$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: LqNkPgjHwVVL3VfJgDRjCaLkU/6Pvwwl7Xt2F+RXS8A= Subject key identifier: 73:6F:7D:F3:08:EB:27:A2:C0:99:21:C2:6D:A1:2D:88:DB:FE:08:77 Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 5559C80A436606601AE73EB3EBE79A93F2799E71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: 07 Signing time: Sat 23 Nov 2024 14:50:02 +0000 Manifest this update: Sat 23 Nov 2024 14:45:02 +0000 Manifest next update: Wed 27 Nov 2024 00:13:02 +0000 Files and hashes: 1: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: IjEtEUSXmILGiNBbhaVkg+whiSaDBBq73EiaMLsPVvs=) 2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: cvyj6LKtTOVBTWTHZighgw+CFWQteArr8dC6m6wOVeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:59:c8:0a:43:66:06:60:1a:e7:3e:b3:eb:e7:9a:93:f2:79:9e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Nov 23 14:45:02 2024 GMT Not After : Nov 27 00:13:02 2024 GMT Subject: CN=736F7DF308EB27A2C09921C26DA12D88DBFE0877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:f2:33:45:c6:c8:6a:aa:91:66:a7:14:31: 14:32:22:5f:dc:32:a7:91:27:08:a8:57:69:a9:77: 26:6b:2c:83:0e:2c:8c:52:3d:47:21:7f:ef:1a:7c: 9c:eb:e6:4c:9d:2f:70:1a:80:40:8e:b8:80:6c:30: c4:3a:a1:f9:d5:fc:06:1d:01:e9:0c:cd:73:9a:ab: e9:95:35:b8:25:71:4b:98:8c:8a:83:92:33:84:c8: 9a:d7:4d:ee:16:37:92:01:ba:4e:65:d9:4d:a2:7f: dd:3c:5e:8f:7c:92:cd:60:9f:1e:a3:a9:b2:77:9f: ee:97:c5:80:78:de:fd:9f:1a:25:14:d9:24:18:9f: a5:cf:31:15:b6:b6:9e:60:7e:9e:8d:53:82:47:27: f8:5b:4c:a8:36:30:7d:c6:87:44:48:81:74:22:e5: ce:a2:40:d1:37:56:84:9d:8d:6a:3f:bc:11:6b:1e: 74:52:61:b6:95:77:81:c8:d5:9d:0c:c7:f1:aa:fb: 42:74:fb:90:08:9f:c2:ba:f1:97:50:0c:8e:52:ab: d9:49:57:e4:f0:b3:80:42:a4:62:8e:de:3c:97:47: 5b:86:bc:ab:70:0f:9f:12:c6:97:60:bf:c4:39:00: f9:1d:78:ae:e9:fc:9e:b6:cd:73:cb:63:61:70:e6: ea:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6F:7D:F3:08:EB:27:A2:C0:99:21:C2:6D:A1:2D:88:DB:FE:08:77 X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b7:75:dc:15:86:e9:bc:87:58:0b:bb:e5:14:52:63:fc:3a: f2:09:8f:e4:5a:ce:ee:30:f0:c9:c9:e4:be:eb:fb:5a:2c:5b: 9f:19:4f:d7:6f:6b:98:ab:2d:c4:9d:fb:7f:a3:71:b0:88:eb: 80:90:14:18:83:39:a8:dd:06:2e:f9:22:e2:ac:fd:29:30:55: 37:07:ee:a6:62:53:4e:e8:3d:a6:09:3a:af:fb:92:49:4e:cb: b6:54:12:fb:3a:79:56:0a:c2:6b:c4:c1:e0:da:48:b0:f6:af: 33:8c:cc:26:4f:ba:23:0d:cf:00:99:42:bc:94:93:26:bf:9f: 37:ad:c0:87:ba:43:31:ca:a6:0e:e6:a1:bb:fd:62:16:65:2b: 8f:30:de:ff:02:9d:a8:90:07:30:fb:4d:65:fe:42:b3:a3:7d: 47:67:cd:f9:d7:90:b2:09:a7:1a:bb:91:fa:2b:7e:e5:c9:44: 10:15:e2:25:9a:54:50:e5:a8:09:86:92:b6:c5:6c:d4:c1:6e: 56:35:5c:2c:c1:27:d2:b1:03:bb:75:81:c7:82:54:7b:95:9f: c0:33:94:1a:df:fc:81:82:a7:0b:17:b1:5c:07:af:29:b5:4c: d3:13:af:f3:fc:d8:0a:45:83:59:ff:9e:29:94:b7:02:5c:a1: 81:94:fe:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVVnICkNmBmAa5z6z6+eak/J5nnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNDExMjMxNDQ1MDJaFw0yNDExMjcwMDEzMDJaMDMxMTAvBgNV BAMTKDczNkY3REYzMDhFQjI3QTJDMDk5MjFDMjZEQTEyRDg4REJGRTA4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtfIzRcbIaqqRZqcUMRQyIl/c MqeRJwioV2mpdyZrLIMOLIxSPUchf+8afJzr5kydL3AagECOuIBsMMQ6ofnV/AYd AekMzXOaq+mVNbglcUuYjIqDkjOEyJrXTe4WN5IBuk5l2U2if908Xo98ks1gnx6j qbJ3n+6XxYB43v2fGiUU2SQYn6XPMRW2tp5gfp6NU4JHJ/hbTKg2MH3Gh0RIgXQi 5c6iQNE3VoSdjWo/vBFrHnRSYbaVd4HI1Z0Mx/Gq+0J0+5AIn8K68ZdQDI5Sq9lJ V+Tws4BCpGKO3jyXR1uGvKtwD58Sxpdgv8Q5APkdeK7p/J62zXPLY2Fw5uoBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc2998wjrJ6LAmSHCbaEtiNv+CHcwHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABu3ddwVhum8h1gLu+UUUmP8OvIJj+Razu4w 8MnJ5L7r+1osW58ZT9dva5irLcSd+3+jcbCI64CQFBiDOajdBi75IuKs/SkwVTcH 7qZiU07oPaYJOq/7kklOy7ZUEvs6eVYKwmvEweDaSLD2rzOMzCZPuiMNzwCZQryU kya/nzetwIe6QzHKpg7mobv9YhZlK48w3v8CnaiQBzD7TWX+QrOjfUdnzfnXkLIJ pxq7kforfuXJRBAV4iWaVFDlqAmGkrbFbNTBblY1XCzBJ9KxA7t1gceCVHuVn8Az lBrf/IGCpwsXsVwHrym1TNMTr/P82ApFg1n/nimUtwJcoYGU/sI= -----END CERTIFICATE-----Generated at Sat Nov 23 15:35:15 2024 by rpki-client on console-fra.rpki-client.org