$ rpki-client -vvf repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft File: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft (raw, json) Hash identifier: rVbGezhMXVO04zq9+bFxLaaeUe4SNOdEo6PKHJu2TxY= Subject key identifier: 98:AD:79:32:5C:9A:D7:78:ED:0B:2A:12:4C:0F:46:4C:2C:DD:5E:41 Authority key identifier: EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 Certificate issuer: /CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Certificate serial: 499CD51CD9EDD8011CE401AB4757953F24F53A94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft Manifest number: A7 Signing time: Sun 24 Nov 2024 20:50:42 +0000 Manifest this update: Sun 24 Nov 2024 20:45:42 +0000 Manifest next update: Thu 28 Nov 2024 01:54:42 +0000 Files and hashes: 1: EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl (hash: OcCr2aqMdf70J+RiJam2Fm6wlhP0Tq4RDjGB4ZedpWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:9c:d5:1c:d9:ed:d8:01:1c:e4:01:ab:47:57:95:3f:24:f5:3a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1 Validity Not Before: Nov 24 20:45:42 2024 GMT Not After : Nov 28 01:54:42 2024 GMT Subject: CN=98AD79325C9AD778ED0B2A124C0F464C2CDD5E41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:b3:13:6f:3d:cf:a5:0a:d0:88:c2:c0:a4: 30:06:c0:1d:d6:78:eb:5c:fe:0e:e0:da:49:07:e6: 71:43:b8:ab:d3:ed:04:f1:9c:22:22:a0:0f:06:63: 2a:09:7b:8e:2f:04:c8:82:61:6e:8c:ae:dc:99:74: a2:b1:56:ad:ce:89:ba:4d:07:6c:62:5c:a8:27:91: 65:7a:8b:1f:3d:56:b7:0f:68:02:46:88:a6:ed:9f: 6a:00:a6:ba:a2:14:58:a8:d7:f6:99:1f:2f:73:85: 92:32:d8:1f:47:1c:19:5d:7e:4d:e7:79:6f:1b:a3: 48:77:b8:c5:91:ba:e4:51:3c:c4:80:ef:03:59:4f: 41:87:38:1e:13:9e:05:a8:60:20:52:dd:f5:0c:1b: 5f:c1:f0:64:80:dd:ab:99:d0:6e:aa:75:c0:6c:64: 26:94:51:bb:c2:09:8a:97:d8:b4:7a:f7:ce:d1:a0: ea:1e:f1:62:f7:8f:82:71:3a:44:ba:50:4b:14:23: d9:65:23:72:67:a1:04:b9:ab:84:fb:a6:bf:fb:68: b9:6c:69:67:91:5a:21:14:d4:43:c1:22:f6:8e:df: 50:9c:2f:88:13:63:2b:e2:27:fa:f8:6c:b8:02:a1: 73:67:72:9f:4a:2a:3a:0c:81:92:78:08:b9:8b:c0: 55:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AD:79:32:5C:9A:D7:78:ED:0B:2A:12:4C:0F:46:4C:2C:DD:5E:41 X509v3 Authority Key Identifier: keyid:EE:72:DE:38:4F:9A:B7:FA:D6:C3:B2:86:3A:5D:B1:28:1E:5E:DC:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/EE72DE384F9AB7FAD6C3B2863A5DB1281E5EDCA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:de:53:0b:7f:35:65:c8:df:8e:fd:c4:20:00:b9:c3:90:be: 4d:01:c0:24:db:b3:1a:a0:84:9b:15:f6:63:ad:af:4d:c1:d8: f5:48:0a:52:78:41:fc:32:86:0c:f1:56:d9:78:26:4f:aa:ce: e2:96:a4:a6:2a:be:a9:52:47:13:8b:bf:40:62:58:0f:70:14: 72:f0:e1:81:5c:bb:6f:8c:72:19:b7:92:a1:c7:f6:31:f6:43: 5a:07:19:16:17:0b:70:b2:ea:61:08:c1:4b:bf:60:78:c7:c3: 82:41:40:3a:ed:65:98:91:df:26:b3:29:1c:ec:c8:5c:f9:da: 20:c7:2e:e1:10:b4:ca:24:73:9d:34:dd:f3:d2:b4:f8:42:ef: fe:42:43:5e:ca:1e:2b:8e:44:2f:13:ee:f2:3f:ba:3e:00:60: f3:39:f2:5d:61:c3:77:e1:6c:c5:9e:3a:a2:41:fd:96:41:e3: 1d:04:e7:f1:24:03:3a:21:f8:2f:29:4e:c4:5d:1d:da:d7:79: 73:37:f5:67:06:07:83:35:8c:e0:f0:04:d5:33:c6:3c:6d:90: 0f:c3:97:8b:c9:9a:86:f8:81:03:80:12:1d:d5:3b:1d:ac:0d: af:5f:f6:6a:f7:55:7f:80:26:a5:44:8d:19:00:d3:de:53:79: d0:90:2c:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSZzVHNnt2AEc5AGrR1eVPyT1OpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgx RTVFRENBMTAeFw0yNDExMjQyMDQ1NDJaFw0yNDExMjgwMTU0NDJaMDMxMTAvBgNV BAMTKDk4QUQ3OTMyNUM5QUQ3NzhFRDBCMkExMjRDMEY0NjRDMkNERDVFNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfLMTbz3PpQrQiMLApDAGwB3W eOtc/g7g2kkH5nFDuKvT7QTxnCIioA8GYyoJe44vBMiCYW6MrtyZdKKxVq3OibpN B2xiXKgnkWV6ix89VrcPaAJGiKbtn2oAprqiFFio1/aZHy9zhZIy2B9HHBldfk3n eW8bo0h3uMWRuuRRPMSA7wNZT0GHOB4TngWoYCBS3fUMG1/B8GSA3auZ0G6qdcBs ZCaUUbvCCYqX2LR6987RoOoe8WL3j4JxOkS6UEsUI9llI3JnoQS5q4T7pr/7aLls aWeRWiEU1EPBIvaO31CcL4gTYyviJ/r4bLgCoXNncp9KKjoMgZJ4CLmLwFXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmK15Mlya13jtCyoSTA9GTCzdXkEwHwYDVR0j BBgwFoAU7nLeOE+at/rWw7KGOl2xKB5e3KEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTdlNjg3OC02Y2IyLTRhNWYtYjU1My1iY2ViMmM5NWM3NmMvMC9FRTcyREUzODRG OUFCN0ZBRDZDM0IyODYzQTVEQjEyODFFNUVEQ0ExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIxMjgxRTVF RENBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvRUU3MkRFMzg0RjlBQjdGQUQ2QzNCMjg2M0E1REIx MjgxRTVFRENBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDeUwt/NWXI3479xCAAucOQvk0BwCTbsxqg hJsV9mOtr03B2PVIClJ4QfwyhgzxVtl4Jk+qzuKWpKYqvqlSRxOLv0BiWA9wFHLw 4YFcu2+Mchm3kqHH9jH2Q1oHGRYXC3Cy6mEIwUu/YHjHw4JBQDrtZZiR3yazKRzs yFz52iDHLuEQtMokc5003fPStPhC7/5CQ17KHiuORC8T7vI/uj4AYPM58l1hw3fh bMWeOqJB/ZZB4x0E5/EkAzoh+C8pTsRdHdrXeXM39WcGB4M1jODwBNUzxjxtkA/D l4vJmob4gQOAEh3VOx2sDa9f9mr3VX+AJqVEjRkA095TedCQLDg= -----END CERTIFICATE-----Generated at Sun Nov 24 21:43:11 2024 by rpki-client on console-ams.rpki-client.org