$ rpki-client -vvf repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft File: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft (raw, json) Hash identifier: XuYeZjLsGiMqZCriIsPZ+lpcptbz41qiifNe/O0u5p8= Subject key identifier: 61:B7:1F:03:84:87:B5:81:2F:43:72:8F:81:3A:8D:92:B4:32:4A:AE Authority key identifier: 35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E Certificate issuer: /CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Certificate serial: 56AAB1C4A7C248FC4FBDB48E554EF30AF8CE0D69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft Manifest number: 01DE Signing time: Mon 25 Nov 2024 18:50:44 +0000 Manifest this update: Mon 25 Nov 2024 18:45:44 +0000 Manifest next update: Fri 29 Nov 2024 06:20:44 +0000 Files and hashes: 1: 35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl (hash: 0t/8NISmMw5zLvT4qu1lQoRIYxA33xIOI/GG+Q+WpW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:aa:b1:c4:a7:c2:48:fc:4f:bd:b4:8e:55:4e:f3:0a:f8:ce:0d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C14EEB27CE42DEB1F331CF080FE5F918D2364E Validity Not Before: Nov 25 18:45:44 2024 GMT Not After : Nov 29 06:20:44 2024 GMT Subject: CN=61B71F038487B5812F43728F813A8D92B4324AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:df:8b:c1:5b:26:4c:36:eb:40:f3:70:02: 60:19:fc:96:0e:d5:5f:16:00:85:1c:a3:6c:dd:79: 51:ed:6f:9f:51:58:c5:94:b5:7f:03:20:84:68:ce: 9e:d8:1c:34:68:fc:3f:ae:72:7f:7d:79:a3:68:b5: 9a:8f:2f:67:09:fd:ce:98:11:e7:b4:08:b3:4c:6a: 81:b0:c6:ad:38:b4:3e:05:17:af:4d:90:29:1b:b7: 6d:e3:2e:56:27:03:5f:20:ed:69:ee:ac:93:37:90: 94:47:ad:f6:78:61:09:0d:9f:64:0c:24:31:94:de: 07:61:d2:52:8e:fa:05:b6:c7:d0:7c:3e:7c:cf:7b: c3:62:84:58:25:8b:3f:e1:5b:37:3f:46:9b:b6:09: 1d:bf:bb:e7:90:e0:57:11:eb:2e:5a:cc:05:a9:49: a2:83:9e:ce:6c:c7:75:54:06:3f:ca:42:81:45:e8: a4:6b:5e:81:16:e8:aa:f5:12:dd:29:e5:9b:4b:d0: 2b:a3:4a:b2:9b:c2:b1:8a:5d:f2:4f:0b:ce:73:9e: a4:19:6c:67:8e:a1:df:6a:b4:92:e3:f0:44:20:59: 76:21:6b:22:1a:b7:0a:e6:c8:4b:97:e9:1f:55:35: a5:64:be:59:8c:a0:39:74:5a:c7:ff:5f:31:e0:bd: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B7:1F:03:84:87:B5:81:2F:43:72:8F:81:3A:8D:92:B4:32:4A:AE X509v3 Authority Key Identifier: keyid:35:C1:4E:EB:27:CE:42:DE:B1:F3:31:CF:08:0F:E5:F9:18:D2:36:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/35C14EEB27CE42DEB1F331CF080FE5F918D2364E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0d:bb:8b:52:92:43:f0:24:fb:c0:7b:5c:42:db:9f:53:3e: 76:fa:c0:2c:a6:25:fc:6b:83:9a:95:19:49:9d:1b:1c:82:66: 80:1c:1f:b9:af:30:bc:a4:05:c7:d7:d8:9e:69:23:18:c1:c4: c6:cb:98:02:62:16:47:eb:46:71:08:70:d4:e4:9f:fa:fe:19: ae:9f:bb:f8:1a:7e:a3:2b:d0:8c:77:32:65:32:5a:4e:d8:cd: 2c:7e:ab:3b:4f:d8:8d:0a:9b:f5:e8:5b:97:2d:72:d3:33:91: 6a:ee:69:8b:58:ae:44:0f:e3:e4:5c:ec:cd:7c:fc:15:b0:48: a8:bf:dc:14:97:7b:62:61:6d:c9:f5:34:d6:34:ba:a5:b8:4d: e0:17:52:6a:9c:3c:64:22:f7:fc:fd:bc:91:84:18:ac:25:94: b5:c8:3a:96:34:f0:47:e0:fb:1c:cb:ef:86:cc:c0:6a:f6:f1: d6:14:c9:c3:e5:20:fa:b1:71:85:35:ba:5a:47:92:f4:38:1b: 51:f4:a5:b8:17:6a:d1:25:c0:c6:24:8e:43:2b:c2:1f:d0:ff: ea:d8:e9:88:b4:88:13:36:15:99:94:75:47:21:8c:08:0d:c9: 2b:ea:99:26:40:09:77:a0:0f:ef:ff:ac:8d:c6:cf:fc:fb:2a: 9e:55:0e:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqqxxKfCSPxPvbSOVU7zCvjODWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1Rjkx OEQyMzY0RTAeFw0yNDExMjUxODQ1NDRaFw0yNDExMjkwNjIwNDRaMDMxMTAvBgNV BAMTKDYxQjcxRjAzODQ4N0I1ODEyRjQzNzI4RjgxM0E4RDkyQjQzMjRBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRuN+LwVsmTDbrQPNwAmAZ/JYO 1V8WAIUco2zdeVHtb59RWMWUtX8DIIRozp7YHDRo/D+ucn99eaNotZqPL2cJ/c6Y Eee0CLNMaoGwxq04tD4FF69NkCkbt23jLlYnA18g7WnurJM3kJRHrfZ4YQkNn2QM JDGU3gdh0lKO+gW2x9B8PnzPe8NihFgliz/hWzc/Rpu2CR2/u+eQ4FcR6y5azAWp SaKDns5sx3VUBj/KQoFF6KRrXoEW6Kr1Et0p5ZtL0CujSrKbwrGKXfJPC85znqQZ bGeOod9qtJLj8EQgWXYhayIatwrmyEuX6R9VNaVkvlmMoDl0Wsf/XzHgvfMJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYbcfA4SHtYEvQ3KPgTqNkrQySq4wHwYDVR0j BBgwFoAUNcFO6yfOQt6x8zHPCA/l+RjSNk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmNjNDczNC1iZWI2LTRlMzMtOWIxYy00NmRjZDE2NDI1YTEvMC8zNUMxNEVFQjI3 Q0U0MkRFQjFGMzMxQ0YwODBGRTVGOTE4RDIzNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1RjkxOEQy MzY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZjYzQ3MzQtYmViNi00ZTMzLTli MWMtNDZkY2QxNjQyNWExLzAvMzVDMTRFRUIyN0NFNDJERUIxRjMzMUNGMDgwRkU1 RjkxOEQyMzY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgNu4tSkkPwJPvAe1xC259TPnb6wCymJfxr g5qVGUmdGxyCZoAcH7mvMLykBcfX2J5pIxjBxMbLmAJiFkfrRnEIcNTkn/r+Ga6f u/gafqMr0Ix3MmUyWk7YzSx+qztP2I0Km/XoW5ctctMzkWruaYtYrkQP4+Rc7M18 /BWwSKi/3BSXe2Jhbcn1NNY0uqW4TeAXUmqcPGQi9/z9vJGEGKwllLXIOpY08Efg +xzL74bMwGr28dYUycPlIPqxcYU1ulpHkvQ4G1H0pbgXatElwMYkjkMrwh/Q/+rY 6Yi0iBM2FZmUdUchjAgNySvqmSZACXegD+//rI3Gz/z7Kp5VDuI= -----END CERTIFICATE-----Generated at Mon Nov 25 19:46:14 2024 by rpki-client on console-fra.rpki-client.org