$ rpki-client -vvf repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft File: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft (raw, json) Hash identifier: xq8tsorMwElgPNcMjTwttrCG8SUJl04r/FrNZAqD+G8= Subject key identifier: 47:97:C7:C1:2E:72:5D:46:00:B8:65:23:A6:DC:60:14:64:B5:F9:3B Authority key identifier: 77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 Certificate issuer: /CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Certificate serial: 7AE762878FA7F9C7C383EE880F8BBE8BB130978D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft Manifest number: 01AB Signing time: Wed 20 Nov 2024 09:21:48 +0000 Manifest this update: Wed 20 Nov 2024 09:16:48 +0000 Manifest next update: Sat 23 Nov 2024 20:04:48 +0000 Files and hashes: 1: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl (hash: fnGLWiPSYk5dxgAP7QU3/DAOpy27f1dkklW5zH8JGWg=) 2: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: 8BgGQFKQndoiET6mUnD+3KzPxt+C7HWtTI69H8u0uKU=) 3: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: wc8vaORuO6YGru+QYIoMg5FerWzrR5B/rJOP4jftbB8=) 4: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: 2/BO5q4FxJ0TtWaXRvmAYcsGvqXuzC7OVHrzQY+oShQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e7:62:87:8f:a7:f9:c7:c3:83:ee:88:0f:8b:be:8b:b1:30:97:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Validity Not Before: Nov 20 09:16:48 2024 GMT Not After : Nov 23 20:04:48 2024 GMT Subject: CN=4797C7C12E725D4600B86523A6DC601464B5F93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2c:ef:05:e3:53:6d:c6:cd:fa:9c:d4:49:e4: ea:f1:05:c5:67:c4:47:c6:37:48:54:12:4a:e8:49: 12:b7:9e:41:44:37:84:a0:e2:94:8b:4a:26:be:b1: 8a:fe:ba:d3:f6:57:6b:05:ed:15:74:f7:8d:b5:18: ee:83:09:8c:60:5c:71:d8:95:02:e5:20:f8:3c:a7: 6c:52:b2:44:55:7f:f2:c7:be:88:92:1d:b9:83:c9: de:cc:4c:36:69:e7:73:08:78:bb:20:3d:a5:7e:ef: a4:c5:b2:f8:1c:76:11:fe:7a:70:6b:e1:f1:02:ce: f1:27:64:4c:60:e5:22:8f:1c:17:58:5d:e4:cc:2d: 1e:3a:a9:a0:08:5c:ef:9b:e4:b2:a9:7e:b0:dd:34: de:e3:95:6b:b9:5d:c6:4c:1c:cc:c3:72:c9:99:0c: 22:7b:e7:23:76:83:a3:ea:71:2a:47:58:d9:15:2b: 4d:78:1b:74:c8:fa:8b:31:e0:9b:b6:0e:b6:e0:60: e6:21:f3:a0:75:3c:97:de:18:51:ee:5b:64:06:93: bb:eb:67:e6:d4:15:34:c5:8a:99:df:25:6e:10:d3: 46:96:61:33:b5:c0:5d:b8:13:08:ba:cd:78:91:09: b7:81:f9:d2:4c:90:d8:9f:8f:42:ca:5e:95:61:02: 1c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:97:C7:C1:2E:72:5D:46:00:B8:65:23:A6:DC:60:14:64:B5:F9:3B X509v3 Authority Key Identifier: keyid:77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f7:0b:42:e1:ed:b8:45:2b:d0:8a:7f:3a:d7:c5:99:aa:ee: 25:5d:b2:5b:c9:4d:4e:81:cc:2c:67:ff:45:ac:3e:fe:66:27: 4c:89:43:4d:23:00:a9:17:3b:14:0c:b7:0d:c1:bc:5e:43:88: b6:a8:27:11:d0:56:5d:fc:72:34:52:a0:2d:da:59:5a:a1:22: ef:82:d7:52:d3:8b:bc:f6:a3:e9:e9:b3:4f:51:52:bb:8a:c3: 71:25:d8:7b:98:e0:b8:88:98:0b:1a:e1:b8:8a:f0:6b:5e:06: 7d:55:f6:7d:cd:25:ed:1d:ec:0a:d3:db:c0:52:89:3c:6a:37: 47:09:6f:6f:c7:3c:53:2b:f5:df:74:64:b2:31:42:a8:59:85: 4c:be:bd:55:e7:c1:13:b1:20:52:3d:eb:9a:ac:4d:2b:de:9d: ea:d4:c3:f3:dc:96:84:65:01:3a:34:96:ec:38:b0:7c:0a:6d: 66:dc:15:69:84:19:75:3e:0f:9b:2f:c0:db:72:df:fb:7d:ce: 40:fd:a6:40:39:61:45:2a:86:56:f2:08:9f:d8:72:f9:15:d6: 8b:b8:78:db:7d:97:c6:77:0b:18:b0:49:c9:2a:4c:26:80:5b: ca:90:26:74:b6:da:c1:d0:db:25:6a:fa:f3:a7:a9:9b:62:bb: ef:aa:19:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeudih4+n+cfDg+6ID4u+i7Ewl40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNE OUE4NkNFNDAeFw0yNDExMjAwOTE2NDhaFw0yNDExMjMyMDA0NDhaMDMxMTAvBgNV BAMTKDQ3OTdDN0MxMkU3MjVENDYwMEI4NjUyM0E2REM2MDE0NjRCNUY5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzLO8F41Ntxs36nNRJ5OrxBcVn xEfGN0hUEkroSRK3nkFEN4Sg4pSLSia+sYr+utP2V2sF7RV09421GO6DCYxgXHHY lQLlIPg8p2xSskRVf/LHvoiSHbmDyd7MTDZp53MIeLsgPaV+76TFsvgcdhH+enBr 4fECzvEnZExg5SKPHBdYXeTMLR46qaAIXO+b5LKpfrDdNN7jlWu5XcZMHMzDcsmZ DCJ75yN2g6PqcSpHWNkVK014G3TI+osx4Ju2DrbgYOYh86B1PJfeGFHuW2QGk7vr Z+bUFTTFipnfJW4Q00aWYTO1wF24Ewi6zXiRCbeB+dJMkNifj0LKXpVhAhyvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR5fHwS5yXUYAuGUjptxgFGS1+TswHwYDVR0j BBgwFoAUd2fPSddmGvq0WHA0HYjS89mobOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTcwZDQ0ZS0wZjcwLTQ1YTMtYWYwNC04MWY0MjlkYjNhNWQvMC83NzY3Q0Y0OUQ3 NjYxQUZBQjQ1ODcwMzQxRDg4RDJGM0Q5QTg2Q0U0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNEOUE4 NkNFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm MDQtODFmNDI5ZGIzYTVkLzAvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQy RjNEOUE4NkNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/3C0Lh7bhFK9CKfzrXxZmq7iVdslvJTU6B zCxn/0WsPv5mJ0yJQ00jAKkXOxQMtw3BvF5DiLaoJxHQVl38cjRSoC3aWVqhIu+C 11LTi7z2o+nps09RUruKw3El2HuY4LiImAsa4biK8GteBn1V9n3NJe0d7ArT28BS iTxqN0cJb2/HPFMr9d90ZLIxQqhZhUy+vVXnwROxIFI965qsTSvenerUw/PcloRl ATo0luw4sHwKbWbcFWmEGXU+D5svwNty3/t9zkD9pkA5YUUqhlbyCJ/YcvkV1ou4 eNt9l8Z3CxiwSckqTCaAW8qQJnS22sHQ2yVq+vOnqZtiu++qGY0= -----END CERTIFICATE-----Generated at Wed Nov 20 11:08:35 2024 by rpki-client on console-ams.rpki-client.org