$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: nvEAQag5fusNR6708MP6Dr8XmXgqh/3vDnQAuiMWRgY= Subject key identifier: FF:A5:28:DE:FE:EB:A8:33:E0:62:17:DE:FD:08:DA:A2:28:98:74:93 Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 2E8F74D7228E9638995DF9F47CA4D661A19CD1AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: EA Signing time: Fri 17 May 2024 09:01:13 +0000 Manifest this update: Fri 17 May 2024 08:56:13 +0000 Manifest next update: Mon 20 May 2024 18:37:13 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: Kp4RXjVldp1BMTM7Og3H6BIA4MjL7fsUhKh1IIvx4Xo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 14:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8f:74:d7:22:8e:96:38:99:5d:f9:f4:7c:a4:d6:61:a1:9c:d1:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: May 17 08:56:13 2024 GMT Not After : May 20 18:37:13 2024 GMT Subject: CN=FFA528DEFEEBA833E06217DEFD08DAA228987493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:de:bb:b3:03:0f:70:d2:cb:41:da:fd:90: d4:9e:a6:e4:ad:c1:61:a6:ee:16:4d:1e:b6:8c:a1: f5:0d:d7:da:4e:54:7c:a8:16:58:13:82:8f:a7:88: 3f:e9:ff:78:43:40:b6:b5:4f:93:49:b9:fe:4e:7e: dc:0c:6a:24:55:d4:9f:75:5b:dc:88:b3:60:69:18: 5a:41:58:eb:0f:20:81:23:04:69:a6:cc:d6:e9:cb: 04:74:11:eb:84:90:f2:2b:8b:17:be:fc:76:8e:68: 3f:f0:b1:56:38:e8:f1:06:21:b4:5b:7e:5d:bb:84: 9c:fa:8d:58:8d:63:93:43:a2:78:44:79:b5:3d:58: 7f:4b:8f:b5:e8:ea:31:2e:b7:c3:e2:28:45:0c:dc: e6:43:e9:b0:d0:9b:4b:fe:a1:81:31:48:b2:4a:ff: 9a:65:c4:6a:82:6f:b1:19:53:b4:0c:b8:34:30:00: 86:d6:42:3f:18:06:d7:b4:b8:b5:35:01:ca:61:f0: 93:0f:86:23:04:64:ed:a9:04:9a:53:8e:8a:d0:f7: c2:8d:90:be:a1:d5:67:d7:6e:33:16:04:ed:e9:f5: 27:6d:7f:ae:bf:3e:7f:e2:24:43:93:5b:76:61:f2: 10:6b:6a:98:8d:8d:18:eb:52:34:0b:a8:e7:b5:c0: cc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A5:28:DE:FE:EB:A8:33:E0:62:17:DE:FD:08:DA:A2:28:98:74:93 X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:15:bc:d5:7b:20:8c:6e:6a:fa:a0:0f:60:22:1d:c5:da:d6: 85:ee:9d:e9:8c:c5:4c:00:a8:6b:66:e5:61:78:33:6f:5a:69: d3:bf:07:22:8f:5d:2c:b7:d8:e0:4d:f2:26:a2:7a:33:7e:a9: f4:5a:23:dc:47:4f:fb:ee:87:ab:72:23:6d:87:0f:e6:7f:91: b2:92:d6:31:0d:41:28:f2:cc:52:89:28:1c:dd:7e:ca:b7:31: 31:34:b7:ee:17:5f:10:73:a8:cf:1b:bd:df:fb:39:a1:0e:92: 95:75:dc:04:e6:c5:ff:e6:54:10:7a:38:30:98:1c:36:18:4b: 8a:c3:a7:44:0a:d9:bf:fe:3d:41:a1:d0:9d:7e:0b:c4:18:4d: 0a:27:7c:b0:f3:54:0e:7b:81:5f:32:af:92:75:73:3d:1b:70: 2c:85:ea:78:0d:0e:8e:72:84:97:25:36:71:e5:ce:c3:7a:14: 35:08:2d:0d:4f:b9:a4:b1:fd:fc:3b:0c:95:1c:cb:26:e1:5e: 40:71:e0:45:18:fc:4f:88:64:99:35:eb:a7:14:f2:42:64:58: 4e:38:ec:ff:cc:3c:5a:2d:d0:59:47:a1:69:6f:65:7e:a9:d0: 2e:e4:f7:69:fd:14:90:04:28:d0:36:83:10:1d:4f:4f:19:a1: ac:ad:60:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULo901yKOljiZXfn0fKTWYaGc0a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNDA1MTcwODU2MTNaFw0yNDA1MjAxODM3MTNaMDMxMTAvBgNV BAMTKEZGQTUyOERFRkVFQkE4MzNFMDYyMTdERUZEMDhEQUEyMjg5ODc0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZN67swMPcNLLQdr9kNSepuSt wWGm7hZNHraMofUN19pOVHyoFlgTgo+niD/p/3hDQLa1T5NJuf5OftwMaiRV1J91 W9yIs2BpGFpBWOsPIIEjBGmmzNbpywR0EeuEkPIrixe+/HaOaD/wsVY46PEGIbRb fl27hJz6jViNY5NDonhEebU9WH9Lj7Xo6jEut8PiKEUM3OZD6bDQm0v+oYExSLJK /5plxGqCb7EZU7QMuDQwAIbWQj8YBte0uLU1Acph8JMPhiMEZO2pBJpTjorQ98KN kL6h1WfXbjMWBO3p9Sdtf66/Pn/iJEOTW3Zh8hBrapiNjRjrUjQLqOe1wMzRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/6Uo3v7rqDPgYhfe/QjaoiiYdJMwHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8VvNV7IIxuavqgD2AiHcXa1oXunemMxUwA qGtm5WF4M29aadO/ByKPXSy32OBN8iaiejN+qfRaI9xHT/vuh6tyI22HD+Z/kbKS 1jENQSjyzFKJKBzdfsq3MTE0t+4XXxBzqM8bvd/7OaEOkpV13ATmxf/mVBB6ODCY HDYYS4rDp0QK2b/+PUGh0J1+C8QYTQonfLDzVA57gV8yr5J1cz0bcCyF6ngNDo5y hJclNnHlzsN6FDUILQ1PuaSx/fw7DJUcyybhXkBx4EUY/E+IZJk166cU8kJkWE44 7P/MPFot0FlHoWlvZX6p0C7k92n9FJAEKNA2gxAdT08ZoaytYPc= -----END CERTIFICATE-----Generated at Fri May 17 10:57:45 2024 by rpki-client on console-ams.rpki-client.org