$ rpki-client -vvf repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.mft (raw, json) Hash identifier: GNAv/QKxKAclqI+TgwzSkT+YqI1KZLTEPiqNSExx/qA= Subject key identifier: A4:89:85:C4:48:AC:A8:1E:D1:01:71:84:EF:BD:94:14:36:E4:4A:2C Authority key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Certificate issuer: /CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Certificate serial: 6C7085E53A7C371AAF5ACEEAC93598498FDBD2B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft Manifest number: 01C0 Signing time: Sat 18 May 2024 02:00:42 +0000 Manifest this update: Sat 18 May 2024 01:55:42 +0000 Manifest next update: Tue 21 May 2024 06:13:42 +0000 Files and hashes: 1: 7B29BAF4812476761482CE1C3A92188A2A8334CE.crl (hash: Q8kDahL3s6BnqIJljzCZ9gdXnwKRWdUpNDYwIlLFC3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:70:85:e5:3a:7c:37:1a:af:5a:ce:ea:c9:35:98:49:8f:db:d2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Validity Not Before: May 18 01:55:42 2024 GMT Not After : May 21 06:13:42 2024 GMT Subject: CN=A48985C448ACA81ED1017184EFBD941436E44A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:1b:fa:1a:6d:19:f1:d5:02:71:e6:b4:38: af:3a:c2:7a:5f:04:53:1e:ab:5b:3e:1d:15:20:d3: 32:02:2e:41:64:00:53:d1:1f:3a:d3:72:bb:3c:30: ca:c0:d2:38:ac:53:ad:34:aa:03:b4:64:52:0c:1a: b4:f8:54:7c:19:6e:7c:f2:12:17:0a:28:24:56:19: 8a:0a:ae:1b:03:2a:31:7e:cb:b1:6b:98:d2:3c:18: 53:de:08:23:53:50:b6:8c:55:34:6b:48:16:1f:8f: f0:ca:49:08:76:22:b7:1d:81:10:61:8f:2f:f8:84: 84:c4:8d:58:b6:5f:9b:92:83:63:5a:5b:79:d5:ca: de:f7:42:5f:db:7f:fd:d3:fb:81:ec:57:9c:3e:be: c6:ea:55:26:b3:68:3c:8c:cd:ae:7f:35:52:fa:da: aa:50:dc:3a:66:a7:cc:33:b2:6e:e0:02:18:5d:06: 1a:48:2e:57:59:10:8a:fe:64:56:28:ad:f7:28:a0: 27:21:f0:9d:c7:ff:fd:26:31:e2:38:0a:fe:9f:b9: 41:d0:ad:ac:ad:7d:79:ad:36:e3:62:20:ae:99:76: 19:75:2b:f6:9e:2c:db:a4:8a:cb:d4:ba:c0:60:4a: c3:de:78:71:c6:d7:b7:1a:e0:fa:ff:a7:6d:4e:26: b0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:89:85:C4:48:AC:A8:1E:D1:01:71:84:EF:BD:94:14:36:E4:4A:2C X509v3 Authority Key Identifier: keyid:7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ac:84:35:84:d6:ac:27:a5:a4:99:ca:c9:48:1b:87:6b:ad: d7:c6:86:13:c7:e8:61:a5:97:a2:cf:3b:a1:7a:e2:a0:c0:99: c1:a9:5d:cb:4b:f1:7d:38:72:66:24:43:c1:02:ea:07:97:4c: 31:a4:71:7b:e2:09:3c:bb:c7:fd:28:79:56:65:35:72:86:3e: 5a:52:b8:e0:37:9c:1d:87:59:ee:43:3f:d8:58:3e:34:13:d3: 6f:d8:f3:05:6e:a1:f4:0d:c3:b3:5b:0d:da:76:93:f3:cb:e2: 39:b4:ab:51:a6:da:3b:99:0f:35:3d:ee:db:71:61:98:9e:2a: 45:2c:03:ec:f5:20:07:18:1d:74:70:d5:72:ca:c1:2c:32:f8: 9c:c1:39:ba:62:eb:d3:00:e8:89:0a:09:94:24:7d:20:f5:29: 5e:a6:1d:95:74:6d:89:3e:02:98:63:09:4b:1b:bf:ff:85:81: 62:e9:a7:a4:a5:c1:b3:64:f1:eb:cc:46:ad:e5:15:ff:45:af: 8f:5d:d4:e3:e4:45:41:19:99:62:14:3b:b7:b0:c9:13:61:b6: d3:9d:ce:90:d2:81:e7:5b:16:f9:61:d8:1b:1e:06:72:e6:90: cd:ca:29:c0:6f:fd:85:3e:68:b9:e3:d1:1d:da:30:5b:31:76: 66:3d:16:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHCF5Tp8NxqvWs7qyTWYSY/b0rgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEy QTgzMzRDRTAeFw0yNDA1MTgwMTU1NDJaFw0yNDA1MjEwNjEzNDJaMDMxMTAvBgNV BAMTKEE0ODk4NUM0NDhBQ0E4MUVEMTAxNzE4NEVGQkQ5NDE0MzZFNDRBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClvRv6Gm0Z8dUCcea0OK86wnpf BFMeq1s+HRUg0zICLkFkAFPRHzrTcrs8MMrA0jisU600qgO0ZFIMGrT4VHwZbnzy EhcKKCRWGYoKrhsDKjF+y7FrmNI8GFPeCCNTULaMVTRrSBYfj/DKSQh2IrcdgRBh jy/4hITEjVi2X5uSg2NaW3nVyt73Ql/bf/3T+4HsV5w+vsbqVSazaDyMza5/NVL6 2qpQ3Dpmp8wzsm7gAhhdBhpILldZEIr+ZFYorfcooCch8J3H//0mMeI4Cv6fuUHQ raytfXmtNuNiIK6Zdhl1K/aeLNukisvUusBgSsPeeHHG17ca4Pr/p21OJrDxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpImFxEisqB7RAXGE772UFDbkSiwwHwYDVR0j BBgwFoAUeym69IEkdnYUgs4cOpIYiiqDNM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMC83QjI5QkFGNDgx MjQ3Njc2MTQ4MkNFMUMzQTkyMTg4QTJBODMzNENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4OEEyQTgz MzRDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvN0IyOUJBRjQ4MTI0NzY3NjE0ODJDRTFDM0E5MjE4 OEEyQTgzMzRDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCshDWE1qwnpaSZyslIG4drrdfGhhPH6GGl l6LPO6F64qDAmcGpXctL8X04cmYkQ8EC6geXTDGkcXviCTy7x/0oeVZlNXKGPlpS uOA3nB2HWe5DP9hYPjQT02/Y8wVuofQNw7NbDdp2k/PL4jm0q1Gm2juZDzU97ttx YZieKkUsA+z1IAcYHXRw1XLKwSwy+JzBObpi69MA6IkKCZQkfSD1KV6mHZV0bYk+ AphjCUsbv/+FgWLpp6SlwbNk8evMRq3lFf9Fr49d1OPkRUEZmWIUO7ewyRNhttOd zpDSgedbFvlh2BseBnLmkM3KKcBv/YU+aLnj0R3aMFsxdmY9FmE= -----END CERTIFICATE-----Generated at Sat May 18 04:02:39 2024 by rpki-client on console-ams.rpki-client.org