$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: Tw91UiXvvUxW6GA/V21MNJ7t73ztGyH76XtL5nG4k/A= Subject key identifier: 13:D9:E0:2C:0B:7E:5B:99:EA:2A:E4:2C:60:29:B5:31:C2:B9:EF:6C Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 4699C0A80327C589D52D0705DF581066660E67B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 0196 Signing time: Thu 21 Nov 2024 22:20:45 +0000 Manifest this update: Thu 21 Nov 2024 22:15:45 +0000 Manifest next update: Sun 24 Nov 2024 23:55:45 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: HiQiN7rUlg57/0PoSbF9RTCUgx3dcT639LFAcNJcQ2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 23:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:99:c0:a8:03:27:c5:89:d5:2d:07:05:df:58:10:66:66:0e:67:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Nov 21 22:15:45 2024 GMT Not After : Nov 24 23:55:45 2024 GMT Subject: CN=13D9E02C0B7E5B99EA2AE42C6029B531C2B9EF6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:ef:df:d8:65:46:24:41:4b:50:1d:9d:92: 90:ff:f2:4b:be:7d:2b:91:e8:fe:0c:1c:49:54:d7: 8b:1b:8c:9b:0a:f8:56:89:94:00:01:51:eb:d5:48: 6f:c3:ca:6d:af:40:93:46:a4:c6:cd:49:69:d5:d5: d2:af:03:fa:22:04:eb:2a:b5:68:cb:65:4e:43:0b: 12:fe:75:88:8f:89:38:e0:0f:33:12:a3:eb:9c:1b: 22:7a:e5:61:55:c7:a1:50:69:0c:2a:23:9f:91:d3: 83:cd:f0:6b:a9:cd:4a:3b:05:70:bf:6e:09:b3:e1: d0:61:91:4e:87:aa:8a:cd:48:23:49:94:3c:9e:ff: fb:6d:67:1d:02:9d:ee:e9:56:15:87:d9:1a:74:69: a2:a1:b9:44:4c:de:d3:93:a7:c1:cf:af:b8:ca:0e: d1:66:e3:ef:6b:87:da:50:4f:e6:f5:1c:79:5f:1e: 07:6e:57:dc:09:01:63:18:a2:95:60:46:64:0b:b4: 16:ca:9a:63:5d:d9:c0:08:9e:0c:49:29:61:a4:8d: 81:57:61:11:b0:85:73:3d:e6:bc:9c:29:8d:0c:d7: 16:eb:b3:e0:73:cd:a1:85:f2:5e:fe:14:9a:13:46: 67:f7:34:98:06:47:91:0e:eb:2f:4b:9c:46:39:da: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D9:E0:2C:0B:7E:5B:99:EA:2A:E4:2C:60:29:B5:31:C2:B9:EF:6C X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9b:d3:33:0d:70:bc:26:f4:8f:95:30:ae:28:7c:3b:9c:ed: 4d:13:c4:81:a3:05:ef:48:1a:c2:eb:62:ac:c4:e3:3d:24:92: 3c:25:0c:b8:af:c1:83:b4:0c:82:84:11:d8:b3:7c:dc:05:d8: f6:08:e0:87:25:7f:84:39:f8:86:86:84:02:1d:51:2f:ea:16: c0:59:b7:f0:ea:25:8f:46:20:cc:84:e1:3c:9b:04:0f:0b:7b: 77:95:e5:17:b4:41:70:18:76:b2:9a:90:3a:54:ac:18:99:f2: 0b:10:c1:b5:22:0f:04:eb:39:ce:23:3a:b8:27:4e:ea:80:b3: fc:d7:d5:5b:5a:d3:54:18:9e:75:d4:de:8e:8c:84:87:05:a6: 47:fc:1e:6a:4d:22:64:a4:e8:b7:d4:c8:55:5f:9e:39:84:e6: fe:09:b2:01:e5:a2:ba:c3:6c:36:a2:8c:03:37:a9:bc:92:d2: cf:ad:2b:10:18:64:e9:4c:32:36:f9:fc:5f:88:b4:d2:9c:6d: 05:9c:90:1f:52:96:e2:0c:74:e3:7e:bb:9b:5f:a1:9c:64:7d: 3b:68:1b:9b:ae:56:19:6a:2e:cd:3e:83:76:87:5a:22:64:3f: 8c:5d:bc:8d:e8:09:55:6c:d6:20:0b:14:de:af:80:ca:6c:02: a5:c5:1e:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpnAqAMnxYnVLQcF31gQZmYOZ7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNDExMjEyMjE1NDVaFw0yNDExMjQyMzU1NDVaMDMxMTAvBgNV BAMTKDEzRDlFMDJDMEI3RTVCOTlFQTJBRTQyQzYwMjlCNTMxQzJCOUVGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Du/f2GVGJEFLUB2dkpD/8ku+ fSuR6P4MHElU14sbjJsK+FaJlAABUevVSG/Dym2vQJNGpMbNSWnV1dKvA/oiBOsq tWjLZU5DCxL+dYiPiTjgDzMSo+ucGyJ65WFVx6FQaQwqI5+R04PN8GupzUo7BXC/ bgmz4dBhkU6HqorNSCNJlDye//ttZx0Cne7pVhWH2Rp0aaKhuURM3tOTp8HPr7jK DtFm4+9rh9pQT+b1HHlfHgduV9wJAWMYopVgRmQLtBbKmmNd2cAIngxJKWGkjYFX YRGwhXM95rycKY0M1xbrs+BzzaGF8l7+FJoTRmf3NJgGR5EO6y9LnEY52v4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE9ngLAt+W5nqKuQsYCm1McK572wwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWb0zMNcLwm9I+VMK4ofDuc7U0TxIGjBe9I GsLrYqzE4z0kkjwlDLivwYO0DIKEEdizfNwF2PYI4Iclf4Q5+IaGhAIdUS/qFsBZ t/DqJY9GIMyE4TybBA8Le3eV5Re0QXAYdrKakDpUrBiZ8gsQwbUiDwTrOc4jOrgn TuqAs/zX1Vta01QYnnXU3o6MhIcFpkf8HmpNImSk6LfUyFVfnjmE5v4JsgHlorrD bDaijAM3qbyS0s+tKxAYZOlMMjb5/F+ItNKcbQWckB9SluIMdON+u5tfoZxkfTto G5uuVhlqLs0+g3aHWiJkP4xdvI3oCVVs1iALFN6vgMpsAqXFHsY= -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org