$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: ko+0xIcLlVh+IkhxB41CkhppW3qZWTVNic8vNfaOL1Q= Subject key identifier: 29:4D:A9:CB:20:9D:71:F3:F0:C4:87:76:62:BE:AD:3C:6E:64:D8:E2 Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 35E38394056C1077CAD3A152DCC8D6B84FAC0AFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 0151 Signing time: Sun 24 Nov 2024 09:32:03 +0000 Manifest this update: Sun 24 Nov 2024 09:27:03 +0000 Manifest next update: Wed 27 Nov 2024 10:11:03 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: teKmb0L2bXHDDbYja/YP0ToDzJ5ZbnqpAcRkoV2GYOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:e3:83:94:05:6c:10:77:ca:d3:a1:52:dc:c8:d6:b8:4f:ac:0a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Nov 24 09:27:03 2024 GMT Not After : Nov 27 10:11:03 2024 GMT Subject: CN=294DA9CB209D71F3F0C4877662BEAD3C6E64D8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:43:32:83:3f:b0:8a:46:1c:80:06:00:56: 92:e1:52:7e:12:a1:5d:a3:2d:57:ab:38:7b:f8:7f: 00:57:cd:b0:e2:0f:9f:46:46:1a:ac:c9:07:b6:0b: 29:82:ee:eb:fd:b7:f7:13:51:63:1d:27:66:cd:03: a4:bd:86:aa:8f:14:83:92:c3:30:fe:de:15:2a:53: b1:63:56:21:9c:b5:75:e2:c3:65:5f:1d:e4:64:9f: a8:3c:c0:47:19:bd:dd:1d:8b:b3:5d:eb:69:d8:65: c7:1d:94:1d:61:3f:da:75:69:1a:c9:a1:2a:8c:5c: 74:64:98:c2:78:8c:20:cb:99:b6:bb:60:6a:1a:46: c6:81:cd:0e:25:dc:2d:8d:14:2a:e1:5c:23:dc:30: d3:5d:cc:fc:3a:a9:69:c0:16:8a:49:ee:9d:7e:63: 53:f7:66:1d:73:42:a5:1b:06:4c:e3:39:4b:69:a8: 5a:f0:13:ab:b6:f3:f7:14:23:eb:4f:6e:e0:30:83: 00:09:1e:2e:31:98:e6:6c:41:d3:a1:26:da:14:25: 54:99:94:f1:77:eb:02:c8:6b:0e:71:1e:1c:01:b1: ad:12:ab:17:09:47:9d:70:6e:39:71:22:d0:8e:2d: cc:85:9e:1c:4b:d6:02:75:0d:ab:dd:9d:a9:fd:b9: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4D:A9:CB:20:9D:71:F3:F0:C4:87:76:62:BE:AD:3C:6E:64:D8:E2 X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7f:33:15:27:e7:c3:c4:b7:57:85:ef:b8:05:89:c1:9f:fb: e7:e0:ca:8e:35:1b:50:64:a7:4e:9d:30:de:33:a5:57:e8:a4: 01:e5:02:c2:c4:5c:44:5d:d5:85:bc:f7:d2:d8:a8:cc:10:8e: cd:89:9d:f2:86:91:d8:cf:a0:8d:81:f4:b5:1e:85:79:5d:7e: 46:d3:e7:e2:6a:84:36:c4:f2:ba:0e:34:e4:0c:44:67:04:70: f9:0b:f3:41:44:92:30:21:6f:57:6b:95:20:01:dc:45:04:76: e6:d8:2b:12:7a:3a:b1:86:3d:6e:9a:6b:c4:55:c8:ac:dd:0f: 8d:ae:11:dd:26:a9:95:12:a5:34:d0:47:64:49:5a:b2:40:06: 86:0a:af:3f:e2:95:68:46:a9:a7:cf:c4:c6:bd:ee:d4:25:ac: 29:39:40:20:e0:8a:3c:fe:51:41:85:50:fa:bf:5b:e2:5f:15: 40:b3:38:11:82:91:c0:12:81:4c:8a:e8:17:d7:1a:73:5d:3c: 93:c0:d2:54:19:43:88:ac:cf:99:46:7e:eb:cc:d4:67:cd:ed: bc:cc:d0:9b:88:62:3d:f3:04:7f:68:63:78:6d:b0:22:31:1b: 82:a8:a4:ad:19:4e:98:1f:af:1e:ef:14:fd:44:2d:0d:27:9e: 1e:74:fe:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNeODlAVsEHfK06FS3MjWuE+sCv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNDExMjQwOTI3MDNaFw0yNDExMjcxMDExMDNaMDMxMTAvBgNV BAMTKDI5NERBOUNCMjA5RDcxRjNGMEM0ODc3NjYyQkVBRDNDNkU2NEQ4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt60Mygz+wikYcgAYAVpLhUn4S oV2jLVerOHv4fwBXzbDiD59GRhqsyQe2CymC7uv9t/cTUWMdJ2bNA6S9hqqPFIOS wzD+3hUqU7FjViGctXXiw2VfHeRkn6g8wEcZvd0di7Nd62nYZccdlB1hP9p1aRrJ oSqMXHRkmMJ4jCDLmba7YGoaRsaBzQ4l3C2NFCrhXCPcMNNdzPw6qWnAFopJ7p1+ Y1P3Zh1zQqUbBkzjOUtpqFrwE6u28/cUI+tPbuAwgwAJHi4xmOZsQdOhJtoUJVSZ lPF36wLIaw5xHhwBsa0SqxcJR51wbjlxItCOLcyFnhxL1gJ1Davdnan9uTNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKU2pyyCdcfPwxId2Yr6tPG5k2OIwHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF/MxUn58PEt1eF77gFicGf++fgyo41G1Bk p06dMN4zpVfopAHlAsLEXERd1YW899LYqMwQjs2JnfKGkdjPoI2B9LUehXldfkbT 5+JqhDbE8roONOQMRGcEcPkL80FEkjAhb1drlSAB3EUEdubYKxJ6OrGGPW6aa8RV yKzdD42uEd0mqZUSpTTQR2RJWrJABoYKrz/ilWhGqafPxMa97tQlrCk5QCDgijz+ UUGFUPq/W+JfFUCzOBGCkcASgUyK6BfXGnNdPJPA0lQZQ4isz5lGfuvM1GfN7bzM 0JuIYj3zBH9oY3htsCIxG4KopK0ZTpgfrx7vFP1ELQ0nnh50/rc= -----END CERTIFICATE-----Generated at Sun Nov 24 10:18:21 2024 by rpki-client on console-fra.rpki-client.org