$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft File: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft (raw, json) Hash identifier: OXBofss48f+JgvqHZtoO66u4zNOgcleDaQE9oiZ2GPM= Subject key identifier: A6:47:25:FD:50:D8:77:54:87:38:89:81:92:6F:03:F5:94:64:7D:8E Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Certificate serial: 5B4C87D3E051ECB3D6A38FEAA784FFF6B3F92433 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft Manifest number: 3F Signing time: Fri 22 Nov 2024 00:31:02 +0000 Manifest this update: Fri 22 Nov 2024 00:26:02 +0000 Manifest next update: Mon 25 Nov 2024 12:26:02 +0000 Files and hashes: 1: 2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl (hash: Ob2mDmqd8dguR5OZh2lObs3Ire9x1+50moNu5NaQU/g=) 2: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: GhxR22sRqPsgSQoLpKAI7yTQVizLaGLPWzCytQ0r9cY=) 3: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: Ws7wk8GBBz6uaKUyE3UI35E9XGkDiFZKCxUfK3/rPNE=) 4: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: I9nwed3s5J9MWCC1UAp67S/MVhHR3W/rsqME52e0/a0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4c:87:d3:e0:51:ec:b3:d6:a3:8f:ea:a7:84:ff:f6:b3:f9:24:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45 Validity Not Before: Nov 22 00:26:02 2024 GMT Not After : Nov 25 12:26:02 2024 GMT Subject: CN=A64725FD50D8775487388981926F03F594647D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:f7:1b:e9:85:fd:1a:40:a0:cc:39:18:9f: cb:95:3b:c6:82:03:5e:b0:8a:48:f1:b0:85:95:b7: cc:28:1b:2f:78:e3:26:7b:f4:50:54:f8:fd:5f:d3: fe:00:8c:60:54:f5:9c:1d:3f:76:1c:46:f4:c7:00: b2:9d:2d:2a:23:74:be:9b:9f:64:e4:ca:72:a7:e6: eb:bc:3f:e0:bf:97:15:5a:a3:15:5b:e2:e5:e3:1f: 50:f7:5d:e6:6d:1d:9a:06:9b:fd:1d:89:2c:75:8f: e6:7d:0d:78:8a:ec:df:03:0f:34:be:1e:30:70:aa: bf:40:71:99:69:4a:80:88:3e:a8:e8:e9:5d:67:cd: a6:70:56:b9:ea:cd:53:68:13:77:f6:9b:09:65:18: b5:86:cf:0a:e0:f1:03:c3:e3:c7:12:55:49:ae:a3: 20:03:c5:e9:df:27:d9:ac:aa:07:8f:66:f2:dc:4e: 28:f2:97:48:f5:ce:6c:6b:18:e1:fb:16:6b:ca:f3: 71:1f:8a:05:88:ab:b1:3d:46:b0:67:7d:00:5c:ef: 4b:47:f6:2d:68:29:21:08:71:90:4a:29:fc:bc:e0: 4f:3b:ad:ed:21:7f:46:63:6f:fe:17:1d:b3:46:2f: e9:9e:43:0d:c0:d9:3b:65:6d:b4:0c:e5:0d:79:d3: 30:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:47:25:FD:50:D8:77:54:87:38:89:81:92:6F:03:F5:94:64:7D:8E X509v3 Authority Key Identifier: keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0b:a2:92:c6:fc:ee:26:a8:50:c1:69:d4:31:ca:78:4f:c0: 95:42:77:64:7a:9b:f3:87:b1:01:d1:eb:91:7a:2d:e4:f3:50: a0:81:24:bf:09:c5:32:52:6e:ee:c3:2b:93:79:af:04:d6:b4: 71:36:35:a9:9d:e5:b9:3e:1f:17:95:23:17:06:48:8c:e9:1e: 74:57:4d:66:a4:87:8d:11:a5:33:39:3e:18:f8:19:9c:b2:5b: 9c:96:f7:34:f0:33:98:cd:9f:12:65:5f:0c:f7:a8:cd:2a:7a: 9d:dc:44:ec:e7:17:c6:79:92:8b:a5:4d:24:d6:51:6b:a5:cb: 41:44:79:43:ee:45:2e:b9:9a:8f:2e:89:ba:0f:fb:43:45:2a: 7e:8f:96:2b:1b:05:67:32:f6:fe:89:42:14:43:37:05:4d:6d: c7:4e:bb:e8:0a:24:de:69:31:27:d6:5d:f2:1d:c8:07:8d:07: 2b:d3:e8:b0:3c:82:96:e9:85:28:d5:7d:6b:0d:07:e0:02:5f: 9c:b3:6d:bd:df:d7:1e:2f:43:10:50:6f:5e:51:ea:56:26:dd: 01:f4:23:2d:b6:1d:90:56:d1:dc:f7:52:34:b1:12:0f:60:3c: 16:cb:0f:23:a1:5d:39:d3:4a:cf:30:b3:7b:cf:d0:00:05:c2: b7:af:f0:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0yH0+BR7LPWo4/qp4T/9rP5JDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBG OTVGMkI0NTAeFw0yNDExMjIwMDI2MDJaFw0yNDExMjUxMjI2MDJaMDMxMTAvBgNV BAMTKEE2NDcyNUZENTBEODc3NTQ4NzM4ODk4MTkyNkYwM0Y1OTQ2NDdEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ePcb6YX9GkCgzDkYn8uVO8aC A16wikjxsIWVt8woGy944yZ79FBU+P1f0/4AjGBU9ZwdP3YcRvTHALKdLSojdL6b n2TkynKn5uu8P+C/lxVaoxVb4uXjH1D3XeZtHZoGm/0diSx1j+Z9DXiK7N8DDzS+ HjBwqr9AcZlpSoCIPqjo6V1nzaZwVrnqzVNoE3f2mwllGLWGzwrg8QPD48cSVUmu oyADxenfJ9msqgePZvLcTijyl0j1zmxrGOH7FmvK83EfigWIq7E9RrBnfQBc70tH 9i1oKSEIcZBKKfy84E87re0hf0Zjb/4XHbNGL+meQw3A2TtlbbQM5Q150zApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkcl/VDYd1SHOImBkm8D9ZRkfY4wHwYDVR0j BBgwFoAUKXatx0SL8MqbV9zXiEmh4PlfK0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2M0MzJlMC1kYzNlLTQyY2MtYmNjMC02MjliMTYyMDZjOWEvMC8yOTc2QURDNzQ0 OEJGMENBOUI1N0RDRDc4ODQ5QTFFMEY5NUYyQjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUExRTBGOTVG MkI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvMjk3NkFEQzc0NDhCRjBDQTlCNTdEQ0Q3ODg0OUEx RTBGOTVGMkI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoLopLG/O4mqFDBadQxynhPwJVCd2R6m/OH sQHR65F6LeTzUKCBJL8JxTJSbu7DK5N5rwTWtHE2Namd5bk+HxeVIxcGSIzpHnRX TWakh40RpTM5Phj4GZyyW5yW9zTwM5jNnxJlXwz3qM0qep3cROznF8Z5koulTSTW UWuly0FEeUPuRS65mo8uiboP+0NFKn6PlisbBWcy9v6JQhRDNwVNbcdOu+gKJN5p MSfWXfIdyAeNByvT6LA8gpbphSjVfWsNB+ACX5yzbb3f1x4vQxBQb15R6lYm3QH0 Iy22HZBW0dz3UjSxEg9gPBbLDyOhXTnTSs8ws3vP0AAFwrev8Mw= -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org