$ rpki-client -vvf repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.mft File: 760EC4C41122D8FD3B28CD4BB92AC6C462B70460.mft (raw, json) Hash identifier: BeTs9PdmwHr63/fUK6WCpoccD9AsTH4B8xdXmet3zPc= Subject key identifier: D8:51:B7:31:59:92:71:E4:E8:B0:52:BD:E2:F2:75:82:F2:AD:80:3D Authority key identifier: 76:0E:C4:C4:11:22:D8:FD:3B:28:CD:4B:B9:2A:C6:C4:62:B7:04:60 Certificate issuer: /CN=760EC4C41122D8FD3B28CD4BB92AC6C462B70460 Certificate serial: 73ECA7D814AF702250158D3BF57CC1F20491BC24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.mft Manifest number: F3 Signing time: Sat 18 May 2024 14:50:36 +0000 Manifest this update: Sat 18 May 2024 14:45:36 +0000 Manifest next update: Tue 21 May 2024 20:54:36 +0000 Files and hashes: 1: 760EC4C41122D8FD3B28CD4BB92AC6C462B70460.crl (hash: tow8+9kfGesW99FznLc/paWyeZQa4nBmvv8IRdD/j84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.crl rsync://repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ec:a7:d8:14:af:70:22:50:15:8d:3b:f5:7c:c1:f2:04:91:bc:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=760EC4C41122D8FD3B28CD4BB92AC6C462B70460 Validity Not Before: May 18 14:45:36 2024 GMT Not After : May 21 20:54:36 2024 GMT Subject: CN=D851B731599271E4E8B052BDE2F27582F2AD803D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:fc:4d:48:15:9e:76:47:96:57:ee:ac:60: 46:32:a1:19:a7:0b:08:d0:68:d3:5f:9a:d2:6f:08: ec:7b:4e:97:2f:ce:46:f0:8d:e9:24:f8:ee:60:8d: 85:52:eb:c1:97:f8:08:e3:6d:0e:57:e7:1a:a4:70: 03:7e:7a:03:ea:7b:4e:59:cc:1a:af:60:eb:c8:bf: a9:93:3b:27:e4:d4:b9:67:92:6a:b2:d3:11:fc:6a: 05:d1:a0:17:a2:18:8f:83:4f:5e:14:8b:bf:8c:eb: 0f:38:a6:e5:71:f8:f7:3f:b7:a9:84:59:9f:54:ed: 4f:09:c8:21:e7:38:f3:ab:0c:4d:fa:f8:d6:b5:ae: 81:37:04:62:54:d3:5f:78:64:be:00:01:32:88:2d: 05:4f:e6:de:b9:bb:9c:f9:06:33:6a:2e:77:3c:cc: 95:a1:ad:43:46:3a:04:f6:ce:39:19:40:33:78:a1: c4:b2:75:b8:d0:63:bb:4a:ab:ce:c9:80:fa:46:8b: 80:c7:99:0b:a7:6e:3d:91:0e:24:3f:2a:74:2a:15: c1:81:b1:38:b0:46:b4:63:6b:01:d0:1f:00:a1:bf: 75:d9:a3:bc:98:19:b4:54:24:b3:15:4b:1a:14:89: 84:83:f4:aa:b4:a7:94:54:e7:70:37:ee:d3:52:4a: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:51:B7:31:59:92:71:E4:E8:B0:52:BD:E2:F2:75:82:F2:AD:80:3D X509v3 Authority Key Identifier: keyid:76:0E:C4:C4:11:22:D8:FD:3B:28:CD:4B:B9:2A:C6:C4:62:B7:04:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:11:05:e2:b2:55:3e:cc:35:45:78:ba:de:09:d1:bd:bc:86: 6f:57:a5:31:b0:f0:ce:a9:5c:47:f0:95:a5:ec:cf:3e:38:a2: e1:3b:a4:1e:92:7a:6c:a5:4f:fb:f0:4e:50:c1:69:40:37:01: ce:53:16:70:b6:a8:39:a2:83:a8:b5:53:86:b3:1e:84:c5:7a: 67:df:69:a1:f1:2a:33:10:29:b8:ab:c1:1c:71:08:29:aa:52: ba:58:8c:ab:94:e0:11:3d:c7:9d:4c:38:cd:df:16:4c:c6:96: 48:94:3f:2d:ab:b2:77:2d:0f:4a:44:71:be:6e:31:77:25:57: 84:74:50:87:7e:36:12:52:de:b1:61:d5:67:ea:44:39:e5:4f: ea:40:71:ce:15:f5:e3:d7:50:14:bf:57:a7:a7:08:ee:95:19: 45:5d:b7:e2:c8:fa:ca:54:02:4d:51:39:57:d5:16:48:0b:fe: 71:f9:4d:f1:67:01:ca:04:13:9d:d9:6a:dc:37:9a:80:88:47: 12:40:6f:17:d5:29:26:62:65:12:65:5e:ce:e9:3d:c4:15:9b: f2:b9:9f:ec:f6:41:e7:74:c2:1f:d6:a0:ef:32:2e:b3:1c:a5: 00:5b:33:9f:cf:e5:b0:87:61:cb:83:c4:4a:92:f3:bf:3f:7a: 96:6c:f0:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+yn2BSvcCJQFY079XzB8gSRvCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzYwRUM0QzQxMTIyRDhGRDNCMjhDRDRCQjkyQUM2QzQ2 MkI3MDQ2MDAeFw0yNDA1MTgxNDQ1MzZaFw0yNDA1MjEyMDU0MzZaMDMxMTAvBgNV BAMTKEQ4NTFCNzMxNTk5MjcxRTRFOEIwNTJCREUyRjI3NTgyRjJBRDgwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5WPxNSBWedkeWV+6sYEYyoRmn CwjQaNNfmtJvCOx7Tpcvzkbwjekk+O5gjYVS68GX+AjjbQ5X5xqkcAN+egPqe05Z zBqvYOvIv6mTOyfk1Llnkmqy0xH8agXRoBeiGI+DT14Ui7+M6w84puVx+Pc/t6mE WZ9U7U8JyCHnOPOrDE36+Na1roE3BGJU0194ZL4AATKILQVP5t65u5z5BjNqLnc8 zJWhrUNGOgT2zjkZQDN4ocSydbjQY7tKq87JgPpGi4DHmQunbj2RDiQ/KnQqFcGB sTiwRrRjawHQHwChv3XZo7yYGbRUJLMVSxoUiYSD9Kq0p5RU53A37tNSSptPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2FG3MVmSceTosFK94vJ1gvKtgD0wHwYDVR0j BBgwFoAUdg7ExBEi2P07KM1LuSrGxGK3BGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDUwMDhhMC0wYWMzLTQ5OGUtOGNiZi1mMzExMmI5MWJkZjQvMC83NjBFQzRDNDEx MjJEOEZEM0IyOENENEJCOTJBQzZDNDYyQjcwNDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzYwRUM0QzQxMTIyRDhGRDNCMjhDRDRCQjkyQUM2QzQ2MkI3 MDQ2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ1MDA4YTAtMGFjMy00OThlLThj YmYtZjMxMTJiOTFiZGY0LzAvNzYwRUM0QzQxMTIyRDhGRDNCMjhDRDRCQjkyQUM2 QzQ2MkI3MDQ2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGARBeKyVT7MNUV4ut4J0b28hm9XpTGw8M6p XEfwlaXszz44ouE7pB6SemylT/vwTlDBaUA3Ac5TFnC2qDmig6i1U4azHoTFemff aaHxKjMQKbirwRxxCCmqUrpYjKuU4BE9x51MOM3fFkzGlkiUPy2rsnctD0pEcb5u MXclV4R0UId+NhJS3rFh1WfqRDnlT+pAcc4V9ePXUBS/V6enCO6VGUVdt+LI+spU Ak1ROVfVFkgL/nH5TfFnAcoEE53Zatw3moCIRxJAbxfVKSZiZRJlXs7pPcQVm/K5 n+z2Qed0wh/WoO8yLrMcpQBbM5/P5bCHYcuDxEqS878/epZs8CA= -----END CERTIFICATE-----Generated at Sat May 18 15:25:22 2024 by rpki-client on console-fra.rpki-client.org