$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json) Hash identifier: QXq2ek5GajrDD8VuwXpF37VoF14Roz7Im0GkZn8ZZPg= Subject key identifier: D1:CC:38:50:01:EF:B8:EE:4E:05:B9:D5:B9:D1:97:5E:FF:FE:9E:E8 Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Certificate serial: 61E70D931F5D44C731D273293534AF49A576EBAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft Manifest number: 33 Signing time: Mon 25 Nov 2024 17:01:19 +0000 Manifest this update: Mon 25 Nov 2024 16:56:19 +0000 Manifest next update: Fri 29 Nov 2024 03:53:19 +0000 Files and hashes: 1: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: jZklnESe0mOQ8TZ/CW8UXM+wARSc5lyRR0R/nz95/ps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e7:0d:93:1f:5d:44:c7:31:d2:73:29:35:34:af:49:a5:76:eb:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Validity Not Before: Nov 25 16:56:19 2024 GMT Not After : Nov 29 03:53:19 2024 GMT Subject: CN=D1CC385001EFB8EE4E05B9D5B9D1975EFFFE9EE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:81:29:05:b3:ce:89:ec:de:46:ff:b6:ab: 09:bb:4d:ed:1d:18:04:30:2b:c7:eb:c7:b4:9e:bf: e6:02:bc:a2:6b:cf:9d:bf:2e:8d:d5:b5:7c:38:94: 96:f2:14:61:76:a0:63:76:ef:96:9b:64:14:e9:39: 69:6f:f8:3f:22:53:75:c3:58:25:dd:b4:b1:de:0d: 06:2f:b5:2b:38:cd:c8:e0:56:a3:e5:19:e2:70:31: 0c:07:23:12:52:c3:a2:40:62:a5:c6:d7:f9:ea:4b: eb:6c:b6:a0:88:9d:a2:cb:c7:92:f6:b3:b2:8b:4c: c8:f3:62:45:85:1e:09:f9:08:ea:73:46:fd:68:0d: d7:18:2e:b9:4e:5b:ac:4c:ea:a2:2b:7f:c7:ae:bf: ff:ef:2d:d7:ab:33:8c:05:d8:b5:d9:bf:5f:54:51: 14:62:31:04:f8:34:4e:fb:b2:10:b9:5f:25:ec:30: d3:4e:8c:61:da:ec:de:02:ca:0f:19:15:60:05:ce: c5:18:09:7a:3f:15:76:15:73:f6:7d:7d:06:9c:bb: 1a:cb:d2:5b:8b:4e:95:ed:f6:e7:cc:4d:c1:b8:12: 66:6b:89:2c:8f:de:41:58:4d:6b:03:bd:1e:b9:e8: 7d:3e:28:d3:bf:30:59:86:6e:a6:a0:05:b3:f9:47: c2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CC:38:50:01:EF:B8:EE:4E:05:B9:D5:B9:D1:97:5E:FF:FE:9E:E8 X509v3 Authority Key Identifier: keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a8:d6:31:37:73:1d:8e:b1:2c:98:e5:fa:98:66:e4:6a:89: cc:60:bf:5f:4c:66:f3:7d:1e:24:0d:7c:da:e7:dc:17:6d:af: 37:e6:de:cc:4d:35:4a:18:ba:b3:c9:81:3e:4b:10:da:43:25: 8a:8f:67:b4:e1:b9:e5:0b:39:f1:ab:b9:02:13:c7:13:e4:86: 55:68:98:af:c4:08:a3:79:82:d7:89:7a:c6:7d:a2:67:e3:b4: 92:ff:51:8c:5d:b3:14:f8:df:af:c5:77:70:b6:41:ea:9d:58: 35:0c:08:ac:14:20:0d:7f:d9:6a:32:b3:f2:36:65:e3:e7:81: 87:13:57:b4:63:ad:8b:1f:f5:6b:5f:14:c1:a0:da:6c:9a:62: dc:44:5c:a8:97:b5:0a:23:c2:6e:30:63:98:17:ed:3a:ac:87: 16:f6:e6:95:99:4d:fd:57:76:cb:5d:37:a6:42:54:07:3b:c0: 12:5d:91:4f:09:a0:75:48:ed:03:7e:87:87:4e:90:ef:ea:de: 94:50:a8:fa:f9:5c:a9:0c:b9:0c:e6:c3:b3:56:fc:6a:a8:d3: 69:7f:c3:c0:a0:6f:a4:10:04:44:f1:59:ed:1f:05:99:ab:1b: 53:f9:ee:55:24:c3:d4:67:79:14:51:73:16:4e:8c:e7:24:b8: e0:f6:c3:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYecNkx9dRMcx0nMpNTSvSaV266wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMy ODVCMDFBMjAeFw0yNDExMjUxNjU2MTlaFw0yNDExMjkwMzUzMTlaMDMxMTAvBgNV BAMTKEQxQ0MzODUwMDFFRkI4RUU0RTA1QjlENUI5RDE5NzVFRkZGRTlFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YIEpBbPOiezeRv+2qwm7Te0d GAQwK8frx7Sev+YCvKJrz52/Lo3VtXw4lJbyFGF2oGN275abZBTpOWlv+D8iU3XD WCXdtLHeDQYvtSs4zcjgVqPlGeJwMQwHIxJSw6JAYqXG1/nqS+tstqCInaLLx5L2 s7KLTMjzYkWFHgn5COpzRv1oDdcYLrlOW6xM6qIrf8euv//vLderM4wF2LXZv19U URRiMQT4NE77shC5XyXsMNNOjGHa7N4Cyg8ZFWAFzsUYCXo/FXYVc/Z9fQacuxrL 0luLTpXt9ufMTcG4EmZriSyP3kFYTWsDvR656H0+KNO/MFmGbqagBbP5R8LlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cw4UAHvuO5OBbnVudGXXv/+nugwHwYDVR0j BBgwFoAU50ojRpKd6EFD5d8N2SF2TChbAaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2RlNTAzNS04NGUxLTQ0YzYtOWNmOS00ZWEwYmJhYTA5M2YvMC9FNzRBMjM0Njky OURFODQxNDNFNURGMEREOTIxNzY0QzI4NUIwMUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMyODVC MDFBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj ZjktNGVhMGJiYWEwOTNmLzAvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2 NEMyODVCMDFBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuo1jE3cx2OsSyY5fqYZuRqicxgv19MZvN9 HiQNfNrn3Bdtrzfm3sxNNUoYurPJgT5LENpDJYqPZ7ThueULOfGruQITxxPkhlVo mK/ECKN5gteJesZ9omfjtJL/UYxdsxT436/Fd3C2QeqdWDUMCKwUIA1/2Woys/I2 ZePngYcTV7RjrYsf9WtfFMGg2myaYtxEXKiXtQojwm4wY5gX7Tqshxb25pWZTf1X dstdN6ZCVAc7wBJdkU8JoHVI7QN+h4dOkO/q3pRQqPr5XKkMuQzmw7NW/Gqo02l/ w8Cgb6QQBETxWe0fBZmrG1P57lUkw9RneRRRcxZOjOckuOD2w8w= -----END CERTIFICATE-----Generated at Mon Nov 25 18:43:02 2024 by rpki-client on console-ams.rpki-client.org