$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: QqnTi1k37la345MQDBkiv+nlfQWExOZSa3uvI/wMQYE= Subject key identifier: EF:C3:C2:E4:34:84:C7:6C:FA:E7:E4:51:A6:DA:A2:6F:DF:9D:0D:90 Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 184CC15669EBA076981E7993AC819F6B65A443EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 01A8 Signing time: Thu 21 Nov 2024 10:21:30 +0000 Manifest this update: Thu 21 Nov 2024 10:16:30 +0000 Manifest next update: Sun 24 Nov 2024 19:55:30 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: 9qbXzBD0hF3xsapH9vinarSJhRDDgJgp9cO0833RkIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:4c:c1:56:69:eb:a0:76:98:1e:79:93:ac:81:9f:6b:65:a4:43:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Nov 21 10:16:30 2024 GMT Not After : Nov 24 19:55:30 2024 GMT Subject: CN=EFC3C2E43484C76CFAE7E451A6DAA26FDF9D0D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:f8:71:cb:cc:c3:2a:1d:6b:76:40:73:3e: 76:14:97:3e:62:04:de:58:12:6e:a0:ba:78:12:61: c9:db:ad:49:90:88:7e:44:0c:4f:90:fb:72:08:99: b2:b2:02:9a:c2:d7:39:57:30:7a:85:cb:0d:15:66: e9:c4:bd:81:d7:9d:30:03:25:67:bc:fd:31:3d:9c: f1:8e:ef:81:e3:64:c0:c9:4e:b8:3d:b6:a1:1f:a2: e8:56:f2:de:40:ee:5c:d0:b7:51:72:2c:12:5b:29: 80:fc:73:f3:6c:ae:e8:c0:1f:29:08:72:5e:90:25: a9:e2:4c:dc:6b:bd:66:c1:a4:a6:98:a3:28:30:28: 86:a8:c6:f5:0c:1d:d9:b6:19:46:be:fb:c7:2f:7d: 0e:51:d6:39:60:1a:b2:7a:67:71:d5:37:e4:44:98: ec:f9:a7:96:bf:41:a8:4e:54:00:6a:d2:18:3a:0d: d3:94:8b:9c:0f:9d:71:66:7c:8f:db:ff:c7:f7:65: 36:b0:63:ff:eb:99:08:46:02:cf:28:61:42:2b:8c: 03:e3:47:df:5a:58:e7:4d:50:fd:a7:81:f9:2a:1e: 00:08:e9:e2:11:41:7d:38:c4:03:df:25:ac:3a:54: 6d:d7:6e:94:6d:6c:37:e1:22:f7:22:12:d5:32:f6: 7c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C3:C2:E4:34:84:C7:6C:FA:E7:E4:51:A6:DA:A2:6F:DF:9D:0D:90 X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c9:65:bd:44:91:d2:86:d3:8d:d5:31:99:c8:e4:30:2f:7f: a5:af:d8:ce:a6:76:60:e9:55:45:fc:41:1a:00:b8:47:b2:f0: e3:0b:da:30:71:03:c6:e7:da:54:15:7b:b1:e2:11:2c:0b:5d: e7:04:65:f3:6a:51:74:6d:24:5c:a4:10:e7:25:16:be:2b:00: 7c:4b:fb:2d:d6:ec:db:60:e7:1e:d1:46:5d:22:bc:8e:ff:e1: d7:37:ae:ff:20:1d:b7:e2:db:07:39:2f:87:8c:69:d1:bb:4a: 55:3f:93:c7:b9:b8:27:3c:7e:d0:fd:76:df:22:a1:c9:b9:64: a7:fc:2d:0b:71:7d:a5:9e:5e:e4:a6:91:4b:84:eb:a0:1f:fd: f1:19:49:d0:69:1b:89:a0:33:9b:02:0b:ce:2e:95:b4:a6:24: 5b:70:a0:e1:05:32:c0:21:80:9a:c5:f7:7c:44:cd:68:98:7c: ae:c4:15:c8:08:4b:bb:77:1a:6d:ff:22:20:aa:d6:09:e3:66: ec:f1:41:d5:98:01:f6:3d:04:11:46:38:a0:43:c2:af:1d:61: 16:d1:fe:2b:59:8c:bf:5a:77:e5:3e:ea:50:cf:0b:bb:0b:0d: 5e:36:4d:4d:c4:b8:3a:3c:d3:63:53:07:9a:c1:36:15:ef:99: af:52:ce:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEzBVmnroHaYHnmTrIGfa2WkQ+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNDExMjExMDE2MzBaFw0yNDExMjQxOTU1MzBaMDMxMTAvBgNV BAMTKEVGQzNDMkU0MzQ4NEM3NkNGQUU3RTQ1MUE2REFBMjZGREY5RDBEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCscPhxy8zDKh1rdkBzPnYUlz5i BN5YEm6gungSYcnbrUmQiH5EDE+Q+3IImbKyAprC1zlXMHqFyw0VZunEvYHXnTAD JWe8/TE9nPGO74HjZMDJTrg9tqEfouhW8t5A7lzQt1FyLBJbKYD8c/NsrujAHykI cl6QJaniTNxrvWbBpKaYoygwKIaoxvUMHdm2GUa++8cvfQ5R1jlgGrJ6Z3HVN+RE mOz5p5a/QahOVABq0hg6DdOUi5wPnXFmfI/b/8f3ZTawY//rmQhGAs8oYUIrjAPj R99aWOdNUP2ngfkqHgAI6eIRQX04xAPfJaw6VG3XbpRtbDfhIvciEtUy9nz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU78PC5DSEx2z65+RRptqib9+dDZAwHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPJZb1EkdKG043VMZnI5DAvf6Wv2M6mdmDp VUX8QRoAuEey8OML2jBxA8bn2lQVe7HiESwLXecEZfNqUXRtJFykEOclFr4rAHxL +y3W7Ntg5x7RRl0ivI7/4dc3rv8gHbfi2wc5L4eMadG7SlU/k8e5uCc8ftD9dt8i ocm5ZKf8LQtxfaWeXuSmkUuE66Af/fEZSdBpG4mgM5sCC84ulbSmJFtwoOEFMsAh gJrF93xEzWiYfK7EFcgIS7t3Gm3/IiCq1gnjZuzxQdWYAfY9BBFGOKBDwq8dYRbR /itZjL9ad+U+6lDPC7sLDV42TU3EuDo802NTB5rBNhXvma9SziM= -----END CERTIFICATE-----Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org