$ rpki-client -vvf repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft File: F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft (raw, json) Hash identifier: 02NSDD7mklU0mMr4UqMR1HvZ6JzQSlfZ1Hs6+61Khzk= Subject key identifier: 7E:FC:81:79:C3:32:5D:31:65:ED:BA:8A:1B:14:B3:EE:FA:40:9D:60 Authority key identifier: F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 Certificate issuer: /CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Certificate serial: 63A7E125DC8F397DD80CCDAB28CFDDE1961F24B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft Manifest number: 0126 Signing time: Mon 25 Nov 2024 04:51:51 +0000 Manifest this update: Mon 25 Nov 2024 04:46:51 +0000 Manifest next update: Thu 28 Nov 2024 07:08:51 +0000 Files and hashes: 1: F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl (hash: xTWT2LS5w279q40XzTNLzMM7chSyrrUHUExUx2IVZXE=) 2: 3130332e37352e36362e302f32332d3234203d3e20313530353231.roa (hash: WWdZOAOuhcF0EudE1vG2xPCC/Y1nTtXizwc34RRp27g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a7:e1:25:dc:8f:39:7d:d8:0c:cd:ab:28:cf:dd:e1:96:1f:24:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71A5EA4A463A015DB17D32923D3F431A6F20F62 Validity Not Before: Nov 25 04:46:51 2024 GMT Not After : Nov 28 07:08:51 2024 GMT Subject: CN=7EFC8179C3325D3165EDBA8A1B14B3EEFA409D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9e:1b:d0:55:4d:39:8e:9e:43:3a:7d:77:4b: 85:d3:23:db:33:6c:8b:90:b1:76:53:99:18:5c:45: 45:c2:e6:69:cb:c6:70:d7:50:ca:e2:8f:8a:d9:08: 4c:c4:10:72:c5:ab:43:6e:20:44:51:65:be:9c:c7: a0:d7:dd:7c:e4:37:26:44:93:e1:28:83:c8:a2:a3: 5b:ff:d0:a4:c5:16:73:51:2d:34:76:c4:bb:24:e2: 7e:7d:a3:17:6d:87:f3:a1:e3:1c:07:95:3f:cd:66: 95:91:39:50:1c:1c:38:63:4e:00:ea:a9:01:8a:fb: 71:87:ef:d7:63:d4:4e:0c:8a:8f:93:47:ab:bb:06: 5f:9a:c5:3f:bb:8c:d6:5f:b8:05:d6:bb:8b:95:4e: ca:26:d3:ce:97:18:a6:e3:b1:1c:f3:96:f7:f2:7b: 65:ca:d1:ec:5e:4f:e9:43:f1:dc:c0:e1:7e:40:9b: bc:51:63:8c:06:4b:74:3e:8d:61:b5:63:96:a3:ef: 07:b7:93:1e:30:fe:ef:ca:0e:b2:a2:33:83:a2:9f: ea:79:fd:aa:be:57:40:b0:e9:f1:87:f2:30:fc:79: 35:c2:75:bd:1d:f8:a6:b4:da:d9:45:57:06:23:ec: b4:5f:a8:8e:2b:f6:a2:90:38:77:27:79:f0:7c:92: 9e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FC:81:79:C3:32:5D:31:65:ED:BA:8A:1B:14:B3:EE:FA:40:9D:60 X509v3 Authority Key Identifier: keyid:F7:1A:5E:A4:A4:63:A0:15:DB:17:D3:29:23:D3:F4:31:A6:F2:0F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71A5EA4A463A015DB17D32923D3F431A6F20F62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3f76c6d-f850-4c49-854c-55f382844c97/0/F71A5EA4A463A015DB17D32923D3F431A6F20F62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:9b:a7:20:df:30:32:dc:19:70:23:97:12:fc:b2:98:6b:23: d8:11:f7:47:d0:47:be:1d:6b:49:87:1a:91:f0:3e:8f:71:ab: dd:ce:f8:54:e5:ac:e7:44:7c:53:8f:60:bc:85:bf:d0:33:b8: be:51:4c:dc:43:bc:87:9e:4c:d6:14:df:6c:a8:04:77:9f:ae: 41:cb:ec:06:02:58:13:81:b8:de:42:15:5d:5d:e5:3e:92:d0: ca:fd:39:a9:08:35:ea:b4:5c:7a:66:88:7a:9c:1f:83:79:31: c7:f6:48:de:c3:d4:70:77:2f:15:a4:86:5a:0c:2b:cc:f3:c1: e3:24:90:69:db:3c:c4:78:85:83:f5:ac:55:03:db:25:51:bf: 18:65:78:8b:6e:98:f5:61:08:6f:cb:5b:02:43:33:32:88:44: 27:62:3f:5b:56:3a:9f:47:b7:4f:89:db:0d:d4:c9:ce:0b:df: b1:e8:63:92:16:e0:8f:12:ca:6b:f4:ed:98:6c:fe:9c:40:82: 5d:c5:a7:d6:b0:9a:5b:a9:99:02:75:11:58:23:bc:cd:d3:fd: 78:82:03:3e:14:d6:48:2b:df:40:f6:87:cc:19:f0:3b:3b:4d: 04:99:09:c0:ef:6b:0f:67:e3:5a:5f:ea:47:e6:48:f6:c6:b3: 25:98:e5:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6fhJdyPOX3YDM2rKM/d4ZYfJLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFB NkYyMEY2MjAeFw0yNDExMjUwNDQ2NTFaFw0yNDExMjgwNzA4NTFaMDMxMTAvBgNV BAMTKDdFRkM4MTc5QzMzMjVEMzE2NUVEQkE4QTFCMTRCM0VFRkE0MDlENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjnhvQVU05jp5DOn13S4XTI9sz bIuQsXZTmRhcRUXC5mnLxnDXUMrij4rZCEzEEHLFq0NuIERRZb6cx6DX3XzkNyZE k+Eog8iio1v/0KTFFnNRLTR2xLsk4n59oxdth/Oh4xwHlT/NZpWROVAcHDhjTgDq qQGK+3GH79dj1E4Mio+TR6u7Bl+axT+7jNZfuAXWu4uVTsom086XGKbjsRzzlvfy e2XK0exeT+lD8dzA4X5Am7xRY4wGS3Q+jWG1Y5aj7we3kx4w/u/KDrKiM4Oin+p5 /aq+V0Cw6fGH8jD8eTXCdb0d+Ka02tlFVwYj7LRfqI4r9qKQOHcnefB8kp4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfvyBecMyXTFl7bqKGxSz7vpAnWAwHwYDVR0j BBgwFoAU9xpepKRjoBXbF9MpI9P0MabyD2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Y3NmM2ZC1mODUwLTRjNDktODU0Yy01NWYzODI4NDRjOTcvMC9GNzFBNUVBNEE0 NjNBMDE1REIxN0QzMjkyM0QzRjQzMUE2RjIwRjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0MzFBNkYy MEY2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNmNzZjNmQtZjg1MC00YzQ5LTg1 NGMtNTVmMzgyODQ0Yzk3LzAvRjcxQTVFQTRBNDYzQTAxNURCMTdEMzI5MjNEM0Y0 MzFBNkYyMEY2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEebpyDfMDLcGXAjlxL8sphrI9gR90fQR74d a0mHGpHwPo9xq93O+FTlrOdEfFOPYLyFv9AzuL5RTNxDvIeeTNYU32yoBHefrkHL 7AYCWBOBuN5CFV1d5T6S0Mr9OakINeq0XHpmiHqcH4N5Mcf2SN7D1HB3LxWkhloM K8zzweMkkGnbPMR4hYP1rFUD2yVRvxhleItumPVhCG/LWwJDMzKIRCdiP1tWOp9H t0+J2w3Uyc4L37HoY5IW4I8Symv07Zhs/pxAgl3Fp9awmlupmQJ1EVgjvM3T/XiC Az4U1kgr30D2h8wZ8Ds7TQSZCcDvaw9n41pf6kfmSPbGsyWY5U4= -----END CERTIFICATE-----Generated at Mon Nov 25 06:02:39 2024 by rpki-client on console-ams.rpki-client.org