$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: RNLieihRJkhtONdGaQsoBnFuFml271K7x1LJKdOrbFU= Subject key identifier: 91:B2:39:E6:AB:C8:47:FF:8C:D2:06:92:E8:AB:51:5B:BF:E7:86:6F Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 7F8B8C05DD7EC26F0F703DFC62722D057C22CDFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: 6C Signing time: Thu 21 Nov 2024 06:22:25 +0000 Manifest this update: Thu 21 Nov 2024 06:17:25 +0000 Manifest next update: Sun 24 Nov 2024 11:10:25 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: DbPKH/42RlPCO+mygDBxRix1Sh2buaFtLmv7RfTzjU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8b:8c:05:dd:7e:c2:6f:0f:70:3d:fc:62:72:2d:05:7c:22:cd:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Nov 21 06:17:25 2024 GMT Not After : Nov 24 11:10:25 2024 GMT Subject: CN=91B239E6ABC847FF8CD20692E8AB515BBFE7866F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:34:d8:4a:5d:a0:f2:8b:23:dd:5e:cb:92: f5:d2:bb:87:57:03:e2:cb:86:33:8d:19:53:d6:bb: bb:e2:cf:11:9a:8f:4a:78:de:c0:7e:0e:3c:19:39: e6:af:db:7b:cc:c0:e0:91:be:e2:19:c6:c4:a7:bb: b6:d7:cc:2c:42:17:47:02:8b:d8:ec:6f:79:d5:26: 67:c8:97:70:e5:97:f3:97:b2:2e:e3:7a:8a:7f:7d: 9a:35:54:97:64:f6:de:a6:24:f2:42:3d:3b:4a:23: 77:fa:b9:49:d6:b6:04:70:cf:fe:9e:a3:ea:24:5b: 57:9d:6c:47:1b:9c:96:13:c2:a5:cb:b7:7e:bf:8e: 04:34:ad:c9:0c:fa:bf:7e:5a:b6:61:1b:83:bf:17: b1:f9:fd:a8:fd:f0:a4:b8:32:58:cf:1b:6c:56:14: 34:58:5d:38:7e:1c:6e:ab:d5:11:a8:01:b5:12:3e: cb:6e:98:02:b4:56:7a:b3:01:72:4a:76:16:c0:ed: 02:62:dd:a1:0d:2b:f1:87:fe:6b:de:2c:c9:98:dc: 46:91:81:35:5f:6b:69:17:ad:e1:c8:9a:c7:78:03: a5:3d:82:18:bc:ad:08:a5:e1:97:7d:2e:3f:85:66: 59:86:e5:db:63:f2:ce:f1:22:c7:a3:91:78:65:7b: ea:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B2:39:E6:AB:C8:47:FF:8C:D2:06:92:E8:AB:51:5B:BF:E7:86:6F X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ad:c9:35:ec:58:40:03:b1:1d:ec:65:cd:71:62:68:2c:bc: 57:96:e6:c4:c2:8b:ab:f1:20:f1:47:f5:d9:19:10:ee:72:ee: 2b:d1:90:e0:ca:ce:c1:06:03:cc:61:7f:2a:b8:0e:cb:ef:98: 57:55:ca:7b:14:71:06:87:f0:53:b2:df:db:2d:79:45:8f:12: ae:7f:02:97:7f:fd:bb:5d:16:e7:27:1a:11:d4:15:38:e6:3c: e9:24:33:c7:47:8f:73:59:6c:46:08:63:4e:ba:91:dc:69:cb: 18:a4:b4:7b:3b:a0:bb:f5:23:b9:4b:17:9b:0a:98:0a:8c:18: 01:db:6c:51:59:70:a4:16:d8:61:b7:1f:51:df:b8:5e:37:4c: 1b:a5:52:8a:00:4e:b6:99:c4:ad:9f:46:05:ed:ee:b9:21:46: d0:41:d4:27:66:47:64:c9:60:17:6c:90:e4:6d:24:64:d1:15: 9d:d3:fa:67:2b:00:ba:60:07:67:12:7c:86:42:c0:52:ea:66: e8:d8:f3:15:12:2b:a5:5c:66:8f:d3:bb:1f:8b:c1:71:8c:76: 57:7c:02:b2:7a:f4:ca:9c:5f:de:f9:10:96:f2:5e:14:1e:00: bd:11:6a:c7:f9:eb:9e:9d:c1:c8:82:63:cb:dc:46:98:34:e5: e9:69:f2:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf4uMBd1+wm8PcD38YnItBXwizf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNDExMjEwNjE3MjVaFw0yNDExMjQxMTEwMjVaMDMxMTAvBgNV BAMTKDkxQjIzOUU2QUJDODQ3RkY4Q0QyMDY5MkU4QUI1MTVCQkZFNzg2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOzTYSl2g8osj3V7LkvXSu4dX A+LLhjONGVPWu7vizxGaj0p43sB+DjwZOeav23vMwOCRvuIZxsSnu7bXzCxCF0cC i9jsb3nVJmfIl3Dll/OXsi7jeop/fZo1VJdk9t6mJPJCPTtKI3f6uUnWtgRwz/6e o+okW1edbEcbnJYTwqXLt36/jgQ0rckM+r9+WrZhG4O/F7H5/aj98KS4MljPG2xW FDRYXTh+HG6r1RGoAbUSPstumAK0VnqzAXJKdhbA7QJi3aENK/GH/mveLMmY3EaR gTVfa2kXreHImsd4A6U9ghi8rQil4Zd9Lj+FZlmG5dtj8s7xIsejkXhle+r3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkbI55qvIR/+M0gaS6KtRW7/nhm8wHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+tyTXsWEADsR3sZc1xYmgsvFeW5sTCi6vx IPFH9dkZEO5y7ivRkODKzsEGA8xhfyq4DsvvmFdVynsUcQaH8FOy39steUWPEq5/ Apd//btdFucnGhHUFTjmPOkkM8dHj3NZbEYIY066kdxpyxiktHs7oLv1I7lLF5sK mAqMGAHbbFFZcKQW2GG3H1HfuF43TBulUooATraZxK2fRgXt7rkhRtBB1CdmR2TJ YBdskORtJGTRFZ3T+mcrALpgB2cSfIZCwFLqZujY8xUSK6VcZo/Tux+LwXGMdld8 ArJ69MqcX975EJbyXhQeAL0Rasf5656dwciCY8vcRpg05elp8ps= -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org