$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: cNHgA9ErTLSY1U4MbsBg0809xAcEy9IgNnUqhk/zeFc= Subject key identifier: 47:53:1B:AA:89:AD:38:E6:1F:C3:68:B9:E6:09:D7:5B:3E:74:A6:EF Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 539C658E9EE9CCD6B396584EA7DDC2812C05258E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: 35 Signing time: Sun 24 Nov 2024 18:21:12 +0000 Manifest this update: Sun 24 Nov 2024 18:16:12 +0000 Manifest next update: Wed 27 Nov 2024 21:54:12 +0000 Files and hashes: 1: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: ftKjh05UIPUiAf615h6yUZpa/yHb3CgJLIVdH5QOgb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9c:65:8e:9e:e9:cc:d6:b3:96:58:4e:a7:dd:c2:81:2c:05:25:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Nov 24 18:16:12 2024 GMT Not After : Nov 27 21:54:12 2024 GMT Subject: CN=47531BAA89AD38E61FC368B9E609D75B3E74A6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:2f:4f:24:31:46:3e:09:ee:fa:6f:ea:72: fb:9e:98:d3:47:84:61:c4:6c:55:73:96:dd:0f:34: 1e:c8:11:1c:52:59:60:be:ee:b1:f9:0f:91:ba:07: 6f:99:84:27:ad:1d:9b:b9:75:cf:c8:d4:80:6e:45: 5b:fa:01:39:c6:86:66:d6:8d:4f:42:92:f1:95:6f: f4:0e:ea:90:6a:ca:bd:c9:34:86:8a:fe:8c:4c:69: dc:62:c1:bf:5e:3e:3e:c4:f7:b0:b8:90:45:02:10: 02:4b:20:4b:df:21:63:32:5b:87:56:d6:0f:e5:9f: 9a:39:c0:81:37:da:12:87:d5:ad:7b:f8:f3:23:38: 15:65:c6:da:78:7d:3e:0f:2b:c2:82:cb:2c:fb:0d: 0c:53:8e:d2:d5:da:eb:c0:1f:d6:74:59:59:8b:f9: cb:49:98:d8:e6:be:49:9d:0b:63:ea:2e:d8:c5:42: 45:5e:27:73:c0:19:97:02:03:b0:f1:48:b8:b0:32: a3:ee:64:75:5f:3f:2f:4e:95:2d:17:c3:c1:89:fb: 65:08:f8:79:ab:36:8f:a9:5c:a2:dc:a4:24:cd:b2: bc:ba:79:0d:ec:9f:7e:26:4f:ae:36:fd:6f:a5:53: e8:7d:3d:a4:a8:c1:a9:f0:c5:12:88:4c:6a:6d:f5: 48:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:53:1B:AA:89:AD:38:E6:1F:C3:68:B9:E6:09:D7:5B:3E:74:A6:EF X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:86:e2:c5:ed:ff:39:65:50:5d:71:58:76:da:b6:ed:73:8c: 00:55:7d:19:0e:a5:1f:35:e9:f8:9a:58:42:08:c7:e1:ca:99: 0b:60:c9:40:a6:7b:b7:5f:55:c8:5d:65:6b:44:bf:44:75:b1: 05:21:e5:11:28:c3:f4:66:02:e8:47:42:d0:90:e4:12:f6:b3: 26:88:11:24:4c:b5:43:26:a9:4b:f5:dd:11:34:4f:75:e2:be: 64:da:a0:d9:53:13:2e:83:db:05:0d:39:98:d0:d4:f2:64:c0: f8:78:ca:2b:8d:d6:80:9c:b1:fd:63:9c:79:02:71:13:04:3c: ea:e4:11:75:1a:40:29:1c:70:e0:88:2a:0d:4b:4e:35:61:e5: eb:ae:64:ca:31:8a:93:0b:eb:a5:a2:70:ba:7c:e7:73:3e:cb: d1:f7:c1:98:70:96:ba:1d:01:42:2f:14:72:04:aa:6b:3d:91: 02:f9:e7:95:d6:a2:1b:42:31:32:00:50:f0:9f:59:e6:36:48: 6e:03:f6:e0:15:a9:01:32:96:2b:02:01:2e:2c:ce:d3:95:06: 55:7a:b1:a4:e8:33:20:8e:4f:d8:73:34:ef:77:ae:8c:3c:fa: 17:ce:22:37:05:d5:41:7e:b8:30:0a:ed:2a:1d:07:48:78:59: bc:89:fe:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5xljp7pzNazllhOp93CgSwFJY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNDExMjQxODE2MTJaFw0yNDExMjcyMTU0MTJaMDMxMTAvBgNV BAMTKDQ3NTMxQkFBODlBRDM4RTYxRkMzNjhCOUU2MDlENzVCM0U3NEE2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBS9PJDFGPgnu+m/qcvuemNNH hGHEbFVzlt0PNB7IERxSWWC+7rH5D5G6B2+ZhCetHZu5dc/I1IBuRVv6ATnGhmbW jU9CkvGVb/QO6pBqyr3JNIaK/oxMadxiwb9ePj7E97C4kEUCEAJLIEvfIWMyW4dW 1g/ln5o5wIE32hKH1a17+PMjOBVlxtp4fT4PK8KCyyz7DQxTjtLV2uvAH9Z0WVmL +ctJmNjmvkmdC2PqLtjFQkVeJ3PAGZcCA7DxSLiwMqPuZHVfPy9OlS0Xw8GJ+2UI +HmrNo+pXKLcpCTNsry6eQ3sn34mT642/W+lU+h9PaSowanwxRKITGpt9UinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR1MbqomtOOYfw2i55gnXWz50pu8wHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6G4sXt/zllUF1xWHbatu1zjABVfRkOpR81 6fiaWEIIx+HKmQtgyUCme7dfVchdZWtEv0R1sQUh5REow/RmAuhHQtCQ5BL2syaI ESRMtUMmqUv13RE0T3XivmTaoNlTEy6D2wUNOZjQ1PJkwPh4yiuN1oCcsf1jnHkC cRMEPOrkEXUaQCkccOCIKg1LTjVh5euuZMoxipML66WicLp853M+y9H3wZhwlrod AUIvFHIEqms9kQL555XWohtCMTIAUPCfWeY2SG4D9uAVqQEylisCAS4sztOVBlV6 saToMyCOT9hzNO93row8+hfOIjcF1UF+uDAK7SodB0h4WbyJ/sE= -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org