$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json) Hash identifier: Y9CTNM6kjLN2O9iEleOczPzzKVrTNtMSmMVKMFXB6YY= Subject key identifier: CA:AD:57:1D:7F:6D:C6:89:CB:97:B5:60:C7:9A:12:CA:29:2F:1D:9B Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Certificate serial: 14BF210C060FE228C9D02441EFFBE4341A5F0797 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft Manifest number: 0487 Signing time: Thu 21 Nov 2024 15:01:46 +0000 Manifest this update: Thu 21 Nov 2024 14:56:46 +0000 Manifest next update: Sun 24 Nov 2024 15:07:46 +0000 Files and hashes: 1: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: 9tfmdpyJgQVzPlm4LKgsTCpsRt0XAi3CQCXEDhkNviI=) 2: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: y++h1YJ1hOHYw7NDJcJEUKA4UZp+NRi8+3UP1/gBIDw=) 3: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: 03HkjmQzt/Ep8zy5D6Eve4fKrD/0G+PHtCK39LVJn98=) 4: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: SscI993Dt7eLqGBoQBX8oyNOZ7enmFzcIvZg0Fy4SGo=) 5: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: bdF6E4DcvPpxDd/LtTyxzLeFut4P47o94PgC5m5UXQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:bf:21:0c:06:0f:e2:28:c9:d0:24:41:ef:fb:e4:34:1a:5f:07:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8 Validity Not Before: Nov 21 14:56:46 2024 GMT Not After : Nov 24 15:07:46 2024 GMT Subject: CN=CAAD571D7F6DC689CB97B560C79A12CA292F1D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:7d:fa:a7:6b:a0:03:f3:4c:94:fb:c2:9f: 44:1b:fd:31:f8:eb:63:64:bb:dc:0f:eb:bd:9a:68: 4a:1c:2b:86:f8:dc:2b:8b:ed:dd:84:e5:35:62:0e: c2:67:4e:2f:83:47:07:a6:70:64:d2:2b:19:32:8c: 7c:60:ed:85:15:62:e1:91:7a:66:b0:07:d5:75:56: b7:d7:f3:42:3d:28:a4:4a:98:89:ef:0a:95:92:1e: 86:e9:c7:81:e8:d0:4e:3e:e8:af:f2:28:f9:cc:ef: 75:4d:50:7c:03:07:50:c1:3b:c2:90:b7:41:9a:b6: 5c:28:75:1a:c8:63:37:a4:56:17:e4:19:d2:c7:c7: 8a:c2:49:14:e8:ee:bd:45:e8:69:c7:40:34:b2:5d: da:53:33:77:cb:92:d5:c2:87:cb:25:bf:2f:72:26: af:1a:8c:59:45:e7:83:27:19:02:52:e6:4d:97:8b: 7c:bc:66:f8:fc:5e:f2:e5:f7:f8:29:99:fc:7b:32: 4a:bc:8b:de:cd:27:ae:26:cd:fa:db:d8:f0:34:76: f0:5d:20:be:a0:8f:3a:32:80:f4:a1:15:09:bb:f5: cd:b7:f7:f7:b7:69:f1:8f:a5:da:e9:bf:6c:da:01: 9a:27:bb:fd:de:b6:59:c4:21:a5:ef:64:cd:10:53: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AD:57:1D:7F:6D:C6:89:CB:97:B5:60:C7:9A:12:CA:29:2F:1D:9B X509v3 Authority Key Identifier: keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:85:f8:84:ba:d8:fb:c9:72:30:12:83:ed:98:db:dd:c6:7f: 37:07:c9:46:28:4e:bb:21:28:40:dc:13:31:a1:4a:65:f8:25: 94:5e:05:92:0e:65:02:60:f2:eb:c9:07:85:35:b6:24:e0:18: 05:3d:ee:0d:5b:2e:38:8e:56:2a:7a:48:63:ab:0f:05:8f:ef: f4:dc:2c:73:b3:51:4b:0e:24:98:05:1e:6a:a3:af:ea:76:8d: d3:b4:13:50:69:73:0c:af:0b:be:75:9e:37:42:bb:3f:77:5b: fa:f7:4c:33:6a:bb:a7:43:5a:9a:18:3b:d5:89:6c:1f:ad:47: a9:c3:97:30:c3:24:24:24:1e:cb:ec:09:22:ae:df:1e:b7:86: 97:f5:9c:06:6a:04:af:a3:9c:e1:c0:01:6c:bb:0f:13:6f:97: e6:4d:42:ea:26:b5:78:90:bf:e2:71:70:05:e7:66:0a:49:61: 75:fd:98:0a:2c:06:a3:4e:87:dc:34:9b:b5:22:a2:96:eb:c6: 7b:bc:f0:de:b7:c9:a9:10:a0:4b:38:cb:06:c3:80:ca:33:9e: 21:25:fc:d5:b8:ed:a2:44:96:9c:9a:7c:5d:5f:1e:92:77:f7: d9:22:99:33:01:a3:c5:f6:20:a2:fa:34:0e:cd:43:34:01:e3: 61:f8:fd:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFL8hDAYP4ijJ0CRB7/vkNBpfB5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3 NkQ1MUFDODAeFw0yNDExMjExNDU2NDZaFw0yNDExMjQxNTA3NDZaMDMxMTAvBgNV BAMTKENBQUQ1NzFEN0Y2REM2ODlDQjk3QjU2MEM3OUExMkNBMjkyRjFEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPn36p2ugA/NMlPvCn0Qb/TH4 62Nku9wP672aaEocK4b43CuL7d2E5TViDsJnTi+DRwemcGTSKxkyjHxg7YUVYuGR emawB9V1VrfX80I9KKRKmInvCpWSHobpx4Ho0E4+6K/yKPnM73VNUHwDB1DBO8KQ t0GatlwodRrIYzekVhfkGdLHx4rCSRTo7r1F6GnHQDSyXdpTM3fLktXCh8slvy9y Jq8ajFlF54MnGQJS5k2Xi3y8Zvj8XvLl9/gpmfx7Mkq8i97NJ64mzfrb2PA0dvBd IL6gjzoygPShFQm79c239/e3afGPpdrpv2zaAZonu/3etlnEIaXvZM0QU5dLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyq1XHX9txonLl7Vgx5oSyikvHZswHwYDVR0j BBgwFoAUN96WFwfOyPY4NNzbjFong3bVGsgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjJmNTE1Mi1hMjk1LTQ3YjctYWRkYy1mYmZlZjMyNDdlM2IvMC8zN0RFOTYxNzA3 Q0VDOEY2MzgzNERDREI4QzVBMjc4Mzc2RDUxQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3ODM3NkQ1 MUFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjIyZjUxNTItYTI5NS00N2I3LWFk ZGMtZmJmZWYzMjQ3ZTNiLzAvMzdERTk2MTcwN0NFQzhGNjM4MzREQ0RCOEM1QTI3 ODM3NkQ1MUFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOF+IS62PvJcjASg+2Y293GfzcHyUYoTrsh KEDcEzGhSmX4JZReBZIOZQJg8uvJB4U1tiTgGAU97g1bLjiOVip6SGOrDwWP7/Tc LHOzUUsOJJgFHmqjr+p2jdO0E1BpcwyvC751njdCuz93W/r3TDNqu6dDWpoYO9WJ bB+tR6nDlzDDJCQkHsvsCSKu3x63hpf1nAZqBK+jnOHAAWy7DxNvl+ZNQuomtXiQ v+JxcAXnZgpJYXX9mAosBqNOh9w0m7Uiopbrxnu88N63yakQoEs4ywbDgMozniEl /NW47aJElpyafF1fHpJ399kimTMBo8X2IKL6NA7NQzQB42H4/ew= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org