$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: JQ2Q7fIec+fVaL1AdEqnWVY8nT6eO86C/hV7JyhcgTg= Subject key identifier: 25:B8:6F:A2:88:7E:38:3C:26:E6:3F:20:16:57:50:AE:79:0D:EC:14 Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 3122EDED35F1B6AD458AA2E65F6D4BAE5ADBFCE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: CB Signing time: Wed 29 May 2024 05:21:02 +0000 Manifest this update: Wed 29 May 2024 05:16:02 +0000 Manifest next update: Sat 01 Jun 2024 10:46:02 +0000 Files and hashes: 1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: ssHZ6JbosYcAqH2SGYyhyWxfKgzM5Eda3CELGHDlD20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 04:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:22:ed:ed:35:f1:b6:ad:45:8a:a2:e6:5f:6d:4b:ae:5a:db:fc:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: May 29 05:16:02 2024 GMT Not After : Jun 1 10:46:02 2024 GMT Subject: CN=25B86FA2887E383C26E63F20165750AE790DEC14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:01:4f:7c:71:65:1a:be:81:cb:78:44:41: ce:c7:a2:43:e4:1f:0f:92:85:54:c5:52:3c:73:ca: e3:bb:28:07:15:2b:34:ba:a3:ce:61:2e:ce:ed:6c: 34:20:28:d3:2d:ce:c4:24:dc:d4:6b:50:98:3b:4b: 7a:dc:0b:cc:85:2b:a3:8a:9b:fa:b7:7e:aa:6c:2b: 73:39:b1:88:3e:fb:2d:70:56:c2:9c:6c:61:cd:69: b5:84:76:8f:ee:76:af:70:55:04:87:a7:1f:fd:19: 83:b3:14:41:0a:16:8f:27:d0:4e:ba:bb:39:a3:e5: 32:b7:97:5b:62:19:de:4e:b9:8d:ef:07:14:c4:46: 82:63:0d:c0:e6:31:d5:4c:47:49:83:20:a1:27:f6: 35:a3:89:56:35:42:df:72:29:84:e4:46:0a:97:6d: 85:40:b6:a1:cc:52:56:38:ea:0a:18:44:10:7e:3f: fa:e1:3e:b3:14:7c:2f:77:ec:14:95:15:82:a1:d7: 3c:9f:58:3e:30:02:25:7a:ff:eb:ad:e8:04:9e:53: 9e:5a:36:58:25:b1:4d:c0:10:a3:6d:60:7f:33:05: 3b:a8:71:9d:e0:45:7b:e9:51:f6:ae:61:1a:f3:50: 85:e5:ef:9e:e5:4e:73:32:fc:dd:10:d5:06:dd:63: 88:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B8:6F:A2:88:7E:38:3C:26:E6:3F:20:16:57:50:AE:79:0D:EC:14 X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:16:32:71:39:b9:e5:7e:ff:d2:5c:a7:ac:cf:52:86:31:3a: cd:41:ec:f4:00:8e:a6:d5:ca:e5:b0:23:1f:98:62:fc:e9:56: 0e:4b:56:2f:07:df:a9:44:90:72:24:b2:7a:c4:e0:18:28:68: 6e:88:3a:80:18:39:3d:a0:c7:1f:d0:ca:07:04:00:4b:c8:c1: 25:98:93:10:69:20:0e:b1:90:d1:f0:21:42:b2:38:d1:2b:3d: 98:f8:82:b6:76:8c:e7:ad:49:74:64:6f:d0:67:d4:cb:b3:4d: 00:1c:2b:eb:98:4d:7c:e5:7c:1f:4e:7c:85:a1:ef:be:24:ef: 71:b1:69:aa:36:7a:b6:78:a9:f6:00:54:d5:ae:a8:df:37:bb: 52:10:88:89:70:04:5f:64:39:e3:cd:15:49:ab:ab:36:45:33: af:88:ea:73:f4:e3:7a:2c:ca:67:d4:02:d1:fe:50:af:2b:72: 64:a1:a7:d0:4b:89:af:3a:20:e6:5a:86:03:3c:0c:c4:73:49: cb:c8:00:c1:38:5e:df:29:1e:eb:e0:12:6a:b4:c4:83:cd:a6: 8e:66:7a:c9:e3:bd:30:35:36:ad:b8:9f:5d:04:93:95:31:cb: d8:ee:6b:54:9b:bb:13:1f:b3:15:74:6f:96:1e:5a:5b:e0:d8: 15:fc:fe:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSLt7TXxtq1FiqLmX21Lrlrb/OYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNDA1MjkwNTE2MDJaFw0yNDA2MDExMDQ2MDJaMDMxMTAvBgNV BAMTKDI1Qjg2RkEyODg3RTM4M0MyNkU2M0YyMDE2NTc1MEFFNzkwREVDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZwFPfHFlGr6By3hEQc7HokPk Hw+ShVTFUjxzyuO7KAcVKzS6o85hLs7tbDQgKNMtzsQk3NRrUJg7S3rcC8yFK6OK m/q3fqpsK3M5sYg++y1wVsKcbGHNabWEdo/udq9wVQSHpx/9GYOzFEEKFo8n0E66 uzmj5TK3l1tiGd5OuY3vBxTERoJjDcDmMdVMR0mDIKEn9jWjiVY1Qt9yKYTkRgqX bYVAtqHMUlY46goYRBB+P/rhPrMUfC937BSVFYKh1zyfWD4wAiV6/+ut6ASeU55a NlglsU3AEKNtYH8zBTuocZ3gRXvpUfauYRrzUIXl757lTnMy/N0Q1QbdY4i3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJbhvooh+ODwm5j8gFldQrnkN7BQwHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAWMnE5ueV+/9Jcp6zPUoYxOs1B7PQAjqbV yuWwIx+YYvzpVg5LVi8H36lEkHIksnrE4BgoaG6IOoAYOT2gxx/QygcEAEvIwSWY kxBpIA6xkNHwIUKyONErPZj4grZ2jOetSXRkb9Bn1MuzTQAcK+uYTXzlfB9OfIWh 774k73Gxaao2erZ4qfYAVNWuqN83u1IQiIlwBF9kOePNFUmrqzZFM6+I6nP043os ymfUAtH+UK8rcmShp9BLia86IOZahgM8DMRzScvIAME4Xt8pHuvgEmq0xIPNpo5m esnjvTA1Nq24n10Ek5Uxy9jua1SbuxMfsxV0b5YeWlvg2BX8/uM= -----END CERTIFICATE-----Generated at Wed May 29 06:10:49 2024 by rpki-client on console-ams.rpki-client.org