$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: +bAmEFCdDlcSrwWw5d1xNSjr8i0C65hp4Kp4vXSd2R0= Subject key identifier: AB:C8:C3:B6:FA:DB:66:6D:67:1E:18:46:CD:E5:4A:BE:E0:3F:03:DD Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 3E149B6B8A8C83BBA956640D0329E1680553C75E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 0131 Signing time: Mon 25 Nov 2024 12:40:05 +0000 Manifest this update: Mon 25 Nov 2024 12:35:05 +0000 Manifest next update: Thu 28 Nov 2024 13:38:05 +0000 Files and hashes: 1: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: LYLfeIKYt3+gChJXDsZqI1wORNobMndXWXZJv0S5e3M=) 2: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NXHMc5cBUZitTQZ4ST9s7lp3tsPIg2LlkZ5yYQ7KPUA=) 3: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: OiXuaCFeHNTNKTkxwDwZ/IJjAlYs+aZs7qWhd3mySzg=) 4: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 70RFcRoz1w22nVDdjd8xwvOHx9oaAPRDsiAFJSjZRVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 13:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:14:9b:6b:8a:8c:83:bb:a9:56:64:0d:03:29:e1:68:05:53:c7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Nov 25 12:35:05 2024 GMT Not After : Nov 28 13:38:05 2024 GMT Subject: CN=ABC8C3B6FADB666D671E1846CDE54ABEE03F03DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:11:b9:f0:54:ae:13:07:9b:5c:03:f8:10:56: cf:11:d8:24:8a:f5:e6:af:f0:b6:15:df:5b:c9:a4: 87:55:ab:a3:dc:05:71:6f:48:69:03:6f:21:1c:75: 30:65:eb:9b:1b:a0:6f:2d:16:d7:90:e4:fe:5a:33: 30:30:cb:57:05:92:3d:56:d5:65:fc:fd:09:ae:51: f6:4b:f0:f2:4e:49:81:ab:59:69:24:4a:c8:4d:53: 58:49:11:85:13:bc:3b:04:c6:3a:82:b2:a6:73:f0: 4d:c8:3f:23:94:a0:45:51:4d:fb:6b:a2:40:6d:c7: 97:1e:cb:92:86:68:77:e6:34:77:d5:a6:dd:4c:6f: a8:c4:a3:48:ee:40:d0:5a:86:74:14:e9:d5:45:a8: 5e:45:86:f4:98:59:54:3c:90:d6:58:25:2d:8b:cd: f6:b8:33:b9:1d:7d:13:30:dd:8b:d6:f0:25:98:79: 68:ca:98:dc:cd:31:82:9a:fc:60:98:ff:bb:8d:f5: 6d:1c:52:6e:ba:bb:a4:22:8f:a6:9a:82:be:93:0d: 81:c5:a8:2c:e4:a3:7e:d5:a7:8f:31:d7:2b:18:fc: e8:8a:46:a9:3a:07:0b:df:ab:7f:64:e4:14:b4:87: a4:ca:1e:0c:d9:64:34:2d:fd:59:48:eb:13:68:21: a2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C8:C3:B6:FA:DB:66:6D:67:1E:18:46:CD:E5:4A:BE:E0:3F:03:DD X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0e:7c:62:c1:ba:11:19:bc:7d:6a:9c:c2:56:92:96:7e:15: 21:ef:0f:4d:3e:f3:96:10:0d:4d:5e:82:5b:cb:56:4a:83:b8: ee:27:62:94:de:4e:79:7e:4b:50:e3:62:13:75:9e:ae:7d:73: c4:43:51:e0:68:e9:d8:ea:79:e3:70:65:a9:fa:9a:eb:c6:99: 8b:e4:99:37:69:3e:3b:d5:53:d7:bd:d0:26:43:d8:4c:24:c8: 31:68:2c:b0:a5:d9:e1:bf:c6:04:38:32:35:63:75:3f:b1:1b: df:3e:45:11:f8:30:df:d8:b9:71:8f:82:19:ca:25:c5:16:5a: f4:9f:e4:86:1d:1d:e1:5f:2c:e6:b4:4f:bf:df:c1:8f:9b:15: 57:61:1e:c5:d2:2f:4e:11:46:00:16:e3:f1:04:18:65:fa:4c: 8e:f5:97:18:ad:e2:94:9f:96:04:78:6b:9c:17:ae:6f:bd:1f: b5:7c:e3:50:43:1c:1a:59:fe:f5:43:05:f7:79:89:9a:d2:62: cc:47:a9:cc:89:f1:1f:9c:ef:f2:0e:c4:d2:d2:ed:e0:e9:cd: 1c:ba:45:34:f9:7b:8e:13:94:ee:8c:66:66:ff:0d:7c:5c:b7: 9d:3f:39:d1:01:ea:99:98:a8:09:9c:f1:9b:85:2e:49:a1:59: 09:07:ee:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhSba4qMg7upVmQNAynhaAVTx14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNDExMjUxMjM1MDVaFw0yNDExMjgxMzM4MDVaMDMxMTAvBgNV BAMTKEFCQzhDM0I2RkFEQjY2NkQ2NzFFMTg0NkNERTU0QUJFRTAzRjAzREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEbnwVK4TB5tcA/gQVs8R2CSK 9eav8LYV31vJpIdVq6PcBXFvSGkDbyEcdTBl65sboG8tFteQ5P5aMzAwy1cFkj1W 1WX8/QmuUfZL8PJOSYGrWWkkSshNU1hJEYUTvDsExjqCsqZz8E3IPyOUoEVRTftr okBtx5cey5KGaHfmNHfVpt1Mb6jEo0juQNBahnQU6dVFqF5FhvSYWVQ8kNZYJS2L zfa4M7kdfRMw3YvW8CWYeWjKmNzNMYKa/GCY/7uN9W0cUm66u6Qij6aagr6TDYHF qCzko37Vp48x1ysY/OiKRqk6Bwvfq39k5BS0h6TKHgzZZDQt/VlI6xNoIaJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq8jDtvrbZm1nHhhGzeVKvuA/A90wHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8OfGLBuhEZvH1qnMJWkpZ+FSHvD00+85YQ DU1eglvLVkqDuO4nYpTeTnl+S1DjYhN1nq59c8RDUeBo6djqeeNwZan6muvGmYvk mTdpPjvVU9e90CZD2EwkyDFoLLCl2eG/xgQ4MjVjdT+xG98+RRH4MN/YuXGPghnK JcUWWvSf5IYdHeFfLOa0T7/fwY+bFVdhHsXSL04RRgAW4/EEGGX6TI71lxit4pSf lgR4a5wXrm+9H7V841BDHBpZ/vVDBfd5iZrSYsxHqcyJ8R+c7/IOxNLS7eDpzRy6 RTT5e44TlO6MZmb/DXxct50/OdEB6pmYqAmc8ZuFLkmhWQkH7pE= -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:44 2024 by rpki-client on console-fra.rpki-client.org