$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json) Hash identifier: SSRm7laBUsCuZS1Neff+1sYDIQ6LQM4pEWA2jIdvQbs= Subject key identifier: A2:17:FE:B0:3E:1A:AF:38:CE:E9:69:3B:AD:D8:66:BA:EE:45:B5:13 Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Certificate serial: 30AFE03318A2EFCF1D0DD0127D241339B351CC2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft Manifest number: 03C1 Signing time: Sun 19 May 2024 12:31:15 +0000 Manifest this update: Sun 19 May 2024 12:26:15 +0000 Manifest next update: Thu 23 May 2024 00:06:15 +0000 Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: XA7066zd/w5AU61NSjKRTnCLehkiM5wHgbMpIjMCFCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 03:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:af:e0:33:18:a2:ef:cf:1d:0d:d0:12:7d:24:13:39:b3:51:cc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Validity Not Before: May 19 12:26:15 2024 GMT Not After : May 23 00:06:15 2024 GMT Subject: CN=A217FEB03E1AAF38CEE9693BADD866BAEE45B513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:be:98:c7:da:36:96:55:4c:54:28:37:94: 24:77:df:66:98:f2:27:bb:04:8a:cd:da:eb:06:84: 0d:d1:77:0a:40:3d:af:21:d2:36:64:99:fa:c9:ca: 1a:c0:fd:0e:38:e6:b8:6c:ab:6a:68:53:f4:75:cd: c5:d1:b1:ed:eb:b4:6e:3b:b8:1f:eb:2b:5d:0f:fd: 89:9e:c9:e8:58:7d:3c:a9:e7:1a:e1:59:f7:ba:77: 6a:d6:c6:ec:44:7a:c2:9f:02:4a:13:a5:9f:92:2b: bd:d4:fb:8a:30:e4:b0:c2:25:07:a1:65:a4:de:4d: 99:43:c0:aa:ae:43:e5:e6:3e:9a:65:20:b8:cc:dd: b0:1a:7c:fb:d5:58:8b:ec:21:a0:a4:15:b9:be:c1: 40:2b:d6:1f:2a:92:79:90:1a:f7:d9:d3:db:4c:c1: 33:1b:3a:e5:e4:96:3e:11:6b:06:0a:59:d9:f6:04: 93:c4:41:71:7b:60:67:4d:b6:3d:c6:31:ec:18:63: f7:a3:58:9c:fb:11:cd:19:03:a2:4b:cb:39:c6:80: d9:7d:42:87:1b:de:ca:2a:b9:44:ad:34:60:01:04: 03:32:0b:cd:45:b7:40:7f:43:45:dc:8c:67:aa:44: 5f:10:6d:b9:79:c3:0b:79:30:5d:b1:08:52:62:e0: 6c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:17:FE:B0:3E:1A:AF:38:CE:E9:69:3B:AD:D8:66:BA:EE:45:B5:13 X509v3 Authority Key Identifier: keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:3f:2c:21:9b:85:8b:e9:d4:7d:ee:f7:88:63:fc:d6:7c:69: 11:38:07:5f:48:9b:07:94:cc:ff:4e:06:cc:18:52:6e:bf:b2: b0:b0:a4:3e:39:23:78:09:03:3b:e1:15:e0:f1:e3:d0:0d:b7: 62:4a:f5:b5:32:67:a3:e2:be:3c:dc:75:6f:bb:8c:a9:91:b0: 7d:84:b0:ef:ec:73:7b:dd:62:c3:1a:e5:1a:c2:a7:4e:cd:6f: 83:05:ea:c4:49:1e:dd:e1:40:4f:fb:e3:a6:42:4a:c3:72:33: 19:ef:a8:cd:0b:3d:3f:c6:01:c4:70:63:ba:43:e5:a6:2a:1c: b4:17:1e:49:a3:fd:b9:fa:24:7c:1a:de:1f:a2:93:be:ed:0b: 61:fc:4b:a8:bd:e4:bc:37:d3:48:bb:a2:a1:29:bd:30:73:41: c4:d3:73:db:eb:11:f8:76:39:84:d9:32:3c:12:be:d5:53:81: a3:43:57:1c:45:36:4c:12:ae:22:24:a7:44:f0:89:3f:3d:50: 7f:19:25:6a:73:be:c5:f1:05:8a:c0:54:d8:f6:77:06:6b:15: 0c:ab:06:20:bc:54:73:5a:9e:7d:78:63:fd:21:c6:f6:af:60: cb:33:d8:8f:80:cc:7b:44:5c:fd:1d:2f:fe:f3:56:e7:38:62: ef:85:f0:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMK/gMxii788dDdASfSQTObNRzCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVG NkIxQjlFQjAeFw0yNDA1MTkxMjI2MTVaFw0yNDA1MjMwMDA2MTVaMDMxMTAvBgNV BAMTKEEyMTdGRUIwM0UxQUFGMzhDRUU5NjkzQkFERDg2NkJBRUU0NUI1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfb6Yx9o2llVMVCg3lCR332aY 8ie7BIrN2usGhA3RdwpAPa8h0jZkmfrJyhrA/Q445rhsq2poU/R1zcXRse3rtG47 uB/rK10P/YmeyehYfTyp5xrhWfe6d2rWxuxEesKfAkoTpZ+SK73U+4ow5LDCJQeh ZaTeTZlDwKquQ+XmPpplILjM3bAafPvVWIvsIaCkFbm+wUAr1h8qknmQGvfZ09tM wTMbOuXklj4RawYKWdn2BJPEQXF7YGdNtj3GMewYY/ejWJz7Ec0ZA6JLyznGgNl9 Qocb3soquUStNGABBAMyC81Ft0B/Q0XcjGeqRF8Qbbl5wwt5MF2xCFJi4GzXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUohf+sD4arzjO6Wk7rdhmuu5FtRMwHwYDVR0j BBgwFoAUS2r3M17Af+dGvCo2gwJDbvaxueswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC80QjZBRjczMzVF QzA3RkU3NDZCQzJBMzY4MzAyNDM2RUY2QjFCOUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVGNkIx QjlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQz NkVGNkIxQjlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQ/LCGbhYvp1H3u94hj/NZ8aRE4B19ImweU zP9OBswYUm6/srCwpD45I3gJAzvhFeDx49ANt2JK9bUyZ6PivjzcdW+7jKmRsH2E sO/sc3vdYsMa5RrCp07Nb4MF6sRJHt3hQE/746ZCSsNyMxnvqM0LPT/GAcRwY7pD 5aYqHLQXHkmj/bn6JHwa3h+ik77tC2H8S6i95Lw300i7oqEpvTBzQcTTc9vrEfh2 OYTZMjwSvtVTgaNDVxxFNkwSriIkp0TwiT89UH8ZJWpzvsXxBYrAVNj2dwZrFQyr BiC8VHNann14Y/0hxvavYMsz2I+AzHtEXP0dL/7zVuc4Yu+F8BY= -----END CERTIFICATE-----Generated at Sun May 19 13:18:10 2024 by rpki-client on console-fra.rpki-client.org