$ rpki-client -vvf repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft File: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft (raw, json) Hash identifier: 4FyI5si+LGFLPxUChyGXxTtebkx+WZT+49bNppCY/bM= Subject key identifier: 70:5A:C9:BA:EC:63:0F:15:7A:24:DF:34:55:49:9A:9F:98:85:65:DC Authority key identifier: F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 Certificate issuer: /CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Certificate serial: 3A6B1730024EC4BB5210A5AC0AF58463A871E540 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft Manifest number: DE Signing time: Wed 29 May 2024 19:40:33 +0000 Manifest this update: Wed 29 May 2024 19:35:33 +0000 Manifest next update: Sat 01 Jun 2024 22:26:33 +0000 Files and hashes: 1: F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl (hash: 7bKsUNuKvfyLUtI2tG2BqTMmueypNMoO/7vQHlPYzQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 22:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6b:17:30:02:4e:c4:bb:52:10:a5:ac:0a:f5:84:63:a8:71:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6C8A713C4451484D1D67F4EE6F77B46AEE417A9 Validity Not Before: May 29 19:35:33 2024 GMT Not After : Jun 1 22:26:33 2024 GMT Subject: CN=705AC9BAEC630F157A24DF3455499A9F988565DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:35:5a:dd:e9:6d:9d:71:1c:ee:7b:28:40:44: 4b:5b:b2:ab:88:53:89:2e:4d:d3:4f:b1:3e:50:af: 80:bf:cb:ab:48:9e:2b:9e:a0:a2:b0:02:50:9b:2c: e1:82:7b:7c:9e:e6:5e:46:a4:f3:85:aa:e5:17:c4: 09:16:2b:b1:f9:e8:6e:65:3c:f7:ab:0d:7f:e4:f7: cb:c5:9d:1c:f9:ff:ff:5f:77:57:c6:87:d8:87:f8: 53:79:61:69:e4:1e:7d:79:79:15:01:24:c6:a0:87: 5c:6c:f8:ee:dd:eb:69:d4:e5:b4:d4:b3:62:c7:d1: f0:46:a9:c0:17:8a:f8:39:f0:c9:84:d8:0b:34:d8: 1a:43:ac:b6:7a:5e:3e:10:f8:a3:42:5b:42:22:80: f6:5d:3d:84:0e:5e:70:94:13:4c:6e:54:08:0a:7a: fb:6d:85:34:c0:fc:60:6f:ef:4a:92:60:35:d3:81: e5:85:42:0f:02:3e:4d:ee:e8:86:f0:11:ab:b5:d6: b4:d1:ce:59:ea:cb:db:93:19:a4:93:89:1a:ca:28: c7:71:84:39:1b:1e:e8:26:9a:3f:76:25:a2:60:66: 3e:01:72:31:15:94:4d:c5:47:73:a4:e8:30:95:af: 53:37:0f:40:d7:78:19:be:63:6d:c1:e5:5e:78:46: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5A:C9:BA:EC:63:0F:15:7A:24:DF:34:55:49:9A:9F:98:85:65:DC X509v3 Authority Key Identifier: keyid:F6:C8:A7:13:C4:45:14:84:D1:D6:7F:4E:E6:F7:7B:46:AE:E4:17:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6c7e5b1-519d-456c-b3b6-755794702664/0/F6C8A713C4451484D1D67F4EE6F77B46AEE417A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:10:78:9b:45:82:68:26:ad:6b:24:b5:74:92:94:3b:f4:0f: 6d:21:3a:43:cb:4a:66:ae:48:55:dd:d3:10:53:0b:43:e6:42: a2:02:ae:7c:0f:2b:70:19:9a:0c:f5:06:aa:0c:23:38:15:95: 69:ed:90:3b:ae:df:8b:b7:dd:d8:60:67:59:eb:df:3a:68:9a: d2:2e:28:86:00:17:cf:d8:81:cb:7e:52:b0:16:4e:e4:5b:2f: 6c:84:37:db:3f:bb:04:41:d9:03:0a:64:3c:be:f8:72:fb:df: 7c:13:2f:0d:a6:95:75:ea:2c:c6:26:02:ce:d9:3d:7a:04:62: fb:67:09:7a:98:14:82:c5:80:fc:9a:29:62:35:05:1f:8b:53: 8e:03:ee:8e:34:69:e6:9e:10:ce:bd:cf:80:72:33:f0:90:04: f0:96:e9:3a:45:48:67:7c:ec:4b:22:6d:c2:7f:8a:37:28:9a: 78:94:cc:f0:5e:0e:7a:cc:e9:3e:dd:a8:15:fe:35:e7:88:8c: 43:34:fe:f4:c5:9c:e7:2e:f0:fc:a5:d0:58:90:e5:65:69:b1: 64:07:3d:53:bc:0c:b8:36:98:94:a8:1d:dd:2e:bf:34:f0:3b: 92:0f:d1:8e:df:f6:9d:b5:6a:72:a6:8f:e5:d1:25:9b:60:9a: c9:cf:e4:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOmsXMAJOxLtSEKWsCvWEY6hx5UAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZB RUU0MTdBOTAeFw0yNDA1MjkxOTM1MzNaFw0yNDA2MDEyMjI2MzNaMDMxMTAvBgNV BAMTKDcwNUFDOUJBRUM2MzBGMTU3QTI0REYzNDU1NDk5QTlGOTg4NTY1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZNVrd6W2dcRzueyhAREtbsquI U4kuTdNPsT5Qr4C/y6tIniueoKKwAlCbLOGCe3ye5l5GpPOFquUXxAkWK7H56G5l PPerDX/k98vFnRz5//9fd1fGh9iH+FN5YWnkHn15eRUBJMagh1xs+O7d62nU5bTU s2LH0fBGqcAXivg58MmE2As02BpDrLZ6Xj4Q+KNCW0IigPZdPYQOXnCUE0xuVAgK evtthTTA/GBv70qSYDXTgeWFQg8CPk3u6IbwEau11rTRzlnqy9uTGaSTiRrKKMdx hDkbHugmmj92JaJgZj4BcjEVlE3FR3Ok6DCVr1M3D0DXeBm+Y23B5V54RrNHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcFrJuuxjDxV6JN80VUman5iFZdwwHwYDVR0j BBgwFoAU9sinE8RFFITR1n9O5vd7Rq7kF6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmM3ZTViMS01MTlkLTQ1NmMtYjNiNi03NTU3OTQ3MDI2NjQvMC9GNkM4QTcxM0M0 NDUxNDg0RDFENjdGNEVFNkY3N0I0NkFFRTQxN0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdCNDZBRUU0 MTdBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZjN2U1YjEtNTE5ZC00NTZjLWIz YjYtNzU1Nzk0NzAyNjY0LzAvRjZDOEE3MTNDNDQ1MTQ4NEQxRDY3RjRFRTZGNzdC NDZBRUU0MTdBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIQeJtFgmgmrWsktXSSlDv0D20hOkPLSmau SFXd0xBTC0PmQqICrnwPK3AZmgz1BqoMIzgVlWntkDuu34u33dhgZ1nr3zpomtIu KIYAF8/Ygct+UrAWTuRbL2yEN9s/uwRB2QMKZDy++HL733wTLw2mlXXqLMYmAs7Z PXoEYvtnCXqYFILFgPyaKWI1BR+LU44D7o40aeaeEM69z4ByM/CQBPCW6TpFSGd8 7EsibcJ/ijcomniUzPBeDnrM6T7dqBX+NeeIjEM0/vTFnOcu8Pyl0FiQ5WVpsWQH PVO8DLg2mJSoHd0uvzTwO5IP0Y7f9p21anKmj+XRJZtgmsnP5I8= -----END CERTIFICATE-----Generated at Wed May 29 21:55:26 2024 by rpki-client on console-ams.rpki-client.org