$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: 3Qnlqhl4UWLax+HEXOPeGLKdngb5RXR8hdodosgapOI= Subject key identifier: D8:B0:39:AA:8C:D4:3B:9D:F0:B6:A4:AE:87:ED:F2:1F:45:E7:09:A1 Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 62DCD76B33EBE3899F078C3F3193504C087FE378 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: 35 Signing time: Sun 24 Nov 2024 00:21:50 +0000 Manifest this update: Sun 24 Nov 2024 00:16:50 +0000 Manifest next update: Wed 27 Nov 2024 11:49:50 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: jdJ2KquKMJWdf12KjhT4Ses1rrSGWzcuBYX0vsJh3W8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:dc:d7:6b:33:eb:e3:89:9f:07:8c:3f:31:93:50:4c:08:7f:e3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Nov 24 00:16:50 2024 GMT Not After : Nov 27 11:49:50 2024 GMT Subject: CN=D8B039AA8CD43B9DF0B6A4AE87EDF21F45E709A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:66:7f:2f:e1:b8:2e:60:29:85:85:5b:6f:b4: fe:3f:88:85:d8:57:3e:bf:33:0a:49:e5:95:83:d6: c8:c0:21:a8:fb:28:85:ce:17:a4:34:32:1c:74:30: 3b:bd:ba:f9:9d:dd:18:a7:c9:aa:ef:b2:1e:b8:95: 0f:fd:19:12:1a:71:be:41:66:94:a8:0c:a3:20:12: ac:d6:e5:80:3a:6e:a1:5d:a3:a1:5d:e4:18:9e:23: 4d:79:c8:4a:8c:df:82:00:24:68:94:2e:95:84:9e: 77:b7:93:b1:bb:fb:ea:fb:1d:d7:bb:89:ae:2f:6c: c6:45:fa:a9:90:c9:0c:63:53:72:c9:11:21:87:3d: ba:2d:70:0c:3a:1c:20:d5:b3:8a:01:fb:5c:b0:1e: 04:a7:9b:36:b1:1a:37:69:c8:2c:84:9e:e2:c2:07: 21:fe:c9:46:bc:85:b6:d7:5c:44:61:90:81:1d:3d: c7:d2:e3:0c:cf:9f:98:88:8c:a3:c1:c4:6f:4f:01: 0b:4c:1f:07:76:6d:f9:99:db:71:93:e1:50:2c:93: 17:62:87:1e:a2:41:36:7c:5f:2c:b7:98:d3:78:1b: 1d:26:81:2a:e9:6e:49:da:ea:5b:25:5c:78:3f:05: dc:19:eb:ed:60:c6:cd:3d:51:b1:04:61:51:fa:f1: ee:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B0:39:AA:8C:D4:3B:9D:F0:B6:A4:AE:87:ED:F2:1F:45:E7:09:A1 X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a5:a6:c6:e5:27:17:39:39:b8:ac:95:f5:c2:38:93:58:43: d3:24:c7:f7:0a:fd:a0:ee:e7:bc:f4:1c:20:ac:51:2d:d8:9c: 09:1c:f8:e0:b9:85:19:2a:17:c9:ed:26:51:58:76:14:fd:1c: 35:c0:ba:4b:4a:41:65:cf:f5:c2:5f:8c:62:20:b9:29:36:0a: e2:f7:a2:3a:92:a6:38:36:05:a0:39:3b:1c:bc:ca:62:9b:93: 8c:10:b3:c9:e4:9e:a2:f8:23:7f:bc:14:13:94:07:6a:75:d9: c7:0a:0f:70:79:e5:5c:5f:d3:ab:24:84:06:9a:a6:3e:cf:f8: d0:42:25:3e:44:03:5b:5b:e6:84:04:59:50:06:44:4d:ca:4e: 10:bf:a2:ad:bc:92:b8:c6:0c:68:70:15:ab:6c:04:fc:8c:be: d3:6a:f7:41:28:a1:c4:d7:5e:ee:03:89:f0:d9:a8:26:5c:46: be:4c:db:8d:0e:1e:22:b3:8f:73:23:d1:d9:be:84:dd:91:b2: fa:71:74:59:0b:56:6c:82:70:98:ea:1c:3d:74:56:2c:d3:36: cf:66:41:ae:b2:61:53:43:0c:f6:3d:8a:8a:9e:2c:13:ac:81: 4d:75:90:f0:63:7d:60:ed:29:73:74:05:53:d2:20:e9:52:0a: 02:34:60:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYtzXazPr44mfB4w/MZNQTAh/43gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNDExMjQwMDE2NTBaFw0yNDExMjcxMTQ5NTBaMDMxMTAvBgNV BAMTKEQ4QjAzOUFBOENENDNCOURGMEI2QTRBRTg3RURGMjFGNDVFNzA5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/Zn8v4bguYCmFhVtvtP4/iIXY Vz6/MwpJ5ZWD1sjAIaj7KIXOF6Q0Mhx0MDu9uvmd3Rinyarvsh64lQ/9GRIacb5B ZpSoDKMgEqzW5YA6bqFdo6Fd5BieI015yEqM34IAJGiULpWEnne3k7G7++r7Hde7 ia4vbMZF+qmQyQxjU3LJESGHPbotcAw6HCDVs4oB+1ywHgSnmzaxGjdpyCyEnuLC ByH+yUa8hbbXXERhkIEdPcfS4wzPn5iIjKPBxG9PAQtMHwd2bfmZ23GT4VAskxdi hx6iQTZ8Xyy3mNN4Gx0mgSrpbkna6lslXHg/BdwZ6+1gxs09UbEEYVH68e4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2LA5qozUO53wtqSuh+3yH0XnCaEwHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIalpsblJxc5ObislfXCOJNYQ9Mkx/cK/aDu 57z0HCCsUS3YnAkc+OC5hRkqF8ntJlFYdhT9HDXAuktKQWXP9cJfjGIguSk2CuL3 ojqSpjg2BaA5Oxy8ymKbk4wQs8nknqL4I3+8FBOUB2p12ccKD3B55Vxf06skhAaa pj7P+NBCJT5EA1tb5oQEWVAGRE3KThC/oq28krjGDGhwFatsBPyMvtNq90EoocTX Xu4DifDZqCZcRr5M240OHiKzj3Mj0dm+hN2RsvpxdFkLVmyCcJjqHD10VizTNs9m Qa6yYVNDDPY9ioqeLBOsgU11kPBjfWDtKXN0BVPSIOlSCgI0YNA= -----END CERTIFICATE-----Generated at Sun Nov 24 01:31:57 2024 by rpki-client on console-ams.rpki-client.org