$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft File: EC973BE13EF324E7D59046CF7690A12F9DF12932.mft (raw, json) Hash identifier: W8uyjAT3ZuzEn6njJ/udoccwmRpt2KB0Hl4hUp0fOoQ= Subject key identifier: C6:A1:46:0E:1A:D1:30:F5:7B:D6:FA:1D:11:26:BB:F3:1D:58:05:AF Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 Certificate issuer: /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Certificate serial: 5747DD1DE7A98F0AD8D2FD5DB3C15513F533C24A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft Manifest number: 0172 Signing time: Sat 18 May 2024 16:01:10 +0000 Manifest this update: Sat 18 May 2024 15:56:10 +0000 Manifest next update: Tue 21 May 2024 16:29:10 +0000 Files and hashes: 1: EC973BE13EF324E7D59046CF7690A12F9DF12932.crl (hash: oZbzHics7SzDwESPnr1Q66/OBpEi4D4X14XK39oA0TI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 16:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:47:dd:1d:e7:a9:8f:0a:d8:d2:fd:5d:b3:c1:55:13:f5:33:c2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932 Validity Not Before: May 18 15:56:10 2024 GMT Not After : May 21 16:29:10 2024 GMT Subject: CN=C6A1460E1AD130F57BD6FA1D1126BBF31D5805AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:7a:7b:2f:b7:23:0b:6c:85:2a:8b:88:29: 24:6f:e8:2d:79:0c:88:31:54:eb:b1:24:d6:c1:25: bf:94:6e:db:c2:12:24:c4:7a:88:3f:44:c1:ae:a5: 22:96:d2:a2:58:c4:3e:f2:9b:22:4b:d0:29:cc:3e: 61:b2:7d:eb:b5:1b:df:b9:0d:6a:61:83:4a:ee:48: f4:43:e3:bc:3f:d9:1e:3f:76:b6:2c:b8:5b:5d:f2: 1d:76:d3:3a:00:35:38:f6:6b:23:44:7e:c0:7f:e4: 57:ae:07:ba:e8:b0:01:73:8f:a7:6a:fb:c7:ae:fd: 73:31:d2:15:06:73:e6:65:69:22:e4:fa:32:9e:7e: df:79:77:6d:bb:63:bb:c6:d7:64:8d:39:bb:89:5b: 9d:79:6b:80:27:23:94:69:e9:17:2a:e6:17:f4:f8: 4a:0e:a3:9d:b7:ab:b1:11:fe:86:5b:ff:0b:52:ea: 4d:ea:64:37:a0:ef:1e:1b:23:ef:92:9a:e6:13:69: 9f:64:62:e3:e3:c1:d5:38:9e:98:39:77:5f:8c:be: ab:31:b9:22:dd:b4:ae:9c:c9:20:65:32:be:34:b5: 0b:c6:11:53:1e:f4:af:c8:af:51:73:b4:26:14:d4: 81:34:d1:27:c8:2c:8d:6a:8d:8d:7d:0e:c6:bc:a2: 55:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A1:46:0E:1A:D1:30:F5:7B:D6:FA:1D:11:26:BB:F3:1D:58:05:AF X509v3 Authority Key Identifier: keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:bf:9a:28:6d:c8:99:8d:40:65:5f:c4:3a:bc:bc:97:48:40: 57:27:22:7a:42:ba:46:6e:0a:57:a6:37:78:2b:dc:7b:31:ca: 0a:bc:38:d1:4d:4a:a0:21:fe:4e:41:9c:57:a5:e3:b0:4f:00: ae:43:b2:a8:8f:d5:e4:23:5c:bf:fb:1f:20:80:df:6f:e2:74: 74:0b:4a:35:bc:8a:51:01:48:a9:8b:21:d2:a6:27:7b:78:4c: 63:5a:a9:bd:c4:79:d0:30:50:c4:31:77:f5:14:d8:33:dd:cf: b6:44:7f:00:76:3f:03:45:0d:90:13:2c:62:27:7f:63:5e:b7: 27:b6:f8:5d:52:e0:a5:d8:5c:60:33:04:aa:e8:84:21:23:bc: 6d:1b:d3:00:b4:cb:ea:3b:74:68:a8:f9:52:c1:7a:f6:2e:85: b3:44:b1:ec:80:00:94:74:06:7a:19:a9:8a:58:1b:ea:49:98: e2:7a:8f:1d:07:a8:6a:88:17:77:11:81:82:dd:25:f4:d8:01: 41:0b:e3:f4:85:fe:81:48:65:f7:f6:c9:d3:9a:63:8d:2c:bd: 35:dc:06:e9:f8:4e:fd:2b:e1:b7:eb:cd:8b:e9:75:63:ca:99: 0f:6b:04:fd:33:91:01:bb:e6:9c:a0:f4:c3:94:82:7b:ac:75: 52:eb:9c:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV0fdHeepjwrY0v1ds8FVE/UzwkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5 REYxMjkzMjAeFw0yNDA1MTgxNTU2MTBaFw0yNDA1MjExNjI5MTBaMDMxMTAvBgNV BAMTKEM2QTE0NjBFMUFEMTMwRjU3QkQ2RkExRDExMjZCQkYzMUQ1ODA1QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEOnp7L7cjC2yFKouIKSRv6C15 DIgxVOuxJNbBJb+UbtvCEiTEeog/RMGupSKW0qJYxD7ymyJL0CnMPmGyfeu1G9+5 DWphg0ruSPRD47w/2R4/drYsuFtd8h120zoANTj2ayNEfsB/5FeuB7rosAFzj6dq +8eu/XMx0hUGc+ZlaSLk+jKeft95d227Y7vG12SNObuJW515a4AnI5Rp6Rcq5hf0 +EoOo523q7ER/oZb/wtS6k3qZDeg7x4bI++SmuYTaZ9kYuPjwdU4npg5d1+Mvqsx uSLdtK6cySBlMr40tQvGEVMe9K/Ir1FztCYU1IE00SfILI1qjY19Dsa8olUbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxqFGDhrRMPV71vodESa78x1YBa8wHwYDVR0j BBgwFoAU7Jc74T7zJOfVkEbPdpChL53xKTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTFjYmQ3OS04ZjI2LTRiMGUtOGIzYi1hYjllOTkzOGZjYWUvMC9FQzk3M0JFMTNF RjMyNEU3RDU5MDQ2Q0Y3NjkwQTEyRjlERjEyOTMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEExMkY5REYx MjkzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmUxY2JkNzktOGYyNi00YjBlLThi M2ItYWI5ZTk5MzhmY2FlLzAvRUM5NzNCRTEzRUYzMjRFN0Q1OTA0NkNGNzY5MEEx MkY5REYxMjkzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKO/mihtyJmNQGVfxDq8vJdIQFcnInpCukZu ClemN3gr3Hsxygq8ONFNSqAh/k5BnFel47BPAK5DsqiP1eQjXL/7HyCA32/idHQL SjW8ilEBSKmLIdKmJ3t4TGNaqb3EedAwUMQxd/UU2DPdz7ZEfwB2PwNFDZATLGIn f2Netye2+F1S4KXYXGAzBKrohCEjvG0b0wC0y+o7dGio+VLBevYuhbNEseyAAJR0 BnoZqYpYG+pJmOJ6jx0HqGqIF3cRgYLdJfTYAUEL4/SF/oFIZff2ydOaY40svTXc Bun4Tv0r4bfrzYvpdWPKmQ9rBP0zkQG75pyg9MOUgnusdVLrnH4= -----END CERTIFICATE-----Generated at Sat May 18 16:19:20 2024 by rpki-client on console-fra.rpki-client.org