$ rpki-client -vvf repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft (raw, json) Hash identifier: 7OgR0ca1KPU1ch6CCDaM6LR6ZVmy5XSGXP5Qo5OQty4= Subject key identifier: 29:14:41:59:F9:41:9B:E9:3D:96:FD:92:24:0F:8D:61:EB:42:93:86 Authority key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Certificate issuer: /CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Certificate serial: 11137A27F74D94F09F25AAAA1251151119653307 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft Manifest number: DD Signing time: Sat 18 May 2024 21:22:02 +0000 Manifest this update: Sat 18 May 2024 21:17:02 +0000 Manifest next update: Wed 22 May 2024 04:43:02 +0000 Files and hashes: 1: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl (hash: JKMY+SklJFPXTj7drRf+IDPzjfRA42YtRsLyXO6nbtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:13:7a:27:f7:4d:94:f0:9f:25:aa:aa:12:51:15:11:19:65:33:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Validity Not Before: May 18 21:17:02 2024 GMT Not After : May 22 04:43:02 2024 GMT Subject: CN=29144159F9419BE93D96FD92240F8D61EB429386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:b2:20:bf:b2:c9:1a:57:7b:fb:eb:cb:81: 12:18:1b:54:7d:a5:5a:f6:4a:05:0b:f2:32:4e:0f: b4:37:c7:5e:dd:85:6f:b6:e9:6e:c5:68:4d:cf:42: 4e:72:80:f4:c6:56:9c:55:8a:7e:a9:62:93:41:13: f0:82:3c:09:ba:33:57:74:f3:08:b1:e8:cb:cd:9b: 89:e8:c4:dc:1a:f4:2a:0e:9a:d6:a6:32:4a:02:dd: 68:34:57:e8:2d:11:fc:ed:86:48:94:9c:fb:0a:d7: 1c:c7:7b:47:7a:60:01:5c:5d:89:11:ba:dc:b5:6d: 25:04:79:5c:21:3b:10:91:d1:99:46:3a:ff:85:8d: 28:7a:92:92:53:83:7b:b4:bc:94:69:45:f7:c3:90: cd:c8:7b:d0:18:34:d5:5f:e7:fc:26:71:1b:4d:b4: d3:8b:06:b0:23:1b:85:a5:c7:ca:2e:c6:39:e3:6a: fa:f6:20:5d:fb:20:f5:ad:dd:74:36:9a:75:0e:2b: cd:8b:dc:19:b6:e6:a9:8a:ed:7a:9c:dd:bc:e1:3f: 6e:b5:9e:1e:86:c1:44:4a:7e:f9:50:07:7d:5c:e9: 8c:e4:d6:d0:d0:70:e6:35:14:50:1c:b2:8f:97:41: 17:19:7a:44:79:93:bd:7c:7a:30:2c:a9:b2:43:73: 81:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:41:59:F9:41:9B:E9:3D:96:FD:92:24:0F:8D:61:EB:42:93:86 X509v3 Authority Key Identifier: keyid:70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:43:99:9d:7b:55:dc:58:4e:86:63:a5:8b:92:d3:e3:39:e0: 43:61:39:f3:02:ff:13:fc:4d:04:3a:c9:bb:cc:70:73:53:d4: cc:8c:4a:2b:59:d3:65:ee:88:c4:11:a6:81:86:88:d7:d8:52: 8d:6d:74:8b:48:16:00:39:1c:e8:f1:2f:20:4d:e5:c0:77:29: 1f:fd:ae:58:bd:f4:32:ea:3c:a9:a3:30:70:a9:06:5f:a0:d2: 7a:a8:9a:3a:4e:ed:07:d3:58:ab:44:bc:15:79:34:e1:69:b1: a0:17:b8:5b:6d:ad:0d:5d:41:e4:6a:be:9c:36:57:27:2f:df: 10:b2:2d:6a:5e:c1:27:54:c1:5c:1a:63:01:15:91:11:79:b0: 2c:e2:3c:86:da:42:05:e3:da:77:4b:f1:2d:dc:71:1f:68:2e: bd:5d:8f:7b:09:09:ec:f8:ca:64:c9:87:c8:5a:1c:fa:b8:43: 1c:12:d6:bc:c0:e9:84:a4:82:40:04:2c:49:62:2b:ee:9c:3c: ee:8e:64:a5:bb:55:e3:d4:68:f2:31:5e:cb:6c:b1:a7:0c:24: 56:c6:b6:53:3f:5c:8e:84:bd:2a:48:aa:36:fc:7e:0d:c8:7d: bf:48:dc:d4:2f:e7:44:f8:05:9c:0d:f5:b9:74:ff:b0:78:e5: 96:83:d1:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERN6J/dNlPCfJaqqElEVERllMwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4 NjE4OUIwQzAeFw0yNDA1MTgyMTE3MDJaFw0yNDA1MjIwNDQzMDJaMDMxMTAvBgNV BAMTKDI5MTQ0MTU5Rjk0MTlCRTkzRDk2RkQ5MjI0MEY4RDYxRUI0MjkzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrbLIgv7LJGld7++vLgRIYG1R9 pVr2SgUL8jJOD7Q3x17dhW+26W7FaE3PQk5ygPTGVpxVin6pYpNBE/CCPAm6M1d0 8wix6MvNm4noxNwa9CoOmtamMkoC3Wg0V+gtEfzthkiUnPsK1xzHe0d6YAFcXYkR uty1bSUEeVwhOxCR0ZlGOv+FjSh6kpJTg3u0vJRpRffDkM3Ie9AYNNVf5/wmcRtN tNOLBrAjG4Wlx8ouxjnjavr2IF37IPWt3XQ2mnUOK82L3Bm25qmK7Xqc3bzhP261 nh6GwURKfvlQB31c6Yzk1tDQcOY1FFAcso+XQRcZekR5k718ejAsqbJDc4G3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRRBWflBm+k9lv2SJA+NYetCk4YwHwYDVR0j BBgwFoAUcApG8MSOeE6MvLp7J+RHT4YYmwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMC83MDBBNDZGMEM0 OEU3ODRFOENCQ0JBN0IyN0U0NDc0Rjg2MTg5QjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3NEY4NjE4 OUIwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY4YTMxNWUtMTZmMS00ZjIxLTli YzAtMjY5ZDViZTczZDYwLzAvNzAwQTQ2RjBDNDhFNzg0RThDQkNCQTdCMjdFNDQ3 NEY4NjE4OUIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdDmZ17VdxYToZjpYuS0+M54ENhOfMC/xP8 TQQ6ybvMcHNT1MyMSitZ02XuiMQRpoGGiNfYUo1tdItIFgA5HOjxLyBN5cB3KR/9 rli99DLqPKmjMHCpBl+g0nqomjpO7QfTWKtEvBV5NOFpsaAXuFttrQ1dQeRqvpw2 Vycv3xCyLWpewSdUwVwaYwEVkRF5sCziPIbaQgXj2ndL8S3ccR9oLr1dj3sJCez4 ymTJh8haHPq4QxwS1rzA6YSkgkAELEliK+6cPO6OZKW7VePUaPIxXstssacMJFbG tlM/XI6EvSpIqjb8fg3Ifb9I3NQv50T4BZwN9bl0/7B45ZaD0VU= -----END CERTIFICATE-----Generated at Sat May 18 22:27:19 2024 by rpki-client on console-ams.rpki-client.org