$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: +bByrf/97SHYa+cWew8brRvnpZqQFbeFtBGwlc+G/QQ= Subject key identifier: D1:EA:67:2E:DC:9D:4D:F1:C0:33:CF:BC:82:07:2D:0B:B7:A8:AF:7B Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 641B0447C644F48AC4DE39DC54A4A574BF6E63BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: 37 Signing time: Thu 21 Nov 2024 10:50:00 +0000 Manifest this update: Thu 21 Nov 2024 10:45:00 +0000 Manifest next update: Sun 24 Nov 2024 18:35:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: nFSJyk/cf6ukN/6/fl6Db1J8OF39c0s66WC2QlYtNqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:1b:04:47:c6:44:f4:8a:c4:de:39:dc:54:a4:a5:74:bf:6e:63:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Nov 21 10:45:00 2024 GMT Not After : Nov 24 18:35:00 2024 GMT Subject: CN=D1EA672EDC9D4DF1C033CFBC82072D0BB7A8AF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:2b:53:6a:3b:4c:3e:c4:9e:c2:63:8c:92: 86:74:4a:00:9b:58:a1:a3:94:a4:2f:50:39:ef:4f: 6c:9b:23:c3:13:39:81:f4:6e:04:5f:b4:51:d7:53: 82:76:8c:e1:16:f7:1b:37:97:76:73:16:24:42:b4: 15:ed:9a:9f:2c:9d:a2:5a:21:12:0d:5f:ff:72:b0: ed:7b:81:fd:90:c5:a9:3a:2d:b0:6d:b2:48:68:19: ef:d3:0f:d4:94:85:04:02:39:e8:55:34:82:97:e8: 86:b7:21:19:50:07:de:26:5a:a0:6a:d8:d1:f1:82: 7d:28:54:3a:3a:f1:f5:9b:b5:39:e4:11:e3:c0:4b: 18:b5:e2:bf:42:62:a7:eb:2f:33:39:17:9f:f9:88: 30:94:7a:c3:d2:0b:d7:4f:f2:bf:06:98:c6:52:70: 5d:60:58:34:2a:62:49:b2:bd:2c:27:4e:0a:0e:60: 89:01:76:78:41:30:32:0a:a2:d0:1e:23:58:b0:e7: c1:26:47:38:91:aa:20:26:d0:f0:61:81:51:09:87: 9c:8d:cc:fe:dc:46:13:6b:7c:7a:b1:86:10:df:1f: a4:2c:7b:57:09:17:5b:55:20:ee:05:6d:26:7e:48: 75:e6:24:d9:28:71:72:6a:7a:24:3d:31:cd:8a:44: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EA:67:2E:DC:9D:4D:F1:C0:33:CF:BC:82:07:2D:0B:B7:A8:AF:7B X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9d:83:22:ce:2b:8e:89:9e:ef:26:ee:c3:0b:dc:8a:e9:d7: b5:1c:21:2a:9a:e6:53:51:4d:e5:23:26:29:e8:75:15:30:ee: 3f:6d:10:8c:2f:c7:a1:e0:4a:95:55:7b:b0:38:db:b9:11:26: b9:d3:5a:e5:fc:1f:6a:f9:e6:14:82:4b:f2:fc:03:45:c4:1a: 50:01:5c:d6:7e:f5:72:d1:42:04:e1:00:e5:67:48:9a:34:ba: 68:26:ea:47:b1:e4:1f:07:a8:f7:7f:33:e0:7d:66:d6:d0:cd: 0a:f5:58:1b:81:8e:f4:81:10:35:e4:e2:d3:94:4f:e6:2a:4e: dc:bd:52:ae:70:d3:70:e6:9f:81:c0:a6:e7:93:b2:a1:ca:e1: b6:0a:63:c6:5c:c3:80:11:e7:3f:41:b1:96:6a:d7:d7:5f:fe: 76:fd:50:66:ed:36:cc:b2:34:60:57:39:a2:80:cb:08:46:65: 3c:e5:43:de:e3:3a:56:8e:26:db:e3:3b:24:be:ec:78:33:e2: 42:4d:4f:39:08:6e:4c:31:d0:36:9c:31:87:bf:19:f5:f0:2e: b9:10:72:cc:7c:04:10:e9:e9:6b:90:59:74:ee:21:15:0b:5b: aa:54:c2:da:94:04:b3:67:17:d8:78:77:1b:b6:0d:50:67:c3: 06:2d:d0:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZBsER8ZE9IrE3jncVKSldL9uY70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNDExMjExMDQ1MDBaFw0yNDExMjQxODM1MDBaMDMxMTAvBgNV BAMTKEQxRUE2NzJFREM5RDRERjFDMDMzQ0ZCQzgyMDcyRDBCQjdBOEFGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPitTajtMPsSewmOMkoZ0SgCb WKGjlKQvUDnvT2ybI8MTOYH0bgRftFHXU4J2jOEW9xs3l3ZzFiRCtBXtmp8snaJa IRINX/9ysO17gf2Qxak6LbBtskhoGe/TD9SUhQQCOehVNIKX6Ia3IRlQB94mWqBq 2NHxgn0oVDo68fWbtTnkEePASxi14r9CYqfrLzM5F5/5iDCUesPSC9dP8r8GmMZS cF1gWDQqYkmyvSwnTgoOYIkBdnhBMDIKotAeI1iw58EmRziRqiAm0PBhgVEJh5yN zP7cRhNrfHqxhhDfH6Qse1cJF1tVIO4FbSZ+SHXmJNkocXJqeiQ9Mc2KRBMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0epnLtydTfHAM8+8ggctC7eor3swHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6dgyLOK46Jnu8m7sML3Irp17UcISqa5lNR TeUjJinodRUw7j9tEIwvx6HgSpVVe7A427kRJrnTWuX8H2r55hSCS/L8A0XEGlAB XNZ+9XLRQgThAOVnSJo0umgm6kex5B8HqPd/M+B9ZtbQzQr1WBuBjvSBEDXk4tOU T+YqTty9Uq5w03Dmn4HApueTsqHK4bYKY8Zcw4AR5z9BsZZq19df/nb9UGbtNsyy NGBXOaKAywhGZTzlQ97jOlaOJtvjOyS+7Hgz4kJNTzkIbkwx0DacMYe/GfXwLrkQ csx8BBDp6WuQWXTuIRULW6pUwtqUBLNnF9h4dxu2DVBnwwYt0F0= -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org