$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: 1kgLxeEh2+ucDhlf7H+Lr4mCSGXtomMiNnlXAw3XM/I= Subject key identifier: 87:59:FC:E5:41:50:35:70:1E:DD:0F:60:10:83:0B:D9:78:D3:AC:4D Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 6D4B65F29B91DD26E45E60F5A5F77405BEAAB545 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 0152 Signing time: Wed 29 May 2024 11:01:22 +0000 Manifest this update: Wed 29 May 2024 10:56:22 +0000 Manifest next update: Sat 01 Jun 2024 13:29:22 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: o132ktO34BsjuLoiPQRP2rK/WgNBRfZZ2naY8yANMfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 13:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4b:65:f2:9b:91:dd:26:e4:5e:60:f5:a5:f7:74:05:be:aa:b5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: May 29 10:56:22 2024 GMT Not After : Jun 1 13:29:22 2024 GMT Subject: CN=8759FCE5415035701EDD0F6010830BD978D3AC4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3d:e0:f7:bd:d3:2c:3d:1e:ef:fd:a4:ba:ce: 6e:af:56:7f:ee:46:63:bb:35:5f:ae:3e:c6:df:c0: 3a:5a:23:fb:33:af:5d:7c:9a:8d:c7:a2:14:db:c5: 83:fb:10:85:1a:84:16:25:33:40:8b:80:6f:37:bd: 78:c1:4f:8c:16:d2:88:74:37:d0:20:3b:a6:07:eb: aa:6c:3f:f4:e2:e6:f0:ce:e2:82:48:79:08:a6:e1: c4:fa:79:1a:3a:ab:22:f7:2b:26:50:52:77:82:99: 49:01:e5:ff:f7:d8:c6:4f:8e:ee:ef:9e:55:81:b1: e7:9e:f2:19:7d:52:aa:ce:2b:6b:a5:b4:40:2b:1b: 22:13:80:c8:f5:9a:e1:ef:4f:60:04:2b:45:22:1e: 0a:57:59:59:ab:15:08:51:2a:7a:f1:95:cb:39:b9: 69:64:16:a5:a3:12:3f:dd:1f:fe:c3:7b:f3:de:03: 62:4b:54:14:23:ea:04:64:56:e3:1c:4d:e8:a1:2d: 90:5c:27:83:82:0f:02:25:f2:ea:1f:e9:bd:99:45: 75:0f:e9:47:3f:62:cb:05:5e:6b:ba:ef:4d:7b:b1: 15:14:c8:9d:0a:c3:60:e4:c8:e0:a6:3c:cd:8f:24: 60:8d:d9:2c:0c:8a:08:3d:a3:68:0e:1d:20:08:74: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:59:FC:E5:41:50:35:70:1E:DD:0F:60:10:83:0B:D9:78:D3:AC:4D X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6a:d0:69:94:c0:55:66:0a:db:d0:64:43:95:6f:9c:b7:c5: 3f:59:0d:50:73:35:ce:f6:4b:ce:4a:a6:75:4e:aa:ae:f2:dc: c7:1a:ec:40:5b:89:9e:b6:f2:46:1f:12:7e:74:19:ba:54:2b: d3:61:25:44:6d:29:60:49:a8:1d:c6:12:a7:dd:71:f6:e0:2b: 5b:cd:6f:3b:28:4e:80:8c:9e:8c:3c:26:ab:a9:31:14:d7:c8: 0d:fb:c0:c7:f6:17:b7:eb:c0:44:ae:7e:10:dd:4e:3e:a1:f7: 02:43:26:52:54:49:24:e7:0f:a4:9f:96:01:3f:29:e5:d3:5e: 6e:81:3f:56:e1:6f:41:fe:09:84:e1:df:a9:10:ad:9c:95:99: 21:4e:02:c9:43:84:ae:88:c9:aa:e5:b2:98:97:00:0f:38:a6: d4:45:36:58:6f:ca:6d:95:76:75:92:b3:fa:32:94:53:51:22: c5:aa:d4:55:b9:ad:ec:58:d0:b3:81:1a:ad:74:cc:01:da:53: 8f:bd:a0:41:2e:75:10:34:7f:9d:b4:70:8f:bc:18:56:55:95: 21:b1:b5:69:14:84:16:82:04:97:a1:1d:3d:96:74:6e:1d:65: d0:6c:26:7a:61:b5:53:89:5a:88:53:0e:5a:f0:d4:e3:d0:0b: 5f:81:8e:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUtl8puR3SbkXmD1pfd0Bb6qtUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNDA1MjkxMDU2MjJaFw0yNDA2MDExMzI5MjJaMDMxMTAvBgNV BAMTKDg3NTlGQ0U1NDE1MDM1NzAxRUREMEY2MDEwODMwQkQ5NzhEM0FDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtPeD3vdMsPR7v/aS6zm6vVn/u RmO7NV+uPsbfwDpaI/szr118mo3HohTbxYP7EIUahBYlM0CLgG83vXjBT4wW0oh0 N9AgO6YH66psP/Ti5vDO4oJIeQim4cT6eRo6qyL3KyZQUneCmUkB5f/32MZPju7v nlWBseee8hl9UqrOK2ultEArGyITgMj1muHvT2AEK0UiHgpXWVmrFQhRKnrxlcs5 uWlkFqWjEj/dH/7De/PeA2JLVBQj6gRkVuMcTeihLZBcJ4OCDwIl8uof6b2ZRXUP 6Uc/YssFXmu67017sRUUyJ0Kw2DkyOCmPM2PJGCN2SwMigg9o2gOHSAIdMHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh1n85UFQNXAe3Q9gEIML2XjTrE0wHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9q0GmUwFVmCtvQZEOVb5y3xT9ZDVBzNc72 S85KpnVOqq7y3Mca7EBbiZ628kYfEn50GbpUK9NhJURtKWBJqB3GEqfdcfbgK1vN bzsoToCMnow8JqupMRTXyA37wMf2F7frwESufhDdTj6h9wJDJlJUSSTnD6SflgE/ KeXTXm6BP1bhb0H+CYTh36kQrZyVmSFOAslDhK6IyarlspiXAA84ptRFNlhvym2V dnWSs/oylFNRIsWq1FW5rexY0LOBGq10zAHaU4+9oEEudRA0f520cI+8GFZVlSGx tWkUhBaCBJehHT2WdG4dZdBsJnphtVOJWohTDlrw1OPQC1+Bjso= -----END CERTIFICATE-----Generated at Wed May 29 13:39:47 2024 by rpki-client on console-fra.rpki-client.org