$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: eBeO+cTmv+GRfVNpu4ykbZUa0cIK4Y9LR9ZW5sZ9M5Y= Subject key identifier: F7:93:33:7B:E1:00:04:DF:E9:86:9C:67:EA:09:54:19:38:8C:D2:9D Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 7757B51490C78FD5705AF0952D4B171519DC0E28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: AA Signing time: Fri 22 Nov 2024 16:10:05 +0000 Manifest this update: Fri 22 Nov 2024 16:05:05 +0000 Manifest next update: Tue 26 Nov 2024 02:59:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: t+/ltNEKlVjdjbing0y5rXlBNvEGGfl5URGQ6OaCjbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:57:b5:14:90:c7:8f:d5:70:5a:f0:95:2d:4b:17:15:19:dc:0e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Nov 22 16:05:05 2024 GMT Not After : Nov 26 02:59:05 2024 GMT Subject: CN=F793337BE10004DFE9869C67EA095419388CD29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:4f:94:f2:92:94:5f:aa:b7:83:53:53:70: 0a:6f:35:8a:bf:54:49:16:83:ac:c3:24:f5:8e:5a: fc:76:2d:c2:9e:32:70:76:2c:7a:6a:a1:b5:89:ae: ea:68:4d:d1:fb:5d:4c:c9:28:b6:95:9f:4e:9b:6d: 11:fc:18:25:c0:b1:ab:db:a7:5e:d9:a1:93:9d:f9: 97:74:5c:9a:fb:f8:0a:49:7c:7c:7f:dc:a7:0d:c8: bc:fe:62:2d:21:5b:dd:dd:14:f6:97:0a:0f:c3:50: c3:0d:f8:2f:c7:93:5c:bd:12:38:fa:4b:cd:ba:82: 18:92:e0:6c:e3:4e:23:cb:e2:65:95:5d:f2:d2:cd: ea:c2:05:50:ca:19:45:25:cf:a3:cf:a9:9d:b6:c9: 27:aa:7a:a8:73:2d:66:7a:32:87:14:5c:af:79:4e: ca:4b:89:11:f0:8a:18:a2:63:69:fe:86:bc:8b:dd: 59:53:9f:e4:e9:bc:4b:b2:ab:6d:d6:e8:7c:25:20: ad:03:51:3c:3f:68:3f:1a:d4:dc:83:35:14:2c:ff: 44:19:13:76:05:06:78:72:71:4d:cb:5a:84:96:8b: 74:f0:08:f3:d1:5e:d2:04:64:7d:57:bb:ea:77:4d: 74:d7:b2:20:83:c4:e7:35:7f:1f:2c:6d:78:a5:8d: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:93:33:7B:E1:00:04:DF:E9:86:9C:67:EA:09:54:19:38:8C:D2:9D X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:da:80:c6:5a:46:3d:b2:e6:95:10:7c:53:6a:85:01:93:55: eb:97:2d:68:e4:df:1c:64:0f:81:8f:04:da:32:4f:7a:9c:90: a9:25:36:02:ca:c4:13:ad:43:a8:a3:62:de:60:72:e9:b8:37: 66:6d:84:52:18:29:30:b2:6a:4f:ad:ae:20:30:29:c2:81:51: df:53:68:c7:a7:5d:15:34:07:92:93:1f:8f:5a:95:30:5b:79: 1e:8d:5f:b7:55:3a:35:ce:24:40:d0:fb:26:cf:6d:5a:64:b5: b0:48:d4:45:47:2f:17:64:01:c6:4b:de:6d:83:45:b7:77:8c: c1:f4:d9:54:6e:e1:82:29:7e:ae:e7:bc:1e:4f:fd:28:dc:89: c5:96:8c:38:0b:33:d4:b5:0a:32:af:c6:81:b4:c3:5e:57:4a: fb:15:cf:d1:93:b3:d5:a3:4e:63:48:94:bc:52:bf:62:1f:27: aa:70:35:94:d5:76:05:d0:61:17:9c:50:fb:ad:44:6f:af:ef: 06:94:39:b4:dd:84:8c:e3:b2:5c:f8:25:3e:7b:ba:17:76:f0: 48:2b:b7:be:83:81:73:10:83:76:54:7b:45:94:9a:39:e5:4a: bd:c6:1f:5e:f0:46:fc:20:4c:09:bd:da:91:7a:e8:84:1d:3c: 43:37:33:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1e1FJDHj9VwWvCVLUsXFRncDigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNDExMjIxNjA1MDVaFw0yNDExMjYwMjU5MDVaMDMxMTAvBgNV BAMTKEY3OTMzMzdCRTEwMDA0REZFOTg2OUM2N0VBMDk1NDE5Mzg4Q0QyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmU+U8pKUX6q3g1NTcApvNYq/ VEkWg6zDJPWOWvx2LcKeMnB2LHpqobWJrupoTdH7XUzJKLaVn06bbRH8GCXAsavb p17ZoZOd+Zd0XJr7+ApJfHx/3KcNyLz+Yi0hW93dFPaXCg/DUMMN+C/Hk1y9Ejj6 S826ghiS4GzjTiPL4mWVXfLSzerCBVDKGUUlz6PPqZ22ySeqeqhzLWZ6MocUXK95 TspLiRHwihiiY2n+hryL3VlTn+TpvEuyq23W6HwlIK0DUTw/aD8a1NyDNRQs/0QZ E3YFBnhycU3LWoSWi3TwCPPRXtIEZH1Xu+p3TXTXsiCDxOc1fx8sbXiljcVrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU95Mze+EABN/phpxn6glUGTiM0p0wHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfagMZaRj2y5pUQfFNqhQGTVeuXLWjk3xxk D4GPBNoyT3qckKklNgLKxBOtQ6ijYt5gcum4N2ZthFIYKTCyak+triAwKcKBUd9T aMenXRU0B5KTH49alTBbeR6NX7dVOjXOJEDQ+ybPbVpktbBI1EVHLxdkAcZL3m2D Rbd3jMH02VRu4YIpfq7nvB5P/SjcicWWjDgLM9S1CjKvxoG0w15XSvsVz9GTs9Wj TmNIlLxSv2IfJ6pwNZTVdgXQYRecUPutRG+v7waUObTdhIzjslz4JT57uhd28Egr t76DgXMQg3ZUe0WUmjnlSr3GH17wRvwgTAm92pF66IQdPEM3M/4= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:51 2024 by rpki-client on console-ams.rpki-client.org