$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: x7bHrNNqEhyPBHaZPEqllK2ytUQMTc2snJPl6RKOj1g= Subject key identifier: AB:EB:54:09:3D:31:60:B0:04:D6:D3:63:AD:B1:49:9D:7C:CB:66:D9 Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 35FB8655995BC433CC88087D2DA03A17A527251B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 0170 Signing time: Sat 23 Nov 2024 22:22:10 +0000 Manifest this update: Sat 23 Nov 2024 22:17:10 +0000 Manifest next update: Tue 26 Nov 2024 23:02:10 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: isT5M4rsqVEhav2Hyv4Ji2E7AdWhuUKmvauLEzL0Z+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:fb:86:55:99:5b:c4:33:cc:88:08:7d:2d:a0:3a:17:a5:27:25:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Nov 23 22:17:10 2024 GMT Not After : Nov 26 23:02:10 2024 GMT Subject: CN=ABEB54093D3160B004D6D363ADB1499D7CCB66D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:ce:92:c7:89:62:9c:97:fc:d7:a0:ec:80: be:3c:06:16:94:6c:b1:a0:c5:81:c4:71:91:1a:d2: d1:1d:92:82:5c:ce:42:94:4f:fa:ac:37:e0:56:5d: 5e:b5:54:28:48:12:56:c3:7e:2d:e9:cf:1f:f4:ae: e4:be:72:0f:92:25:0b:23:fc:ea:72:ce:14:e6:39: 21:3f:e1:84:ca:5b:59:0f:1f:a6:a5:ab:30:11:91: 48:ca:ac:06:4e:5c:b3:62:28:1e:5b:e7:83:91:68: d0:63:15:14:b2:cb:ef:c5:3d:8c:b0:8d:4e:75:f3: d8:55:2f:34:92:76:d3:e2:e5:2d:b7:88:48:61:91: 8c:6d:b0:9b:bb:0e:2b:da:f2:25:28:e5:02:56:10: 7b:f0:35:01:fe:a3:2d:c8:50:ff:f2:4f:c1:47:54: bf:7f:b2:0d:08:f7:ee:b5:2d:24:d8:ee:19:c3:40: 30:1e:00:c9:e1:50:da:e7:00:0f:2f:0d:41:e2:89: 5f:ca:a1:3d:1a:d8:3b:c5:b4:d8:6a:8c:25:33:ec: 91:87:22:11:de:4d:91:01:f3:3c:fb:3f:79:d1:b1: 49:5f:e4:71:28:46:b9:a8:3d:61:e8:fc:af:b8:97: 52:88:7b:17:cc:60:7b:e2:16:64:a6:44:2c:9a:13: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EB:54:09:3D:31:60:B0:04:D6:D3:63:AD:B1:49:9D:7C:CB:66:D9 X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:74:e6:ee:ed:fe:02:f5:41:5c:5c:9f:e7:f9:28:36:28:52: c6:65:cc:9f:fa:d7:72:53:d4:ec:d4:7a:b0:3f:0b:32:0f:12: f2:5d:5f:c1:e4:60:58:95:23:20:a3:97:60:4d:6b:da:df:b7: 6d:3b:3a:0d:ad:30:e3:0f:d4:70:7a:d0:40:4e:fb:f1:55:5e: 4d:e0:70:af:8b:b9:34:44:fd:6f:2d:41:a1:d1:45:50:3d:e3: 4d:f2:ca:0d:80:5f:74:70:5d:16:49:2d:c9:bc:83:96:6a:5c: 89:2d:5f:54:da:64:ce:fa:ba:cc:f9:98:f6:c0:39:77:89:c9: 53:27:41:e9:5a:aa:ef:55:9d:3d:05:18:38:6f:26:2f:4d:36: 4f:39:71:86:61:7b:5d:fc:33:e8:b0:3a:0c:cb:2f:b8:d7:15: be:c6:98:0f:71:5c:94:6b:a7:7e:46:d1:03:9a:d3:44:b9:41: db:60:fe:f0:d6:35:ca:47:47:a4:b3:b7:ea:84:38:89:e5:20: b5:27:8c:ca:26:d9:d3:a3:cf:6f:8f:f5:3c:e7:5d:88:78:41: 96:62:c3:b9:c9:b9:bf:b0:67:04:c4:f6:7a:5e:c9:ae:8a:cb: 42:f9:ce:9d:71:a4:a9:c0:9a:9c:14:d5:86:ac:6f:bf:a6:bc: 99:da:71:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfuGVZlbxDPMiAh9LaA6F6UnJRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNDExMjMyMjE3MTBaFw0yNDExMjYyMzAyMTBaMDMxMTAvBgNV BAMTKEFCRUI1NDA5M0QzMTYwQjAwNEQ2RDM2M0FEQjE0OTlEN0NDQjY2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ws6Sx4linJf816DsgL48BhaU bLGgxYHEcZEa0tEdkoJczkKUT/qsN+BWXV61VChIElbDfi3pzx/0ruS+cg+SJQsj /OpyzhTmOSE/4YTKW1kPH6alqzARkUjKrAZOXLNiKB5b54ORaNBjFRSyy+/FPYyw jU5189hVLzSSdtPi5S23iEhhkYxtsJu7Diva8iUo5QJWEHvwNQH+oy3IUP/yT8FH VL9/sg0I9+61LSTY7hnDQDAeAMnhUNrnAA8vDUHiiV/KoT0a2DvFtNhqjCUz7JGH IhHeTZEB8zz7P3nRsUlf5HEoRrmoPWHo/K+4l1KIexfMYHviFmSmRCyaE47NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq+tUCT0xYLAE1tNjrbFJnXzLZtkwHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV05u7t/gL1QVxcn+f5KDYoUsZlzJ/613JT 1OzUerA/CzIPEvJdX8HkYFiVIyCjl2BNa9rft207Og2tMOMP1HB60EBO+/FVXk3g cK+LuTRE/W8tQaHRRVA9403yyg2AX3RwXRZJLcm8g5ZqXIktX1TaZM76usz5mPbA OXeJyVMnQelaqu9VnT0FGDhvJi9NNk85cYZhe138M+iwOgzLL7jXFb7GmA9xXJRr p35G0QOa00S5Qdtg/vDWNcpHR6Szt+qEOInlILUnjMom2dOjz2+P9TznXYh4QZZi w7nJub+wZwTE9npeya6Ky0L5zp1xpKnAmpwU1Yasb7+mvJnacU8= -----END CERTIFICATE-----Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org