$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: SdvL8KJAOlYFTxRW/vMiRmXPJeDuv1FusI/x/Io537k= Subject key identifier: 0A:F7:32:90:F7:E9:88:D4:5B:69:73:3F:0C:87:5F:83:A1:70:E2:9F Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 50570725DF7F21A87C4A77A0FCDCAE897315B2E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: 07 Signing time: Sun 24 Nov 2024 16:01:07 +0000 Manifest this update: Sun 24 Nov 2024 15:56:07 +0000 Manifest next update: Thu 28 Nov 2024 00:20:07 +0000 Files and hashes: 1: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: YpQuqsEe4pPCaFVE4TkHdEXx+I/5QJnMtdjGGx+mScc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:57:07:25:df:7f:21:a8:7c:4a:77:a0:fc:dc:ae:89:73:15:b2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Nov 24 15:56:07 2024 GMT Not After : Nov 28 00:20:07 2024 GMT Subject: CN=0AF73290F7E988D45B69733F0C875F83A170E29F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:cf:4e:b0:c5:b4:71:50:ac:c1:2e:9c:4a: 6b:2d:68:e9:a9:d4:2a:79:39:92:64:b4:43:04:c1: 64:7e:80:c1:d8:86:0d:4a:1b:d5:ea:25:bd:f0:82: 79:17:4e:8f:df:45:f0:7a:ba:4d:c9:6e:52:8c:57: a9:0d:bc:0c:66:05:15:bd:5f:82:fa:12:34:b8:a7: 7d:25:03:ed:03:fb:96:78:fb:b3:91:fe:56:8f:4a: 37:42:15:93:36:d0:93:c4:75:94:93:b5:19:0f:f0: 36:b5:00:fb:4c:9d:1f:b3:8d:93:e6:1d:8d:e3:1e: f5:e9:13:31:8a:ef:78:9e:0f:7e:14:20:aa:59:3f: 4b:03:41:31:dc:41:e3:cf:df:ad:91:9a:28:56:90: 30:ca:fa:ae:da:66:04:99:cd:54:b5:74:a9:b9:7e: 52:81:6e:28:63:1c:be:d5:21:cd:e4:46:1f:59:41: 69:0e:06:31:02:14:eb:f0:e3:42:5f:90:ee:eb:43: 7d:58:72:44:44:10:1c:8e:91:cb:fe:d3:21:de:de: 5b:2c:56:ab:0a:3e:74:cd:5d:e1:6e:78:3c:18:0f: e1:95:fb:24:ca:d8:08:09:09:fd:bb:09:92:6b:e6: 5c:cb:27:04:d7:dd:b9:e3:95:4f:ce:45:75:47:5e: f9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F7:32:90:F7:E9:88:D4:5B:69:73:3F:0C:87:5F:83:A1:70:E2:9F X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0b:49:b4:4a:a7:53:ac:d8:12:14:2c:87:ee:86:e0:15:88: 60:28:ff:2e:05:72:7d:cf:26:63:f9:46:bf:bb:67:3a:69:e3: 6f:5c:e8:73:aa:82:2a:4c:f8:1a:da:3d:a3:cf:b1:e5:45:1c: 08:b8:7f:49:8f:be:a7:0a:50:33:b6:6d:49:6e:41:15:d3:80: 48:9f:29:8c:98:52:45:19:fb:4a:53:51:b4:fa:cc:e9:4d:77: 42:67:0d:5c:6c:d3:85:04:6d:c8:7a:35:3d:93:0b:b2:89:41: a1:6c:b1:44:f5:f0:e8:c6:37:c6:28:0d:b2:d5:75:5c:b1:dd: 0c:84:2a:21:c7:28:04:5a:91:55:05:4a:00:52:32:32:23:93: bf:2e:50:80:9e:4e:70:8d:5e:77:de:6c:f4:0c:23:ee:8b:d3: 5d:44:b0:54:c2:64:24:ee:5c:95:27:71:aa:5b:99:d0:d9:cc: 9a:52:2f:f3:85:e7:8d:3b:51:87:26:eb:a3:d1:76:9a:65:ad: ac:8b:a5:e0:e2:9d:7a:9c:95:c5:aa:e4:56:28:b4:3f:87:06: b0:c7:a1:48:8e:60:02:55:80:ce:40:ae:fd:38:a2:c9:2a:6a: 93:b7:5d:ed:06:a1:c3:7c:53:89:7f:75:df:67:36:ef:44:b6: 68:4c:7a:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFcHJd9/Iah8Sneg/NyuiXMVsuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNDExMjQxNTU2MDdaFw0yNDExMjgwMDIwMDdaMDMxMTAvBgNV BAMTKDBBRjczMjkwRjdFOTg4RDQ1QjY5NzMzRjBDODc1RjgzQTE3MEUyOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqc9OsMW0cVCswS6cSmstaOmp 1Cp5OZJktEMEwWR+gMHYhg1KG9XqJb3wgnkXTo/fRfB6uk3JblKMV6kNvAxmBRW9 X4L6EjS4p30lA+0D+5Z4+7OR/laPSjdCFZM20JPEdZSTtRkP8Da1APtMnR+zjZPm HY3jHvXpEzGK73ieD34UIKpZP0sDQTHcQePP362RmihWkDDK+q7aZgSZzVS1dKm5 flKBbihjHL7VIc3kRh9ZQWkOBjECFOvw40JfkO7rQ31YckREEByOkcv+0yHe3lss VqsKPnTNXeFueDwYD+GV+yTK2AgJCf27CZJr5lzLJwTX3bnjlU/ORXVHXvm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCvcykPfpiNRbaXM/DIdfg6Fw4p8wHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoLSbRKp1Os2BIULIfuhuAViGAo/y4Fcn3P JmP5Rr+7Zzpp429c6HOqgipM+BraPaPPseVFHAi4f0mPvqcKUDO2bUluQRXTgEif KYyYUkUZ+0pTUbT6zOlNd0JnDVxs04UEbch6NT2TC7KJQaFssUT18OjGN8YoDbLV dVyx3QyEKiHHKARakVUFSgBSMjIjk78uUICeTnCNXnfebPQMI+6L011EsFTCZCTu XJUncapbmdDZzJpSL/OF5407UYcm66PRdpplrayLpeDinXqclcWq5FYotD+HBrDH oUiOYAJVgM5Arv04oskqapO3Xe0GocN8U4l/dd9nNu9EtmhMemI= -----END CERTIFICATE-----Generated at Sun Nov 24 17:17:41 2024 by rpki-client on console-fra.rpki-client.org