$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft File: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft (raw, json) Hash identifier: jyLVGltB/NDIMf1FhqqXEpMizgz6qKdHEYp6EzDsRm8= Subject key identifier: 87:16:1F:6A:86:91:9F:15:86:BA:62:C1:31:61:72:A2:74:58:9B:6C Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Certificate serial: 641496AC5E01B4971ACADBD4D5370F89B940B6F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft Manifest number: 014C Signing time: Mon 25 Nov 2024 14:10:53 +0000 Manifest this update: Mon 25 Nov 2024 14:05:53 +0000 Manifest next update: Thu 28 Nov 2024 23:35:53 +0000 Files and hashes: 1: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: AW+Lsl16dBEfdH2Bp+dPdS8NV8bIQpC465qDrK5cAd0=) 2: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: 0kLCizOX6Jcat44K5p+qM0oJg+fboeaRA8mRcok+3XM=) 3: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl (hash: CxHdZ3dodlNPaltTjdyRv4MozF4hcQTugFCQ/BLJGQc=) 4: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: eIb9V1vBU3FB2E8VO54wDhRR6LmBnWdh4ZHQwNnEPcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:14:96:ac:5e:01:b4:97:1a:ca:db:d4:d5:37:0f:89:b9:40:b6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Validity Not Before: Nov 25 14:05:53 2024 GMT Not After : Nov 28 23:35:53 2024 GMT Subject: CN=87161F6A86919F1586BA62C1316172A274589B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:1e:11:9f:7c:75:a7:92:94:eb:54:a3:10: 9b:13:dc:96:2e:82:93:41:60:da:e1:90:c1:f4:4f: 46:34:02:ac:f0:e2:e5:5e:74:9c:41:69:6b:35:a4: 85:2c:bb:78:31:08:f2:17:92:6d:dd:38:c3:47:b8: 90:29:d1:17:b3:3b:ac:e8:1a:43:62:fd:10:5f:03: 41:f5:95:3f:9e:74:3a:91:93:a5:e0:f4:60:c4:fe: 80:de:01:5b:17:d3:3f:30:56:30:0b:36:38:35:dc: fc:d0:70:e8:72:75:d7:7a:29:7c:dd:72:88:ee:00: 6c:29:86:22:e4:cc:0a:25:fd:be:4d:90:0d:47:ba: 36:9d:2d:3f:59:b1:3d:b0:e4:1a:67:73:d6:d4:16: 43:03:e5:7f:aa:f8:c4:07:36:e3:21:6d:f1:af:d4: 56:03:1a:d8:c1:05:ea:1b:48:7f:fb:d3:4d:0d:e7: c9:82:56:40:d8:d5:1b:50:d6:b0:1c:ff:1a:b7:b6: f3:ba:2b:ec:58:11:4a:47:1b:4d:b9:b3:83:11:e5: 4a:61:35:09:5c:a8:ca:cd:02:7e:af:6c:47:ef:33: 10:cd:be:3d:19:56:97:bd:7f:e8:7f:91:9d:bf:fd: 56:44:66:e6:9a:94:47:4f:ca:fe:a6:3d:18:a9:e4: 33:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:16:1F:6A:86:91:9F:15:86:BA:62:C1:31:61:72:A2:74:58:9B:6C X509v3 Authority Key Identifier: keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:4a:53:a7:0b:40:f1:a9:46:83:20:85:fd:6b:67:93:a1:f3: e8:d0:ab:05:5b:7d:e1:bb:f7:37:ec:9d:b0:d0:bd:ff:ea:69: 02:05:9e:19:e9:9c:2d:62:c8:c9:d1:ae:ba:83:4f:cb:d7:8f: 28:cb:13:0f:44:15:81:56:8c:31:87:81:0a:37:37:e5:81:33: dd:fa:dd:e0:a3:50:71:a6:80:59:e9:ae:dd:b4:2f:ff:85:a5: 1a:7b:ea:7e:e7:8c:87:b7:f8:68:fd:77:12:3f:92:91:93:f3: 10:fc:fb:63:9c:ab:95:30:6e:d6:84:79:47:0b:a7:20:d3:ab: d2:99:67:dc:c8:28:e2:e4:4b:b7:0b:4c:bf:7e:4d:86:21:b0: 08:69:e4:49:53:22:07:12:29:3e:06:2a:12:f1:6b:6f:f9:75: 26:0e:42:78:46:32:c9:01:12:90:5b:a8:7a:d5:77:2e:a2:5c: e5:ac:7c:09:35:e8:7d:bb:3e:36:2c:75:b3:39:10:bb:1f:e2: 9b:e1:1a:d3:a5:91:b9:56:62:99:c1:72:d6:c4:9d:f9:10:51: 0c:5c:99:03:4b:38:b8:72:09:45:79:cf:f2:8d:b3:9c:be:f4: dd:d0:43:87:92:7f:f8:31:ff:df:53:7e:f1:d3:7e:1d:62:5f: cb:8e:ae:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZBSWrF4BtJcaytvU1TcPiblAtvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG NzBCRDg5NzAeFw0yNDExMjUxNDA1NTNaFw0yNDExMjgyMzM1NTNaMDMxMTAvBgNV BAMTKDg3MTYxRjZBODY5MTlGMTU4NkJBNjJDMTMxNjE3MkEyNzQ1ODlCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yh4Rn3x1p5KU61SjEJsT3JYu gpNBYNrhkMH0T0Y0Aqzw4uVedJxBaWs1pIUsu3gxCPIXkm3dOMNHuJAp0RezO6zo GkNi/RBfA0H1lT+edDqRk6Xg9GDE/oDeAVsX0z8wVjALNjg13PzQcOhyddd6KXzd cojuAGwphiLkzAol/b5NkA1HujadLT9ZsT2w5Bpnc9bUFkMD5X+q+MQHNuMhbfGv 1FYDGtjBBeobSH/7000N58mCVkDY1RtQ1rAc/xq3tvO6K+xYEUpHG025s4MR5Uph NQlcqMrNAn6vbEfvMxDNvj0ZVpe9f+h/kZ2//VZEZuaalEdPyv6mPRip5DPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhxYfaoaRnxWGumLBMWFyonRYm2wwHwYDVR0j BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5 MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC RDg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5Njcw M0RGNzBCRDg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENKU6cLQPGpRoMghf1rZ5Oh8+jQqwVbfeG7 9zfsnbDQvf/qaQIFnhnpnC1iyMnRrrqDT8vXjyjLEw9EFYFWjDGHgQo3N+WBM936 3eCjUHGmgFnprt20L/+FpRp76n7njIe3+Gj9dxI/kpGT8xD8+2Ocq5UwbtaEeUcL pyDTq9KZZ9zIKOLkS7cLTL9+TYYhsAhp5ElTIgcSKT4GKhLxa2/5dSYOQnhGMskB EpBbqHrVdy6iXOWsfAk16H27PjYsdbM5ELsf4pvhGtOlkblWYpnBctbEnfkQUQxc mQNLOLhyCUV5z/KNs5y+9N3QQ4eSf/gx/99TfvHTfh1iX8uOrp0= -----END CERTIFICATE-----Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org