$ rpki-client -vvf repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft File: 8A78F143A2E18078229313E44ACE70165360440C.mft (raw, json) Hash identifier: BYQftzX+08NO+aHWJ6W1QoU9nV8qTuWXX3kwYJTOgBw= Subject key identifier: B1:3B:DF:B0:E6:0C:42:BA:E4:82:77:75:1C:99:AC:C1:3F:62:6E:DE Authority key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Certificate issuer: /CN=8A78F143A2E18078229313E44ACE70165360440C Certificate serial: 17253654AF57640B83D6425C53E98B38E3C11A3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft Manifest number: 56 Signing time: Thu 21 Nov 2024 21:01:00 +0000 Manifest this update: Thu 21 Nov 2024 20:56:00 +0000 Manifest next update: Mon 25 Nov 2024 05:16:00 +0000 Files and hashes: 1: 8A78F143A2E18078229313E44ACE70165360440C.crl (hash: /3uPhT1PoAjIeaAIIkweY1rx5kmKSWw7B4os+g7bxC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:25:36:54:af:57:64:0b:83:d6:42:5c:53:e9:8b:38:e3:c1:1a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A78F143A2E18078229313E44ACE70165360440C Validity Not Before: Nov 21 20:56:00 2024 GMT Not After : Nov 25 05:16:00 2024 GMT Subject: CN=B13BDFB0E60C42BAE48277751C99ACC13F626EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f8:08:5e:85:88:67:3b:7e:51:9c:88:d1:f9: 9b:62:93:0c:bd:70:e8:a4:a4:9a:5f:df:3b:6d:27: 1d:4f:c0:db:b2:f7:e1:75:d8:7e:27:8f:46:c9:1b: 76:81:43:ff:ca:d1:9c:94:e4:c9:16:c3:40:d4:28: aa:04:d3:7f:99:81:14:7e:b6:45:87:7e:b3:b4:bf: ec:e0:83:d3:4a:06:8d:cc:a9:89:fc:76:86:94:16: c7:30:ce:64:8c:db:b8:61:b7:d6:fc:18:d4:7e:bd: ef:49:43:25:0a:1b:35:b6:03:f5:e6:4e:d1:c7:ce: 1c:ab:49:88:df:d8:0e:52:3f:28:92:1b:b9:ad:1a: 5a:f9:bb:9d:c5:17:9a:0e:b4:f0:c5:5e:54:a0:e4: 3c:70:8c:3c:44:ef:75:82:ad:3c:b6:c3:0c:89:95: 0d:7d:b3:91:70:0e:29:72:19:33:85:c3:65:ba:0e: d2:0e:88:be:16:1e:94:7d:4e:49:9f:46:f1:2a:60: 71:a0:20:e9:95:fe:79:1e:bb:07:91:37:65:77:f1: 40:81:26:ae:9d:3e:9f:5e:e7:fb:ae:0a:88:a8:28: ce:de:8f:81:82:60:de:07:a9:9f:83:9c:30:1a:1b: 39:01:b6:33:7e:30:8e:39:3b:cf:fa:1c:09:5c:13: ca:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3B:DF:B0:E6:0C:42:BA:E4:82:77:75:1C:99:AC:C1:3F:62:6E:DE X509v3 Authority Key Identifier: keyid:8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:63:55:fa:45:6e:c6:c3:bd:2f:dc:08:71:32:78:e0:bb:c9: 0d:0d:7f:e2:9d:4e:1e:d2:1d:8c:6c:f9:c7:ea:36:4d:39:76: 55:ef:c7:12:29:09:bb:36:c1:2b:2e:35:f9:88:a3:fc:05:fb: c3:20:f3:c8:c2:0e:a5:8b:53:f6:87:b5:c1:7f:59:79:80:d2: 4a:d6:c9:ea:60:71:ef:a4:5a:fc:46:da:cb:c2:76:39:5b:ae: d8:dc:df:4e:54:ce:f9:f7:5b:48:bb:53:76:e3:c9:b3:07:79: 55:1f:c7:c7:9a:a4:56:e3:f6:62:34:19:39:a6:3f:1b:46:d4: de:bb:e0:44:9b:7d:c2:fa:a1:9f:e3:91:93:75:fb:0c:50:7d: 20:7e:2f:59:f6:6c:df:57:38:8e:6e:22:f3:32:ef:4f:40:87: 44:7f:d1:a0:a7:3f:51:99:67:ee:53:09:bd:48:30:cd:e5:31: c3:f8:d5:6c:c5:f1:36:1d:16:20:f5:6b:e1:bf:dc:58:91:d2: 55:0b:17:fc:9a:73:fe:d6:ca:b2:92:d0:56:d5:b7:d9:0e:9a: e9:be:55:22:0f:90:1a:7b:60:a4:73:1a:0a:a4:41:b3:7e:e9: 38:e1:e1:51:56:7e:1a:5d:82:7d:8b:24:c9:ff:58:9d:a7:e3: c8:bb:27:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyU2VK9XZAuD1kJcU+mLOOPBGj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1 MzYwNDQwQzAeFw0yNDExMjEyMDU2MDBaFw0yNDExMjUwNTE2MDBaMDMxMTAvBgNV BAMTKEIxM0JERkIwRTYwQzQyQkFFNDgyNzc3NTFDOTlBQ0MxM0Y2MjZFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+AhehYhnO35RnIjR+Ztikwy9 cOikpJpf3zttJx1PwNuy9+F12H4nj0bJG3aBQ//K0ZyU5MkWw0DUKKoE03+ZgRR+ tkWHfrO0v+zgg9NKBo3MqYn8doaUFscwzmSM27hht9b8GNR+ve9JQyUKGzW2A/Xm TtHHzhyrSYjf2A5SPyiSG7mtGlr5u53FF5oOtPDFXlSg5DxwjDxE73WCrTy2wwyJ lQ19s5FwDilyGTOFw2W6DtIOiL4WHpR9TkmfRvEqYHGgIOmV/nkeuweRN2V38UCB Jq6dPp9e5/uuCoioKM7ej4GCYN4HqZ+DnDAaGzkBtjN+MI45O8/6HAlcE8r5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsTvfsOYMQrrkgnd1HJmswT9ibt4wHwYDVR0j BBgwFoAUinjxQ6LhgHgikxPkSs5wFlNgRAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMC84QTc4RjE0M0Ey RTE4MDc4MjI5MzEzRTQ0QUNFNzAxNjUzNjA0NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcwMTY1MzYw NDQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjczZTJjMDktNzBlNC00MTE0LWI0 ZGUtZGQ0MjBjODJmYzFiLzAvOEE3OEYxNDNBMkUxODA3ODIyOTMxM0U0NEFDRTcw MTY1MzYwNDQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFjVfpFbsbDvS/cCHEyeOC7yQ0Nf+KdTh7S HYxs+cfqNk05dlXvxxIpCbs2wSsuNfmIo/wF+8Mg88jCDqWLU/aHtcF/WXmA0krW yepgce+kWvxG2svCdjlbrtjc305Uzvn3W0i7U3bjybMHeVUfx8eapFbj9mI0GTmm PxtG1N674ESbfcL6oZ/jkZN1+wxQfSB+L1n2bN9XOI5uIvMy709Ah0R/0aCnP1GZ Z+5TCb1IMM3lMcP41WzF8TYdFiD1a+G/3FiR0lULF/yac/7WyrKS0FbVt9kOmum+ VSIPkBp7YKRzGgqkQbN+6Tjh4VFWfhpdgn2LJMn/WJ2n48i7J+w= -----END CERTIFICATE-----Generated at Thu Nov 21 22:33:05 2024 by rpki-client on console-fra.rpki-client.org