$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: wMqFcynWBwwhX63AaFbbsFCMWSULN9Wvlua2Osm5G3U= Subject key identifier: 1C:80:32:C1:62:5E:9B:34:EF:D4:74:06:C0:5D:D6:2E:96:21:DE:55 Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 74A2CCE1DA6B37524D5FC475F68D533B27DA2C0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 012B Signing time: Sat 18 May 2024 22:41:53 +0000 Manifest this update: Sat 18 May 2024 22:36:53 +0000 Manifest next update: Wed 22 May 2024 00:14:53 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: 8TwxLDf3M+0pxJJMgfE5SfmCgfhW6CqDwPvUbym8cgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a2:cc:e1:da:6b:37:52:4d:5f:c4:75:f6:8d:53:3b:27:da:2c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: May 18 22:36:53 2024 GMT Not After : May 22 00:14:53 2024 GMT Subject: CN=1C8032C1625E9B34EFD47406C05DD62E9621DE55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:6d:cc:1c:5a:48:7a:b6:e0:41:c7:20:3e: ac:b4:1f:91:d2:ce:49:ef:4c:6e:82:1c:b9:c8:20: e8:e3:35:7e:9c:96:33:44:eb:99:19:2b:47:5e:63: 57:70:ce:f0:02:06:24:89:16:aa:45:c9:44:1b:71: ae:68:24:29:25:c7:41:b2:fe:77:64:40:d8:62:b5: 24:6b:b0:29:59:b9:44:a8:2c:20:8f:66:5d:2a:ce: 4d:e6:7b:63:ff:fe:ba:b6:f4:39:9c:32:30:b9:8e: ed:06:12:5d:0b:ee:b2:38:4d:10:f8:ad:76:6b:36: dc:00:dc:b9:f5:51:d4:12:fa:a4:5b:df:ac:46:a4: 66:c5:27:26:ea:ce:c8:fc:72:2d:ee:81:72:4a:be: f3:74:e6:38:5e:41:93:9f:48:9d:23:42:91:dd:c3: e2:75:d5:09:33:fc:7f:95:45:f9:17:41:5f:0c:16: 8c:23:7a:1e:85:15:63:e0:d1:b4:22:c3:36:54:7f: fc:02:09:27:47:c5:b4:53:7b:34:9e:7b:28:bb:6a: 9d:d3:2a:5b:e1:cb:95:83:80:29:ab:9b:d8:de:34: a0:eb:03:54:1b:11:be:ab:3a:b4:62:48:9d:76:96: 89:90:29:3b:03:07:ef:56:56:e2:34:59:b9:fe:74: 48:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:80:32:C1:62:5E:9B:34:EF:D4:74:06:C0:5D:D6:2E:96:21:DE:55 X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:61:b0:87:b1:42:7d:1a:55:b1:7d:1a:c2:6a:5b:91:e2:03: 2b:65:67:27:11:aa:99:39:b2:6d:9e:42:5e:94:bd:73:0c:41: eb:58:2c:1e:80:d6:10:2f:a0:cd:44:03:cc:bc:d7:1f:ac:0b: e2:0d:12:05:67:21:89:8f:07:cf:18:ea:59:59:1e:64:05:92: eb:65:3d:af:a5:86:03:09:dc:6f:a8:54:6c:0a:20:a8:cf:b9: 94:d8:b8:0b:91:94:55:88:2c:42:bc:35:ea:ac:72:cf:8c:63: 1b:fc:96:4c:e2:ca:1a:3f:4d:d6:d9:ce:5a:ab:ed:87:6f:fc: 01:8f:07:c3:ac:67:3e:e5:b4:6e:a1:2d:06:b5:3c:28:65:4c: 73:93:29:1d:ad:85:56:3d:b2:7a:54:1d:6d:7a:dc:bd:d5:2e: f7:ce:6b:f6:a3:99:01:b6:2a:d2:5e:9d:f8:a2:09:66:3e:e4: 97:0d:4d:7e:68:b3:0a:c2:d1:d0:63:35:0d:9c:50:b0:42:2a: f3:12:c6:e3:9c:1c:99:e9:ee:ac:7d:4a:bb:31:4a:21:74:9a: 32:3f:d6:fe:85:c3:2e:46:36:6a:8f:47:a1:70:33:fe:5f:88: 77:64:45:42:d8:59:27:e0:f8:27:bf:32:32:47:fd:40:a8:30: 8a:23:68:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKLM4dprN1JNX8R19o1TOyfaLAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNDA1MTgyMjM2NTNaFw0yNDA1MjIwMDE0NTNaMDMxMTAvBgNV BAMTKDFDODAzMkMxNjI1RTlCMzRFRkQ0NzQwNkMwNURENjJFOTYyMURFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYnW3MHFpIerbgQccgPqy0H5HS zknvTG6CHLnIIOjjNX6cljNE65kZK0deY1dwzvACBiSJFqpFyUQbca5oJCklx0Gy /ndkQNhitSRrsClZuUSoLCCPZl0qzk3me2P//rq29DmcMjC5ju0GEl0L7rI4TRD4 rXZrNtwA3Ln1UdQS+qRb36xGpGbFJybqzsj8ci3ugXJKvvN05jheQZOfSJ0jQpHd w+J11Qkz/H+VRfkXQV8MFowjeh6FFWPg0bQiwzZUf/wCCSdHxbRTezSeeyi7ap3T Klvhy5WDgCmrm9jeNKDrA1QbEb6rOrRiSJ12lomQKTsDB+9WVuI0Wbn+dEj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHIAywWJemzTv1HQGwF3WLpYh3lUwHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFhsIexQn0aVbF9GsJqW5HiAytlZycRqpk5 sm2eQl6UvXMMQetYLB6A1hAvoM1EA8y81x+sC+INEgVnIYmPB88Y6llZHmQFkutl Pa+lhgMJ3G+oVGwKIKjPuZTYuAuRlFWILEK8Neqscs+MYxv8lkziyho/TdbZzlqr 7Ydv/AGPB8OsZz7ltG6hLQa1PChlTHOTKR2thVY9snpUHW163L3VLvfOa/ajmQG2 KtJenfiiCWY+5JcNTX5oswrC0dBjNQ2cULBCKvMSxuOcHJnp7qx9SrsxSiF0mjI/ 1v6Fwy5GNmqPR6FwM/5fiHdkRULYWSfg+Ce/MjJH/UCoMIojaOE= -----END CERTIFICATE-----Generated at Sun May 19 00:29:31 2024 by rpki-client on console-ams.rpki-client.org