$ rpki-client -vvf repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft File: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft (raw, json) Hash identifier: wCyGGvyN+DyKO71pPOaHfQ2MnFkg+ThDkbNkM38gym4= Subject key identifier: 4D:98:CA:D4:D6:57:5A:47:EF:AF:8E:B5:39:19:A2:3E:FD:DD:1B:90 Authority key identifier: 36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17 Certificate issuer: /CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17 Certificate serial: 6DD6493CA8622960D0CA355CD2A9F31AFA0C8601 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft Manifest number: 02D9 Signing time: Thu 21 Nov 2024 03:51:36 +0000 Manifest this update: Thu 21 Nov 2024 03:46:36 +0000 Manifest next update: Sun 24 Nov 2024 15:12:36 +0000 Files and hashes: 1: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl (hash: YbBfV8pxeo4HQpdiAqivy0xVx4WAah+RbigZHQRz0ho=) 2: 3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa (hash: P56l00js9rnf8V8KM5dQv3ykfj4qv8CRRUVkqILqmlU=) 3: 3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa (hash: j4kPdYfgyBraDxUIOIX1rRESdoqShtU5fZw83PrS2Go=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d6:49:3c:a8:62:29:60:d0:ca:35:5c:d2:a9:f3:1a:fa:0c:86:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17 Validity Not Before: Nov 21 03:46:36 2024 GMT Not After : Nov 24 15:12:36 2024 GMT Subject: CN=4D98CAD4D6575A47EFAF8EB53919A23EFDDD1B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:3b:4b:9e:65:74:a0:d6:1c:c9:e1:d5:2f: 8c:19:43:c7:1f:2e:d8:52:36:24:ba:2d:f7:68:55: 25:c6:c8:46:1b:7f:90:17:5d:69:b9:ef:77:a2:06: d9:03:f9:31:e8:b8:55:bc:6b:4f:d5:c4:69:c9:47: 55:17:42:2d:8b:93:11:c0:2f:79:f8:6e:53:e7:5a: 67:93:c8:d4:26:70:52:05:0c:15:a4:84:e6:f8:39: 09:89:6b:6a:69:b7:f6:5f:12:53:c5:ef:5c:33:53: 59:7a:34:e9:58:91:09:5d:52:d0:8f:df:e4:f5:4f: a6:35:5f:63:d0:9d:5d:35:6f:fa:e5:01:fe:ab:87: 6a:18:a1:73:a5:e2:76:23:d3:87:0e:7c:bb:45:24: a2:0b:4e:7c:93:a5:99:3f:47:17:08:aa:c9:c4:78: ad:2e:dc:f6:44:f2:7e:05:25:d3:7d:61:db:d4:58: e3:de:50:d4:85:68:10:06:b7:68:e8:f5:df:96:e3: e9:e1:7c:00:cd:5c:68:e7:a2:a8:fe:11:71:68:e1: c8:e3:aa:7e:a0:ea:74:0b:84:19:b2:13:ba:4b:88: 55:e3:09:2b:bc:5b:94:82:27:d2:c9:4f:ea:46:4d: ee:de:f9:3f:e2:f0:24:d9:8a:e5:98:c9:ec:ae:cf: 7d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:98:CA:D4:D6:57:5A:47:EF:AF:8E:B5:39:19:A2:3E:FD:DD:1B:90 X509v3 Authority Key Identifier: keyid:36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8c:23:1b:d1:08:96:38:3e:42:95:82:b0:40:e1:e0:1f:ab: a9:d8:92:c5:22:07:74:4a:db:51:4a:fd:62:d1:d6:8b:16:c9: b7:fb:41:14:ad:bc:b1:3c:1d:7f:9e:cc:2e:62:3a:9a:39:46: 86:e1:88:37:25:87:5b:39:c3:0b:9a:40:06:30:66:87:a4:28: dd:bd:fe:8c:a8:e2:1a:04:10:15:7a:8d:f1:43:e1:5c:cb:c3: 88:30:30:76:37:6f:5d:58:00:32:2e:5b:a9:0d:d4:27:29:0a: 53:c5:26:20:6f:2c:5c:ec:b3:52:10:92:0f:87:96:8a:4b:c9: de:33:35:fd:50:6e:6b:c0:ba:0b:94:dc:2e:7c:97:6e:cb:bd: b3:e6:da:81:f6:1b:77:e3:64:73:ef:be:1a:24:16:ff:57:42: 71:6c:f2:57:fb:71:57:9f:03:7b:30:d2:ae:96:c0:92:1d:8f: 78:f7:d8:7c:16:a6:1a:88:40:8d:f4:6f:6c:fc:fb:e6:d5:f9: 53:f5:c5:a5:ed:28:d2:7e:0e:4b:56:cc:4e:71:cf:d0:50:87: 4e:ca:ed:c3:9a:1c:d8:a7:5b:6c:25:7e:52:a7:87:fd:2b:83: 11:e3:ce:a6:4e:ba:d4:03:ec:55:ca:20:18:96:b8:e9:16:bd: 6b:af:84:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbdZJPKhiKWDQyjVc0qnzGvoMhgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VF NDlFOEExNzAeFw0yNDExMjEwMzQ2MzZaFw0yNDExMjQxNTEyMzZaMDMxMTAvBgNV BAMTKDREOThDQUQ0RDY1NzVBNDdFRkFGOEVCNTM5MTlBMjNFRkRERDFCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoNTtLnmV0oNYcyeHVL4wZQ8cf LthSNiS6LfdoVSXGyEYbf5AXXWm573eiBtkD+THouFW8a0/VxGnJR1UXQi2LkxHA L3n4blPnWmeTyNQmcFIFDBWkhOb4OQmJa2ppt/ZfElPF71wzU1l6NOlYkQldUtCP 3+T1T6Y1X2PQnV01b/rlAf6rh2oYoXOl4nYj04cOfLtFJKILTnyTpZk/RxcIqsnE eK0u3PZE8n4FJdN9YdvUWOPeUNSFaBAGt2jo9d+W4+nhfADNXGjnoqj+EXFo4cjj qn6g6nQLhBmyE7pLiFXjCSu8W5SCJ9LJT+pGTe7e+T/i8CTZiuWYyeyuz32zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTZjK1NZXWkfvr461ORmiPv3dG5AwHwYDVR0j BBgwFoAUNuaOKiZOGL/Z9J5HLQ0mfuSeihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2QyMDMxYi0yNzYxLTRjMzYtYjY5MC01YjY5ZDE1NjliYWUvMC8zNkU2OEUyQTI2 NEUxOEJGRDlGNDlFNDcyRDBEMjY3RUU0OUU4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VFNDlF OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdkMjAzMWItMjc2MS00YzM2LWI2 OTAtNWI2OWQxNTY5YmFlLzAvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2 N0VFNDlFOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+MIxvRCJY4PkKVgrBA4eAfq6nYksUiB3RK 21FK/WLR1osWybf7QRStvLE8HX+ezC5iOpo5RobhiDclh1s5wwuaQAYwZoekKN29 /oyo4hoEEBV6jfFD4VzLw4gwMHY3b11YADIuW6kN1CcpClPFJiBvLFzss1IQkg+H lopLyd4zNf1QbmvAuguU3C58l27LvbPm2oH2G3fjZHPvvhokFv9XQnFs8lf7cVef A3sw0q6WwJIdj3j32HwWphqIQI30b2z8++bV+VP1xaXtKNJ+DktWzE5xz9BQh07K 7cOaHNinW2wlflKnh/0rgxHjzqZOutQD7FXKIBiWuOkWvWuvhP8= -----END CERTIFICATE-----Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org