$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft File: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft (raw, json) Hash identifier: 2/zMocLD16wREMyoMQtQCZoQ6ng+/+bWL9KBlSE4nDE= Subject key identifier: 89:47:D2:73:B1:ED:60:F9:FD:B7:E4:B7:CF:9F:EF:8D:2F:08:4E:9D Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Certificate serial: 7672FABA3C5E3D423086BB42FCF5BC5910A7F3EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft Manifest number: 0453 Signing time: Fri 22 Nov 2024 09:42:07 +0000 Manifest this update: Fri 22 Nov 2024 09:37:07 +0000 Manifest next update: Mon 25 Nov 2024 13:49:07 +0000 Files and hashes: 1: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl (hash: kdTIMbLFl6EszYERct0R1sMwl2UyPFvXCNS5tcFf4q8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 13:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:72:fa:ba:3c:5e:3d:42:30:86:bb:42:fc:f5:bc:59:10:a7:f3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Validity Not Before: Nov 22 09:37:07 2024 GMT Not After : Nov 25 13:49:07 2024 GMT Subject: CN=8947D273B1ED60F9FDB7E4B7CF9FEF8D2F084E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:dc:c7:2d:1f:78:8a:a9:1a:2f:76:92:b4: 5f:54:9c:37:4f:f0:c0:16:80:c6:8c:f9:ad:8f:41: 87:25:dc:09:7c:23:67:b7:ca:58:91:7a:90:b2:12: a5:1e:f5:e5:fb:28:4c:92:48:3d:b3:b0:db:24:52: 6c:76:a2:7b:e5:2e:7b:80:75:a9:32:81:b6:6a:1a: 42:f9:1a:5f:b1:8c:5f:d7:bd:3b:1a:34:b7:8d:9a: 2f:cb:06:0c:90:fb:26:e9:43:eb:26:3d:c9:29:ad: 69:6a:7d:c7:c0:c6:89:70:47:aa:64:44:56:49:d6: c6:6f:70:e2:c7:4b:15:e5:60:6f:89:0a:13:7a:55: 68:4f:10:f5:da:d1:ae:2a:7f:8e:6d:b8:be:9a:ce: f2:79:02:fb:c0:9e:54:d7:0b:ee:fe:2a:9e:dc:5d: 22:88:55:2e:14:e2:95:ad:10:e8:8c:41:1d:35:09: 65:73:61:5c:57:b8:0e:ac:9e:58:41:91:96:cd:32: 20:d8:b0:7a:3f:71:6a:60:bd:7a:56:84:af:e1:9c: e7:5f:cf:95:8a:02:06:af:eb:83:08:21:00:fc:d2: ee:1c:4b:25:7c:57:54:59:8a:a5:a1:e5:ef:39:93: c4:04:96:5b:2a:e8:ab:9b:a5:e9:66:e8:b3:9e:77: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:47:D2:73:B1:ED:60:F9:FD:B7:E4:B7:CF:9F:EF:8D:2F:08:4E:9D X509v3 Authority Key Identifier: keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:97:3a:fb:26:e5:85:a0:bf:ba:97:18:31:87:73:85:04:d5: 21:29:f0:29:b5:76:b3:c3:de:94:18:51:a3:ad:15:e3:5a:16: 42:50:6d:91:2b:38:cd:37:ce:26:3c:86:b1:9b:df:a3:63:c9: 69:b6:a7:8d:9e:6c:81:da:b8:27:ac:38:b0:a3:76:54:b3:d6: 55:70:be:bb:b8:a9:0a:0c:ea:44:e6:da:db:10:49:17:13:5b: 45:98:47:99:63:d0:63:7f:bf:98:f0:1c:99:b4:2e:06:73:dc: 95:c3:61:96:4c:c0:c1:60:1a:2c:18:12:6d:b9:1e:35:10:f9: b8:dd:db:2a:02:5f:68:f8:58:d5:3f:1b:d4:9c:5d:4a:18:da: f4:e4:4d:00:25:44:07:fe:8a:7b:24:3c:a9:36:81:87:39:3f: 2f:3c:2d:e2:4d:f0:11:ce:30:05:c6:89:97:39:de:1d:4c:b9: af:96:4c:be:ec:4e:b9:16:08:14:25:f5:9a:18:e2:c3:a2:61: e0:fe:3b:58:01:4a:8e:db:e9:31:cf:cb:cf:d5:cd:d7:58:4c: ba:3a:18:bd:53:e1:56:54:c5:c2:85:49:f4:bb:cb:01:86:41: a8:96:fb:11:7f:d5:8f:70:5f:97:0a:38:5a:a3:7b:41:1a:9b: bf:4f:b7:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnL6ujxePUIwhrtC/PW8WRCn8+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz QzkzQjk2QjAeFw0yNDExMjIwOTM3MDdaFw0yNDExMjUxMzQ5MDdaMDMxMTAvBgNV BAMTKDg5NDdEMjczQjFFRDYwRjlGREI3RTRCN0NGOUZFRjhEMkYwODRFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeTdzHLR94iqkaL3aStF9UnDdP 8MAWgMaM+a2PQYcl3Al8I2e3yliRepCyEqUe9eX7KEySSD2zsNskUmx2onvlLnuA dakygbZqGkL5Gl+xjF/XvTsaNLeNmi/LBgyQ+ybpQ+smPckprWlqfcfAxolwR6pk RFZJ1sZvcOLHSxXlYG+JChN6VWhPEPXa0a4qf45tuL6azvJ5AvvAnlTXC+7+Kp7c XSKIVS4U4pWtEOiMQR01CWVzYVxXuA6snlhBkZbNMiDYsHo/cWpgvXpWhK/hnOdf z5WKAgav64MIIQD80u4cSyV8V1RZiqWh5e85k8QEllsq6Kubpelm6LOed4H7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiUfSc7HtYPn9t+S3z5/vjS8ITp0wHwYDVR0j BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz Qjk2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhD OUUzQzkzQjk2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+XOvsm5YWgv7qXGDGHc4UE1SEp8Cm1drPD 3pQYUaOtFeNaFkJQbZErOM03ziY8hrGb36NjyWm2p42ebIHauCesOLCjdlSz1lVw vru4qQoM6kTm2tsQSRcTW0WYR5lj0GN/v5jwHJm0LgZz3JXDYZZMwMFgGiwYEm25 HjUQ+bjd2yoCX2j4WNU/G9ScXUoY2vTkTQAlRAf+inskPKk2gYc5Py88LeJN8BHO MAXGiZc53h1Mua+WTL7sTrkWCBQl9ZoY4sOiYeD+O1gBSo7b6THPy8/VzddYTLo6 GL1T4VZUxcKFSfS7ywGGQaiW+xF/1Y9wX5cKOFqje0Eam79Ptww= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:11 2024 by rpki-client on console-fra.rpki-client.org