$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: FeHvoyddz7nK2QJDxbsi2/N5zlBWC76buwuDYrakRBw= Subject key identifier: 99:71:6D:AB:2D:A6:DF:9F:26:7A:97:E0:9E:18:D3:56:64:3E:37:79 Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 1540A44F251F45CFF21A2451FB93DAE55B58574C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 0240 Signing time: Thu 21 Nov 2024 00:30:40 +0000 Manifest this update: Thu 21 Nov 2024 00:25:40 +0000 Manifest next update: Sun 24 Nov 2024 12:02:40 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: GEddnhhDg+3ZRrPT00DFt5RA83iWFqIl+vAhKePHLQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:40:a4:4f:25:1f:45:cf:f2:1a:24:51:fb:93:da:e5:5b:58:57:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Nov 21 00:25:40 2024 GMT Not After : Nov 24 12:02:40 2024 GMT Subject: CN=99716DAB2DA6DF9F267A97E09E18D356643E3779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:10:28:b0:b9:7a:56:ed:18:69:a0:fa:d8: 72:e7:5d:15:97:80:29:62:92:c7:15:f1:09:35:00: 95:f0:56:1a:85:ea:29:02:6a:91:4d:69:c1:cf:d9: 02:1c:93:5d:d4:e8:d7:0f:17:98:83:95:38:67:9f: b5:aa:3f:9c:2c:17:ad:e6:cc:49:fc:47:b6:5c:63: 22:8a:65:d6:86:10:d7:fb:33:65:e0:fa:8c:d1:34: f5:60:dc:72:42:8f:e3:93:21:f1:d6:de:65:29:f7: 9a:a8:cc:22:4b:28:8f:29:cb:78:1c:19:66:f6:de: 60:b7:7a:cd:ac:c4:66:3d:72:c7:0f:7c:7b:97:97: 32:a5:b1:a3:92:16:15:62:e6:68:0a:2f:8b:c2:73: 73:c4:e4:14:27:5e:cc:24:13:4e:8c:66:4c:11:a3: 9c:ee:95:8c:65:d7:3e:76:4d:87:64:7a:a0:f9:93: 53:8b:4a:c0:1e:52:a6:ac:b1:95:17:85:8d:ff:3d: 9a:b7:c0:bc:12:4f:3e:6f:e3:a1:69:a4:5b:5d:e5: 99:9a:8f:6b:48:e5:ed:a8:67:40:a3:99:a0:66:cb: db:3e:de:c0:ee:bc:a9:54:48:6e:38:76:2e:42:7b: 7b:e1:53:68:2b:b2:a3:31:e3:42:9b:1b:6f:fc:7f: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:71:6D:AB:2D:A6:DF:9F:26:7A:97:E0:9E:18:D3:56:64:3E:37:79 X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d9:80:25:df:9f:ca:02:a5:bc:ba:2f:a9:05:11:b7:b1:1c: cb:fe:23:5c:df:87:29:c5:97:8c:01:aa:29:a7:79:db:9f:0b: c8:9a:c5:99:dd:52:4f:74:93:39:ed:6a:de:84:5f:39:fd:78: e3:0c:cb:96:de:c1:c6:b7:3f:22:81:55:7a:ab:e4:41:73:44: b3:cf:4f:84:28:df:7e:57:67:c3:7d:a0:f1:88:76:0e:d6:b9: 3e:f1:7b:20:2e:51:cd:9c:cb:d6:d2:a1:b9:93:12:7a:5d:2d: c6:b6:d4:56:a2:d4:43:56:dd:3c:49:e7:44:aa:79:a0:78:c3: 86:f8:87:6b:8d:47:0f:d7:f3:11:11:4c:05:be:c7:e4:11:58: a9:4b:ff:52:5f:71:dc:e9:58:80:fd:b4:60:b3:1f:b1:b6:1c: a8:f1:e5:94:f7:c6:77:c9:3d:81:d8:c5:0e:37:3c:8f:9e:d9: 6f:3d:29:8f:c4:c8:a3:7c:2b:78:46:f7:49:b3:a0:24:3f:4b: be:ee:9d:54:c2:15:a6:27:1f:46:64:54:72:58:99:9c:a7:e5: d1:25:71:f4:98:88:e6:a1:62:9c:ca:1c:59:8a:8b:91:f6:d2: 29:e7:0c:f4:e8:67:c8:c6:67:1f:21:a3:fc:4e:37:03:43:d5: 76:cf:58:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUCkTyUfRc/yGiRR+5Pa5VtYV0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNDExMjEwMDI1NDBaFw0yNDExMjQxMjAyNDBaMDMxMTAvBgNV BAMTKDk5NzE2REFCMkRBNkRGOUYyNjdBOTdFMDlFMThEMzU2NjQzRTM3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDThBAosLl6Vu0YaaD62HLnXRWX gClikscV8Qk1AJXwVhqF6ikCapFNacHP2QIck13U6NcPF5iDlThnn7WqP5wsF63m zEn8R7ZcYyKKZdaGENf7M2Xg+ozRNPVg3HJCj+OTIfHW3mUp95qozCJLKI8py3gc GWb23mC3es2sxGY9cscPfHuXlzKlsaOSFhVi5mgKL4vCc3PE5BQnXswkE06MZkwR o5zulYxl1z52TYdkeqD5k1OLSsAeUqassZUXhY3/PZq3wLwSTz5v46FppFtd5Zma j2tI5e2oZ0CjmaBmy9s+3sDuvKlUSG44di5Ce3vhU2grsqMx40KbG2/8f159AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmXFtqy2m358mepfgnhjTVmQ+N3kwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTZgCXfn8oCpby6L6kFEbexHMv+I1zfhynF l4wBqimnedufC8iaxZndUk90kzntat6EXzn9eOMMy5bewca3PyKBVXqr5EFzRLPP T4Qo335XZ8N9oPGIdg7WuT7xeyAuUc2cy9bSobmTEnpdLca21Fai1ENW3TxJ50Sq eaB4w4b4h2uNRw/X8xERTAW+x+QRWKlL/1JfcdzpWID9tGCzH7G2HKjx5ZT3xnfJ PYHYxQ43PI+e2W89KY/EyKN8K3hG90mzoCQ/S77unVTCFaYnH0ZkVHJYmZyn5dEl cfSYiOahYpzKHFmKi5H20innDPToZ8jGZx8ho/xONwND1XbPWAw= -----END CERTIFICATE-----Generated at Thu Nov 21 01:24:16 2024 by rpki-client on console-ams.rpki-client.org