$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: 85UR8TUT96uyVoi4gqn+HaH/+zC/xeWahCdwvMsBni4= Subject key identifier: 63:03:BD:BB:68:B5:FF:94:61:01:C7:61:EB:AC:A2:23:70:5E:54:49 Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 1D7508E17067B10723BC7FD2F00A2540C4510209 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: DF Signing time: Sun 24 Nov 2024 15:52:25 +0000 Manifest this update: Sun 24 Nov 2024 15:47:25 +0000 Manifest next update: Wed 27 Nov 2024 15:57:25 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: BTcMukUgSShmP2i/vWQcZI041z9hVbf1/UeQiOWbVB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:75:08:e1:70:67:b1:07:23:bc:7f:d2:f0:0a:25:40:c4:51:02:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Nov 24 15:47:25 2024 GMT Not After : Nov 27 15:57:25 2024 GMT Subject: CN=6303BDBB68B5FF946101C761EBACA223705E5449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:68:0a:63:06:1d:04:82:4b:56:86:e6:1d: a0:9a:f2:7c:d5:c9:e3:8b:f2:44:7a:9c:77:17:6d: db:08:51:0d:24:64:cd:ce:ee:b8:26:93:35:be:3a: 22:87:9b:3b:45:de:b0:09:a7:e1:e4:73:d5:64:fe: 73:57:4d:d6:7a:d4:13:7f:9a:3c:d6:9d:36:6d:0e: 65:87:d8:68:a5:20:ef:86:c5:b4:67:d1:a4:37:51: 12:82:15:a5:28:24:de:74:db:a2:b4:dc:88:e9:97: e7:64:8c:84:a8:f4:c7:19:45:bd:df:ba:7d:9d:98: 10:31:d5:2d:31:ee:39:ec:68:fb:f9:0a:9c:02:38: 07:60:99:61:52:d8:74:4b:5a:f0:1d:ec:81:24:0e: aa:12:60:2c:19:6a:cb:5b:34:96:11:f0:1d:b4:40: 57:e2:ee:44:a3:08:4a:ba:36:8c:a4:a7:a3:4d:44: 68:d6:79:af:15:90:9f:c5:ed:3c:3d:e1:1b:f9:a2: ae:de:7c:b0:e9:55:33:de:c1:b6:08:74:bf:b0:65: 68:22:00:71:5e:a5:d5:57:6b:af:a2:a4:3d:41:9d: 56:1b:01:34:20:9f:42:28:ae:4d:ec:16:24:47:d8: 86:db:3f:64:d5:e0:31:23:81:21:bb:1b:e1:fa:3c: 59:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:03:BD:BB:68:B5:FF:94:61:01:C7:61:EB:AC:A2:23:70:5E:54:49 X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:56:77:b6:17:53:57:72:48:d9:95:a1:86:1e:c4:14:3b:ee: 1d:f3:4e:90:a7:21:ad:65:89:20:f8:2e:d1:d2:d9:89:37:63: 4d:16:90:ed:b1:24:88:67:69:cd:eb:5c:fe:f0:05:8a:9f:5b: fa:d4:ec:e8:35:99:9f:b9:7e:b7:f0:e5:c1:db:21:f8:22:48: a9:4e:96:5c:29:75:17:d3:7a:ad:d6:66:30:ca:84:5b:28:e3: 53:22:d1:03:5e:6b:84:98:a9:1e:5f:30:0d:f9:f7:5d:53:a7: 50:e8:99:56:67:d6:1a:95:78:1f:a0:70:05:fc:ef:01:9e:4d: 87:89:1c:18:43:37:92:1f:29:0e:58:5f:ee:96:de:ad:19:90: de:30:48:4f:8a:a7:15:da:1c:3f:ec:50:b5:03:c7:dd:b0:fa: b6:1a:80:3f:02:81:ad:e5:56:86:53:7c:95:d2:98:70:83:e0: 7b:56:a6:c1:d9:6b:52:03:75:fb:46:ee:ad:b2:3b:69:58:74: 65:ec:0c:b1:3d:b0:67:b8:51:00:bf:74:6c:08:f8:a1:19:63: 52:2c:fc:bd:49:e5:7c:36:bd:e4:6c:5b:db:b3:06:f4:32:bf: b6:0c:60:cd:12:d5:0b:ea:97:73:cf:5f:71:31:a6:7a:d5:63: 7b:73:d1:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXUI4XBnsQcjvH/S8AolQMRRAgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNDExMjQxNTQ3MjVaFw0yNDExMjcxNTU3MjVaMDMxMTAvBgNV BAMTKDYzMDNCREJCNjhCNUZGOTQ2MTAxQzc2MUVCQUNBMjIzNzA1RTU0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfmgKYwYdBIJLVobmHaCa8nzV yeOL8kR6nHcXbdsIUQ0kZM3O7rgmkzW+OiKHmztF3rAJp+Hkc9Vk/nNXTdZ61BN/ mjzWnTZtDmWH2GilIO+GxbRn0aQ3URKCFaUoJN5026K03Ijpl+dkjISo9McZRb3f un2dmBAx1S0x7jnsaPv5CpwCOAdgmWFS2HRLWvAd7IEkDqoSYCwZastbNJYR8B20 QFfi7kSjCEq6Noykp6NNRGjWea8VkJ/F7Tw94Rv5oq7efLDpVTPewbYIdL+wZWgi AHFepdVXa6+ipD1BnVYbATQgn0Iork3sFiRH2IbbP2TV4DEjgSG7G+H6PFmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYwO9u2i1/5RhAcdh66yiI3BeVEkwHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9Wd7YXU1dySNmVoYYexBQ77h3zTpCnIa1l iSD4LtHS2Yk3Y00WkO2xJIhnac3rXP7wBYqfW/rU7Og1mZ+5frfw5cHbIfgiSKlO llwpdRfTeq3WZjDKhFso41Mi0QNea4SYqR5fMA35911Tp1DomVZn1hqVeB+gcAX8 7wGeTYeJHBhDN5IfKQ5YX+6W3q0ZkN4wSE+KpxXaHD/sULUDx92w+rYagD8Cga3l VoZTfJXSmHCD4HtWpsHZa1IDdftG7q2yO2lYdGXsDLE9sGe4UQC/dGwI+KEZY1Is /L1J5Xw2veRsW9uzBvQyv7YMYM0S1Qvql3PPX3ExpnrVY3tz0dU= -----END CERTIFICATE-----Generated at Sun Nov 24 18:20:18 2024 by rpki-client on console-ams.rpki-client.org