$ rpki-client -vvf repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft File: D00472C77B42BC0E23D929360AA568BBAE2AA668.mft (raw, json) Hash identifier: L0npfd6qJ0XO8nIOj4GjzrwRC7ydcOt/yJ2ffWvmAu8= Subject key identifier: F9:C2:63:72:4D:1D:C4:7E:73:00:AD:19:9E:91:0E:11:2F:D4:A5:A6 Authority key identifier: D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 Certificate issuer: /CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Certificate serial: 509332781EAFC2CBC853B32B4986B20221EF984F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft Manifest number: 01AA Signing time: Thu 21 Nov 2024 11:30:04 +0000 Manifest this update: Thu 21 Nov 2024 11:25:04 +0000 Manifest next update: Sun 24 Nov 2024 20:17:04 +0000 Files and hashes: 1: D00472C77B42BC0E23D929360AA568BBAE2AA668.crl (hash: 4Qwzibt5XWMxU1rtt7gEevv8NyZmDgEJg3RQJeF5C2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:93:32:78:1e:af:c2:cb:c8:53:b3:2b:49:86:b2:02:21:ef:98:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Validity Not Before: Nov 21 11:25:04 2024 GMT Not After : Nov 24 20:17:04 2024 GMT Subject: CN=F9C263724D1DC47E7300AD199E910E112FD4A5A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:04:fc:67:39:c7:20:c2:48:ca:6d:61:08: 2c:9a:1c:29:15:59:6e:c1:80:52:f1:93:7f:74:b3: 86:99:f9:18:c4:48:0e:72:6a:86:8a:6a:87:0f:2f: 5f:68:fb:2f:4f:7e:f6:f7:93:73:7a:9a:b5:2c:58: 0e:fa:b7:f6:39:46:8e:bd:07:b5:06:8f:92:54:4c: bf:bf:eb:3f:bf:42:08:7a:e8:e9:25:71:bd:ee:25: a3:d4:65:53:a0:91:c4:14:b1:a5:e4:c7:d9:e8:5c: 28:98:1d:35:d8:93:cf:53:23:f5:2d:ba:e8:15:6b: 75:23:8b:6f:f1:9c:92:8c:61:aa:31:5b:0e:90:2f: ac:ee:9f:6f:d1:98:68:71:39:eb:16:08:17:98:71: 88:74:b3:cc:08:07:85:62:73:33:d2:21:9c:e6:b4: 69:f0:20:92:2a:f5:c9:e0:b5:1e:33:fc:71:6b:88: 82:72:96:9e:84:95:1c:c8:af:29:f6:58:22:29:f3: b5:b1:3a:0d:f7:e1:e4:70:82:d3:ff:cd:9e:7c:f6: e4:c9:ac:b1:78:2b:d4:c4:9d:27:45:70:bf:1e:e5: 52:bd:41:43:64:97:a8:3a:c0:b6:12:34:79:f2:6d: 73:71:69:67:9a:03:ce:8c:d4:09:65:77:dc:d0:fa: 82:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C2:63:72:4D:1D:C4:7E:73:00:AD:19:9E:91:0E:11:2F:D4:A5:A6 X509v3 Authority Key Identifier: keyid:D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:a0:98:ee:43:2d:7e:f5:62:8e:53:1d:8c:b8:25:07:ae:c5: 07:61:6a:50:d9:ae:e1:9b:51:fe:63:33:c4:d5:51:18:05:50: 20:63:0b:89:ca:70:9d:b2:08:e0:e8:e8:fc:ce:a6:11:43:e7: 8f:90:7b:8b:44:0e:c3:f0:d9:1f:e2:6a:a0:38:93:82:80:0d: 82:60:e4:88:2a:1e:c4:0a:b1:6f:e2:c1:c3:c1:3f:68:6b:9f: 1b:5c:6e:c5:ab:b2:3c:93:49:29:06:95:15:81:f9:d8:6b:d2: 11:55:54:b0:e2:40:d6:22:8f:3e:47:5b:15:54:e6:45:45:fc: e5:72:82:d8:1a:fc:9b:79:53:83:1f:d4:ed:70:4f:09:32:5b: e8:53:7f:ad:41:dc:51:d8:71:7d:10:af:8a:05:6b:70:b6:bf: e2:0f:38:07:66:92:5e:aa:40:0c:da:37:81:ef:bc:53:c6:96: cc:5f:40:b8:11:55:d6:fc:7d:0a:63:ba:36:3e:32:43:7b:40: da:ea:83:30:ac:3f:d0:3b:3d:00:04:3d:92:77:79:1d:3f:6c: 53:3c:4b:f5:e6:a2:7f:88:5d:35:72:64:d5:87:b6:9b:4c:c0: 51:cb:41:f2:32:e7:c5:a0:3e:e2:8a:c9:4c:94:fa:3d:5b:6d: 65:73:a9:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJMyeB6vwsvIU7MrSYayAiHvmE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJB RTJBQTY2ODAeFw0yNDExMjExMTI1MDRaFw0yNDExMjQyMDE3MDRaMDMxMTAvBgNV BAMTKEY5QzI2MzcyNEQxREM0N0U3MzAwQUQxOTlFOTEwRTExMkZENEE1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxwT8ZznHIMJIym1hCCyaHCkV WW7BgFLxk390s4aZ+RjESA5yaoaKaocPL19o+y9Pfvb3k3N6mrUsWA76t/Y5Ro69 B7UGj5JUTL+/6z+/Qgh66Oklcb3uJaPUZVOgkcQUsaXkx9noXCiYHTXYk89TI/Ut uugVa3Uji2/xnJKMYaoxWw6QL6zun2/RmGhxOesWCBeYcYh0s8wIB4ViczPSIZzm tGnwIJIq9cngtR4z/HFriIJylp6ElRzIryn2WCIp87WxOg334eRwgtP/zZ589uTJ rLF4K9TEnSdFcL8e5VK9QUNkl6g6wLYSNHnybXNxaWeaA86M1Alld9zQ+oJbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+cJjck0dxH5zAK0ZnpEOES/UpaYwHwYDVR0j BBgwFoAU0ARyx3tCvA4j2Sk2CqVou64qpmgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE3MzY5YS1iY2MxLTQyYmMtYjhiMi1mOTZkNTBkMzc0OWQvMC9EMDA0NzJDNzdC NDJCQzBFMjNEOTI5MzYwQUE1NjhCQkFFMkFBNjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJBRTJB QTY2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4 YjItZjk2ZDUwZDM3NDlkLzAvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4 QkJBRTJBQTY2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALegmO5DLX71Yo5THYy4JQeuxQdhalDZruGb Uf5jM8TVURgFUCBjC4nKcJ2yCODo6PzOphFD54+Qe4tEDsPw2R/iaqA4k4KADYJg 5IgqHsQKsW/iwcPBP2hrnxtcbsWrsjyTSSkGlRWB+dhr0hFVVLDiQNYijz5HWxVU 5kVF/OVygtga/Jt5U4Mf1O1wTwkyW+hTf61B3FHYcX0Qr4oFa3C2v+IPOAdmkl6q QAzaN4HvvFPGlsxfQLgRVdb8fQpjujY+MkN7QNrqgzCsP9A7PQAEPZJ3eR0/bFM8 S/Xmon+IXTVyZNWHtptMwFHLQfIy58WgPuKKyUyU+j1bbWVzqUw= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org