$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: oXey87o1ZSylE9AwjcfADHt/M2D5i34dovbOHd9gQ1U= Subject key identifier: F3:55:73:C3:1F:5E:E9:4D:05:56:48:A8:99:94:8F:FE:BD:98:40:84 Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 55392B0DED92CD472214CBB7B1675E36A7AB43DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 0121 Signing time: Sat 18 May 2024 21:01:18 +0000 Manifest this update: Sat 18 May 2024 20:56:18 +0000 Manifest next update: Tue 21 May 2024 22:25:18 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: ZHSLVs3cXZHN0TjhGzsDW06d3NspJ716lbL+rU0RkiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:39:2b:0d:ed:92:cd:47:22:14:cb:b7:b1:67:5e:36:a7:ab:43:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: May 18 20:56:18 2024 GMT Not After : May 21 22:25:18 2024 GMT Subject: CN=F35573C31F5EE94D055648A899948FFEBD984084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f3:a7:c0:54:39:ad:33:93:d6:e0:62:c3:95: b9:1b:e4:60:bc:f6:41:59:a4:3e:78:f3:8c:5f:77: ca:b7:88:02:fd:48:d4:be:cd:c7:09:11:16:81:a4: 8c:04:67:19:8a:99:ad:dd:11:11:c5:aa:e1:f1:a8: 86:5d:10:f4:32:9a:4d:38:c8:f9:a0:b9:a1:85:ee: 00:67:7d:a6:c2:12:6d:da:57:c6:6a:82:46:d8:d8: 03:1a:d4:5a:d6:58:77:51:94:f8:00:82:ac:65:aa: 93:25:3e:7f:5a:75:91:9b:83:c4:25:a0:ef:10:aa: ca:45:23:0b:15:5d:43:ca:50:84:f1:91:92:c1:95: e7:bf:4e:0d:4e:24:d0:07:87:d5:4d:d5:13:09:b9: d2:3e:11:f0:a1:88:db:a3:fd:47:60:e4:7d:c4:81: 5c:81:8d:27:6f:48:c6:0b:90:66:95:7f:b0:14:02: b6:c4:e8:d2:29:0f:3e:e6:0b:b4:46:f0:dd:11:1a: ea:6b:4c:d3:f1:35:5c:4a:1e:b4:92:50:6d:74:e1: 46:a5:1e:3c:74:f1:af:5d:b9:3e:cf:63:31:9c:19: bf:43:0a:80:f2:4c:53:07:0f:46:ee:0c:9a:f4:d5: c5:67:c6:95:90:1a:c1:56:66:01:9a:19:22:87:e8: 5a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:55:73:C3:1F:5E:E9:4D:05:56:48:A8:99:94:8F:FE:BD:98:40:84 X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:24:11:2e:d4:26:9f:b2:94:5a:ea:f1:b6:94:ab:77:42:59: ea:a2:e1:1f:9a:55:81:3a:81:a4:55:5b:80:21:eb:9d:ec:d5: 11:9b:36:d9:43:ec:c1:f0:7d:fe:df:5d:7e:6c:79:67:54:70: 58:a0:1d:ca:a3:ea:8f:72:fb:9f:fe:61:98:f1:be:1b:32:ed: bc:f3:95:83:64:3e:b0:58:a3:55:c9:8f:ba:9b:f8:6c:63:68: c8:ed:ba:ca:9f:f7:13:8f:26:13:37:bf:5e:f3:ef:1d:1a:69: 93:6d:45:4c:8a:d1:6a:19:42:39:f9:e1:42:29:3e:dd:7d:5b: 92:80:d5:9e:16:b5:eb:7b:05:e3:93:56:3f:1c:ea:0a:66:1e: 3f:15:d3:9b:66:26:30:3a:52:57:53:c3:04:1e:3a:63:c4:77: 91:05:cd:c7:4c:3c:ff:a3:07:65:6d:12:19:af:3e:1d:ab:e1: 20:79:d3:42:45:3d:2c:e0:b5:4d:a8:e1:a6:ba:f5:06:71:c7: 32:28:e5:51:da:43:0e:4d:65:bb:d3:b3:bf:84:32:a6:a4:8c: ff:7c:a1:a9:7a:22:17:d9:5f:92:be:13:1a:51:d8:db:ef:37: 4f:f7:5b:2a:05:75:33:7c:97:59:dc:12:07:5c:ee:a4:0d:4f: ee:86:a9:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTkrDe2SzUciFMu3sWdeNqerQ98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNDA1MTgyMDU2MThaFw0yNDA1MjEyMjI1MThaMDMxMTAvBgNV BAMTKEYzNTU3M0MzMUY1RUU5NEQwNTU2NDhBODk5OTQ4RkZFQkQ5ODQwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK86fAVDmtM5PW4GLDlbkb5GC8 9kFZpD5484xfd8q3iAL9SNS+zccJERaBpIwEZxmKma3dERHFquHxqIZdEPQymk04 yPmguaGF7gBnfabCEm3aV8ZqgkbY2AMa1FrWWHdRlPgAgqxlqpMlPn9adZGbg8Ql oO8QqspFIwsVXUPKUITxkZLBlee/Tg1OJNAHh9VN1RMJudI+EfChiNuj/Udg5H3E gVyBjSdvSMYLkGaVf7AUArbE6NIpDz7mC7RG8N0RGuprTNPxNVxKHrSSUG104Ual Hjx08a9duT7PYzGcGb9DCoDyTFMHD0buDJr01cVnxpWQGsFWZgGaGSKH6FoZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU81Vzwx9e6U0FVkiomZSP/r2YQIQwHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQkES7UJp+ylFrq8baUq3dCWeqi4R+aVYE6 gaRVW4Ah653s1RGbNtlD7MHwff7fXX5seWdUcFigHcqj6o9y+5/+YZjxvhsy7bzz lYNkPrBYo1XJj7qb+GxjaMjtusqf9xOPJhM3v17z7x0aaZNtRUyK0WoZQjn54UIp Pt19W5KA1Z4Wtet7BeOTVj8c6gpmHj8V05tmJjA6UldTwwQeOmPEd5EFzcdMPP+j B2VtEhmvPh2r4SB500JFPSzgtU2o4aa69QZxxzIo5VHaQw5NZbvTs7+EMqakjP98 oal6IhfZX5K+ExpR2NvvN0/3WyoFdTN8l1ncEgdc7qQNT+6GqQQ= -----END CERTIFICATE-----Generated at Sat May 18 21:23:57 2024 by rpki-client on console-fra.rpki-client.org