$ rpki-client -vvf repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft File: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft (raw, json) Hash identifier: H1epr5cXmOobYDKji6qlyqjYNWdlbI8+UjEgN9XryVc= Subject key identifier: 35:1A:E4:88:27:82:61:E8:0F:BA:27:D3:02:71:7B:C9:46:89:E5:1B Authority key identifier: 42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE Certificate issuer: /CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Certificate serial: 620E15FD581272B470F0EC9C52FC46B856E7C847 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft Manifest number: 4D Signing time: Fri 17 May 2024 21:00:58 +0000 Manifest this update: Fri 17 May 2024 20:55:58 +0000 Manifest next update: Tue 21 May 2024 07:35:58 +0000 Files and hashes: 1: 42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl (hash: BvzN0uK2vl39Rny9ZJap/XFeHHgBf4lDrconY/n/bRM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 05:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0e:15:fd:58:12:72:b4:70:f0:ec:9c:52:fc:46:b8:56:e7:c8:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE Validity Not Before: May 17 20:55:58 2024 GMT Not After : May 21 07:35:58 2024 GMT Subject: CN=351AE488278261E80FBA27D302717BC94689E51B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:70:d3:2b:fd:2f:ac:a1:5e:c8:3f:b7:8b: 9f:1b:75:69:69:a2:13:c1:1d:0c:3e:aa:3f:05:54: 54:db:3c:ab:c4:ca:78:b3:a5:df:fb:c3:c6:db:32: 25:11:9f:55:ec:cd:de:ad:0d:cf:0a:8c:c3:b4:05: 15:32:fb:fb:6a:00:6d:5c:cc:35:1f:7f:9b:a9:5c: 3c:be:8a:eb:fd:43:f0:f1:0e:05:70:15:3f:06:77: aa:66:4b:91:44:8d:a1:48:54:86:35:a4:07:09:1e: f4:2d:0b:dd:2c:67:43:37:cd:d7:85:9e:8e:a7:01: 13:47:81:e6:b0:05:38:91:9e:b8:77:1f:75:f9:e8: e9:e4:cf:fb:82:b5:ff:8d:d5:81:7a:73:21:fb:09: 91:d6:b7:49:31:c9:5f:f4:cc:2d:b7:1e:7c:a8:34: 30:4c:76:86:0f:54:f8:50:34:2b:f4:72:52:f1:82: fa:07:fe:1b:36:d9:e3:51:b9:25:02:2a:f7:62:f5: 18:14:81:5d:b2:0f:32:7d:d4:d6:7d:61:3c:9f:2a: 90:3c:6f:b4:60:87:09:51:ba:df:cf:62:0f:9b:21: ee:50:bc:80:07:6b:34:8f:fe:eb:f8:32:80:d0:4b: 9c:11:38:fd:73:09:32:5e:51:69:fd:61:04:93:1d: 79:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1A:E4:88:27:82:61:E8:0F:BA:27:D3:02:71:7B:C9:46:89:E5:1B X509v3 Authority Key Identifier: keyid:42:C6:E1:0C:B4:D5:AF:0F:92:CC:A6:A9:59:5C:CC:05:E2:E8:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e73419b9-5422-4fc2-a3e0-c49a8aa07f73/0/42C6E10CB4D5AF0F92CCA6A9595CCC05E2E829AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e8:19:43:e5:a3:0c:bb:a4:1e:23:3b:fd:13:95:9f:55:aa: 80:c7:cb:e2:71:9d:5b:3a:2b:4f:b3:6f:12:55:19:94:1c:cf: df:d6:3f:99:e7:a7:86:da:06:82:cb:5d:67:6c:06:64:4a:c8: 74:3a:25:8a:dc:d2:4b:86:da:cb:9f:07:ce:db:c0:9e:18:9b: e6:4e:af:23:b0:b1:fe:2b:d4:11:bd:58:91:21:f6:ae:c2:35: 85:4a:36:fc:d8:35:bc:c3:94:da:63:6e:2d:37:fe:ed:f8:08: 31:00:26:04:51:ee:e3:3a:00:48:ff:a4:42:5c:56:eb:69:17: f2:0c:99:cd:52:34:ef:84:59:98:e9:58:f7:46:d9:ef:7f:5a: e6:3f:9e:1a:33:08:1e:d5:93:0e:d1:60:ad:b7:9a:03:ec:be: ff:3d:a7:fa:a5:37:c1:8f:3c:16:52:d2:4d:d3:ac:05:0f:43: 37:3b:9a:40:ce:67:5e:26:83:39:b9:7c:89:12:42:fd:3c:18: 35:20:e3:bf:c7:b3:7b:2e:21:30:cd:3c:d5:09:5f:ea:cc:37: 35:99:51:09:2f:67:cd:d3:6f:50:5c:7f:9d:fe:6e:28:0a:a9: e4:78:58:72:6d:d7:38:0c:d1:85:88:dd:5d:54:ad:d7:01:10: d8:7a:28:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYg4V/VgScrRw8OycUvxGuFbnyEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVF MkU4MjlBRTAeFw0yNDA1MTcyMDU1NThaFw0yNDA1MjEwNzM1NThaMDMxMTAvBgNV BAMTKDM1MUFFNDg4Mjc4MjYxRTgwRkJBMjdEMzAyNzE3QkM5NDY4OUU1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JXDTK/0vrKFeyD+3i58bdWlp ohPBHQw+qj8FVFTbPKvEynizpd/7w8bbMiURn1Xszd6tDc8KjMO0BRUy+/tqAG1c zDUff5upXDy+iuv9Q/DxDgVwFT8Gd6pmS5FEjaFIVIY1pAcJHvQtC90sZ0M3zdeF no6nARNHgeawBTiRnrh3H3X56Onkz/uCtf+N1YF6cyH7CZHWt0kxyV/0zC23Hnyo NDBMdoYPVPhQNCv0clLxgvoH/hs22eNRuSUCKvdi9RgUgV2yDzJ91NZ9YTyfKpA8 b7RghwlRut/PYg+bIe5QvIAHazSP/uv4MoDQS5wROP1zCTJeUWn9YQSTHXmBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNRrkiCeCYegPuifTAnF7yUaJ5RswHwYDVR0j BBgwFoAUQsbhDLTVrw+SzKapWVzMBeLoKa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzM0MTliOS01NDIyLTRmYzItYTNlMC1jNDlhOGFhMDdmNzMvMC80MkM2RTEwQ0I0 RDVBRjBGOTJDQ0E2QTk1OTVDQ0MwNUUyRTgyOUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0NDMDVFMkU4 MjlBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTczNDE5YjktNTQyMi00ZmMyLWEz ZTAtYzQ5YThhYTA3ZjczLzAvNDJDNkUxMENCNEQ1QUYwRjkyQ0NBNkE5NTk1Q0ND MDVFMkU4MjlBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPoGUPlowy7pB4jO/0TlZ9VqoDHy+JxnVs6 K0+zbxJVGZQcz9/WP5nnp4baBoLLXWdsBmRKyHQ6JYrc0kuG2sufB87bwJ4Ym+ZO ryOwsf4r1BG9WJEh9q7CNYVKNvzYNbzDlNpjbi03/u34CDEAJgRR7uM6AEj/pEJc VutpF/IMmc1SNO+EWZjpWPdG2e9/WuY/nhozCB7Vkw7RYK23mgPsvv89p/qlN8GP PBZS0k3TrAUPQzc7mkDOZ14mgzm5fIkSQv08GDUg47/Hs3suITDNPNUJX+rMNzWZ UQkvZ83Tb1Bcf53+bigKqeR4WHJt1zgM0YWI3V1UrdcBENh6KHo= -----END CERTIFICATE-----Generated at Fri May 17 21:59:49 2024 by rpki-client on console-ams.rpki-client.org