$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: 3HxcxuVQ1pmRZs2pS/L+8KgVq906kkTHyF5koSAKeUY= Subject key identifier: 52:A3:9E:45:14:7F:00:86:03:85:E4:08:B2:B0:EE:E2:84:9C:66:72 Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 4B3371FB417B5C875F91B42C7ECCD6B167290CBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: 13 Signing time: Sun 24 Nov 2024 18:11:01 +0000 Manifest this update: Sun 24 Nov 2024 18:06:01 +0000 Manifest next update: Thu 28 Nov 2024 05:57:01 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: juiqAPtJVjSPcdSfWBW9qtShCfpxPbJwkLGGlsjlfdc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:33:71:fb:41:7b:5c:87:5f:91:b4:2c:7e:cc:d6:b1:67:29:0c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Nov 24 18:06:01 2024 GMT Not After : Nov 28 05:57:01 2024 GMT Subject: CN=52A39E45147F00860385E408B2B0EEE2849C6672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:4b:0f:48:20:f4:8b:68:c9:fb:b0:3b:b8: 18:5a:ad:cf:59:b2:58:63:67:a6:c5:5d:25:06:c5: 81:18:4d:bf:e9:c6:85:c5:96:ce:d2:4d:b5:02:24: bc:e5:cd:fb:8e:d4:e2:e7:ac:04:0d:41:53:d9:51: 94:ec:2e:8e:20:93:ae:3b:c1:7e:cc:8a:ff:cd:3d: cc:c0:5a:34:ad:2d:fa:f5:12:ea:d9:ac:2b:3c:a1: 6e:55:3a:5b:04:cb:2c:ad:7c:3b:09:2f:e0:e2:67: 39:56:27:cd:a2:7c:81:56:88:7b:c6:91:d3:7c:c1: a4:7b:3b:0f:1e:e7:22:a5:0c:6c:34:8c:9b:41:4c: c1:1c:9c:91:7e:6d:2a:50:41:33:6e:83:f5:9d:37: 32:10:be:6a:15:d3:b2:a2:e3:d0:2f:4b:6b:22:16: db:df:33:0d:ed:cb:c8:9b:a4:17:69:6e:7f:ee:7e: f1:6b:20:91:3a:ff:d6:64:56:da:6b:00:f8:53:d8: 7f:df:1e:64:82:50:f8:54:cd:79:b9:03:9c:03:5f: f9:34:24:31:7a:ab:b1:c1:2b:c7:ba:7a:a9:8c:71: 1f:d6:ed:68:c1:04:cc:92:57:f2:6d:e5:0b:f3:62: e0:4f:df:28:92:ce:b8:23:7c:9e:b0:f4:e2:49:e4: b3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A3:9E:45:14:7F:00:86:03:85:E4:08:B2:B0:EE:E2:84:9C:66:72 X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1d:5f:f5:5f:ca:ef:85:f9:39:2f:bd:98:3a:23:2f:30:76: 8b:27:64:c3:f3:0d:37:6f:ed:27:5b:8f:34:7f:91:dd:bb:58: dd:98:9c:16:da:09:3c:a3:3c:ec:41:fb:d1:81:93:27:c1:cb: 2b:f1:13:f1:1f:76:73:38:a2:ae:5e:32:3a:af:ee:89:69:b2: 0e:8e:f0:06:e3:96:d5:90:2d:22:3b:28:ae:21:60:71:be:fa: 91:c0:f8:56:3c:b4:8a:d3:4f:83:ec:31:44:3c:09:14:b7:16: fc:fe:ff:de:fb:d7:3f:7e:2e:bb:33:38:b6:cb:2f:ae:de:f9: 1a:cd:35:b9:e9:97:af:69:62:7f:5c:7a:ec:30:67:9b:9a:7e: 30:b9:d8:24:4f:ea:34:dd:2f:1b:fd:5b:af:46:51:d2:78:a4: 07:81:1e:7c:3d:0d:bb:23:b8:e0:34:c6:67:4e:a3:80:3c:17: b1:ed:c1:95:f5:c3:3d:8d:9b:28:a1:38:99:7d:81:e3:86:6f: 6f:c9:45:f2:30:96:9d:3f:b6:6c:e4:1f:4c:aa:e5:34:1b:08: 6d:ff:f7:fd:b7:bf:7e:b2:91:31:c7:13:f0:a6:83:7a:e2:9a: b6:e1:85:24:d8:e7:d2:4d:fa:ff:1f:15:2e:19:46:8e:e3:35: 9c:46:ac:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSzNx+0F7XIdfkbQsfszWsWcpDLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNDExMjQxODA2MDFaFw0yNDExMjgwNTU3MDFaMDMxMTAvBgNV BAMTKDUyQTM5RTQ1MTQ3RjAwODYwMzg1RTQwOEIyQjBFRUUyODQ5QzY2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy60sPSCD0i2jJ+7A7uBharc9Z slhjZ6bFXSUGxYEYTb/pxoXFls7STbUCJLzlzfuO1OLnrAQNQVPZUZTsLo4gk647 wX7Miv/NPczAWjStLfr1EurZrCs8oW5VOlsEyyytfDsJL+DiZzlWJ82ifIFWiHvG kdN8waR7Ow8e5yKlDGw0jJtBTMEcnJF+bSpQQTNug/WdNzIQvmoV07Ki49AvS2si FtvfMw3ty8ibpBdpbn/ufvFrIJE6/9ZkVtprAPhT2H/fHmSCUPhUzXm5A5wDX/k0 JDF6q7HBK8e6eqmMcR/W7WjBBMySV/Jt5QvzYuBP3yiSzrgjfJ6w9OJJ5LNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUqOeRRR/AIYDheQIsrDu4oScZnIwHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcdX/Vfyu+F+TkvvZg6Iy8wdosnZMPzDTdv 7SdbjzR/kd27WN2YnBbaCTyjPOxB+9GBkyfByyvxE/EfdnM4oq5eMjqv7olpsg6O 8AbjltWQLSI7KK4hYHG++pHA+FY8tIrTT4PsMUQ8CRS3Fvz+/9771z9+LrszOLbL L67e+RrNNbnpl69pYn9ceuwwZ5uafjC52CRP6jTdLxv9W69GUdJ4pAeBHnw9Dbsj uOA0xmdOo4A8F7HtwZX1wz2NmyihOJl9geOGb2/JRfIwlp0/tmzkH0yq5TQbCG3/ 9/23v36ykTHHE/Cmg3rimrbhhSTY59JN+v8fFS4ZRo7jNZxGrFY= -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org