$ rpki-client -vvf repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft File: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft (raw, json) Hash identifier: /sZFpBObUeE6p74fD7fUj/Crp06GsbXYA/U5n6t4ulo= Subject key identifier: 08:87:4B:FE:DA:F8:DF:23:C0:8A:18:61:38:A3:03:25:32:C9:F3:F4 Authority key identifier: 89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E Certificate issuer: /CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Certificate serial: 5FC003BB308C265F3D7BAA2CE15E8B04F9ACC372 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft Manifest number: 10 Signing time: Mon 25 Nov 2024 00:00:05 +0000 Manifest this update: Sun 24 Nov 2024 23:55:05 +0000 Manifest next update: Thu 28 Nov 2024 06:39:05 +0000 Files and hashes: 1: 8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl (hash: u+czU18rtozY+Gv9np5wgXVpNiBx7OnFJjgwBcr0AFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c0:03:bb:30:8c:26:5f:3d:7b:aa:2c:e1:5e:8b:04:f9:ac:c3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8920EB690658C013C7B4AAC28EC6B511B39DAE3E Validity Not Before: Nov 24 23:55:05 2024 GMT Not After : Nov 28 06:39:05 2024 GMT Subject: CN=08874BFEDAF8DF23C08A186138A3032532C9F3F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:6b:ec:1e:cb:14:7b:fc:69:43:d9:47:51: 30:d3:ae:43:48:75:87:5f:9e:14:47:e0:58:6f:70: c1:45:21:c8:ea:ee:e9:d4:e0:e5:42:80:83:ae:1c: 96:65:5d:91:a0:70:6b:f3:68:65:84:2a:e6:31:fd: 1d:99:da:e0:36:f1:94:c2:fb:27:55:fd:81:b5:6b: da:a1:d7:ed:97:ca:51:c5:05:99:d4:15:85:b7:61: 54:e8:2f:c6:ac:73:14:e1:53:54:9e:7d:b9:c8:6c: 1e:42:58:9c:9c:b9:96:a9:b0:72:d7:11:e4:76:4f: 0c:f4:0c:66:b9:18:d4:1c:34:46:2b:dc:a7:c8:26: 17:1c:35:60:d9:74:4a:9f:98:f6:26:e2:42:16:26: 0b:64:3a:70:59:e9:27:4b:97:39:fc:8b:91:6a:fa: 2e:91:43:08:59:35:25:63:28:ac:b9:b9:4a:6f:9d: da:2a:13:75:2a:cd:5f:be:f3:ea:42:fd:e7:72:fc: dc:49:2c:fa:f3:1b:a0:83:1e:f9:bf:37:d0:34:a5: 3f:3b:f6:7a:f5:d8:ac:a4:39:05:97:f4:04:9e:97: aa:4b:b9:da:cf:ea:02:32:e7:58:a6:21:a1:6f:ef: ce:a8:bc:5a:f6:3f:26:21:47:7a:78:26:7c:e8:09: 09:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:87:4B:FE:DA:F8:DF:23:C0:8A:18:61:38:A3:03:25:32:C9:F3:F4 X509v3 Authority Key Identifier: keyid:89:20:EB:69:06:58:C0:13:C7:B4:AA:C2:8E:C6:B5:11:B3:9D:AE:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/1/8920EB690658C013C7B4AAC28EC6B511B39DAE3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bd:57:5a:6d:5d:b0:f4:79:55:55:e8:d1:65:57:06:c6:74: 67:47:91:7b:79:20:7e:0f:1a:7a:21:bd:6b:e5:44:29:c4:dd: db:c7:2a:50:b1:4d:1d:7f:cd:61:ce:ff:b0:fd:24:37:e0:5c: 86:f3:9f:33:76:a1:3a:bb:7c:56:0b:2e:13:bd:cc:ca:ae:92: c1:e5:c7:8a:b1:c0:39:43:94:25:b1:42:50:30:c0:4e:56:5f: cf:6f:29:e1:9b:27:c5:ed:ca:c4:e9:2f:aa:3a:81:9a:11:e1: 04:27:e1:7c:69:04:ac:6e:c8:f0:eb:a0:ee:30:76:2e:db:51: c3:c3:cf:21:98:5d:3a:fd:55:f6:e8:b6:69:63:9c:16:18:3f: 90:f3:8d:68:fc:9d:92:c0:d3:d2:44:82:5a:93:f1:c7:4d:7a: e6:c0:19:69:28:5a:51:81:19:78:ab:b6:8a:99:0d:8c:84:b2: 6c:be:fd:33:87:5c:dd:a7:64:15:9e:eb:9b:4f:12:a9:bd:81: 5a:ec:12:cb:89:1d:4c:3e:39:61:31:16:bc:51:a9:c7:03:87: 36:57:7a:69:a8:15:85:42:39:02:77:34:e6:23:fd:4d:8a:28: d2:ee:6d:af:cf:c1:c7:fd:94:f1:c7:4d:8b:04:69:ed:e8:f3: 85:f7:49:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8ADuzCMJl89e6os4V6LBPmsw3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFC MzlEQUUzRTAeFw0yNDExMjQyMzU1MDVaFw0yNDExMjgwNjM5MDVaMDMxMTAvBgNV BAMTKDA4ODc0QkZFREFGOERGMjNDMDhBMTg2MTM4QTMwMzI1MzJDOUYzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CGvsHssUe/xpQ9lHUTDTrkNI dYdfnhRH4FhvcMFFIcjq7unU4OVCgIOuHJZlXZGgcGvzaGWEKuYx/R2Z2uA28ZTC +ydV/YG1a9qh1+2XylHFBZnUFYW3YVToL8ascxThU1SefbnIbB5CWJycuZapsHLX EeR2Twz0DGa5GNQcNEYr3KfIJhccNWDZdEqfmPYm4kIWJgtkOnBZ6SdLlzn8i5Fq +i6RQwhZNSVjKKy5uUpvndoqE3UqzV++8+pC/edy/NxJLPrzG6CDHvm/N9A0pT87 9nr12KykOQWX9ASel6pLudrP6gIy51imIaFv786ovFr2PyYhR3p4JnzoCQmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCIdL/tr43yPAihhhOKMDJTLJ8/QwHwYDVR0j BBgwFoAUiSDraQZYwBPHtKrCjsa1EbOdrj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM5NjM4OC0yZDZiLTQ3NmUtOTYzZC0xY2MzODEzNzRiMWMvMS84OTIwRUI2OTA2 NThDMDEzQzdCNEFBQzI4RUM2QjUxMUIzOURBRTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1MTFCMzlE QUUzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOTYzODgtMmQ2Yi00NzZlLTk2 M2QtMWNjMzgxMzc0YjFjLzEvODkyMEVCNjkwNjU4QzAxM0M3QjRBQUMyOEVDNkI1 MTFCMzlEQUUzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI29V1ptXbD0eVVV6NFlVwbGdGdHkXt5IH4P GnohvWvlRCnE3dvHKlCxTR1/zWHO/7D9JDfgXIbznzN2oTq7fFYLLhO9zMquksHl x4qxwDlDlCWxQlAwwE5WX89vKeGbJ8XtysTpL6o6gZoR4QQn4XxpBKxuyPDroO4w di7bUcPDzyGYXTr9VfbotmljnBYYP5DzjWj8nZLA09JEglqT8cdNeubAGWkoWlGB GXirtoqZDYyEsmy+/TOHXN2nZBWe65tPEqm9gVrsEsuJHUw+OWExFrxRqccDhzZX emmoFYVCOQJ3NOYj/U2KKNLuba/Pwcf9lPHHTYsEae3o84X3Se8= -----END CERTIFICATE-----Generated at Mon Nov 25 01:13:37 2024 by rpki-client on console-fra.rpki-client.org