$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: H4L3TeJ3nPq1V6GVf90iivNlr5b/GXQSFxJExJgsQLk= Subject key identifier: C3:FA:FF:FA:00:27:43:00:77:97:3A:4C:08:54:E9:14:CF:55:12:EB Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 7C98C0B94E9078A811F5963D884A9A7F94D316E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: 4A Signing time: Sun 24 Nov 2024 19:32:04 +0000 Manifest this update: Sun 24 Nov 2024 19:27:04 +0000 Manifest next update: Wed 27 Nov 2024 23:07:04 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: UvdlrQPwWgHelxYjh/1xZrDdEQ9OX4a75nUfCv+AeDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:98:c0:b9:4e:90:78:a8:11:f5:96:3d:88:4a:9a:7f:94:d3:16:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Nov 24 19:27:04 2024 GMT Not After : Nov 27 23:07:04 2024 GMT Subject: CN=C3FAFFFA0027430077973A4C0854E914CF5512EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:12:84:fe:e4:4d:e3:3d:b3:e0:cb:3d:8b:00: 48:4f:ae:34:11:c5:ce:35:13:66:3d:07:de:66:c5: 8a:f8:fb:39:07:ca:79:5a:f6:22:ca:31:5f:46:03: ac:a3:5f:ea:dc:4b:ae:a0:9c:70:30:bd:4a:4b:6b: f6:60:5b:69:7c:0e:73:3d:7c:1d:8b:f3:62:88:4e: 41:b6:31:92:9e:14:fa:2c:44:dd:b7:b7:47:39:cb: 58:2b:da:e9:aa:f6:e9:72:d9:5c:16:2c:43:99:e0: d2:eb:95:c2:fe:f7:a2:ae:ba:20:51:4c:4e:c4:c1: 18:f7:7d:4f:a7:72:34:b6:c2:23:6c:e6:3e:b9:ea: 46:4a:5f:37:ef:39:1e:ba:53:47:eb:ce:8a:62:dc: 37:8c:15:04:ae:b4:99:39:22:a8:2f:9e:7c:62:a7: 35:91:5e:87:d0:d2:18:14:05:4a:ad:8e:a8:3d:ad: c1:ac:83:46:4c:8f:ca:8a:b6:fd:55:7c:c7:8e:50: e5:7b:ec:db:9e:13:09:9d:2e:ef:0a:27:0f:04:f5: c3:23:58:b7:c3:c7:be:32:13:1e:41:2f:a0:01:dc: f0:bf:9d:80:68:7c:c1:00:8c:85:e0:a3:2f:ef:14: 38:a1:66:2d:67:b6:e4:4c:ba:51:6a:07:a7:43:04: 5b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FA:FF:FA:00:27:43:00:77:97:3A:4C:08:54:E9:14:CF:55:12:EB X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3b:62:5e:38:ec:15:84:a6:6c:bb:d4:88:aa:92:df:4b:61: 6f:57:bc:c5:7f:1d:6e:49:58:9f:98:3e:3f:fc:6b:f5:4f:a6: 40:85:74:b2:31:df:e7:8b:28:4c:9a:78:00:c0:ac:a3:80:06: 03:0b:ff:b9:a1:af:5a:8a:84:a2:45:f8:5c:f1:58:fe:93:46: 26:4d:13:b6:a4:01:71:a6:c9:47:c0:36:9d:f8:ef:9b:be:e2: f8:54:4f:67:c3:dd:1e:2f:48:7b:13:59:25:0f:49:56:41:85: e9:5f:d7:a5:36:3e:4b:c8:fd:f3:4e:e0:fc:80:69:b2:14:69: 90:b8:20:6a:35:dd:96:da:4d:13:0a:9b:d4:79:64:09:a9:7d: 32:4e:58:76:66:1a:bc:d3:bb:92:0e:93:4a:49:fa:ba:7b:ca: 3f:4b:26:6b:45:cb:6e:b8:06:2a:37:0a:69:3b:e3:da:16:bd: ab:d8:31:11:18:7f:61:00:30:71:70:31:61:c4:7e:ab:73:53: e0:b9:5b:0b:71:7d:92:42:d7:9b:6a:53:b4:79:23:f2:72:18: 21:cd:fc:5e:6b:fc:2d:6d:e8:00:30:51:9e:f6:e1:96:67:8e: 56:c2:93:1e:37:06:66:07:44:45:8c:c9:83:df:a5:fc:75:4d: d3:0e:e6:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJjAuU6QeKgR9ZY9iEqaf5TTFuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNDExMjQxOTI3MDRaFw0yNDExMjcyMzA3MDRaMDMxMTAvBgNV BAMTKEMzRkFGRkZBMDAyNzQzMDA3Nzk3M0E0QzA4NTRFOTE0Q0Y1NTEyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpEoT+5E3jPbPgyz2LAEhPrjQR xc41E2Y9B95mxYr4+zkHynla9iLKMV9GA6yjX+rcS66gnHAwvUpLa/ZgW2l8DnM9 fB2L82KITkG2MZKeFPosRN23t0c5y1gr2umq9uly2VwWLEOZ4NLrlcL+96KuuiBR TE7EwRj3fU+ncjS2wiNs5j656kZKXzfvOR66U0frzopi3DeMFQSutJk5Iqgvnnxi pzWRXofQ0hgUBUqtjqg9rcGsg0ZMj8qKtv1VfMeOUOV77NueEwmdLu8KJw8E9cMj WLfDx74yEx5BL6AB3PC/nYBofMEAjIXgoy/vFDihZi1ntuRMulFqB6dDBFvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/r/+gAnQwB3lzpMCFTpFM9VEuswHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAU7Yl447BWEpmy71Iiqkt9LYW9XvMV/HW5J WJ+YPj/8a/VPpkCFdLIx3+eLKEyaeADArKOABgML/7mhr1qKhKJF+FzxWP6TRiZN E7akAXGmyUfANp3475u+4vhUT2fD3R4vSHsTWSUPSVZBhelf16U2PkvI/fNO4PyA abIUaZC4IGo13ZbaTRMKm9R5ZAmpfTJOWHZmGrzTu5IOk0pJ+rp7yj9LJmtFy264 Bio3Cmk749oWvavYMREYf2EAMHFwMWHEfqtzU+C5WwtxfZJC15tqU7R5I/JyGCHN /F5r/C1t6AAwUZ724ZZnjlbCkx43BmYHREWMyYPfpfx1TdMO5iE= -----END CERTIFICATE-----Generated at Sun Nov 24 21:43:11 2024 by rpki-client on console-ams.rpki-client.org