$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: P8KWx53rYDJ69Hfg2R/JfB1VrBdPB6zbzcuSy/3duZ8= Subject key identifier: 1E:7A:62:0F:BB:6D:68:82:D1:A8:1C:1A:56:6E:9A:21:86:46:5F:3B Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 3EDB058FEB613DB4CDF9999162989C9D736F9C87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 01C8 Signing time: Fri 22 Nov 2024 05:52:12 +0000 Manifest this update: Fri 22 Nov 2024 05:47:12 +0000 Manifest next update: Mon 25 Nov 2024 15:36:12 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: 9ECKofALr66NQfO+Dlgge1ir4e8VXMDIXYdZaEcCJlA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:db:05:8f:eb:61:3d:b4:cd:f9:99:91:62:98:9c:9d:73:6f:9c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Nov 22 05:47:12 2024 GMT Not After : Nov 25 15:36:12 2024 GMT Subject: CN=1E7A620FBB6D6882D1A81C1A566E9A2186465F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:74:68:fe:d5:85:57:c3:dc:44:10:d7:47: fb:de:79:e1:d0:d0:99:36:7b:b4:0b:ea:7e:e2:b8: 7f:8d:f3:1d:32:74:58:fb:9a:dd:aa:76:22:24:99: 7b:25:b3:a0:fa:af:5c:59:d7:7e:db:6a:3b:bf:6c: c6:60:23:ed:0b:c7:fd:aa:ac:8f:d4:4a:18:6a:26: f6:9f:ed:2b:ba:a7:07:e5:59:de:b7:43:1b:1f:70: 6f:7f:c6:54:5a:a4:2c:77:6f:46:9f:3f:ec:94:58: fe:37:cf:b6:91:97:fd:2e:b9:e6:64:09:32:3a:12: 80:66:db:4f:46:cd:ee:e3:48:ec:b0:8e:04:12:c6: 31:44:0c:0c:f8:c5:e9:b0:8b:4a:91:60:ac:54:a0: 23:cb:05:31:77:82:89:d7:b0:f6:00:f9:61:31:40: 00:d6:c8:0c:7f:0b:f6:c6:00:ce:f4:bf:7d:bb:05: 64:2a:0e:df:38:1d:54:7c:3a:65:ad:da:1d:d6:30: 5e:85:80:6a:d6:38:50:28:47:c8:62:31:47:ae:01: 84:d2:6d:e5:29:c0:4b:94:31:49:dd:84:59:8f:0a: 82:70:9d:fd:50:99:9f:10:4e:89:7d:d7:e3:42:9b: a0:19:51:f0:ac:2d:7c:38:75:d6:dc:17:15:f3:21: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7A:62:0F:BB:6D:68:82:D1:A8:1C:1A:56:6E:9A:21:86:46:5F:3B X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:64:e2:8b:8f:7d:cc:21:e1:c5:ac:1c:56:fa:4c:11:bf:7f: d1:c6:da:c2:8d:98:f4:56:74:a1:dd:78:61:6e:52:07:92:77: 54:2e:0d:1e:3c:19:81:92:26:18:35:ae:29:4d:d8:8c:27:0e: 31:61:78:08:10:41:c1:f0:93:b2:3d:bb:6c:0d:c9:4f:b2:49: 91:36:f0:4c:b6:2d:fb:55:6e:60:47:f5:eb:28:ba:10:b0:55: ec:a3:74:87:ff:db:d3:5f:5f:79:cb:39:5d:36:fc:95:3f:bf: 37:57:85:3b:7f:1e:6e:5e:25:f5:ff:54:2b:10:24:66:ea:d2: 04:a3:5e:47:99:e9:ae:85:48:f9:60:15:70:f4:d2:bb:cd:73: 56:17:6c:0e:c2:3f:13:da:c7:27:b5:94:1e:4b:99:1a:f9:af: b8:79:4b:a6:c3:e7:1c:8c:17:69:12:b6:2c:f2:c4:1d:e3:f9: 00:42:93:ae:a2:38:42:71:39:f3:b2:c3:7d:d3:37:0e:b7:57: d5:2d:4f:a9:99:fe:e8:32:35:ee:c0:ae:74:1f:32:81:ec:2f: 23:59:78:14:39:61:3d:90:db:7f:48:0f:3f:05:e6:93:ab:bc: d6:b8:b9:21:94:84:51:c1:c3:2a:f0:d6:4a:11:4a:a8:4a:69: a0:94:2c:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtsFj+thPbTN+ZmRYpicnXNvnIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNDExMjIwNTQ3MTJaFw0yNDExMjUxNTM2MTJaMDMxMTAvBgNV BAMTKDFFN0E2MjBGQkI2RDY4ODJEMUE4MUMxQTU2NkU5QTIxODY0NjVGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvz3Ro/tWFV8PcRBDXR/veeeHQ 0Jk2e7QL6n7iuH+N8x0ydFj7mt2qdiIkmXsls6D6r1xZ137baju/bMZgI+0Lx/2q rI/UShhqJvaf7Su6pwflWd63QxsfcG9/xlRapCx3b0afP+yUWP43z7aRl/0uueZk CTI6EoBm209Gze7jSOywjgQSxjFEDAz4xemwi0qRYKxUoCPLBTF3gonXsPYA+WEx QADWyAx/C/bGAM70v327BWQqDt84HVR8OmWt2h3WMF6FgGrWOFAoR8hiMUeuAYTS beUpwEuUMUndhFmPCoJwnf1QmZ8QTol91+NCm6AZUfCsLXw4ddbcFxXzIavdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHnpiD7ttaILRqBwaVm6aIYZGXzswHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdk4ouPfcwh4cWsHFb6TBG/f9HG2sKNmPRW dKHdeGFuUgeSd1QuDR48GYGSJhg1rilN2IwnDjFheAgQQcHwk7I9u2wNyU+ySZE2 8Ey2LftVbmBH9esouhCwVeyjdIf/29NfX3nLOV02/JU/vzdXhTt/Hm5eJfX/VCsQ JGbq0gSjXkeZ6a6FSPlgFXD00rvNc1YXbA7CPxPaxye1lB5LmRr5r7h5S6bD5xyM F2kStizyxB3j+QBCk66iOEJxOfOyw33TNw63V9UtT6mZ/ugyNe7ArnQfMoHsLyNZ eBQ5YT2Q239IDz8F5pOrvNa4uSGUhFHBwyrw1koRSqhKaaCULKE= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org