$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: +nt3wTmAc88YbciTsdPut2sx7B0lolhhxwv7+NSEwEU= Subject key identifier: 2C:79:24:58:6D:C1:FB:82:7F:61:C4:D4:88:59:74:38:17:DE:88:BC Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 48AA3BB831F3C09F54A7C8D5042D94D14CC741D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: 31 Signing time: Sat 23 Nov 2024 22:22:08 +0000 Manifest this update: Sat 23 Nov 2024 22:17:08 +0000 Manifest next update: Wed 27 Nov 2024 00:35:08 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: KJI2mqiXcwLLQvnaJmPwXnW2hAggpsrJAKBlae4n0mo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:aa:3b:b8:31:f3:c0:9f:54:a7:c8:d5:04:2d:94:d1:4c:c7:41:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Nov 23 22:17:08 2024 GMT Not After : Nov 27 00:35:08 2024 GMT Subject: CN=2C7924586DC1FB827F61C4D48859743817DE88BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:03:8a:de:bc:84:46:77:14:a8:08:be:44: ea:62:01:8a:1c:2a:10:ff:d7:f5:ec:f7:aa:3e:25: 33:a1:a8:5c:9f:6d:f1:e7:ae:53:91:3a:98:0d:04: e5:64:5d:16:07:6b:57:1c:d8:db:e1:d7:86:55:6e: f4:2c:03:33:82:3b:fa:89:52:2b:a5:6d:1b:1c:01: 86:64:c9:6d:41:15:eb:20:16:56:9b:31:f0:7e:cf: 0c:45:f8:37:7c:6e:ff:86:e2:b3:0b:75:7c:75:62: 50:0f:24:a4:aa:e7:cc:97:33:6e:50:60:78:e1:8b: 57:09:3d:6f:69:7b:57:8a:fd:1b:2b:c7:59:86:6e: cc:d8:0b:75:40:79:4a:b5:6b:99:73:77:bc:56:3c: 48:0d:2a:74:b2:08:04:37:46:c0:2d:5d:a1:25:93: f6:6e:d2:c5:2b:4e:0e:a5:89:80:d3:72:c8:84:ec: 52:35:e7:9c:a0:3e:dc:ca:4f:34:f9:ee:da:f0:c8: 23:00:86:03:29:84:b8:92:e3:46:6a:75:05:0c:ea: 48:35:52:38:d6:96:50:93:cc:a7:3e:50:22:57:94: cc:88:e2:b1:9e:d6:4f:40:4e:98:c9:2c:be:a0:5d: e1:a7:de:9f:14:57:6b:66:e0:65:16:2d:c7:e4:37: 1b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:79:24:58:6D:C1:FB:82:7F:61:C4:D4:88:59:74:38:17:DE:88:BC X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:75:c6:51:e9:fe:b6:0b:72:db:52:7f:2a:ee:c0:15:cb:3e: 33:92:b6:c8:a3:f1:56:9b:f0:d6:08:16:c1:75:a4:df:15:79: 9a:2e:e9:d3:f7:eb:65:22:05:9d:50:3b:c1:cc:26:c3:a3:0a: 2d:fe:a2:03:35:cd:5a:d1:69:ff:28:ac:de:89:d5:c6:7c:2b: fe:17:c9:e9:87:e8:64:f5:b0:b4:ce:fd:df:36:b8:47:ce:df: 5a:22:e2:a0:53:9e:ea:3a:1c:9d:2e:43:37:f5:d2:61:45:42: 74:db:40:67:0a:43:d0:a7:b5:47:41:c7:6b:40:55:c8:9e:ae: a1:3f:97:21:f2:ed:a6:59:1a:73:50:6e:c6:cc:45:78:d6:f0: 8d:6c:11:e5:15:b6:48:8a:a5:e8:f3:55:53:4d:10:2d:cb:c0: 9d:8b:64:51:5a:9b:5b:26:23:f9:41:a2:e7:38:77:5b:d6:bc: 7c:ec:ad:ad:06:4d:82:9c:a7:3d:08:57:01:2a:db:1f:f9:12: fa:d4:c0:00:80:01:e9:a7:1b:44:3c:de:d2:93:1d:ba:19:58: 6a:28:2c:6c:7d:42:f4:59:5b:3b:4d:44:6a:83:92:f0:a3:77: f6:79:19:e7:4b:dc:85:a8:b6:38:f5:2a:2b:3e:c2:3f:a6:b3: 10:02:10:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSKo7uDHzwJ9Up8jVBC2U0UzHQdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNDExMjMyMjE3MDhaFw0yNDExMjcwMDM1MDhaMDMxMTAvBgNV BAMTKDJDNzkyNDU4NkRDMUZCODI3RjYxQzRENDg4NTk3NDM4MTdERTg4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCGAOK3ryERncUqAi+ROpiAYoc KhD/1/Xs96o+JTOhqFyfbfHnrlOROpgNBOVkXRYHa1cc2Nvh14ZVbvQsAzOCO/qJ UiulbRscAYZkyW1BFesgFlabMfB+zwxF+Dd8bv+G4rMLdXx1YlAPJKSq58yXM25Q YHjhi1cJPW9pe1eK/Rsrx1mGbszYC3VAeUq1a5lzd7xWPEgNKnSyCAQ3RsAtXaEl k/Zu0sUrTg6liYDTcsiE7FI155ygPtzKTzT57trwyCMAhgMphLiS40ZqdQUM6kg1 UjjWllCTzKc+UCJXlMyI4rGe1k9ATpjJLL6gXeGn3p8UV2tm4GUWLcfkNxu/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULHkkWG3B+4J/YcTUiFl0OBfeiLwwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp1xlHp/rYLcttSfyruwBXLPjOStsij8Vab 8NYIFsF1pN8VeZou6dP362UiBZ1QO8HMJsOjCi3+ogM1zVrRaf8orN6J1cZ8K/4X yemH6GT1sLTO/d82uEfO31oi4qBTnuo6HJ0uQzf10mFFQnTbQGcKQ9CntUdBx2tA VcierqE/lyHy7aZZGnNQbsbMRXjW8I1sEeUVtkiKpejzVVNNEC3LwJ2LZFFam1sm I/lBouc4d1vWvHzsra0GTYKcpz0IVwEq2x/5EvrUwACAAemnG0Q83tKTHboZWGoo LGx9QvRZWztNRGqDkvCjd/Z5GedL3IWotjj1Kis+wj+msxACEE0= -----END CERTIFICATE-----Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org