$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json) Hash identifier: cGtJ2fuFE8UkCgkGWhytdWHyarAIo3guEzwlOBAw/u0= Subject key identifier: C4:EC:5F:F6:84:5C:A7:77:B8:AA:15:F9:CB:74:E9:4E:6D:B2:BB:2C Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 3A24EDCB5C6940B1670ABDC583E26125DB1B3A03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft Manifest number: CC Signing time: Sat 18 May 2024 13:30:37 +0000 Manifest this update: Sat 18 May 2024 13:25:37 +0000 Manifest next update: Tue 21 May 2024 18:05:37 +0000 Files and hashes: 1: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: RmrffSm2+nzmoeS3sX22pBVQj49v4UFpHgMnQE07nMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 18:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:24:ed:cb:5c:69:40:b1:67:0a:bd:c5:83:e2:61:25:db:1b:3a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: May 18 13:25:37 2024 GMT Not After : May 21 18:05:37 2024 GMT Subject: CN=C4EC5FF6845CA777B8AA15F9CB74E94E6DB2BB2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:a3:38:26:9d:1f:da:91:7a:da:dc:21:4f: 1c:a1:b2:74:7e:3e:20:03:f2:a2:59:6a:7d:de:40: 37:72:dc:5a:67:8a:0d:69:78:80:36:11:c4:59:69: 9a:b8:d1:5b:f7:8b:fd:1d:7b:64:b3:ae:04:28:6a: 9a:18:99:9d:9f:52:56:b0:cf:1c:84:8d:0b:30:98: d7:91:36:ac:36:d8:ae:7d:0e:7e:e3:80:db:4b:15: 4e:ee:2d:bc:a3:72:1e:7d:fb:12:a3:de:e3:87:0d: 9e:40:9c:14:f7:86:91:c7:ce:d6:ac:34:96:f1:0a: a8:02:41:28:f0:7a:72:42:0c:66:5c:d4:c8:95:2b: b4:6b:6e:6e:2a:65:f5:76:92:e6:0f:24:0a:ab:f1: 4a:ed:5f:65:1f:69:77:bb:c8:33:1d:90:f8:86:0c: 40:75:99:83:1e:35:88:78:11:3e:25:86:bb:93:10: 0f:54:93:9b:c2:6a:90:d6:6a:db:86:cf:db:3f:ed: b1:dc:6e:0e:af:0c:0c:ef:c9:2d:25:23:95:9f:d6: 4e:4a:44:a2:db:3d:83:29:b7:76:f8:30:7b:af:85: 73:46:41:ff:11:12:c3:a7:cb:c0:47:ac:d4:3c:d5: 11:2a:c1:23:5c:63:f9:10:2e:af:cf:c5:dc:1f:b1: ac:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EC:5F:F6:84:5C:A7:77:B8:AA:15:F9:CB:74:E9:4E:6D:B2:BB:2C X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d6:8e:82:95:e7:87:f6:b0:e1:aa:44:16:ee:8e:83:d6:a5: 3d:e8:f4:18:05:fc:76:29:8c:35:17:2d:0e:ab:f8:66:50:4e: 38:08:25:84:a1:43:d9:8b:1b:1b:b4:78:77:b1:cc:7b:1a:48: c8:dc:19:f9:b2:f1:cf:02:2b:41:a6:c6:9f:88:d9:bb:38:64: d2:07:a4:ee:0e:54:91:93:c4:e2:41:2f:65:9a:16:f8:29:6f: eb:d7:59:a1:75:c4:35:e6:94:54:91:40:66:4a:21:dd:56:c8: 59:52:c9:44:91:97:78:1c:55:3f:b7:04:46:f8:43:cc:11:29: d9:86:15:d8:20:61:0b:b9:44:ea:70:52:76:20:2e:cb:47:65: 65:01:ff:de:21:40:df:7e:09:a4:56:7e:1c:40:de:68:dd:88: 52:03:a0:d6:b1:d4:bc:b9:07:cb:4d:4b:8b:98:bf:f2:65:69: 21:a4:e2:fb:f1:be:9f:25:43:ab:2c:89:89:66:9d:a5:c1:6c: e1:56:ce:8a:44:a7:e8:ee:b2:3a:a4:45:c8:7c:1a:bc:0c:58: b0:0d:77:f3:fa:c0:bc:9d:39:a4:39:74:f0:75:12:87:2c:b2: 70:0e:3d:92:64:21:60:cf:f4:21:c9:25:ae:2f:b9:8d:49:8b: 39:ab:8d:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOiTty1xpQLFnCr3Fg+JhJdsbOgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNDA1MTgxMzI1MzdaFw0yNDA1MjExODA1MzdaMDMxMTAvBgNV BAMTKEM0RUM1RkY2ODQ1Q0E3NzdCOEFBMTVGOUNCNzRFOTRFNkRCMkJCMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubKM4Jp0f2pF62twhTxyhsnR+ PiAD8qJZan3eQDdy3Fpnig1peIA2EcRZaZq40Vv3i/0de2SzrgQoapoYmZ2fUlaw zxyEjQswmNeRNqw22K59Dn7jgNtLFU7uLbyjch59+xKj3uOHDZ5AnBT3hpHHztas NJbxCqgCQSjwenJCDGZc1MiVK7Rrbm4qZfV2kuYPJAqr8UrtX2UfaXe7yDMdkPiG DEB1mYMeNYh4ET4lhruTEA9Uk5vCapDWatuGz9s/7bHcbg6vDAzvyS0lI5Wf1k5K RKLbPYMpt3b4MHuvhXNGQf8REsOny8BHrNQ81REqwSNcY/kQLq/PxdwfsayNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxOxf9oRcp3e4qhX5y3TpTm2yuywwHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0 NzUwMzY0MUVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3WjoKV54f2sOGqRBbujoPWpT3o9BgF/HYp jDUXLQ6r+GZQTjgIJYShQ9mLGxu0eHexzHsaSMjcGfmy8c8CK0Gmxp+I2bs4ZNIH pO4OVJGTxOJBL2WaFvgpb+vXWaF1xDXmlFSRQGZKId1WyFlSyUSRl3gcVT+3BEb4 Q8wRKdmGFdggYQu5ROpwUnYgLstHZWUB/94hQN9+CaRWfhxA3mjdiFIDoNax1Ly5 B8tNS4uYv/JlaSGk4vvxvp8lQ6ssiYlmnaXBbOFWzopEp+jusjqkRch8GrwMWLAN d/P6wLydOaQ5dPB1EocssnAOPZJkIWDP9CHJJa4vuY1JizmrjaQ= -----END CERTIFICATE-----Generated at Sat May 18 15:25:22 2024 by rpki-client on console-fra.rpki-client.org