$ rpki-client -vvf repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft File: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft (raw, json) Hash identifier: T/9EsE4TUOOQjndoQyTpkdQPsdLdZEQXjljl5I1lk7k= Subject key identifier: FB:6E:AD:2C:8F:03:FE:4A:C2:79:38:D4:D1:E2:D7:59:28:0F:85:2F Authority key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D Certificate issuer: /CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Certificate serial: 6D9C5AABB885A20A6AAC025C88A85BB06569B6B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft Manifest number: 0175 Signing time: Fri 22 Nov 2024 11:11:27 +0000 Manifest this update: Fri 22 Nov 2024 11:06:27 +0000 Manifest next update: Mon 25 Nov 2024 20:39:27 +0000 Files and hashes: 1: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl (hash: gI1YiWSmpyNNSPEReN4g4D7GqItcNOEPygAFlVulqlo=) 2: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (hash: yNuk/WaxNIr8hCitKM0Fj2fYpqSLEg7Ounb0durD57g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:9c:5a:ab:b8:85:a2:0a:6a:ac:02:5c:88:a8:5b:b0:65:69:b6:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Validity Not Before: Nov 22 11:06:27 2024 GMT Not After : Nov 25 20:39:27 2024 GMT Subject: CN=FB6EAD2C8F03FE4AC27938D4D1E2D759280F852F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:0d:94:d2:a2:5c:0e:d8:7f:52:38:35:68: 9f:8f:de:14:54:33:1f:89:d0:1c:82:92:57:78:fe: 1d:e4:53:97:8e:cb:43:9c:21:66:5d:de:f5:38:97: 74:47:4f:aa:68:08:74:e1:df:7f:c6:6e:86:d0:96: de:10:4f:77:e9:a4:a1:25:d6:28:a2:4c:7a:e7:38: 97:9a:e3:68:89:47:09:b7:b6:b0:ae:55:bd:17:ba: 7f:e2:ef:e9:24:db:48:2b:ae:61:0d:4a:77:1f:06: 66:55:72:38:cb:a6:a1:0e:5a:4d:f5:e6:70:d8:76: 2e:83:98:bc:6b:b2:bf:20:7e:c8:a7:26:a6:20:1c: fd:45:a6:de:d4:4d:ef:6d:7b:5f:df:1c:f4:d1:96: a9:af:c8:79:06:d0:90:a0:0a:ba:37:43:b9:c2:52: f3:e4:79:d7:72:c8:98:0b:41:68:a2:1f:61:c8:58: a8:ab:eb:d2:ab:30:19:39:cc:d3:a5:d1:d2:85:2e: 07:82:5a:ed:69:d7:a9:5f:39:ba:d5:fb:41:b6:3f: 3f:83:85:7c:c1:a2:d0:4e:ce:15:13:aa:dc:2f:5c: 39:e3:07:00:2b:4b:40:f2:67:03:1a:65:81:5c:63: 80:72:d6:f2:d6:f1:47:03:70:29:c0:22:4f:83:22: 5f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6E:AD:2C:8F:03:FE:4A:C2:79:38:D4:D1:E2:D7:59:28:0F:85:2F X509v3 Authority Key Identifier: keyid:40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:6c:92:35:3e:4f:27:cf:76:14:62:21:c0:d3:d3:47:ca:15: ab:6a:85:89:a3:34:a3:ec:9d:b4:49:19:d5:ed:98:60:0d:6d: 89:c9:b7:8b:07:88:20:9f:65:b9:cf:55:d6:13:48:16:a7:e2: 61:3c:51:bf:f4:b1:cf:c8:e6:06:14:cb:7f:55:52:e0:24:fa: 24:d8:59:9b:31:0a:79:b8:3e:3c:67:77:3e:ab:43:a1:46:82: 44:72:ed:27:c6:9c:9b:e8:40:6f:65:46:0c:be:2b:c6:0f:15: a8:30:1b:e5:0d:66:de:38:53:5f:7a:f2:3a:66:dc:95:e1:11: 67:e7:81:12:ca:fe:48:a0:0f:11:8a:5e:02:09:0c:4e:5c:5f: ca:8e:f8:c4:76:e0:5d:ec:c4:8f:45:bd:57:0d:e5:5b:79:94: 39:56:25:5c:6f:46:d7:d0:90:29:22:6c:2f:96:f9:52:cb:bd: af:7f:e5:d1:27:17:c8:9c:c0:27:26:9b:0d:23:33:72:7b:8d: 55:b7:d9:80:65:16:f8:4f:de:0f:21:98:6d:ab:50:dc:02:0b: 6b:a4:1a:18:35:84:b6:f9:b3:fc:ec:ab:8b:f3:12:f5:df:98: 09:09:d0:70:cd:1e:38:9f:ac:56:c0:6a:f2:1f:b6:69:3f:a1: bd:4f:d4:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZxaq7iFogpqrAJciKhbsGVptrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5 MTVBQzc2RDAeFw0yNDExMjIxMTA2MjdaFw0yNDExMjUyMDM5MjdaMDMxMTAvBgNV BAMTKEZCNkVBRDJDOEYwM0ZFNEFDMjc5MzhENEQxRTJENzU5MjgwRjg1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoAQ2U0qJcDth/Ujg1aJ+P3hRU Mx+J0ByCkld4/h3kU5eOy0OcIWZd3vU4l3RHT6poCHTh33/GbobQlt4QT3fppKEl 1iiiTHrnOJea42iJRwm3trCuVb0Xun/i7+kk20grrmENSncfBmZVcjjLpqEOWk31 5nDYdi6DmLxrsr8gfsinJqYgHP1Fpt7UTe9te1/fHPTRlqmvyHkG0JCgCro3Q7nC UvPkeddyyJgLQWiiH2HIWKir69KrMBk5zNOl0dKFLgeCWu1p16lfObrV+0G2Pz+D hXzBotBOzhUTqtwvXDnjBwArS0DyZwMaZYFcY4By1vLW8UcDcCnAIk+DIl/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+26tLI8D/krCeTjU0eLXWSgPhS8wHwYDVR0j BBgwFoAUQHBqXM+olsjuDB+aW23NoZFax20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGY0Mjk2Zi0xY2E5LTQ1ZmMtYmIwOC04NDEzNWViMDBmYTcvMC80MDcwNkE1Q0NG QTg5NkM4RUUwQzFGOUE1QjZEQ0RBMTkxNUFDNzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5MTVB Qzc2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRmNDI5NmYtMWNhOS00NWZjLWJi MDgtODQxMzVlYjAwZmE3LzAvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENE QTE5MTVBQzc2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhskjU+TyfPdhRiIcDT00fKFatqhYmjNKPs nbRJGdXtmGANbYnJt4sHiCCfZbnPVdYTSBan4mE8Ub/0sc/I5gYUy39VUuAk+iTY WZsxCnm4Pjxndz6rQ6FGgkRy7SfGnJvoQG9lRgy+K8YPFagwG+UNZt44U1968jpm 3JXhEWfngRLK/kigDxGKXgIJDE5cX8qO+MR24F3sxI9FvVcN5Vt5lDlWJVxvRtfQ kCkibC+W+VLLva9/5dEnF8icwCcmmw0jM3J7jVW32YBlFvhP3g8hmG2rUNwCC2uk Ghg1hLb5s/zsq4vzEvXfmAkJ0HDNHjifrFbAavIftmk/ob1P1Ec= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org