$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: CD12wpkFUQbbqzPq4va9VSqSHBTp+TEEM1J9DqCFqEw= Subject key identifier: 77:E3:CE:D4:39:CB:56:8F:25:A7:16:E0:26:C7:A5:54:A1:7E:48:AD Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 3CB47BD4BD0E9E9F378E60F88D3FA46AC5A33904 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 017E Signing time: Fri 22 Nov 2024 08:42:02 +0000 Manifest this update: Fri 22 Nov 2024 08:37:02 +0000 Manifest next update: Mon 25 Nov 2024 20:05:02 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: rp3oq5Gvp5NjGS+7ywfehUe3nW0gXWfBnOAogVjx+Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 17:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b4:7b:d4:bd:0e:9e:9f:37:8e:60:f8:8d:3f:a4:6a:c5:a3:39:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Nov 22 08:37:02 2024 GMT Not After : Nov 25 20:05:02 2024 GMT Subject: CN=77E3CED439CB568F25A716E026C7A554A17E48AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e8:3a:38:bc:87:9a:c7:d9:cd:88:2c:0d:ce: ee:32:3a:24:07:d9:f4:0c:2a:42:44:c5:d3:a4:df: 28:cc:15:19:e0:c4:8a:5a:fb:70:37:c8:eb:af:e1: 6c:16:12:ee:33:44:63:1d:39:6b:99:e9:c3:09:21: 07:78:48:4a:28:c5:95:b9:28:66:28:fe:b5:ff:75: 90:be:24:82:80:75:8c:13:38:c7:73:87:d6:f7:fb: 7f:eb:37:9b:30:18:3f:0b:5a:e0:df:f1:ce:77:23: 50:30:16:46:1a:16:40:0e:09:4a:23:fc:9d:2c:e5: 59:c6:43:be:fe:f9:a3:36:90:0d:47:7d:4a:00:6b: 6a:ba:82:93:88:e6:52:60:d9:7f:94:a8:b8:04:eb: ee:90:61:3d:f5:80:8f:2b:2b:11:8f:12:fc:36:3a: 8d:6f:26:80:00:bc:1d:5d:02:d6:e4:a1:dd:1a:e3: 31:7f:ea:27:82:9b:73:fa:9f:a8:a0:b5:ce:d5:89: 27:73:33:24:58:a1:d9:bc:3e:57:a1:5e:71:b0:46: 9d:10:5d:e5:05:86:57:c0:4b:13:c8:77:0f:df:04: 82:cb:4d:79:b8:e5:77:3c:cf:65:7b:c1:8f:dd:77: b1:e2:05:2b:0d:3c:44:24:3d:93:d7:c9:b6:b4:0a: e9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E3:CE:D4:39:CB:56:8F:25:A7:16:E0:26:C7:A5:54:A1:7E:48:AD X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8c:e4:c3:d1:49:3d:28:3c:ce:73:b0:7a:76:7d:a1:2f:6c: e2:fe:67:36:b0:b1:68:94:bd:ba:33:d7:f6:0e:5f:02:cb:53: 66:88:6d:da:b7:57:24:c3:6b:d9:1c:99:0e:f9:61:bc:b3:c4: 66:a0:83:48:21:10:a5:13:90:47:1f:d6:17:94:4e:8e:da:54: ed:32:59:4c:fb:9f:4a:b3:4b:34:5e:54:80:7b:bb:60:fb:5f: 29:85:ec:39:3f:41:19:ad:7f:cd:46:33:e6:31:09:7a:96:7c: 6d:a7:a1:19:ea:77:1b:0f:45:2f:e9:44:a8:95:b9:ca:f5:7f: 11:d3:5e:db:e9:15:16:43:e4:0c:00:a0:43:ae:63:38:39:36: 85:ab:94:74:07:74:db:e7:7a:00:b5:45:85:59:75:fe:c1:42: b4:22:cb:00:be:40:6f:46:2f:2a:f5:32:c7:e9:9f:cc:da:1d: 74:ba:0c:cf:78:7b:e6:26:65:a6:5d:1d:e1:32:05:32:95:64: 0a:de:a5:28:a3:98:56:34:da:29:64:71:0f:88:04:cc:6e:cc: 99:ca:52:cf:d3:a0:02:eb:49:2f:ca:a4:9d:26:01:55:4c:74: b6:64:8b:f2:a9:fc:ef:21:0a:57:5f:70:9c:7f:19:b4:a1:0f: 0d:52:c9:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLR71L0Onp83jmD4jT+kasWjOQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNDExMjIwODM3MDJaFw0yNDExMjUyMDA1MDJaMDMxMTAvBgNV BAMTKDc3RTNDRUQ0MzlDQjU2OEYyNUE3MTZFMDI2QzdBNTU0QTE3RTQ4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6Do4vIeax9nNiCwNzu4yOiQH 2fQMKkJExdOk3yjMFRngxIpa+3A3yOuv4WwWEu4zRGMdOWuZ6cMJIQd4SEooxZW5 KGYo/rX/dZC+JIKAdYwTOMdzh9b3+3/rN5swGD8LWuDf8c53I1AwFkYaFkAOCUoj /J0s5VnGQ77++aM2kA1HfUoAa2q6gpOI5lJg2X+UqLgE6+6QYT31gI8rKxGPEvw2 Oo1vJoAAvB1dAtbkod0a4zF/6ieCm3P6n6igtc7ViSdzMyRYodm8PlehXnGwRp0Q XeUFhlfASxPIdw/fBILLTXm45Xc8z2V7wY/dd7HiBSsNPEQkPZPXyba0Cuk3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd+PO1DnLVo8lpxbgJselVKF+SK0wHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaM5MPRST0oPM5zsHp2faEvbOL+ZzawsWiU vboz1/YOXwLLU2aIbdq3VyTDa9kcmQ75YbyzxGagg0ghEKUTkEcf1heUTo7aVO0y WUz7n0qzSzReVIB7u2D7XymF7Dk/QRmtf81GM+YxCXqWfG2noRnqdxsPRS/pRKiV ucr1fxHTXtvpFRZD5AwAoEOuYzg5NoWrlHQHdNvnegC1RYVZdf7BQrQiywC+QG9G Lyr1Msfpn8zaHXS6DM94e+YmZaZdHeEyBTKVZArepSijmFY02ilkcQ+IBMxuzJnK Us/ToALrSS/KpJ0mAVVMdLZki/Kp/O8hCldfcJx/GbShDw1SyUM= -----END CERTIFICATE-----Generated at Fri Nov 22 09:30:03 2024 by rpki-client on console-fra.rpki-client.org