:FA:F0:55:F4:94:87:B9:35:AD:78:54:E5:DD:5E:1C:AE:86:D7 X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:12:55:6d:90:2c:63:8b:89:cb:fb:75:75:b2:da:31:3e:2e: 8b:d7:3a:44:2d:90:98:9f:9e:2a:84:b8:88:a8:9c:fa:6d:fb: 8e:b4:a3:ff:a9:7a:8e:59:a7:a8:ce:43:d1:64:94:26:60:af: 2d:e9:a4:42:aa:d0:21:53:d1:94:30:4e:52:ff:c0:7c:ec:15: 38:5d:23:5f:56:f1:ad:70:c5:3e:1f:69:05:bc:cd:db:4d:17: 0f:e8:d5:5e:bb:bd:76:d0:b0:49:f7:86:ee:d8:99:e7:ff:df: d8:6d:87:9e:d4:a8:3e:b3:4f:51:ad:c3:a1:97:a9:b2:3d:a5: 5f:9a:84:34:49:12:e6:cc:70:43:28:cd:d4:bb:aa:32:e7:cc: d9:09:04:14:26:88:cf:04:3d:c5:9e:b6:5a:9f:85:47:20:2d: 35:af:61:c6:64:e4:78:d2:71:98:2f:b3:0c:43:20:cb:61:09: 63:d7:4c:e4:a7:9f:da:15:6c:24:30:e7:24:01:09:84:76:6e: 09:8f:59:dc:90:49:43:45:7a:95:01:1b:30:66:d4:70:c3:bb: 7c:07:08:7b:a9:f5:a2:3d:56:99:b4:bc:1f:13:77:6b:66:c6: cc:ad:5f:e1:78:12:9b:9d:38:a8:52:fb:96:4f:7e:4a:f2:52: fa:70:a8:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhlf/6iOCwfSuOhftDitd5iqjMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNDA1MTgwNjM2MTBaFw0yNDA1MjExMDEyMTBaMDMxMTAvBgNV BAMTKDdGMUFGQUYwNTVGNDk0ODdCOTM1QUQ3ODU0RTVERDVFMUNBRTg2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSP2L1ueahDTUeAxA5DW1sUAIx GstkJLbqPIdiKn6Kfm8JbG5uJeh378QmMkEJ1hKe4pjaLKjuWqZd6R8zQPAP131l 62sH7h9DPS+Bmqww9G7w0OuVhQBeGcElwlrlfe/fqWaHEOqUQhQMWHzqsWhcRHQ9 LoQArRd4O7KA/ENDU3489Ut2ks2N7GZfHPHZHcWw1uZImfbqqxnXGmbj5ZawM++Q mrLbgT+vpPsWjHHuVx0JEwKVCEPo+IdCgOjDFZ+FgFu1P7z5O5JZFa7jwaTt78aE yl1Zn7Dm+tK7JrzzmaLjKSbwScGFoevpT1HgL3RfrzMcFNQWraHp0//chLBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfxr68FX0lIe5Na14VOXdXhyuhtcwHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQSVW2QLGOLicv7dXWy2jE+LovXOkQtkJif niqEuIionPpt+460o/+peo5Zp6jOQ9FklCZgry3ppEKq0CFT0ZQwTlL/wHzsFThd I19W8a1wxT4faQW8zdtNFw/o1V67vXbQsEn3hu7Ymef/39hth57UqD6zT1Gtw6GX qbI9pV+ahDRJEubMcEMozdS7qjLnzNkJBBQmiM8EPcWetlqfhUcgLTWvYcZk5HjS cZgvswxDIMthCWPXTOSnn9oVbCQw5yQBCYR2bgmPWdyQSUNFepUBGzBm1HDDu3wH CHup9aI9Vpm0vB8Td2tmxsytX+F4EpudOKhS+5ZPfkryUvpwqAc= -----END CERTIFICATE-----Generated at Sat May 18 07:18:46 2024 by rpki-client on console-fra.rpki-client.org