$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft File: F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft (raw, json) Hash identifier: wVG+NjJ+mhyKcfbeGFj93cFug5C83dOCw0FtsfQzts0= Subject key identifier: 24:96:BF:BB:E9:0D:C7:09:76:E3:6A:31:D8:AB:33:57:82:F9:94:F3 Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Certificate serial: 5906722202533494FD683F4FA167D4FE6B0F1A0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft Manifest number: D1 Signing time: Fri 17 May 2024 23:21:36 +0000 Manifest this update: Fri 17 May 2024 23:16:36 +0000 Manifest next update: Tue 21 May 2024 01:12:36 +0000 Files and hashes: 1: F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl (hash: 7hj+J3iK6WVXKlPV86MBCAtWWbJvdDieMyIvr3hu4b8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 01:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:06:72:22:02:53:34:94:fd:68:3f:4f:a1:67:d4:fe:6b:0f:1a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Validity Not Before: May 17 23:16:36 2024 GMT Not After : May 21 01:12:36 2024 GMT Subject: CN=2496BFBBE90DC70976E36A31D8AB335782F994F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1b:05:56:2b:68:3c:66:94:5a:45:d3:e7:70: 0d:5b:1f:7b:b0:59:c5:dd:73:68:70:e0:79:dd:c6: a6:ea:fc:18:1d:d9:32:0c:d4:ae:66:72:14:68:27: 26:d8:34:df:87:d7:33:af:00:ea:37:b2:37:dc:75: 0c:0f:10:f5:72:71:1c:d5:5c:49:00:56:d6:72:0b: 33:28:cc:9c:19:9f:62:83:b0:6b:cf:f0:b6:30:1a: 09:91:e4:f5:1e:83:f2:98:e8:ea:a8:00:ce:68:f8: 4c:18:10:28:58:7c:fe:7c:29:65:dd:b5:47:af:60: 93:cf:01:f1:4e:7f:8e:11:0c:71:ee:a4:05:2f:2b: 16:38:23:a2:89:40:a5:82:3d:20:71:41:31:60:48: 1a:de:8e:54:a6:6c:3c:81:42:fd:30:4e:ec:d7:69: c2:a2:32:87:36:29:be:88:cb:43:8a:fd:3d:c2:6b: 47:67:f0:d1:5d:74:33:ff:23:66:d1:f2:4b:e4:cb: ed:58:b2:11:2e:b5:84:a3:a6:83:6c:64:4f:a4:82: ae:63:11:ba:13:6c:f4:2b:b0:2a:ff:7c:4b:97:1e: 44:f3:e6:57:1f:57:03:1d:d8:f1:6b:f4:f9:7a:a1: 3e:c9:b0:47:49:5b:1f:af:ef:c7:e4:d1:59:f9:b0: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:96:BF:BB:E9:0D:C7:09:76:E3:6A:31:D8:AB:33:57:82:F9:94:F3 X509v3 Authority Key Identifier: keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:af:46:44:df:d9:88:d2:aa:d8:7d:11:2f:17:28:41:a7:62: 02:86:26:4c:28:d2:fb:fe:01:53:eb:c7:11:dd:9c:70:a1:f8: 6f:a2:c1:53:49:29:c5:05:64:c5:2d:07:44:02:52:fb:1b:0c: 8f:a4:24:1c:88:01:33:e2:76:b3:1a:db:d3:74:4f:f5:c3:6d: 3e:43:2f:14:37:b3:51:2e:eb:ab:1f:13:0f:15:3f:7e:01:9f: e7:34:9d:30:be:58:87:b2:2a:52:cc:c2:d8:40:4f:0f:b8:60: 68:0a:6a:1e:6f:20:81:9f:75:e2:8f:e0:11:7a:28:f9:e4:b6: 27:57:1f:8d:3f:16:c9:9e:18:10:c1:3e:43:4a:4f:c9:87:26: 39:ca:07:6e:f3:f0:3c:ad:52:57:ad:ed:c0:14:3c:73:19:30: a9:93:db:f5:28:a0:fd:b2:49:36:e1:cf:cb:34:6e:44:af:e1: 2d:46:b4:6d:ef:73:8e:c9:5f:88:98:bb:af:97:83:8b:f5:07: 62:a0:0f:05:e4:1a:91:b4:75:32:1c:5c:53:07:d9:1d:46:95: ca:45:08:af:7b:90:f0:75:cd:0a:27:08:e6:6d:d2:50:f9:0a: 12:45:b9:14:1a:ec:2c:fa:58:e4:ba:2a:f9:41:2c:ac:89:26: a2:7e:d4:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQZyIgJTNJT9aD9PoWfU/msPGgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB NkYyMEY2MjAeFw0yNDA1MTcyMzE2MzZaFw0yNDA1MjEwMTEyMzZaMDMxMTAvBgNV BAMTKDI0OTZCRkJCRTkwREM3MDk3NkUzNkEzMUQ4QUIzMzU3ODJGOTk0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZGwVWK2g8ZpRaRdPncA1bH3uw WcXdc2hw4Hndxqbq/Bgd2TIM1K5mchRoJybYNN+H1zOvAOo3sjfcdQwPEPVycRzV XEkAVtZyCzMozJwZn2KDsGvP8LYwGgmR5PUeg/KY6OqoAM5o+EwYEChYfP58KWXd tUevYJPPAfFOf44RDHHupAUvKxY4I6KJQKWCPSBxQTFgSBrejlSmbDyBQv0wTuzX acKiMoc2Kb6Iy0OK/T3Ca0dn8NFddDP/I2bR8kvky+1YshEutYSjpoNsZE+kgq5j EboTbPQrsCr/fEuXHkTz5lcfVwMd2PFr9Pl6oT7JsEdJWx+v78fk0Vn5sAYDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJJa/u+kNxwl242ox2KszV4L5lPMwHwYDVR0j BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0 NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy MEY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0 MzFBNkYyMEY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImvRkTf2YjSqth9ES8XKEGnYgKGJkwo0vv+ AVPrxxHdnHCh+G+iwVNJKcUFZMUtB0QCUvsbDI+kJByIATPidrMa29N0T/XDbT5D LxQ3s1Eu66sfEw8VP34Bn+c0nTC+WIeyKlLMwthATw+4YGgKah5vIIGfdeKP4BF6 KPnktidXH40/FsmeGBDBPkNKT8mHJjnKB27z8DytUlet7cAUPHMZMKmT2/UooP2y STbhz8s0bkSv4S1GtG3vc47JX4iYu6+Xg4v1B2KgDwXkGpG0dTIcXFMH2R1GlcpF CK97kPB1zQonCOZt0lD5ChJFuRQa7Cz6WOS6KvlBLKyJJqJ+1PA= -----END CERTIFICATE-----Generated at Sat May 18 01:42:24 2024 by rpki-client on console-ams.rpki-client.org