$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: OJU4o1mZ+8gBFAJJX2EJN/hYxoy6+cXkVZETGvD9uEo= Subject key identifier: 86:95:93:64:2A:AD:68:8D:A8:39:31:74:D8:6C:EF:03:BB:D7:C3:C9 Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 3635EF556900AF71FA9283E3F47A918CE2330A65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 021D Signing time: Fri 22 Nov 2024 09:42:01 +0000 Manifest this update: Fri 22 Nov 2024 09:37:01 +0000 Manifest next update: Mon 25 Nov 2024 13:19:01 +0000 Files and hashes: 1: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: SGukskDHVevfDs+MXuTBfR5ARvlkFX+0EbcgmuFklkg=) 2: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: 7oq4FRLBUB7lLbbThElrgZXsIoSH7Cdmk1YFzVPU5qQ=) 3: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: 58/soKQWPVQGTqv8hOCxxWuXW2GL47DGIdYmRaMlabg=) 4: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: FuTP+olekR94POOQRMWB2DM9MZrHgp1r/imUNhheQk0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 13:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:35:ef:55:69:00:af:71:fa:92:83:e3:f4:7a:91:8c:e2:33:0a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Nov 22 09:37:01 2024 GMT Not After : Nov 25 13:19:01 2024 GMT Subject: CN=869593642AAD688DA8393174D86CEF03BBD7C3C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:03:bf:df:a1:80:33:8f:54:84:75:d6:fa: 23:eb:fe:d1:15:ca:9e:32:8e:e2:83:05:e3:eb:0c: 21:4c:28:8b:5d:e4:03:93:49:45:ea:fa:8d:fd:09: 66:9b:0b:b2:24:78:fe:e3:8f:b7:3b:01:db:12:3d: dd:5b:27:f3:e6:73:cb:63:69:2b:4b:f6:11:fa:fb: 8c:03:25:38:b3:16:43:5f:f3:4f:c3:d9:55:f6:e1: 9a:bc:d1:80:be:31:e1:d1:e2:26:83:b6:9a:02:3e: 4b:bb:0f:ee:b9:c2:7f:3f:b9:6a:fe:5a:3b:8a:a4: f2:1d:30:e7:d7:8a:43:04:25:86:37:68:a7:7c:49: 45:60:1c:1d:f2:d9:04:f5:cd:d8:ca:ee:c6:7c:5a: d3:30:52:87:97:14:76:85:4c:3c:52:52:19:28:96: f4:0b:6a:01:94:0c:5a:36:0c:10:44:c0:94:d7:1a: ec:bb:d2:4c:e4:78:6c:0b:a3:3b:57:08:97:89:42: 32:80:d5:c4:9a:68:bb:ce:c8:85:97:c3:ff:8f:67: 19:19:c6:98:e1:24:8c:29:27:91:8a:be:9b:26:aa: 0c:73:a7:81:ad:dc:a7:7c:99:82:db:01:c7:80:31: 23:6c:46:d7:8b:df:d2:0e:c2:e0:2c:f3:de:ee:91: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:95:93:64:2A:AD:68:8D:A8:39:31:74:D8:6C:EF:03:BB:D7:C3:C9 X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:84:ce:1a:d5:41:eb:cc:68:51:91:84:d2:0a:55:bf:62:96: ee:26:88:fd:68:b3:b0:d7:12:e9:ff:54:25:89:a9:eb:a6:28: 0e:a0:2d:d6:de:a5:48:72:9d:01:8c:7e:3f:89:7e:96:f6:fd: 63:10:b3:59:fc:0c:0d:fa:90:ef:19:07:90:26:21:10:cf:b7: ed:df:0e:05:2e:ab:ed:a0:a7:0b:97:80:25:34:6d:ef:0c:86: d4:52:74:ec:ee:8c:c1:74:c9:3a:46:be:aa:c4:aa:03:a3:e1: ea:ce:f9:0c:ba:9b:5b:65:c7:0e:a6:5e:1e:a2:a0:60:85:63: 64:16:7d:1b:30:9e:26:90:f3:9c:e4:31:d3:fd:66:92:fc:a6: bc:a6:3e:93:01:ba:dc:88:2e:5c:34:eb:35:93:f9:6c:22:56: 8d:31:f8:d6:1b:3f:5b:03:f7:ff:35:d2:25:33:1d:db:e2:15: db:5f:fc:39:e8:97:cf:8d:b0:2d:76:76:92:b5:09:b2:68:8f: a8:2d:14:7d:c5:f5:8a:83:5a:6d:57:77:79:07:b5:d7:d0:48: db:f4:50:ac:e2:29:af:a4:31:91:f7:67:63:3a:e5:fc:3f:a4: 48:64:ac:9b:b4:05:6e:de:94:4a:0f:be:41:fe:58:c7:b3:4f: bb:24:a0:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjXvVWkAr3H6koPj9HqRjOIzCmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNDExMjIwOTM3MDFaFw0yNDExMjUxMzE5MDFaMDMxMTAvBgNV BAMTKDg2OTU5MzY0MkFBRDY4OERBODM5MzE3NEQ4NkNFRjAzQkJEN0MzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2QO/36GAM49UhHXW+iPr/tEV yp4yjuKDBePrDCFMKItd5AOTSUXq+o39CWabC7IkeP7jj7c7AdsSPd1bJ/Pmc8tj aStL9hH6+4wDJTizFkNf80/D2VX24Zq80YC+MeHR4iaDtpoCPku7D+65wn8/uWr+ WjuKpPIdMOfXikMEJYY3aKd8SUVgHB3y2QT1zdjK7sZ8WtMwUoeXFHaFTDxSUhko lvQLagGUDFo2DBBEwJTXGuy70kzkeGwLoztXCJeJQjKA1cSaaLvOyIWXw/+PZxkZ xpjhJIwpJ5GKvpsmqgxzp4Gt3Kd8mYLbAceAMSNsRteL39IOwuAs897ukYHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhpWTZCqtaI2oOTF02GzvA7vXw8kwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISEzhrVQevMaFGRhNIKVb9ilu4miP1os7DX Eun/VCWJqeumKA6gLdbepUhynQGMfj+Jfpb2/WMQs1n8DA36kO8ZB5AmIRDPt+3f DgUuq+2gpwuXgCU0be8MhtRSdOzujMF0yTpGvqrEqgOj4erO+Qy6m1tlxw6mXh6i oGCFY2QWfRswniaQ85zkMdP9ZpL8prymPpMButyILlw06zWT+WwiVo0x+NYbP1sD 9/810iUzHdviFdtf/Dnol8+NsC12dpK1CbJoj6gtFH3F9YqDWm1Xd3kHtdfQSNv0 UKziKa+kMZH3Z2M65fw/pEhkrJu0BW7elEoPvkH+WMezT7skoMc= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:11 2024 by rpki-client on console-fra.rpki-client.org