$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: 33yTxRiTT2GAdKm8p+cP52EwSWrWJaWZZVmf+y+sKNY= Subject key identifier: 93:17:77:4C:14:50:B7:D4:95:2D:1A:33:BA:1B:E7:11:95:23:C6:06 Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 4887A1CB1D244C539B9F1F9711503655DB01A218 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: 2D Signing time: Wed 20 Nov 2024 14:50:59 +0000 Manifest this update: Wed 20 Nov 2024 14:45:59 +0000 Manifest next update: Sat 23 Nov 2024 16:17:59 +0000 Files and hashes: 1: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: DtZ3IGLf8UTeWMQZVyBvrBe/Qh+up0pa7pcoerCKdkE=) 2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: avjOhQMHcwWGlDF7WDzZoOiS3u3B2hy6xJEOi4n8Cr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:87:a1:cb:1d:24:4c:53:9b:9f:1f:97:11:50:36:55:db:01:a2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Nov 20 14:45:59 2024 GMT Not After : Nov 23 16:17:59 2024 GMT Subject: CN=9317774C1450B7D4952D1A33BA1BE7119523C606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:10:13:f3:a8:94:57:8c:27:a4:ce:16:7b:e1: a1:f6:d1:d6:a6:bd:8f:00:03:44:79:49:87:bb:03: 2b:b2:15:18:31:dc:8f:6d:8d:77:5d:4f:59:ff:1f: 2c:b1:99:e0:f6:58:d6:01:fb:28:b7:31:51:52:6b: a4:14:6e:a0:d8:53:51:67:eb:0b:88:0b:78:80:52: f3:17:b1:37:fa:6e:9b:34:6c:3a:33:26:0a:9e:14: 5e:e7:33:d4:d6:bb:5d:4c:c4:d2:e7:32:8f:94:c1: 43:81:60:9e:9e:9e:a2:4e:03:e1:78:c0:ac:49:d5: 36:8b:9b:9f:0c:f3:5d:10:b8:74:9b:03:57:68:8a: 55:d1:ba:31:16:e5:b3:30:53:cb:b6:21:cb:6e:0d: ae:7b:c7:d8:a8:33:20:c5:60:fa:da:9e:d7:7d:2b: ff:fd:f7:f5:4f:f4:8b:c7:d0:06:47:97:0e:e0:59: 16:47:65:c5:e4:dd:dd:7c:9a:7f:04:29:6d:ba:ae: 38:e3:8f:20:bc:8e:99:98:ca:10:b8:e4:58:50:ca: e8:4d:83:6a:4c:80:c0:b4:f0:8a:dd:b5:70:fc:4f: fa:44:c1:db:62:bd:5c:4e:05:22:d1:ad:0e:8c:6d: ce:4e:1a:4e:7e:22:19:96:b4:0e:6e:6b:31:8b:12: f7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:17:77:4C:14:50:B7:D4:95:2D:1A:33:BA:1B:E7:11:95:23:C6:06 X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:bf:f3:68:1c:1f:81:f3:e8:da:da:38:0e:3b:9d:81:a4:97: 5a:b5:01:af:4f:93:51:ec:15:6c:06:45:c1:55:fb:50:e9:7b: 30:e2:fb:25:97:5b:3a:14:e5:6e:ab:25:bb:61:59:60:3f:4a: fb:9f:76:7d:7a:2f:21:db:40:e0:74:9e:bd:0a:80:7e:fa:c0: b3:11:4f:0d:c4:64:4b:6d:75:7c:eb:e0:7e:78:da:7a:b1:0c: 35:e2:ad:ed:e6:dc:fd:a9:46:88:96:15:76:c9:f8:d9:7e:5e: 7e:bd:5b:7b:4e:06:ad:e8:a4:4c:a3:f4:94:39:a7:2e:c8:9e: 0f:32:11:7e:00:70:09:5e:06:40:1c:44:a3:44:f5:de:b5:59: ef:a9:47:dd:84:83:81:5a:fe:9b:44:4c:16:9f:b7:7a:c3:bb: ee:95:b8:a7:f4:3d:e6:ba:40:ae:27:35:63:95:e4:a5:a1:43: f9:74:9b:63:7a:69:5b:eb:61:78:56:b9:e9:ac:66:c6:ca:7c: f1:34:c6:32:0b:34:64:ca:45:ae:47:8b:9b:c3:fb:cf:86:6a: 0a:39:51:01:d2:3c:09:b5:37:78:17:e6:a2:30:60:22:e7:e2: f7:80:45:ce:17:50:cc:a2:cb:f2:08:9e:7c:2a:6f:76:30:7a: 72:d3:c0:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIehyx0kTFObnx+XEVA2VdsBohgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNDExMjAxNDQ1NTlaFw0yNDExMjMxNjE3NTlaMDMxMTAvBgNV BAMTKDkzMTc3NzRDMTQ1MEI3RDQ5NTJEMUEzM0JBMUJFNzExOTUyM0M2MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsEBPzqJRXjCekzhZ74aH20dam vY8AA0R5SYe7AyuyFRgx3I9tjXddT1n/HyyxmeD2WNYB+yi3MVFSa6QUbqDYU1Fn 6wuIC3iAUvMXsTf6bps0bDozJgqeFF7nM9TWu11MxNLnMo+UwUOBYJ6enqJOA+F4 wKxJ1TaLm58M810QuHSbA1doilXRujEW5bMwU8u2IctuDa57x9ioMyDFYPrantd9 K//99/VP9IvH0AZHlw7gWRZHZcXk3d18mn8EKW26rjjjjyC8jpmYyhC45FhQyuhN g2pMgMC08IrdtXD8T/pEwdtivVxOBSLRrQ6Mbc5OGk5+IhmWtA5uazGLEvd1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkxd3TBRQt9SVLRozuhvnEZUjxgYwHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAG/82gcH4Hz6NraOA47nYGkl1q1Aa9Pk1Hs FWwGRcFV+1DpezDi+yWXWzoU5W6rJbthWWA/Svufdn16LyHbQOB0nr0KgH76wLMR Tw3EZEttdXzr4H542nqxDDXire3m3P2pRoiWFXbJ+Nl+Xn69W3tOBq3opEyj9JQ5 py7Ing8yEX4AcAleBkAcRKNE9d61We+pR92Eg4Fa/ptETBaft3rDu+6VuKf0Pea6 QK4nNWOV5KWhQ/l0m2N6aVvrYXhWuemsZsbKfPE0xjILNGTKRa5Hi5vD+8+Gago5 UQHSPAm1N3gX5qIwYCLn4veARc4XUMyiy/IInnwqb3YwenLTwBM= -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org