$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: yDMpuOa4r9arfqMioHkcsj5zBRnKa8cDAndQJApPUS4= Subject key identifier: 4F:DB:90:51:80:0F:A2:91:51:83:3F:FA:A4:63:29:23:CA:FA:D1:79 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 07A1CF751DB1AA32230757347EFABE6D28328432 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 8E Signing time: Sun 24 Nov 2024 18:11:30 +0000 Manifest this update: Sun 24 Nov 2024 18:06:30 +0000 Manifest next update: Wed 27 Nov 2024 19:17:30 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: mcbPUmTMB2Vt+mJQ6+e8saS3yeABV4spBH6bFfmOOSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a1:cf:75:1d:b1:aa:32:23:07:57:34:7e:fa:be:6d:28:32:84:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Nov 24 18:06:30 2024 GMT Not After : Nov 27 19:17:30 2024 GMT Subject: CN=4FDB9051800FA29151833FFAA4632923CAFAD179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:7a:98:1f:e5:e2:4a:46:07:79:66:30:68: bb:9c:70:e9:b7:15:41:74:e2:1f:fd:4e:70:b5:5e: 07:e9:d4:6d:81:de:76:d8:a9:56:72:4b:ad:38:71: de:20:72:17:60:2a:38:71:0a:93:b4:9e:80:dd:1a: 08:89:d3:af:4d:34:81:a4:63:f5:f1:1b:bf:90:29: 3b:d5:eb:8d:95:82:a5:63:01:bc:5b:cc:ce:c1:3e: 90:24:55:ab:11:13:07:4b:a8:a9:57:e7:71:d0:9a: 52:62:9a:dc:ad:b7:f4:55:87:97:4e:85:2f:db:e2: 77:5b:29:6f:d9:b6:a3:81:ac:3c:3f:f2:c6:19:ac: d4:fd:5f:6c:23:1b:c7:03:90:17:da:9a:cb:28:f7: 83:4f:e2:b2:53:ca:be:17:df:d5:97:2f:28:00:9a: 76:fb:65:b9:1f:f6:9d:22:df:7f:08:67:3e:b6:91: f6:fc:00:7a:46:84:48:20:dc:f8:a8:d6:c5:6e:cb: b9:7f:ab:bc:50:b1:3e:41:fa:b8:53:1a:57:3f:0e: b0:39:95:e9:77:07:6c:95:2b:30:5b:70:e7:49:36: c5:3f:54:8e:69:d1:9d:ec:bb:cb:27:d3:78:eb:71: fc:32:08:25:f4:dd:e3:fb:6b:e0:22:d2:df:43:95: af:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DB:90:51:80:0F:A2:91:51:83:3F:FA:A4:63:29:23:CA:FA:D1:79 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0f:c0:79:d9:70:c9:c1:79:09:ae:44:56:00:33:be:d5:80: 38:b0:6f:c7:d8:03:03:85:70:17:44:20:f1:1a:05:ec:fd:6c: 5b:d1:ec:7c:e8:54:fd:ef:cf:1c:fe:db:37:c6:a5:52:66:a3: 5d:28:06:5b:44:20:04:c5:cc:62:b1:c4:72:7a:21:cf:bd:38: 9a:a1:08:e6:bb:34:e0:44:e5:9d:02:68:16:dc:68:4b:5d:39: 0c:05:99:45:a3:ec:f6:65:15:04:fe:f2:e4:fe:54:63:f4:24: d5:90:a0:ed:34:17:9d:33:4c:4c:c5:87:d6:78:35:1f:81:90: 04:b6:48:47:a2:5f:e1:d9:ba:20:a8:60:40:ee:d8:c1:b0:e1: df:2e:8d:a3:cb:1d:e7:4d:b7:5e:8a:56:b3:fc:df:3c:45:1d: 42:cf:74:17:b3:3d:85:ad:39:45:e9:09:8d:ae:08:e2:02:55: eb:e1:a8:da:2c:cf:b7:43:b0:b2:73:9d:de:48:98:0e:a7:74: 30:9f:8d:24:8b:b9:60:ed:4b:c0:52:50:67:b6:74:62:bc:b3: de:df:bf:6e:6f:64:6f:09:47:2d:f3:eb:14:fe:ec:1a:bd:3d: e3:d2:22:a7:98:cc:a3:69:18:8c:49:92:65:cc:c0:ab:c4:f4: db:34:c5:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB6HPdR2xqjIjB1c0fvq+bSgyhDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNDExMjQxODA2MzBaFw0yNDExMjcxOTE3MzBaMDMxMTAvBgNV BAMTKDRGREI5MDUxODAwRkEyOTE1MTgzM0ZGQUE0NjMyOTIzQ0FGQUQxNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRanqYH+XiSkYHeWYwaLuccOm3 FUF04h/9TnC1Xgfp1G2B3nbYqVZyS604cd4gchdgKjhxCpO0noDdGgiJ069NNIGk Y/XxG7+QKTvV642VgqVjAbxbzM7BPpAkVasREwdLqKlX53HQmlJimtytt/RVh5dO hS/b4ndbKW/ZtqOBrDw/8sYZrNT9X2wjG8cDkBfamsso94NP4rJTyr4X39WXLygA mnb7Zbkf9p0i338IZz62kfb8AHpGhEgg3Pio1sVuy7l/q7xQsT5B+rhTGlc/DrA5 lel3B2yVKzBbcOdJNsU/VI5p0Z3su8sn03jrcfwyCCX03eP7a+Ai0t9Dla8LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT9uQUYAPopFRgz/6pGMpI8r60XkwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgPwHnZcMnBeQmuRFYAM77VgDiwb8fYAwOF cBdEIPEaBez9bFvR7HzoVP3vzxz+2zfGpVJmo10oBltEIATFzGKxxHJ6Ic+9OJqh COa7NOBE5Z0CaBbcaEtdOQwFmUWj7PZlFQT+8uT+VGP0JNWQoO00F50zTEzFh9Z4 NR+BkAS2SEeiX+HZuiCoYEDu2MGw4d8ujaPLHedNt16KVrP83zxFHULPdBezPYWt OUXpCY2uCOICVevhqNosz7dDsLJznd5ImA6ndDCfjSSLuWDtS8BSUGe2dGK8s97f v25vZG8JRy3z6xT+7Bq9PePSIqeYzKNpGIxJkmXMwKvE9Ns0xQs= -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org