$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft File: D77C7D38397FCDE17250AA403BF110EC387F7C02.mft (raw, json) Hash identifier: wfV0ap8Ofgm3l3p7vm+argFrsDYYzwoZOXiIKEiH11k= Subject key identifier: 9D:12:E2:E3:CC:29:6B:12:3C:62:C1:A8:53:EA:A6:14:9C:AB:3F:45 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 216AAA4C8EAAC1395910456AACBD0667260911E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft Manifest number: 61 Signing time: Fri 17 May 2024 19:31:16 +0000 Manifest this update: Fri 17 May 2024 19:26:16 +0000 Manifest next update: Tue 21 May 2024 05:31:16 +0000 Files and hashes: 1: D77C7D38397FCDE17250AA403BF110EC387F7C02.crl (hash: XBgP2jA78qh+CDdtD/hBtv4vgQ+EVncGE7gcxgngDNk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6a:aa:4c:8e:aa:c1:39:59:10:45:6a:ac:bd:06:67:26:09:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: May 17 19:26:16 2024 GMT Not After : May 21 05:31:16 2024 GMT Subject: CN=9D12E2E3CC296B123C62C1A853EAA6149CAB3F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:6e:03:e4:4f:7d:db:86:2a:5b:14:5b:f0: 4b:e8:8b:db:f2:ce:46:72:a0:43:d4:a6:50:e6:24: f0:fc:10:a6:c4:3a:6f:95:26:b5:4f:7c:41:61:35: 98:30:1b:22:a9:eb:d7:ba:ad:43:42:98:e0:12:60: 4a:b4:98:9d:09:ca:8f:7b:1c:fe:6a:98:ec:03:c6: 87:c4:29:88:4a:25:18:95:f5:d1:31:d9:8e:01:f2: 71:7f:d8:d7:d5:7a:35:35:a8:aa:1d:0c:5d:49:11: 6e:dd:40:2c:9c:d7:37:b7:e5:c6:81:07:56:e8:6f: a7:4c:6d:74:ca:b0:22:ef:15:3d:26:35:dd:00:72: d8:19:9f:6d:2d:f8:6f:ad:8e:84:1a:00:58:c6:a0: cc:18:c5:c0:04:41:8a:70:a8:6f:d4:f0:40:6f:b5: 4a:6d:c0:e5:38:56:81:25:c3:62:bf:99:55:1c:c8: 65:27:ca:a0:94:ed:72:7e:d2:47:6d:de:ed:7f:d7: c4:12:4e:cb:cb:d5:8e:0e:27:bd:54:fa:b9:9d:8c: b2:28:30:df:3c:4a:7d:b9:1a:a1:d0:f4:21:b8:16: ee:14:da:f5:01:95:de:58:e2:99:4e:81:36:66:e7: 58:0c:3b:82:87:90:a9:73:81:ac:1d:ab:d3:37:b8: b9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:12:E2:E3:CC:29:6B:12:3C:62:C1:A8:53:EA:A6:14:9C:AB:3F:45 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:97:8a:79:f0:93:cd:2e:d3:fb:40:3c:1e:40:6f:ad:72:1e: 0a:f5:92:10:c0:26:a8:e7:a1:f4:a7:ce:5a:e2:7c:35:26:48: b3:ad:57:96:9c:e5:71:d0:de:25:7d:3a:b1:46:91:af:71:5c: 68:fc:10:b7:65:34:dc:46:21:98:b0:0b:95:e2:95:a5:95:61: 0f:df:70:3e:91:b4:2e:e6:b1:48:b6:e4:6c:08:df:4a:06:b0: d3:b5:40:19:fe:e0:c6:07:f6:6e:1a:8d:7e:5b:6b:63:a7:3c: 32:5b:2b:73:08:b8:f1:57:6d:49:21:18:61:6b:00:66:b4:13: f2:bb:26:2d:4d:5f:33:87:b1:da:0b:96:b4:9f:d2:5c:17:e5: 5d:15:8c:f4:0b:25:3f:2b:4a:10:54:2b:bd:f5:ea:6d:f8:ac: d2:5c:95:98:f0:22:83:cb:d5:0b:70:4f:58:c2:2b:5a:d9:45: 5d:31:41:38:6a:be:1e:58:b9:5a:f8:69:f8:bf:5a:6a:90:5c: ef:53:74:3d:f3:c3:1a:f2:c4:f6:91:e0:10:bb:30:db:82:58: e9:87:bc:b3:7a:cf:67:e4:7c:ca:08:2c:9b:63:e2:b7:96:a3: f9:dc:ef:81:9f:89:6b:94:da:eb:75:97:ea:4a:5b:9f:45:2b: b2:30:51:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWqqTI6qwTlZEEVqrL0GZyYJEeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNDA1MTcxOTI2MTZaFw0yNDA1MjEwNTMxMTZaMDMxMTAvBgNV BAMTKDlEMTJFMkUzQ0MyOTZCMTIzQzYyQzFBODUzRUFBNjE0OUNBQjNGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDG4D5E9924YqWxRb8Evoi9vy zkZyoEPUplDmJPD8EKbEOm+VJrVPfEFhNZgwGyKp69e6rUNCmOASYEq0mJ0Jyo97 HP5qmOwDxofEKYhKJRiV9dEx2Y4B8nF/2NfVejU1qKodDF1JEW7dQCyc1ze35caB B1bob6dMbXTKsCLvFT0mNd0ActgZn20t+G+tjoQaAFjGoMwYxcAEQYpwqG/U8EBv tUptwOU4VoElw2K/mVUcyGUnyqCU7XJ+0kdt3u1/18QSTsvL1Y4OJ71U+rmdjLIo MN88Sn25GqHQ9CG4Fu4U2vUBld5Y4plOgTZm51gMO4KHkKlzgawdq9M3uLk/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnRLi48wpaxI8YsGoU+qmFJyrP0UwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdhNmIyM2ItYzQxZS00NDQ5LWEx NDktYmMwYzZjOGIwMTFiLzAvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEw RUMzODdGN0MwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyXinnwk80u0/tAPB5Ab61yHgr1khDAJqjn ofSnzlrifDUmSLOtV5ac5XHQ3iV9OrFGka9xXGj8ELdlNNxGIZiwC5XilaWVYQ/f cD6RtC7msUi25GwI30oGsNO1QBn+4MYH9m4ajX5ba2OnPDJbK3MIuPFXbUkhGGFr AGa0E/K7Ji1NXzOHsdoLlrSf0lwX5V0VjPQLJT8rShBUK7316m34rNJclZjwIoPL 1QtwT1jCK1rZRV0xQThqvh5YuVr4afi/WmqQXO9TdD3zwxryxPaR4BC7MNuCWOmH vLN6z2fkfMoILJtj4reWo/nc74GfiWuU2ut1l+pKW59FK7IwUSE= -----END CERTIFICATE-----Generated at Fri May 17 20:02:00 2024 by rpki-client on console-ams.rpki-client.org