$ rpki-client -vvf repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft File: 99807F9B6904D604FC55188D6AFE03013E0CB07A.mft (raw, json) Hash identifier: sXGRyL/ufG0cWOabyhNa5xCNiSnqoUQ5GDzo0lDPRzc= Subject key identifier: F2:3F:7E:3D:05:F6:CC:3D:E0:05:D4:88:60:1E:50:6C:D0:41:37:FF Authority key identifier: 99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A Certificate issuer: /CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Certificate serial: 7FCDE5AB073F0C2AA06BB021F5DEFF04BDDCBFB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft Manifest number: 99 Signing time: Sun 24 Nov 2024 20:51:11 +0000 Manifest this update: Sun 24 Nov 2024 20:46:11 +0000 Manifest next update: Thu 28 Nov 2024 07:38:11 +0000 Files and hashes: 1: 99807F9B6904D604FC55188D6AFE03013E0CB07A.crl (hash: g/WFWDkvxEE4AyO0GwuNYl/WBgXxBk8Lv1SoBMo7tbA=) 2: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: ZJ83A8Bc0PE4yZLYxFCZBSb8MhHQthKCMAtJAy92tfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:cd:e5:ab:07:3f:0c:2a:a0:6b:b0:21:f5:de:ff:04:bd:dc:bf:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99807F9B6904D604FC55188D6AFE03013E0CB07A Validity Not Before: Nov 24 20:46:11 2024 GMT Not After : Nov 28 07:38:11 2024 GMT Subject: CN=F23F7E3D05F6CC3DE005D488601E506CD04137FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:4c:ba:cb:22:69:47:aa:0e:d9:89:ec:80: 5e:84:42:d4:fc:35:c4:ca:23:64:91:41:fd:0e:00: 06:2c:8a:d6:32:0a:07:a9:33:70:6e:b6:da:31:30: b3:52:e1:69:9f:d2:23:cc:c9:72:29:10:1d:f6:22: 07:e7:a1:54:85:4d:3f:dc:af:5f:ea:69:c2:cb:df: fb:29:98:75:23:7c:b2:81:49:6b:48:09:c8:99:66: f9:a8:97:9b:7c:af:05:d7:61:01:9b:0a:55:99:5e: af:40:3c:03:20:e6:87:74:74:f4:c6:c5:4c:e7:7f: 0d:4a:57:48:0d:a4:b3:b8:51:78:32:52:c3:89:21: 40:af:87:7b:36:89:8c:a3:39:81:06:5b:fb:69:31: d2:75:ef:6d:b1:08:5f:5f:99:05:14:c9:f0:a7:cf: 60:8b:fd:fc:f7:c7:c2:96:79:c7:46:ba:49:87:c7: af:99:a5:6e:9a:4a:33:78:c6:2d:51:3e:99:34:d4: 89:96:ec:90:64:f4:0f:ac:25:ee:4c:30:0d:79:e8: e7:9b:7a:73:3d:8f:40:0b:77:91:29:09:4d:e2:7d: 82:30:05:2c:90:06:74:ca:30:63:91:e7:cc:f4:01: 97:0b:a5:25:e5:97:ac:16:a2:2e:9e:55:5f:55:14: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3F:7E:3D:05:F6:CC:3D:E0:05:D4:88:60:1E:50:6C:D0:41:37:FF X509v3 Authority Key Identifier: keyid:99:80:7F:9B:69:04:D6:04:FC:55:18:8D:6A:FE:03:01:3E:0C:B0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99807F9B6904D604FC55188D6AFE03013E0CB07A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/99807F9B6904D604FC55188D6AFE03013E0CB07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f6:db:c5:8b:37:87:f1:32:df:b7:62:cb:55:8d:e3:ca:ed: 9a:bb:94:19:62:fc:15:06:50:02:4d:a2:2e:da:95:2e:52:bc: 85:23:0f:44:58:b4:22:b4:ad:f2:63:56:d3:21:1a:19:b9:19: 55:c4:4b:d0:6f:16:bf:57:2a:23:a6:90:f3:d2:9c:0e:7a:32: 5b:34:ac:b0:23:66:b8:10:a8:74:7f:23:87:63:6b:04:74:76: 96:99:5a:48:3e:94:82:81:0b:92:d7:a1:a2:ef:a5:cb:c2:38: df:8d:ea:aa:4e:16:2f:27:d3:01:1f:13:e6:fa:03:86:d6:6f: 27:e1:a5:f3:ee:98:b2:c7:44:d4:77:2d:4c:63:c0:90:06:e2: 51:61:a6:eb:70:e0:12:28:ae:b6:bf:0d:7a:a1:d0:96:f6:d1: 5f:93:0c:be:04:3b:75:a9:9c:70:41:d5:46:b7:38:4a:1c:c6: ea:ba:25:52:64:2a:14:71:ec:3c:77:e2:d9:6c:d5:dd:57:46: 3f:ab:67:e0:39:99:89:b5:94:0d:d5:a5:f7:72:79:0a:0b:29: ad:bb:21:76:8a:b0:0e:dc:70:57:2f:ad:6f:1f:b8:30:ba:85: 20:07:43:d0:88:2e:e4:56:b8:df:d3:3d:22:a0:c4:4c:6a:90: 70:e6:80:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf83lqwc/DCqga7Ah9d7/BL3cv7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEz RTBDQjA3QTAeFw0yNDExMjQyMDQ2MTFaFw0yNDExMjgwNzM4MTFaMDMxMTAvBgNV BAMTKEYyM0Y3RTNEMDVGNkNDM0RFMDA1RDQ4ODYwMUU1MDZDRDA0MTM3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlky6yyJpR6oO2YnsgF6EQtT8 NcTKI2SRQf0OAAYsitYyCgepM3ButtoxMLNS4Wmf0iPMyXIpEB32IgfnoVSFTT/c r1/qacLL3/spmHUjfLKBSWtICciZZvmol5t8rwXXYQGbClWZXq9APAMg5od0dPTG xUznfw1KV0gNpLO4UXgyUsOJIUCvh3s2iYyjOYEGW/tpMdJ1722xCF9fmQUUyfCn z2CL/fz3x8KWecdGukmHx6+ZpW6aSjN4xi1RPpk01ImW7JBk9A+sJe5MMA156Oeb enM9j0ALd5EpCU3ifYIwBSyQBnTKMGOR58z0AZcLpSXll6wWoi6eVV9VFHTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8j9+PQX2zD3gBdSIYB5QbNBBN/8wHwYDVR0j BBgwFoAUmYB/m2kE1gT8VRiNav4DAT4MsHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2Q3ZDI5Yi1kZDFjLTQxZGQtYmVlZi01NjQyODY0ZTg2YWUvMC85OTgwN0Y5QjY5 MDRENjA0RkM1NTE4OEQ2QUZFMDMwMTNFMENCMDdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAzMDEzRTBD QjA3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvOTk4MDdGOUI2OTA0RDYwNEZDNTUxODhENkFGRTAz MDEzRTBDQjA3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALP228WLN4fxMt+3YstVjePK7Zq7lBli/BUG UAJNoi7alS5SvIUjD0RYtCK0rfJjVtMhGhm5GVXES9BvFr9XKiOmkPPSnA56Mls0 rLAjZrgQqHR/I4djawR0dpaZWkg+lIKBC5LXoaLvpcvCON+N6qpOFi8n0wEfE+b6 A4bWbyfhpfPumLLHRNR3LUxjwJAG4lFhputw4BIorra/DXqh0Jb20V+TDL4EO3Wp nHBB1Ua3OEocxuq6JVJkKhRx7Dx34tls1d1XRj+rZ+A5mYm1lA3VpfdyeQoLKa27 IXaKsA7ccFcvrW8fuDC6hSAHQ9CILuRWuN/TPSKgxExqkHDmgEo= -----END CERTIFICATE-----Generated at Sun Nov 24 22:10:12 2024 by rpki-client on console-fra.rpki-client.org