$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: woDNvfYV0tgohh3dfouY5aX/YZNyiMAy/PMi07yj2nI= Subject key identifier: A6:A7:E8:FB:7F:EF:1A:A3:4B:FF:19:C6:2E:D6:DA:EC:03:18:19:CA Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 26E240AB87A50BDDC7B83E39E118C9D83BA0093B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: 33 Signing time: Fri 22 Nov 2024 04:32:30 +0000 Manifest this update: Fri 22 Nov 2024 04:27:30 +0000 Manifest next update: Mon 25 Nov 2024 13:16:30 +0000 Files and hashes: 1: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: 2o2Ekkt+3oPedQ6t7WSvFM6gdfyWmdr+vQqMDBCvSgE=) 2: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: DL5Cjotzf9xgCI9Ra9Q+mn/YTHiNI74AEFemjw4PCiA=) 3: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: haTibr3tt22zSchSW2+rcU9iqZLSDGd/xcHfzqqfZOo=) 4: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: ELx/Mo51D3GSaEDSyBhL7pvfhZmjCeLx8uPSmWVwFVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e2:40:ab:87:a5:0b:dd:c7:b8:3e:39:e1:18:c9:d8:3b:a0:09:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Nov 22 04:27:30 2024 GMT Not After : Nov 25 13:16:30 2024 GMT Subject: CN=A6A7E8FB7FEF1AA34BFF19C62ED6DAEC031819CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:db:d6:dc:29:a6:6e:cd:d6:d3:69:ca:dd:c7: cc:63:b6:c5:da:4d:5c:c8:8a:08:fb:98:8f:8b:6c: a8:8d:68:f0:44:7d:f3:7f:37:b4:22:ee:ec:b0:6b: 7d:36:49:72:b1:46:39:9d:81:a6:be:f7:f9:a0:f7: d1:7b:ca:1e:27:b9:2c:27:68:0e:47:7e:10:77:5f: 12:1c:69:64:60:1e:25:75:34:1a:bf:d2:f8:a2:39: a5:9f:35:a3:fd:36:ef:19:50:8a:8b:f5:49:ff:96: a7:27:2b:50:63:54:38:de:f9:d4:07:02:6f:9e:9a: a9:5e:61:48:2b:07:d2:e6:7c:9f:5b:d4:2a:5f:c8: 8c:e4:56:7e:21:ca:9d:85:d6:50:bd:15:7a:50:4c: 8d:f8:2e:76:d9:bb:5f:64:6e:22:be:43:f8:65:54: fb:b7:08:74:47:e5:65:01:db:0a:92:0a:66:15:b4: 5b:51:e5:4a:40:1f:17:0a:6b:d2:de:b1:35:86:af: ed:81:b0:04:fa:45:60:5d:c5:28:71:ec:c6:01:c8: 47:04:2e:c6:c6:36:2e:37:78:96:3e:d6:5f:de:fb: 8e:4b:01:75:35:ee:60:c9:54:ae:7b:42:84:91:83: 19:5a:67:e2:cf:df:f6:06:b6:7e:35:e0:67:f3:02: 0d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A7:E8:FB:7F:EF:1A:A3:4B:FF:19:C6:2E:D6:DA:EC:03:18:19:CA X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4d:77:0a:c6:50:08:13:11:47:18:6d:6a:59:d2:1d:ef:60: dd:46:02:08:83:1c:61:9d:7f:81:56:e1:34:6b:b3:f9:e6:4a: 25:f4:82:15:c6:ce:56:0a:26:67:aa:dd:e6:f2:2c:c2:2e:8a: c9:ff:1f:2f:0f:72:aa:26:5f:ca:99:ab:e7:9e:59:5a:2a:fc: 19:53:f2:5e:a0:83:15:89:77:23:76:1b:c2:9f:05:7b:68:da: b3:68:53:fd:ff:26:25:66:c7:ae:fd:a5:93:6f:d7:6d:0d:fb: 85:0c:3a:26:7f:0a:4a:cd:08:7a:aa:ba:6e:0a:d3:47:9b:cf: b2:6d:04:cd:87:ca:77:c2:b2:79:bc:84:74:b1:1c:86:95:0f: dd:71:61:b9:c0:87:5f:ad:60:dd:dd:90:47:65:d4:5e:97:8a: 11:ba:7d:4a:01:b2:c7:b4:45:db:15:8d:39:62:44:82:76:53: 5a:7e:34:ab:34:c0:93:a3:2c:a6:a8:c7:17:93:6a:3e:64:e6: bb:bf:58:1c:49:45:97:5b:7b:27:f8:4f:9f:9c:ca:ec:f1:83: 3a:52:d0:5c:bd:c8:0f:83:f2:4a:9d:18:fb:fa:8d:01:87:53: ae:b5:33:e9:9d:c4:5c:ab:fb:ad:ba:51:71:a9:85:a4:5e:47: 5f:d6:1a:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJuJAq4elC93HuD454RjJ2DugCTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNDExMjIwNDI3MzBaFw0yNDExMjUxMzE2MzBaMDMxMTAvBgNV BAMTKEE2QTdFOEZCN0ZFRjFBQTM0QkZGMTlDNjJFRDZEQUVDMDMxODE5Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX29bcKaZuzdbTacrdx8xjtsXa TVzIigj7mI+LbKiNaPBEffN/N7Qi7uywa302SXKxRjmdgaa+9/mg99F7yh4nuSwn aA5HfhB3XxIcaWRgHiV1NBq/0viiOaWfNaP9Nu8ZUIqL9Un/lqcnK1BjVDje+dQH Am+emqleYUgrB9LmfJ9b1CpfyIzkVn4hyp2F1lC9FXpQTI34LnbZu19kbiK+Q/hl VPu3CHRH5WUB2wqSCmYVtFtR5UpAHxcKa9LesTWGr+2BsAT6RWBdxShx7MYByEcE LsbGNi43eJY+1l/e+45LAXU17mDJVK57QoSRgxlaZ+LP3/YGtn414GfzAg1rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpqfo+3/vGqNL/xnGLtba7AMYGcowHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtNdwrGUAgTEUcYbWpZ0h3vYN1GAgiDHGGd f4FW4TRrs/nmSiX0ghXGzlYKJmeq3ebyLMIuisn/Hy8PcqomX8qZq+eeWVoq/BlT 8l6ggxWJdyN2G8KfBXto2rNoU/3/JiVmx679pZNv120N+4UMOiZ/CkrNCHqqum4K 00ebz7JtBM2HynfCsnm8hHSxHIaVD91xYbnAh1+tYN3dkEdl1F6XihG6fUoBsse0 RdsVjTliRIJ2U1p+NKs0wJOjLKaoxxeTaj5k5ru/WBxJRZdbeyf4T5+cyuzxgzpS 0Fy9yA+D8kqdGPv6jQGHU661M+mdxFyr+626UXGphaReR1/WGmc= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org