$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft File: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json) Hash identifier: K2LCN5JyCy60zR/IMw4YblbkPApUJJ65X0Ozz+KOFFo= Subject key identifier: 71:DC:42:E8:58:1E:4D:1E:99:6F:07:C1:D8:A8:79:3D:B7:57:76:90 Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Certificate issuer: /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Certificate serial: 09B081B0B790F52154EDE36E07D994BF6BD80232 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft Manifest number: 7F Signing time: Sat 23 Nov 2024 13:51:38 +0000 Manifest this update: Sat 23 Nov 2024 13:46:38 +0000 Manifest next update: Tue 26 Nov 2024 22:28:38 +0000 Files and hashes: 1: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: 0RbAZmZAQqxpQ9eFAgAF1TDx9CiiBnbN8nQozBxitLw=) 2: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: aZ67xnZ2GmpS5x3v6wGoZHaJnKpkTD7bioQ4/2mf/9I=) 3: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: 7l+KDkpftZ1olZ/l9vZxZiSFCmqzAQeP2WLVDLagbJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b0:81:b0:b7:90:f5:21:54:ed:e3:6e:07:d9:94:bf:6b:d8:02:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Validity Not Before: Nov 23 13:46:38 2024 GMT Not After : Nov 26 22:28:38 2024 GMT Subject: CN=71DC42E8581E4D1E996F07C1D8A8793DB7577690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c5:33:c1:e5:8f:2c:30:10:da:68:a5:94:f7: d9:42:e4:dd:72:ec:1a:2d:e6:a8:6e:97:3f:ce:9c: 23:ef:18:a6:1b:05:a7:5f:ac:58:c9:eb:ae:62:d3: 9e:a8:ae:a6:80:5f:0c:04:2a:4d:16:08:f1:3b:71: 42:1e:2e:00:ac:cf:9e:f0:dc:ca:07:2a:85:72:1e: c3:e1:65:37:3a:75:40:7a:6c:0f:25:5e:cb:d9:be: 04:d4:fb:52:e7:7f:77:5d:e0:d9:19:2f:9b:34:9e: 66:74:c2:c7:3a:f7:92:c5:14:b6:07:c0:cb:84:fe: 6c:a9:3e:fb:c2:a2:80:6f:e6:2d:dd:3a:9f:f7:50: 8f:ab:63:70:7f:3a:56:41:9e:c3:40:fd:59:7b:98: ec:61:68:8a:52:ee:d7:46:63:58:dc:64:aa:3e:ac: 3e:2f:a3:6c:50:c7:6d:32:9f:5f:0b:2b:d7:bf:c0: 53:2c:be:15:b3:8e:cc:4a:41:94:c6:f5:f7:34:01: 85:3c:0d:b0:a0:8e:e6:d1:aa:74:c1:8b:bf:ea:23: 6f:8e:28:15:51:41:fe:02:a8:96:2e:14:36:68:19: 02:2c:40:a4:49:4c:45:00:a1:c8:d8:60:97:77:c4: 4a:85:15:38:b2:da:98:01:18:c4:27:3b:1f:8a:91: 04:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DC:42:E8:58:1E:4D:1E:99:6F:07:C1:D8:A8:79:3D:B7:57:76:90 X509v3 Authority Key Identifier: keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ba:d8:03:c4:5a:b8:51:cf:f1:50:1d:04:9b:d9:13:ef:cc: e5:a2:12:fa:fd:f4:03:00:1d:f0:88:30:e7:e7:63:9f:81:d1: 17:ca:e2:ea:80:8d:3e:2a:a8:60:c5:0d:dd:55:d9:c5:6f:bf: d6:f6:3b:47:fb:b0:b5:d7:ca:21:e3:2a:df:4a:99:1c:f4:c6: 1a:8f:4a:52:af:e1:59:02:0f:5f:09:67:33:fd:01:f1:39:90: 34:53:a2:86:8e:84:43:33:14:de:77:d2:5c:b4:4a:99:a5:96: f2:45:a4:31:60:60:75:6d:0a:18:63:ed:a5:b6:e3:ee:d9:54: da:f1:4a:05:f6:70:c2:4b:92:d3:95:12:7e:48:c6:3d:8b:fc: 4e:13:15:08:ac:f7:bb:59:fb:25:52:fd:a1:b5:06:09:51:03: 87:bb:b3:d6:28:fe:a8:56:07:25:f1:27:77:b4:d1:96:27:24: 4c:15:23:87:69:5d:51:71:a9:69:a2:95:69:3b:2d:ab:e8:f0: f0:e3:4e:b7:61:2f:f5:69:4d:10:65:ed:73:f5:43:22:0d:4a: 95:6b:d5:44:1d:b4:6b:4a:04:49:a3:0f:f9:1e:d3:87:79:be: 30:b4:63:cc:66:f4:d3:82:07:da:04:03:38:2d:e1:c6:8d:f5: 51:8e:cd:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCbCBsLeQ9SFU7eNuB9mUv2vYAjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlC MUNEODgzMjAeFw0yNDExMjMxMzQ2MzhaFw0yNDExMjYyMjI4MzhaMDMxMTAvBgNV BAMTKDcxREM0MkU4NTgxRTREMUU5OTZGMDdDMUQ4QTg3OTNEQjc1Nzc2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxTPB5Y8sMBDaaKWU99lC5N1y 7Bot5qhulz/OnCPvGKYbBadfrFjJ665i056orqaAXwwEKk0WCPE7cUIeLgCsz57w 3MoHKoVyHsPhZTc6dUB6bA8lXsvZvgTU+1Lnf3dd4NkZL5s0nmZ0wsc695LFFLYH wMuE/mypPvvCooBv5i3dOp/3UI+rY3B/OlZBnsNA/Vl7mOxhaIpS7tdGY1jcZKo+ rD4vo2xQx20yn18LK9e/wFMsvhWzjsxKQZTG9fc0AYU8DbCgjubRqnTBi7/qI2+O KBVRQf4CqJYuFDZoGQIsQKRJTEUAocjYYJd3xEqFFTiy2pgBGMQnOx+KkQQBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcdxC6FgeTR6ZbwfB2Kh5PbdXdpAwHwYDVR0j BBgwFoAU9dcex3kiqQgPF8Ohb75fabHNiDIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWU4MzY3My0wOTZhLTQ0MGMtYjI3YS05YmU2NGIxM2I0ZTUvMC9GNUQ3MUVDNzc5 MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIxQ0Q4ODMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlCMUNE ODgzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVG NjlCMUNEODgzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB662APEWrhRz/FQHQSb2RPvzOWiEvr99AMA HfCIMOfnY5+B0RfK4uqAjT4qqGDFDd1V2cVvv9b2O0f7sLXXyiHjKt9KmRz0xhqP SlKv4VkCD18JZzP9AfE5kDRTooaOhEMzFN530ly0SpmllvJFpDFgYHVtChhj7aW2 4+7ZVNrxSgX2cMJLktOVEn5Ixj2L/E4TFQis97tZ+yVS/aG1BglRA4e7s9Yo/qhW ByXxJ3e00ZYnJEwVI4dpXVFxqWmilWk7Lavo8PDjTrdhL/VpTRBl7XP1QyINSpVr 1UQdtGtKBEmjD/ke04d5vjC0Y8xm9NOCB9oEAzgt4caN9VGOzQ8= -----END CERTIFICATE-----Generated at Sat Nov 23 15:35:15 2024 by rpki-client on console-fra.rpki-client.org