$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft File: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft (raw, json) Hash identifier: f4RDyJVe6kAOPlGKA+mzLKEhARML+Q2dT9BuUd+JfqU= Subject key identifier: 98:E3:B5:96:64:2F:D7:52:82:26:0C:E4:82:0F:10:16:42:F4:7E:48 Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 Certificate issuer: /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Certificate serial: 352AFDE46D33745313FD034F0A6AEDE0F2A9D464 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft Manifest number: 011A Signing time: Sun 24 Nov 2024 10:50:38 +0000 Manifest this update: Sun 24 Nov 2024 10:45:37 +0000 Manifest next update: Wed 27 Nov 2024 13:07:37 +0000 Files and hashes: 1: 70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl (hash: +58GQrQS3JCH8Q/803TFWSgY7RBzpeMv7d3YDbFgYyE=) 2: 3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (hash: Uv8tuYF/QTMtaVTPN9djdHPVFc+uhTVK2IKPoFXRjUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2a:fd:e4:6d:33:74:53:13:fd:03:4f:0a:6a:ed:e0:f2:a9:d4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4 Validity Not Before: Nov 24 10:45:37 2024 GMT Not After : Nov 27 13:07:37 2024 GMT Subject: CN=98E3B596642FD75282260CE4820F101642F47E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:26:f1:05:e1:5b:bc:21:5f:d8:7b:25:c4: 3b:82:36:7b:f1:7e:fe:2f:b0:d7:72:ea:80:f0:2d: 80:42:81:61:51:fe:d9:e7:05:e8:2a:60:e5:1a:7a: 34:ac:cf:bd:3f:77:3a:36:d9:2b:82:4c:d8:89:10: 23:54:6d:e1:70:f1:9f:66:2f:4d:2c:06:fd:dc:81: ed:da:37:82:46:38:89:bb:0e:87:08:b0:bd:51:46: df:27:89:9e:24:dd:0f:74:84:85:90:a7:dc:c6:1a: ca:29:f8:02:75:6a:06:03:5d:9c:85:86:d3:ce:14: 29:90:38:8d:db:fa:92:dd:64:47:e5:e8:42:43:e5: 27:5b:d0:31:34:35:9c:9c:1b:33:ed:62:0d:f6:8f: 16:b6:e1:b6:2f:79:ac:a1:6f:c8:37:85:a8:b2:64: ff:4e:ba:3f:7e:f9:f0:cf:96:2a:6d:c0:77:c4:4f: b0:01:0a:9d:93:b0:17:31:82:69:f0:7f:0a:af:0f: b9:23:29:11:c7:08:61:eb:04:83:bf:bb:63:17:90: a7:41:18:b6:22:fa:69:b1:eb:91:5e:8a:18:2d:a7: 3f:16:ad:1c:7f:ab:40:47:aa:75:f2:1c:03:2d:f2: 01:1f:5c:1a:17:b6:36:6d:0b:67:cb:26:08:b6:ef: 80:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E3:B5:96:64:2F:D7:52:82:26:0C:E4:82:0F:10:16:42:F4:7E:48 X509v3 Authority Key Identifier: keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:40:ee:03:5a:95:e6:77:51:39:c4:3e:bd:24:35:f8:96:fd: fb:9e:96:9d:ed:66:6a:c9:c4:da:41:11:a5:44:44:4a:ec:53: c0:4d:e1:c9:f7:4f:2e:c3:a4:85:02:33:d9:4c:ee:46:5d:d5: 80:12:14:0f:0e:b2:8f:18:8c:aa:12:9c:70:e3:ef:e7:00:f4: f4:7b:40:cf:75:4d:ba:70:ea:89:e6:63:d5:c3:5e:d9:a6:08: d5:19:64:31:8c:d4:b8:66:fa:fa:46:da:30:bc:f4:f3:2b:c3: f5:be:e8:2e:d8:69:73:40:4c:fd:3c:b9:93:3f:c4:b6:3b:13: b3:5d:2b:56:69:74:6a:8d:ea:40:64:74:d4:23:fd:08:97:82: 75:5d:9d:cf:46:f0:c7:47:3c:d9:ec:32:08:a5:80:51:7d:30: 30:83:ad:76:d6:ad:ba:e0:3f:a7:8c:6f:31:f9:31:de:a1:06: 05:ad:18:61:b7:4f:73:a0:3a:dd:c9:25:86:a2:f0:4e:31:49: 61:a8:5c:8f:da:b9:ab:2d:ec:49:ae:9a:26:3f:e6:07:49:19: 87:ae:7a:98:69:81:73:2d:20:62:6e:95:04:af:84:c0:aa:d1: 70:a4:4f:48:f1:83:93:1e:f5:59:53:8e:6e:9d:d4:56:c6:bb: 45:d4:ac:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNSr95G0zdFMT/QNPCmrt4PKp1GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2 OThCRERENDAeFw0yNDExMjQxMDQ1MzdaFw0yNDExMjcxMzA3MzdaMDMxMTAvBgNV BAMTKDk4RTNCNTk2NjQyRkQ3NTI4MjI2MENFNDgyMEYxMDE2NDJGNDdFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+VSbxBeFbvCFf2HslxDuCNnvx fv4vsNdy6oDwLYBCgWFR/tnnBegqYOUaejSsz70/dzo22SuCTNiJECNUbeFw8Z9m L00sBv3cge3aN4JGOIm7DocIsL1RRt8niZ4k3Q90hIWQp9zGGsop+AJ1agYDXZyF htPOFCmQOI3b+pLdZEfl6EJD5Sdb0DE0NZycGzPtYg32jxa24bYveayhb8g3haiy ZP9Ouj9++fDPliptwHfET7ABCp2TsBcxgmnwfwqvD7kjKRHHCGHrBIO/u2MXkKdB GLYi+mmx65Feihgtpz8WrRx/q0BHqnXyHAMt8gEfXBoXtjZtC2fLJgi274AtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmOO1lmQv11KCJgzkgg8QFkL0fkgwHwYDVR0j BBgwFoAUcMxxnfWHbb2S1B9a8DWeOmmL3dQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkMWQyZC03MzY0LTQ4MWItOTc4ZS0wYTg1NGE5Y2ZmNGYvMC83MENDNzE5REY1 ODc2REJEOTJENDFGNUFGMDM1OUUzQTY5OEJEREQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlFM0E2OThC RERENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDFkMmQtNzM2NC00ODFiLTk3 OGUtMGE4NTRhOWNmZjRmLzAvNzBDQzcxOURGNTg3NkRCRDkyRDQxRjVBRjAzNTlF M0E2OThCRERENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdA7gNaleZ3UTnEPr0kNfiW/fuelp3tZmrJ xNpBEaVERErsU8BN4cn3Ty7DpIUCM9lM7kZd1YASFA8Oso8YjKoSnHDj7+cA9PR7 QM91Tbpw6onmY9XDXtmmCNUZZDGM1Lhm+vpG2jC89PMrw/W+6C7YaXNATP08uZM/ xLY7E7NdK1ZpdGqN6kBkdNQj/QiXgnVdnc9G8MdHPNnsMgilgFF9MDCDrXbWrbrg P6eMbzH5Md6hBgWtGGG3T3OgOt3JJYai8E4xSWGoXI/auast7EmumiY/5gdJGYeu ephpgXMtIGJulQSvhMCq0XCkT0jxg5Me9VlTjm6d1FbGu0XUrPg= -----END CERTIFICATE-----Generated at Sun Nov 24 11:34:09 2024 by rpki-client on console-fra.rpki-client.org