$ rpki-client -vvf repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft File: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft (raw, json) Hash identifier: CKwJbx8uyCT+lGptMRsmzOkVZgfqlYAYYYroRhz+jSo= Subject key identifier: 7E:D4:1A:4F:A4:19:5B:42:DC:6D:5D:83:EF:28:8B:9F:32:49:D5:B0 Authority key identifier: C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A Certificate issuer: /CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Certificate serial: 13FE16EC8DDA857C5F7FE7E2CD950E07A9D8FB2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft Manifest number: 0442 Signing time: Wed 20 Nov 2024 13:01:04 +0000 Manifest this update: Wed 20 Nov 2024 12:56:04 +0000 Manifest next update: Sat 23 Nov 2024 23:03:04 +0000 Files and hashes: 1: C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl (hash: pVkeFp7CcmK+/h2xHZX/4b4NIs/z0fQ+gFJJe+bc2kQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fe:16:ec:8d:da:85:7c:5f:7f:e7:e2:cd:95:0e:07:a9:d8:fb:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C47E73E669156D8FB32AB80941C6E5A4EE07D37A Validity Not Before: Nov 20 12:56:04 2024 GMT Not After : Nov 23 23:03:04 2024 GMT Subject: CN=7ED41A4FA4195B42DC6D5D83EF288B9F3249D5B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:62:d3:84:3e:15:23:a2:30:b6:75:e8:39: 3c:41:8b:a7:14:35:df:ad:a7:1f:f7:96:1f:b3:89: 94:f9:ef:74:11:00:cf:38:50:23:91:06:34:19:40: 93:f3:0c:c9:c0:71:24:42:1c:0a:76:0f:76:d8:96: 00:81:f7:da:27:0d:47:60:f5:19:52:14:f4:ee:7d: 9a:4a:0a:f0:f0:50:24:2d:62:0b:3e:98:5c:0e:97: 15:83:0e:03:c3:fa:ec:5e:cc:48:2c:13:f0:c8:e7: a8:e7:90:a3:e9:95:28:2e:48:3b:44:ae:aa:18:a7: 3d:eb:de:49:e2:19:24:4e:51:9c:9c:19:70:fe:14: 05:92:8a:9f:39:7b:e0:00:93:da:dd:56:c3:6c:5d: 90:e5:75:cd:12:d7:fc:f6:fd:d8:d7:06:fb:35:af: ec:e0:de:b4:05:88:e3:da:32:77:7c:0d:d4:67:89: 5a:63:d0:9f:cd:85:d5:2b:7c:9a:3b:f1:5e:a0:80: 05:05:c1:ed:4a:a3:7c:00:78:ad:8d:96:d3:1c:b4: 7a:11:46:33:ea:3b:10:ea:fc:28:61:3f:0b:82:4b: b2:c8:96:91:38:cb:41:48:d6:7c:a8:6f:24:cd:43: d1:32:6e:bd:94:bd:93:d6:d2:16:97:df:13:10:d1: 6e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D4:1A:4F:A4:19:5B:42:DC:6D:5D:83:EF:28:8B:9F:32:49:D5:B0 X509v3 Authority Key Identifier: keyid:C4:7E:73:E6:69:15:6D:8F:B3:2A:B8:09:41:C6:E5:A4:EE:07:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/797b8f4a-3110-40b7-9032-0f02215a0b6a/0/C47E73E669156D8FB32AB80941C6E5A4EE07D37A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c3:ad:80:d6:93:8e:f9:7b:2b:42:58:d6:34:bc:1f:0c:89: 83:ee:f7:dc:42:69:63:49:0d:87:1d:9a:b9:53:60:28:b6:d1: a5:57:7e:7a:0d:2e:49:da:ea:3c:35:c1:1f:24:0c:20:2b:6a: 7e:50:b5:a0:ef:ad:01:54:9d:f9:6c:42:1b:bd:e5:5c:3d:e2: c0:2e:34:7e:e9:57:53:f9:a7:ca:68:98:82:ac:e0:7b:70:7e: d0:a1:7f:63:2b:49:2a:d0:86:b6:a2:50:6c:55:fb:48:5c:c8: 49:f7:84:ff:39:30:b5:6a:95:f0:28:e6:e5:87:3e:c1:11:a5: 18:b0:4b:11:cf:9c:eb:ec:57:b9:c0:24:a1:00:a9:30:91:b5: 15:47:9c:38:7b:bf:a2:c9:d7:8b:b3:58:f6:3c:09:4f:11:e9: 36:99:e4:52:65:a3:83:d3:25:09:1f:6f:86:8b:8d:cf:69:4c: b9:f0:6f:50:4f:27:8d:f1:93:db:d8:ce:d9:5a:b5:b7:28:64: a1:b1:fa:58:be:52:69:98:0c:5f:05:b8:0e:95:23:05:25:76: 82:2d:c8:1d:ea:51:91:d5:c8:f5:b4:21:47:f6:8f:02:80:30: bf:6f:22:87:4e:c7:e5:1b:9a:75:9f:92:54:8c:c7:6b:8d:34: 22:6b:e1:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/4W7I3ahXxff+fizZUOB6nY+y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRF RTA3RDM3QTAeFw0yNDExMjAxMjU2MDRaFw0yNDExMjMyMzAzMDRaMDMxMTAvBgNV BAMTKDdFRDQxQTRGQTQxOTVCNDJEQzZENUQ4M0VGMjg4QjlGMzI0OUQ1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdoGLThD4VI6IwtnXoOTxBi6cU Nd+tpx/3lh+ziZT573QRAM84UCORBjQZQJPzDMnAcSRCHAp2D3bYlgCB99onDUdg 9RlSFPTufZpKCvDwUCQtYgs+mFwOlxWDDgPD+uxezEgsE/DI56jnkKPplSguSDtE rqoYpz3r3kniGSROUZycGXD+FAWSip85e+AAk9rdVsNsXZDldc0S1/z2/djXBvs1 r+zg3rQFiOPaMnd8DdRniVpj0J/NhdUrfJo78V6ggAUFwe1Ko3wAeK2NltMctHoR RjPqOxDq/ChhPwuCS7LIlpE4y0FI1nyobyTNQ9Eybr2UvZPW0haX3xMQ0W5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUftQaT6QZW0LcbV2D7yiLnzJJ1bAwHwYDVR0j BBgwFoAUxH5z5mkVbY+zKrgJQcblpO4H03owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTdiOGY0YS0zMTEwLTQwYjctOTAzMi0wZjAyMjE1YTBiNmEvMC9DNDdFNzNFNjY5 MTU2RDhGQjMyQUI4MDk0MUM2RTVBNEVFMDdEMzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1QTRFRTA3 RDM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk3YjhmNGEtMzExMC00MGI3LTkw MzItMGYwMjIxNWEwYjZhLzAvQzQ3RTczRTY2OTE1NkQ4RkIzMkFCODA5NDFDNkU1 QTRFRTA3RDM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnDrYDWk475eytCWNY0vB8MiYPu99xCaWNJ DYcdmrlTYCi20aVXfnoNLkna6jw1wR8kDCAran5QtaDvrQFUnflsQhu95Vw94sAu NH7pV1P5p8pomIKs4HtwftChf2MrSSrQhraiUGxV+0hcyEn3hP85MLVqlfAo5uWH PsERpRiwSxHPnOvsV7nAJKEAqTCRtRVHnDh7v6LJ14uzWPY8CU8R6TaZ5FJlo4PT JQkfb4aLjc9pTLnwb1BPJ43xk9vYztlatbcoZKGx+li+UmmYDF8FuA6VIwUldoIt yB3qUZHVyPW0IUf2jwKAML9vIodOx+UbmnWfklSMx2uNNCJr4cs= -----END CERTIFICATE-----Generated at Wed Nov 20 14:21:28 2024 by rpki-client on console-fra.rpki-client.org