$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: 9V1F2PA/r0DupR4wn1Cj7IEQmuoZLFIG6ERJX35MluE= Subject key identifier: 54:27:F7:21:E5:69:06:AD:0D:29:F8:CF:AD:0D:E3:C7:A1:A4:7F:E4 Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 0FFBCDC1F72F972F0335A5CD9722D62E3276E248 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 043A Signing time: Thu 21 Nov 2024 22:31:04 +0000 Manifest this update: Thu 21 Nov 2024 22:26:04 +0000 Manifest next update: Mon 25 Nov 2024 00:56:04 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: qPAEo9siIGO6Ri41Y+Lcm+NucTRD2K2hCKEtPl49x9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 00:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:fb:cd:c1:f7:2f:97:2f:03:35:a5:cd:97:22:d6:2e:32:76:e2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: Nov 21 22:26:04 2024 GMT Not After : Nov 25 00:56:04 2024 GMT Subject: CN=5427F721E56906AD0D29F8CFAD0DE3C7A1A47FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:f8:47:b3:22:5a:63:e3:9b:4f:1c:d1:42: c2:5b:39:d3:64:56:bc:12:f0:41:74:d4:9e:03:ab: c5:24:c5:2b:5a:20:d9:84:33:71:9f:f9:b3:a0:66: b9:8b:e4:dd:f2:7c:2f:73:d8:7e:8c:93:cc:45:bb: de:0c:00:e8:d3:00:98:3f:31:f6:9a:1c:98:24:90: ca:78:89:2b:ab:47:d1:0a:72:23:f4:1a:0c:cf:f2: ab:97:e3:4d:ae:01:93:6c:e3:a0:f3:6e:a0:e4:a4: 81:48:c5:13:5e:18:23:30:93:59:30:84:ef:35:51: 58:2a:4f:32:90:c7:bf:a0:6b:dc:cb:e7:68:bb:96: 68:a9:54:f8:0e:7c:de:43:de:f5:6d:35:dd:13:f5: e4:82:29:c8:a0:33:5c:f2:f2:48:9d:3f:0d:bb:dc: f6:03:1b:fd:17:3e:81:b7:86:3f:4e:87:cf:56:b5: 33:61:73:99:46:f5:78:2b:d4:71:41:98:d4:64:ab: e0:05:ab:64:f3:e3:85:80:c0:02:8b:2b:78:c6:c3: a6:89:27:4d:b0:20:87:d0:6e:8b:9a:2a:c6:c2:a0: 33:57:1e:02:f6:b0:82:47:ce:b1:5c:38:14:7d:5b: ef:9c:8c:48:ac:ab:70:08:cb:ec:60:fd:9a:37:f6: cf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:27:F7:21:E5:69:06:AD:0D:29:F8:CF:AD:0D:E3:C7:A1:A4:7F:E4 X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:48:18:eb:2d:46:21:0b:f8:49:5b:14:97:da:a9:1f:51:83: 97:10:71:9f:40:36:ec:9d:01:70:6c:52:7a:f9:bb:35:52:13: 41:07:a7:d5:e3:03:84:d4:19:6d:81:6e:bc:d2:93:2f:77:2c: a8:f7:fa:c8:d3:01:90:74:f6:c0:e8:08:25:a0:cb:4c:24:16: 58:8b:75:cb:f9:2c:59:ed:bb:a1:cd:8c:95:26:ec:fb:28:b9: 3f:08:0d:8c:5c:b6:92:ae:00:97:5b:fa:67:47:61:4d:00:f9: 84:b5:62:5c:14:15:a4:19:89:16:18:9e:af:a0:66:36:f4:7c: 88:9c:e9:03:96:42:80:ac:58:26:e4:7d:f7:30:20:2d:19:e0: cf:eb:ca:05:1d:d7:e6:60:89:dd:fa:f6:a0:10:a5:5c:03:83: fe:f7:41:b5:4d:4d:a5:7b:16:6e:87:6c:4a:24:9b:a0:16:4f: 42:95:01:42:4b:1b:44:e4:30:ee:e5:b4:05:6b:79:2b:54:c2: 93:12:e9:69:94:c7:06:db:5b:27:ca:a8:a3:99:bb:26:4d:18: 90:ae:b7:96:5e:9f:30:23:fd:37:02:ce:60:b6:3c:63:21:7c: 89:42:0e:87:10:1f:73:c0:37:dc:99:30:2a:21:b3:d0:d1:2d: 2e:32:56:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/vNwfcvly8DNaXNlyLWLjJ24kgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNDExMjEyMjI2MDRaFw0yNDExMjUwMDU2MDRaMDMxMTAvBgNV BAMTKDU0MjdGNzIxRTU2OTA2QUQwRDI5RjhDRkFEMERFM0M3QTFBNDdGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLPhHsyJaY+ObTxzRQsJbOdNk VrwS8EF01J4Dq8UkxStaINmEM3Gf+bOgZrmL5N3yfC9z2H6Mk8xFu94MAOjTAJg/ MfaaHJgkkMp4iSurR9EKciP0GgzP8quX402uAZNs46DzbqDkpIFIxRNeGCMwk1kw hO81UVgqTzKQx7+ga9zL52i7lmipVPgOfN5D3vVtNd0T9eSCKcigM1zy8kidPw27 3PYDG/0XPoG3hj9Oh89WtTNhc5lG9Xgr1HFBmNRkq+AFq2Tz44WAwAKLK3jGw6aJ J02wIIfQbouaKsbCoDNXHgL2sIJHzrFcOBR9W++cjEisq3AIy+xg/Zo39s9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVCf3IeVpBq0NKfjPrQ3jx6Gkf+QwHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhIGOstRiEL+ElbFJfaqR9Rg5cQcZ9ANuyd AXBsUnr5uzVSE0EHp9XjA4TUGW2BbrzSky93LKj3+sjTAZB09sDoCCWgy0wkFliL dcv5LFntu6HNjJUm7PsouT8IDYxctpKuAJdb+mdHYU0A+YS1YlwUFaQZiRYYnq+g Zjb0fIic6QOWQoCsWCbkffcwIC0Z4M/rygUd1+Zgid369qAQpVwDg/73QbVNTaV7 Fm6HbEokm6AWT0KVAUJLG0TkMO7ltAVreStUwpMS6WmUxwbbWyfKqKOZuyZNGJCu t5ZenzAj/TcCzmC2PGMhfIlCDocQH3PAN9yZMCohs9DRLS4yVt8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org