$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: YJdb9tyfzjl6GQ4roI8BN3ZKJ17p83KD70Xu8o77xeM= Subject key identifier: 4B:17:69:17:05:0F:76:B2:F3:40:6A:19:5B:E5:B0:C7:3F:D1:95:52 Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 2BB751EDDED4495808C3EA94F2353E95903A4CC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 01A5 Signing time: Fri 22 Nov 2024 12:30:53 +0000 Manifest this update: Fri 22 Nov 2024 12:25:53 +0000 Manifest next update: Mon 25 Nov 2024 17:12:53 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: 4LAzDiRDRN8hnhFmtCIGdYAdFXOwR1Cq1hyUSsUPEy0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 17:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b7:51:ed:de:d4:49:58:08:c3:ea:94:f2:35:3e:95:90:3a:4c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Nov 22 12:25:53 2024 GMT Not After : Nov 25 17:12:53 2024 GMT Subject: CN=4B176917050F76B2F3406A195BE5B0C73FD19552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e3:bd:e4:87:08:19:03:42:8e:27:4e:41:0f: b0:68:aa:e6:26:85:97:e0:b9:48:86:9e:e3:a1:e1: b6:d3:d5:9e:5e:87:24:bb:ff:20:a3:f9:d2:14:9a: 60:43:5a:21:1f:35:82:47:9a:a3:9c:5a:d2:e9:8e: 12:aa:81:89:a2:54:f8:00:65:54:35:de:d7:97:65: 6f:f5:22:32:28:d1:6c:3d:26:c5:2f:36:0f:9f:ea: 7c:4e:ac:de:6a:c5:7d:0d:34:93:74:ad:19:a9:95: db:c6:3a:50:8c:86:66:e6:1b:70:92:db:ac:2a:f6: 1a:e2:7d:de:89:a2:3c:c3:59:74:e5:af:a8:7b:1a: 36:8a:2e:7c:10:94:cc:6f:76:32:0e:5d:ea:39:91: 41:44:94:f2:d3:1b:b8:03:76:f9:6d:01:79:0d:d4: af:f5:57:55:90:e4:7f:d3:d9:a9:71:41:20:f9:8b: af:e7:dd:7b:b8:35:99:52:af:a7:ee:f1:fe:de:aa: 98:58:e7:70:41:64:7f:b4:4e:95:39:47:de:9c:87: 30:c6:15:c8:d8:67:00:22:63:e3:03:7f:3c:c6:17: 59:e8:d8:ad:6e:79:fb:06:46:2b:bf:67:db:d9:ed: 4b:77:a3:5c:1d:82:ea:ac:b4:a9:53:d4:a1:63:63: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:17:69:17:05:0F:76:B2:F3:40:6A:19:5B:E5:B0:C7:3F:D1:95:52 X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:69:e1:3c:f3:a2:9f:00:4e:39:6e:08:bd:46:cd:74:21:ca: b2:46:db:1d:44:ca:af:a1:31:25:1e:fb:5b:8c:71:9f:07:06: 2a:f2:ab:33:53:b7:83:f6:a3:39:55:75:ac:60:02:0e:b0:53: 2f:b2:b6:89:7e:df:6e:85:bf:d8:0b:76:af:a5:c5:69:db:ae: 68:9a:de:b7:33:d5:1a:f3:a4:67:4f:8d:bc:ba:f2:b4:4f:ee: b1:2c:c5:cc:a7:fb:58:3f:38:cb:b5:e3:bc:f6:5b:72:8f:bf: a1:1a:f7:cd:a8:1e:9f:83:10:5c:c9:03:13:48:e8:50:5f:3e: d5:b1:4c:2d:0b:9b:74:9f:ce:97:64:82:68:52:a0:93:cb:16: b9:a8:e1:07:7f:b6:bb:1d:29:e5:9e:72:f9:19:61:e6:3f:fb: e9:ca:fb:b3:05:a0:d0:b0:7f:2d:8d:04:15:d2:9a:98:3a:d3: 0d:58:44:a5:b3:2c:84:23:8f:6c:be:b2:d0:be:1f:c7:b8:af: 33:2e:b8:fc:fc:e9:47:e6:04:5a:64:74:e6:90:1e:e9:a9:e5: 89:54:34:ec:ee:d0:ea:4d:e9:22:c7:5a:50:55:72:34:d5:32: af:ad:de:fb:be:29:ab:e4:97:f5:6b:92:bf:52:52:d8:4d:35: 00:f5:fd:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7dR7d7USVgIw+qU8jU+lZA6TMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNDExMjIxMjI1NTNaFw0yNDExMjUxNzEyNTNaMDMxMTAvBgNV BAMTKDRCMTc2OTE3MDUwRjc2QjJGMzQwNkExOTVCRTVCMEM3M0ZEMTk1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY473khwgZA0KOJ05BD7BoquYm hZfguUiGnuOh4bbT1Z5ehyS7/yCj+dIUmmBDWiEfNYJHmqOcWtLpjhKqgYmiVPgA ZVQ13teXZW/1IjIo0Ww9JsUvNg+f6nxOrN5qxX0NNJN0rRmpldvGOlCMhmbmG3CS 26wq9hrifd6JojzDWXTlr6h7GjaKLnwQlMxvdjIOXeo5kUFElPLTG7gDdvltAXkN 1K/1V1WQ5H/T2alxQSD5i6/n3Xu4NZlSr6fu8f7eqphY53BBZH+0TpU5R96chzDG FcjYZwAiY+MDfzzGF1no2K1uefsGRiu/Z9vZ7Ut3o1wdguqstKlT1KFjY2NfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSxdpFwUPdrLzQGoZW+Wwxz/RlVIwHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBp4Tzzop8ATjluCL1GzXQhyrJG2x1Eyq+h MSUe+1uMcZ8HBiryqzNTt4P2ozlVdaxgAg6wUy+ytol+326Fv9gLdq+lxWnbrmia 3rcz1RrzpGdPjby68rRP7rEsxcyn+1g/OMu147z2W3KPv6Ea982oHp+DEFzJAxNI 6FBfPtWxTC0Lm3SfzpdkgmhSoJPLFrmo4Qd/trsdKeWecvkZYeY/++nK+7MFoNCw fy2NBBXSmpg60w1YRKWzLIQjj2y+stC+H8e4rzMuuPz86UfmBFpkdOaQHump5YlU NOzu0OpN6SLHWlBVcjTVMq+t3vu+Kavkl/Vrkr9SUthNNQD1/YU= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org