$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: fqNvwxrctmLXjzbLqinknSAEZiHhAwy2ShlQsekGkXs= Subject key identifier: 4D:64:0F:63:CB:F3:6D:CB:17:B1:6B:A2:0D:DB:BE:6E:E5:82:FD:64 Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 392D8C8C5BF1285017E5B9275977CB649F1AC02F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 03ED Signing time: Sun 19 May 2024 10:10:36 +0000 Manifest this update: Sun 19 May 2024 10:05:36 +0000 Manifest next update: Wed 22 May 2024 19:55:36 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: drPuhA2QyHNRD4Lapq4L/0B3uAsuOx7NbGhIVE36Rh4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2d:8c:8c:5b:f1:28:50:17:e5:b9:27:59:77:cb:64:9f:1a:c0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: May 19 10:05:36 2024 GMT Not After : May 22 19:55:36 2024 GMT Subject: CN=4D640F63CBF36DCB17B16BA20DDBBE6EE582FD64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:a9:e6:37:4c:92:75:75:2b:67:10:86:db: c2:34:7f:ac:af:8a:fc:b9:50:c6:db:3c:17:f5:10: cc:2d:8b:f8:89:db:31:2b:39:e2:d3:df:99:13:25: de:32:85:f4:80:07:7a:9a:0c:55:3b:ff:1c:06:14: be:92:27:74:c3:96:e0:38:04:05:0f:49:59:c2:78: df:ef:2e:75:29:02:e9:07:cc:d5:91:ec:49:06:63: 56:b9:df:dc:aa:ef:5e:17:6c:e7:95:2b:cb:e1:da: fd:9e:10:13:5d:09:11:d8:ab:47:1d:0c:03:76:59: eb:2c:70:12:58:1a:ef:cc:fd:e8:de:6d:3f:3c:8e: c9:ee:ef:52:cb:e6:05:22:3d:69:6e:be:ac:d8:7e: b1:0f:17:1e:36:e0:fd:40:33:69:a4:3d:a7:65:26: 31:6c:44:9f:35:7b:a2:aa:37:06:56:64:2c:b3:db: 00:cd:8a:ee:ea:8f:c6:1b:96:be:a1:21:ce:26:5d: 34:7e:ff:06:56:ad:17:bb:a6:ba:0d:3a:d0:85:4a: 41:08:23:7d:3f:2d:d9:8b:e7:36:0b:27:69:05:3f: 92:88:9a:62:ae:65:97:66:18:e8:bb:61:36:19:fa: 00:03:88:0c:f4:fd:d9:87:55:7a:4b:6b:34:b0:fd: e4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:64:0F:63:CB:F3:6D:CB:17:B1:6B:A2:0D:DB:BE:6E:E5:82:FD:64 X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7e:2a:51:86:3c:6d:db:f4:66:ef:de:fe:85:a4:6d:5d:18: 06:ec:6b:53:11:ff:30:eb:39:0b:d5:c1:0e:d7:49:17:ee:8f: 30:ca:ef:bb:c3:54:74:9d:8c:de:bd:8e:5e:4a:51:ff:6c:2d: 78:b1:74:ef:96:69:41:fb:2a:8f:74:6c:48:df:62:22:92:9f: 46:03:fb:59:77:46:92:19:78:8c:89:9d:4b:48:5b:96:9a:6f: a7:96:92:e0:b5:7a:53:58:f3:c6:4b:b7:bf:68:e6:07:b4:ca: 8e:5e:84:d7:77:bb:e0:fa:33:8b:90:51:ea:7a:7e:47:c7:39: 5f:61:63:7b:f0:73:6b:45:80:d1:b7:c4:65:4c:9f:31:02:f9: 99:0f:2e:ab:a1:01:5d:e0:7f:d7:d1:6a:47:c5:2b:68:a9:a0: ab:9e:fb:9a:61:de:81:e7:66:c5:3a:1e:c2:73:21:ca:04:79: 60:18:46:05:01:88:7f:0f:3b:fb:08:33:63:4a:56:45:44:94: 08:ea:7e:7b:ef:b9:ba:fc:b5:4c:27:9a:d6:c4:44:6f:28:ab: 3a:4c:b7:4f:41:b4:d2:a0:41:8e:64:57:3b:78:20:06:01:9d: 51:11:d0:47:b7:f2:68:42:d2:df:42:a8:4f:84:24:82:96:aa: a8:5f:a4:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOS2MjFvxKFAX5bknWXfLZJ8awC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNDA1MTkxMDA1MzZaFw0yNDA1MjIxOTU1MzZaMDMxMTAvBgNV BAMTKDRENjQwRjYzQ0JGMzZEQ0IxN0IxNkJBMjBEREJCRTZFRTU4MkZENjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOKnmN0ySdXUrZxCG28I0f6yv ivy5UMbbPBf1EMwti/iJ2zErOeLT35kTJd4yhfSAB3qaDFU7/xwGFL6SJ3TDluA4 BAUPSVnCeN/vLnUpAukHzNWR7EkGY1a539yq714XbOeVK8vh2v2eEBNdCRHYq0cd DAN2WesscBJYGu/M/ejebT88jsnu71LL5gUiPWluvqzYfrEPFx424P1AM2mkPadl JjFsRJ81e6KqNwZWZCyz2wDNiu7qj8Yblr6hIc4mXTR+/wZWrRe7proNOtCFSkEI I30/LdmL5zYLJ2kFP5KImmKuZZdmGOi7YTYZ+gADiAz0/dmHVXpLazSw/eTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTWQPY8vzbcsXsWuiDdu+buWC/WQwHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEh+KlGGPG3b9Gbv3v6FpG1dGAbsa1MR/zDr OQvVwQ7XSRfujzDK77vDVHSdjN69jl5KUf9sLXixdO+WaUH7Ko90bEjfYiKSn0YD +1l3RpIZeIyJnUtIW5aab6eWkuC1elNY88ZLt79o5ge0yo5ehNd3u+D6M4uQUep6 fkfHOV9hY3vwc2tFgNG3xGVMnzEC+ZkPLquhAV3gf9fRakfFK2ipoKue+5ph3oHn ZsU6HsJzIcoEeWAYRgUBiH8PO/sIM2NKVkVElAjqfnvvubr8tUwnmtbERG8oqzpM t09BtNKgQY5kVzt4IAYBnVER0Ee38mhC0t9CqE+EJIKWqqhfpOI= -----END CERTIFICATE-----Generated at Sun May 19 10:47:50 2024 by rpki-client on console-fra.rpki-client.org