$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: 6jNyMk4id5+U5ALMfQ2b0OSKPM0b76W3sPcvI5GDzno= Subject key identifier: 1F:72:19:F4:19:61:96:AB:3A:14:E8:44:0E:D6:B5:17:16:5D:80:1B Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 5AA5A29752C44898F03737B172D8BC8182E4A60C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: 14 Signing time: Fri 22 Nov 2024 08:11:08 +0000 Manifest this update: Fri 22 Nov 2024 08:06:08 +0000 Manifest next update: Mon 25 Nov 2024 10:58:08 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: zew7w9/+y9gv6ernXNwVqmdDUBxBYW3RL9baXsHk3N8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 10:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a5:a2:97:52:c4:48:98:f0:37:37:b1:72:d8:bc:81:82:e4:a6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Nov 22 08:06:08 2024 GMT Not After : Nov 25 10:58:08 2024 GMT Subject: CN=1F7219F4196196AB3A14E8440ED6B517165D801B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a3:b9:fc:5d:f0:0b:11:05:c1:38:f8:09:74: 1e:6e:e0:16:4c:a6:fb:2c:79:71:c9:51:14:4f:5d: 66:57:1c:60:a2:92:bb:68:f3:47:7c:67:1a:cc:3b: 82:4a:56:80:8f:99:0d:19:6b:22:20:f6:27:b6:1f: 0f:73:83:cc:2b:47:d3:6e:1f:62:aa:d3:3c:0c:bc: 18:4c:dc:e0:af:58:6c:fc:61:c5:a7:e7:3e:db:07: bf:2f:a1:eb:b0:8d:41:84:d6:d5:b5:d2:ce:69:3a: e9:a6:dd:7d:34:d5:2c:b6:9b:9f:9e:91:d0:96:8f: 7e:3c:29:e0:fa:93:44:41:ab:8a:74:56:c3:54:96: c8:fe:40:65:00:50:b9:75:42:1a:38:a2:10:f3:4b: 3b:25:49:b2:4f:1c:25:b5:fc:3a:2d:cf:1d:e1:38: 08:4a:8a:e0:01:22:ce:23:6a:ed:4b:c8:49:52:5b: 70:5d:22:61:d2:78:c6:e3:11:a3:c9:88:91:14:ab: 9f:72:89:f4:d1:1c:19:af:31:bd:32:c7:a3:0e:5c: b0:23:f9:8c:e9:40:78:7a:6a:f8:7d:f6:ea:ad:55: 35:8d:ae:7f:69:0b:6d:2c:a5:78:a1:fc:21:9e:02: 8b:8b:36:b9:60:16:8a:71:42:18:9b:e6:bd:45:ee: 06:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:72:19:F4:19:61:96:AB:3A:14:E8:44:0E:D6:B5:17:16:5D:80:1B X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b8:3a:0d:7a:5e:e8:1f:b5:21:60:ec:fc:15:5d:b7:92:5b: 69:c4:94:f5:f5:3d:a0:f0:9c:23:00:37:df:58:f2:40:1c:5c: b7:3a:20:bb:c9:58:4d:24:7f:3e:ee:19:53:79:79:c6:3f:87: 55:c0:3a:ff:70:ad:df:ba:32:6b:6f:30:89:36:76:88:d1:db: 42:cf:ed:36:13:8d:74:5d:e0:83:04:dd:c5:46:51:59:e8:70: ce:5e:74:dc:e9:a2:f6:e1:d3:8a:f7:ad:bf:84:23:ff:d0:80: 97:a4:bb:72:ed:d6:28:18:dc:53:59:38:16:3a:52:97:98:ac: 89:10:e8:85:45:e7:e2:b0:4f:2d:5e:e2:19:36:48:9e:4e:c4: af:9b:cf:0a:9e:5b:4b:31:17:7b:81:f1:8b:5f:82:d4:8b:81: 9e:80:b1:d4:02:9d:18:60:e9:dd:5f:0b:e8:8a:34:21:58:f7: d6:bd:19:09:2b:dd:c8:6a:49:ea:e9:bb:c9:db:c6:cd:5e:a3: 45:9c:92:74:7f:ab:1e:db:5b:26:31:00:6d:63:06:b3:a0:80: c8:05:3d:ac:3e:64:43:40:c9:24:6b:3a:79:65:5a:62:48:19: 78:1b:64:66:83:ee:67:68:9a:e5:f4:05:bc:72:92:10:1d:4b: b8:2c:33:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqWil1LESJjwNzexcti8gYLkpgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNDExMjIwODA2MDhaFw0yNDExMjUxMDU4MDhaMDMxMTAvBgNV BAMTKDFGNzIxOUY0MTk2MTk2QUIzQTE0RTg0NDBFRDZCNTE3MTY1RDgwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCao7n8XfALEQXBOPgJdB5u4BZM pvsseXHJURRPXWZXHGCikrto80d8ZxrMO4JKVoCPmQ0ZayIg9ie2Hw9zg8wrR9Nu H2Kq0zwMvBhM3OCvWGz8YcWn5z7bB78voeuwjUGE1tW10s5pOumm3X001Sy2m5+e kdCWj348KeD6k0RBq4p0VsNUlsj+QGUAULl1Qho4ohDzSzslSbJPHCW1/Dotzx3h OAhKiuABIs4jau1LyElSW3BdImHSeMbjEaPJiJEUq59yifTRHBmvMb0yx6MOXLAj +YzpQHh6avh99uqtVTWNrn9pC20spXih/CGeAouLNrlgFopxQhib5r1F7gZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH3IZ9Blhlqs6FOhEDta1FxZdgBswHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+4Og16XugftSFg7PwVXbeSW2nElPX1PaDw nCMAN99Y8kAcXLc6ILvJWE0kfz7uGVN5ecY/h1XAOv9wrd+6MmtvMIk2dojR20LP 7TYTjXRd4IME3cVGUVnocM5edNzpovbh04r3rb+EI//QgJeku3Lt1igY3FNZOBY6 UpeYrIkQ6IVF5+KwTy1e4hk2SJ5OxK+bzwqeW0sxF3uB8YtfgtSLgZ6AsdQCnRhg 6d1fC+iKNCFY99a9GQkr3chqSerpu8nbxs1eo0WcknR/qx7bWyYxAG1jBrOggMgF Paw+ZENAySRrOnllWmJIGXgbZGaD7mdomuX0BbxykhAdS7gsMwQ= -----END CERTIFICATE-----Generated at Fri Nov 22 09:30:03 2024 by rpki-client on console-fra.rpki-client.org