$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: ifMbcK1ttSuCnL3BvJ7h36tExIwbQ1Q70D9yp/O7gig= Subject key identifier: 63:25:77:69:E5:48:9D:04:2C:93:69:50:F2:3D:BB:A8:67:B6:84:70 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 189607FE2898F9B454E5477CEF92258DFCEDEAFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 0482 Signing time: Wed 20 Nov 2024 14:12:27 +0000 Manifest this update: Wed 20 Nov 2024 14:07:27 +0000 Manifest next update: Sat 23 Nov 2024 20:02:27 +0000 Files and hashes: 1: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: CwugtTSdMDnLZH9CRKDRBtIb7xXFMx9OGIHP0aptHTY=) 2: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 0SNOXJv5maedIGBL0Qm9Po7XI+eFbCTVR/NtX0bm6ts=) 3: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: JU0Fqn+bNHy7TO2FDGiu0v8Et06ozUzFP/f0/9F2tIA=) 4: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Se+JQojVLCUto29ucN5SOimVnmTwAPvqyMOWkGKak7Q=) 5: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: nvj4vFogJKPPYgFqYmFWvbmjSSvxwuNwrsXUM+va/jI=) 6: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: qUMTZOKqFJrYj5YAPgs121X9//L8rpIE4d8u+ioonEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:96:07:fe:28:98:f9:b4:54:e5:47:7c:ef:92:25:8d:fc:ed:ea:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Nov 20 14:07:27 2024 GMT Not After : Nov 23 20:02:27 2024 GMT Subject: CN=63257769E5489D042C936950F23DBBA867B68470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bd:1a:c4:a5:0d:7a:40:cd:ce:6b:14:1a:6c: 9f:ce:33:23:fa:92:c9:58:3c:2b:82:fa:f6:eb:a3: e7:21:72:f8:50:3d:48:f9:03:c9:9f:65:6b:8e:c0: d1:31:18:67:80:a3:18:04:c7:eb:76:50:4f:4d:56: bb:5f:0f:73:92:5c:40:04:a2:ce:b4:b7:4f:d8:64: 98:d5:d8:43:9d:27:84:5e:0f:8d:69:19:a5:01:18: 31:85:38:0f:56:a3:71:4c:36:1f:0e:56:13:48:43: 43:5b:98:03:e3:19:af:82:cb:35:35:1c:c4:d9:2e: c7:54:78:61:0a:60:2a:fa:da:aa:e7:d0:95:1a:7f: eb:6b:9c:d7:82:b5:66:45:4c:ef:18:65:af:c6:1f: 3f:65:8c:6f:8c:1c:86:ba:2d:af:d0:08:68:fa:f9: 1b:06:f1:d0:84:f7:c4:f1:f0:7b:7d:f4:4b:30:d3: b7:94:a3:45:8d:7e:0f:90:06:9f:87:43:08:16:a0: 2f:91:7f:55:65:47:31:8c:46:82:2f:ca:c3:01:62: eb:7f:48:c4:cf:b0:45:e1:19:5a:58:90:da:75:a3: 98:0b:47:02:e4:1f:19:fa:5c:1a:ce:72:4f:54:2d: 67:1d:ff:c9:ed:43:ea:59:51:2e:7d:91:96:a7:45: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:25:77:69:E5:48:9D:04:2C:93:69:50:F2:3D:BB:A8:67:B6:84:70 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:12:84:04:63:f3:34:9d:4a:ac:af:a8:23:fe:1a:63:09:ec: ca:98:9d:18:ee:85:72:a2:57:d4:f4:ae:9a:04:d7:fa:fd:cf: b6:dd:15:ad:e8:0f:72:0a:bd:a8:e4:08:1f:a1:b1:c3:42:3d: fc:00:87:b9:c1:f1:2e:16:d9:0c:5b:61:90:22:4f:03:86:80: 86:7b:b8:12:5d:6d:7d:a5:0f:a3:7a:e1:a0:8f:3a:23:76:d1: 01:7c:9c:e7:65:78:a4:cb:20:1a:73:86:ce:f9:6c:41:92:e9: de:35:83:9c:bb:41:31:59:52:b7:00:52:8c:92:74:68:d5:ad: bf:04:2b:e6:11:61:13:88:13:09:66:71:76:42:5f:3c:51:d5: 32:42:2a:ba:c9:8f:3a:35:15:5a:b1:85:e9:7b:98:a3:37:2d: 89:e7:d6:91:ed:97:83:bf:4d:80:6f:1e:e3:f5:86:f8:70:63: 63:3c:18:94:16:39:75:53:37:a8:1c:6f:72:df:36:b0:e9:bc: 44:41:1b:1a:1d:bf:4d:e5:01:4b:62:72:ff:42:52:d6:fa:a3: e8:43:49:dd:1b:6c:f4:f5:f4:0b:58:d5:e5:c7:15:c2:6a:3c: 5e:63:67:af:01:bb:29:6a:04:6d:97:9d:ba:fe:08:0b:79:51: 6f:76:31:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJYH/iiY+bRU5Ud875Iljfzt6vwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNDExMjAxNDA3MjdaFw0yNDExMjMyMDAyMjdaMDMxMTAvBgNV BAMTKDYzMjU3NzY5RTU0ODlEMDQyQzkzNjk1MEYyM0RCQkE4NjdCNjg0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbvRrEpQ16QM3OaxQabJ/OMyP6 kslYPCuC+vbro+chcvhQPUj5A8mfZWuOwNExGGeAoxgEx+t2UE9NVrtfD3OSXEAE os60t0/YZJjV2EOdJ4ReD41pGaUBGDGFOA9Wo3FMNh8OVhNIQ0NbmAPjGa+CyzU1 HMTZLsdUeGEKYCr62qrn0JUaf+trnNeCtWZFTO8YZa/GHz9ljG+MHIa6La/QCGj6 +RsG8dCE98Tx8Ht99Esw07eUo0WNfg+QBp+HQwgWoC+Rf1VlRzGMRoIvysMBYut/ SMTPsEXhGVpYkNp1o5gLRwLkHxn6XBrOck9ULWcd/8ntQ+pZUS59kZanRei7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyV3aeVInQQsk2lQ8j27qGe2hHAwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN8ShARj8zSdSqyvqCP+GmMJ7MqYnRjuhXKi V9T0rpoE1/r9z7bdFa3oD3IKvajkCB+hscNCPfwAh7nB8S4W2QxbYZAiTwOGgIZ7 uBJdbX2lD6N64aCPOiN20QF8nOdleKTLIBpzhs75bEGS6d41g5y7QTFZUrcAUoyS dGjVrb8EK+YRYROIEwlmcXZCXzxR1TJCKrrJjzo1FVqxhel7mKM3LYnn1pHtl4O/ TYBvHuP1hvhwY2M8GJQWOXVTN6gcb3LfNrDpvERBGxodv03lAUticv9CUtb6o+hD Sd0bbPT19AtY1eXHFcJqPF5jZ68BuylqBG2Xnbr+CAt5UW92MaQ= -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org