$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: qhi6muuv1cAM8McprGrvgxN5Hgh5P1A2N2EGWXgsRic= Subject key identifier: 7E:C9:F6:F6:25:04:B2:AC:F7:40:6D:00:74:79:40:54:92:5C:25:59 Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 4B37108C1707F54EAA31C7B152552AF2BD97A96E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: A5 Signing time: Wed 20 Nov 2024 21:23:44 +0000 Manifest this update: Wed 20 Nov 2024 21:18:44 +0000 Manifest next update: Sun 24 Nov 2024 02:38:44 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: V+jJtRxnP7EbVD+Ic+8xKPa5Eo/a0KtBG7VbJf7hukQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:37:10:8c:17:07:f5:4e:aa:31:c7:b1:52:55:2a:f2:bd:97:a9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Nov 20 21:18:44 2024 GMT Not After : Nov 24 02:38:44 2024 GMT Subject: CN=7EC9F6F62504B2ACF7406D0074794054925C2559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:04:8c:4b:59:88:82:7d:4f:15:b3:01:0b: 7c:89:fa:ee:90:3c:63:05:cf:9a:fd:d8:18:38:8e: b1:cc:88:5d:39:0c:b7:ba:8a:18:09:cc:24:80:22: 3c:56:c0:61:48:06:7a:38:e7:70:0d:a1:f9:e4:36: 7b:c6:cc:70:d7:7c:08:80:96:9c:47:52:7e:2c:78: 63:0c:6d:e1:b9:99:bf:44:8d:78:bb:f2:c9:e6:6b: 74:78:13:28:58:dd:8f:b6:b6:7d:c1:0a:8d:8d:1f: f7:cb:e3:19:2c:3b:8c:14:44:13:eb:5c:3a:22:e9: 5a:a2:2b:57:39:08:70:71:82:8d:c0:ef:39:6e:f3: e0:fe:19:56:af:e5:01:61:94:84:f5:57:bb:28:fa: e7:b9:47:ac:20:9b:b6:96:9d:30:b8:3d:6d:79:28: 30:09:d6:96:d4:cf:59:17:35:7e:65:be:fb:58:f4: 0c:6c:ab:9f:5d:e8:7e:aa:de:22:97:24:59:5c:3a: 1d:8e:00:e1:8a:d3:b8:8b:f4:b3:80:06:45:5a:b0: ce:fd:b1:fd:7b:de:dc:01:61:32:73:00:2d:66:90: 6c:13:b7:e6:29:39:42:2c:70:eb:0b:33:e5:29:d0: 54:31:d4:17:6c:41:91:fb:7a:6b:bc:d4:e8:d4:8a: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C9:F6:F6:25:04:B2:AC:F7:40:6D:00:74:79:40:54:92:5C:25:59 X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:7c:38:98:89:02:7a:56:5e:ae:50:fa:1f:a0:62:6c:9f:76: 34:55:0b:b8:1f:87:53:53:b7:fd:e5:af:b7:d9:66:d1:8e:59: 9a:48:62:e6:73:89:5e:09:81:8a:60:78:24:13:41:0c:d1:05: 59:5a:4e:c8:67:58:47:0a:3d:00:c9:6a:54:ee:90:05:1b:51: ee:85:19:bc:bf:9a:77:9d:94:cf:eb:8c:6b:d0:78:b3:03:39: 0d:da:be:2b:8e:b5:24:b8:00:8e:f9:14:20:31:09:ec:2d:32: d8:e6:31:9c:de:72:d0:a4:a4:74:46:c3:00:d4:71:70:df:11: d7:7a:44:cf:54:ec:8f:f3:58:64:8a:71:26:d7:c4:1a:ba:42: c0:90:77:5c:08:b2:6b:ef:a8:ef:05:32:44:1d:0e:b2:aa:60: 15:77:12:e5:e6:11:cd:4e:8b:ca:dc:e3:ba:0a:d5:c1:07:25: b2:5d:33:8f:a7:b6:b6:ad:ef:46:96:c8:3b:cf:45:57:df:7e: 4e:ca:4d:ec:aa:4d:10:c1:9a:51:24:69:dd:04:7a:be:88:9e: 82:51:db:a8:6a:11:f7:7b:74:8b:b1:0d:b8:36:00:11:63:24: 53:93:09:63:b0:10:47:4b:23:ae:66:10:84:3a:b6:84:fc:de: ee:34:91:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzcQjBcH9U6qMcexUlUq8r2XqW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNDExMjAyMTE4NDRaFw0yNDExMjQwMjM4NDRaMDMxMTAvBgNV BAMTKDdFQzlGNkY2MjUwNEIyQUNGNzQwNkQwMDc0Nzk0MDU0OTI1QzI1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3UgSMS1mIgn1PFbMBC3yJ+u6Q PGMFz5r92Bg4jrHMiF05DLe6ihgJzCSAIjxWwGFIBno453ANofnkNnvGzHDXfAiA lpxHUn4seGMMbeG5mb9EjXi78snma3R4EyhY3Y+2tn3BCo2NH/fL4xksO4wURBPr XDoi6VqiK1c5CHBxgo3A7zlu8+D+GVav5QFhlIT1V7so+ue5R6wgm7aWnTC4PW15 KDAJ1pbUz1kXNX5lvvtY9Axsq59d6H6q3iKXJFlcOh2OAOGK07iL9LOABkVasM79 sf173twBYTJzAC1mkGwTt+YpOUIscOsLM+Up0FQx1BdsQZH7emu81OjUio6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfsn29iUEsqz3QG0AdHlAVJJcJVkwHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp8OJiJAnpWXq5Q+h+gYmyfdjRVC7gfh1NT t/3lr7fZZtGOWZpIYuZziV4JgYpgeCQTQQzRBVlaTshnWEcKPQDJalTukAUbUe6F Gby/mnedlM/rjGvQeLMDOQ3aviuOtSS4AI75FCAxCewtMtjmMZzectCkpHRGwwDU cXDfEdd6RM9U7I/zWGSKcSbXxBq6QsCQd1wIsmvvqO8FMkQdDrKqYBV3EuXmEc1O i8rc47oK1cEHJbJdM4+ntrat70aWyDvPRVfffk7KTeyqTRDBmlEkad0Eer6InoJR 26hqEfd7dIuxDbg2ABFjJFOTCWOwEEdLI65mEIQ6toT83u40kY8= -----END CERTIFICATE-----Generated at Wed Nov 20 23:10:17 2024 by rpki-client on console-fra.rpki-client.org