$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: sfHZnPIbroh64ZhHpiaCWOFoMl5nsn2Szbj5RKQq780= Subject key identifier: 4F:6B:71:D5:60:34:E5:09:4A:FC:D0:98:F3:F7:07:6E:8B:71:9B:49 Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 0CBCC22006DDEDB8FB118802F1921E8CB0FAA781 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 0137 Signing time: Sun 24 Nov 2024 03:41:03 +0000 Manifest this update: Sun 24 Nov 2024 03:36:03 +0000 Manifest next update: Wed 27 Nov 2024 06:44:03 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: CfIw0vH6u499U4Hj1luVWh17pJZ4mGfkbnSNPy1I8uU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:bc:c2:20:06:dd:ed:b8:fb:11:88:02:f1:92:1e:8c:b0:fa:a7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Nov 24 03:36:03 2024 GMT Not After : Nov 27 06:44:03 2024 GMT Subject: CN=4F6B71D56034E5094AFCD098F3F7076E8B719B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2f:4d:c5:b7:41:29:0f:1f:c5:95:c1:63:a7: 0d:2f:c9:77:1b:8f:d0:e9:ff:97:3b:a9:fe:22:e0: 08:7d:24:98:11:3e:29:a6:fa:9d:15:c0:fe:0e:c6: 9e:22:99:6b:3c:5e:07:cd:bf:91:a4:cd:64:b9:c9: 7f:fd:e1:c0:55:fc:47:7d:38:5a:84:18:9c:3e:5b: fa:d6:ec:bf:49:38:39:bc:8c:05:8d:60:10:1c:37: d1:bc:5f:57:cc:50:66:44:07:f0:8b:dd:bf:60:a8: fa:dc:83:d4:42:15:93:77:75:42:83:be:61:31:8a: 7c:96:f5:f0:bb:25:a5:00:83:b3:03:32:d8:69:ec: 77:f3:7b:f7:16:c5:21:8c:a8:83:0f:6d:35:65:2f: a2:df:2b:7c:72:55:4e:93:4e:e5:cd:ca:9f:e9:d4: 4f:b2:89:53:d0:92:18:cc:da:71:5b:53:75:8c:b4: 35:7f:75:a8:4d:a5:0e:c7:b9:51:79:b3:b7:4c:a1: 9a:07:f3:b8:d0:95:3f:46:e0:69:88:70:94:79:e3: f2:78:c3:46:17:dd:76:b4:21:60:69:f8:dd:fb:8d: 84:ca:42:87:07:23:6e:76:2e:b9:df:f1:2f:71:d2: e8:cc:1d:58:65:a0:d0:1d:50:72:4d:78:4f:f7:1a: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6B:71:D5:60:34:E5:09:4A:FC:D0:98:F3:F7:07:6E:8B:71:9B:49 X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3e:d2:d7:e4:d5:c3:00:4e:ae:73:45:88:3e:2b:b7:e2:67: a8:19:8f:e2:00:58:5d:d9:ca:4b:67:8c:83:bb:6f:35:6d:e7: eb:6a:4d:65:f8:bd:63:72:04:82:82:d1:74:fa:4d:5a:52:78: ec:67:a9:ea:3a:e1:13:e6:96:bd:99:4a:bd:8d:76:17:e4:e4: ee:20:f2:21:3b:5d:70:dd:ca:5b:99:06:ef:ea:1e:a3:58:7d: c0:2e:73:e1:01:4f:8a:76:d6:be:d5:17:be:6e:4d:0b:e5:99: 04:cd:05:70:55:0a:80:d6:db:6b:a4:12:65:bf:e9:5f:65:6b: f9:e4:08:52:5a:6c:63:53:bb:b8:59:c4:2d:d0:05:49:13:5c: a7:a9:b8:e6:ac:5b:78:6f:1a:8c:b0:d4:c6:6b:35:3c:84:7b: 09:c9:c7:35:81:18:5a:30:be:6c:ee:52:f2:11:fc:59:14:aa: 3f:92:65:06:f3:e7:4e:9b:90:cf:ea:48:3c:24:a7:d0:b0:59: 54:bd:25:0f:f9:a4:af:8c:33:b1:fa:d5:73:33:44:0e:ad:ca: a1:13:b4:26:e1:22:dc:cc:57:2c:04:59:a6:40:d1:92:06:1f: 42:9f:42:ca:fc:c3:78:51:a6:19:49:94:cd:99:16:30:d6:0c: 85:df:2e:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLzCIAbd7bj7EYgC8ZIejLD6p4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNDExMjQwMzM2MDNaFw0yNDExMjcwNjQ0MDNaMDMxMTAvBgNV BAMTKDRGNkI3MUQ1NjAzNEU1MDk0QUZDRDA5OEYzRjcwNzZFOEI3MTlCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYL03Ft0EpDx/FlcFjpw0vyXcb j9Dp/5c7qf4i4Ah9JJgRPimm+p0VwP4Oxp4imWs8XgfNv5GkzWS5yX/94cBV/Ed9 OFqEGJw+W/rW7L9JODm8jAWNYBAcN9G8X1fMUGZEB/CL3b9gqPrcg9RCFZN3dUKD vmExinyW9fC7JaUAg7MDMthp7Hfze/cWxSGMqIMPbTVlL6LfK3xyVU6TTuXNyp/p 1E+yiVPQkhjM2nFbU3WMtDV/dahNpQ7HuVF5s7dMoZoH87jQlT9G4GmIcJR54/J4 w0YX3Xa0IWBp+N37jYTKQocHI252Lrnf8S9x0ujMHVhloNAdUHJNeE/3GnHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT2tx1WA05QlK/NCY8/cHbotxm0kwHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8+0tfk1cMATq5zRYg+K7fiZ6gZj+IAWF3Z yktnjIO7bzVt5+tqTWX4vWNyBIKC0XT6TVpSeOxnqeo64RPmlr2ZSr2Ndhfk5O4g 8iE7XXDdyluZBu/qHqNYfcAuc+EBT4p21r7VF75uTQvlmQTNBXBVCoDW22ukEmW/ 6V9la/nkCFJabGNTu7hZxC3QBUkTXKepuOasW3hvGoyw1MZrNTyEewnJxzWBGFow vmzuUvIR/FkUqj+SZQbz506bkM/qSDwkp9CwWVS9JQ/5pK+MM7H61XMzRA6tyqET tCbhItzMVywEWaZA0ZIGH0KfQsr8w3hRphlJlM2ZFjDWDIXfLtM= -----END CERTIFICATE-----Generated at Sun Nov 24 04:28:51 2024 by rpki-client on console-fra.rpki-client.org