$ rpki-client -vvf repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft File: 1762D22131EE967D86536D2B475A9A8C08CE6003.mft (raw, json) Hash identifier: gH10cX73sG5jAqb/5aWoJggm0FX5VOcfgB3MqAoulHs= Subject key identifier: 49:22:0F:85:E7:D2:96:BA:3B:B7:7B:02:15:3D:BB:BC:C2:D6:CA:B5 Authority key identifier: 17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03 Certificate issuer: /CN=1762D22131EE967D86536D2B475A9A8C08CE6003 Certificate serial: 7F5EEEC57706D80EF487B8E99CB12C368BF37903 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft Manifest number: 02B2 Signing time: Thu 21 Nov 2024 16:11:27 +0000 Manifest this update: Thu 21 Nov 2024 16:06:27 +0000 Manifest next update: Sun 24 Nov 2024 23:58:27 +0000 Files and hashes: 1: 1762D22131EE967D86536D2B475A9A8C08CE6003.crl (hash: YLw8cii5/HUVAKANBcQs2SwGIjGpHWWX+KyQHyOk+Y0=) 2: 3130332e3135392e3230342e302f32332d3234203d3e20313331313131.roa (hash: 9aPbQ3zHPjKBoV/XvCw86zX5nSWoIsEdjkOG9WtKCO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:5e:ee:c5:77:06:d8:0e:f4:87:b8:e9:9c:b1:2c:36:8b:f3:79:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1762D22131EE967D86536D2B475A9A8C08CE6003 Validity Not Before: Nov 21 16:06:27 2024 GMT Not After : Nov 24 23:58:27 2024 GMT Subject: CN=49220F85E7D296BA3BB77B02153DBBBCC2D6CAB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:14:74:52:f3:16:d2:0c:e5:62:0a:36:09:f5: 57:a3:e1:41:10:23:11:26:49:21:a3:f7:9a:29:e5: 52:33:9f:56:1e:da:da:a5:5b:d8:76:64:5b:b4:aa: b7:ba:25:f0:11:87:56:78:84:de:3d:8b:4c:ef:6e: 83:3f:22:06:6f:ba:50:1d:31:63:d9:54:ab:6a:b3: cd:10:ea:00:ac:fe:bd:87:57:98:0c:9a:e8:94:97: 4a:91:5a:9d:41:02:51:f6:f3:4b:52:e9:03:26:a0: de:b6:40:8f:8b:49:f6:d7:c3:bc:cd:3c:28:de:b7: 79:27:f8:1b:56:03:e8:de:e3:5e:16:d1:05:a0:49: 35:d2:97:fc:e7:95:99:26:e6:9c:ad:fc:f0:a1:14: 2b:45:41:91:e8:3f:fd:d8:d7:2a:b0:61:4a:35:3a: 6e:5c:47:cd:dc:5d:d0:9d:70:16:c6:9f:5a:70:91: 00:fb:a4:9d:19:ef:0b:c2:8d:de:f0:bf:27:e3:87: 34:b2:f0:f1:56:7f:72:91:ec:00:b0:51:a6:61:2d: 56:2d:76:60:e0:22:62:88:6c:53:70:ec:9b:bf:62: 03:e8:d9:be:92:6c:1a:a0:65:2a:fe:be:40:87:a3: 6f:0a:4a:b6:91:1a:e2:b5:0e:5e:f3:51:38:83:20: c0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:22:0F:85:E7:D2:96:BA:3B:B7:7B:02:15:3D:BB:BC:C2:D6:CA:B5 X509v3 Authority Key Identifier: keyid:17:62:D2:21:31:EE:96:7D:86:53:6D:2B:47:5A:9A:8C:08:CE:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1762D22131EE967D86536D2B475A9A8C08CE6003.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d20fa14a-aaac-40f4-9c84-69257868f2cb/0/1762D22131EE967D86536D2B475A9A8C08CE6003.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:44:9f:38:dd:ec:c7:8f:82:18:53:b7:8a:5a:a5:fb:4a:76: b6:7f:55:93:b9:c0:4c:4b:fa:a8:c4:7a:d8:94:ca:2f:eb:f2: 10:a0:12:05:3a:72:c1:94:9c:ed:0c:3f:d7:47:0a:55:a9:09: ec:9d:49:16:98:79:f7:dd:fc:de:27:62:12:e3:51:6e:b5:12: b3:b4:45:d1:ad:96:5b:fb:ea:1f:34:f2:42:25:75:2d:96:fd: c0:0f:48:67:0b:d0:5c:f4:9c:6e:0f:11:4e:60:df:7f:f2:90: dc:37:12:7b:ae:56:8b:fb:50:bd:b7:ca:ff:81:20:f8:f3:7a: 0f:63:74:8c:bb:7b:4f:74:5f:b3:51:67:7e:06:53:9c:6a:f5: 3e:e6:4d:8f:62:b9:33:05:86:f2:27:7b:b1:d0:8c:cd:64:70: 98:62:a5:ca:93:4e:f8:50:01:d5:7d:46:6e:96:7e:c1:2f:7f: 86:3e:60:f7:db:da:81:27:ef:98:c1:bd:48:28:4a:c5:db:61: e1:06:c4:79:8c:54:f6:59:dc:81:07:44:32:aa:10:62:4e:dd: e4:9c:d0:50:53:f3:d7:b5:f9:62:64:ae:61:66:f6:a5:c3:bf: da:d8:09:7c:31:f3:e5:e1:b6:18:ff:55:38:94:90:57:1f:78: a4:c0:22:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf17uxXcG2A70h7jpnLEsNovzeQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMw OENFNjAwMzAeFw0yNDExMjExNjA2MjdaFw0yNDExMjQyMzU4MjdaMDMxMTAvBgNV BAMTKDQ5MjIwRjg1RTdEMjk2QkEzQkI3N0IwMjE1M0RCQkJDQzJENkNBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFHRS8xbSDOViCjYJ9Vej4UEQ IxEmSSGj95op5VIzn1Ye2tqlW9h2ZFu0qre6JfARh1Z4hN49i0zvboM/IgZvulAd MWPZVKtqs80Q6gCs/r2HV5gMmuiUl0qRWp1BAlH280tS6QMmoN62QI+LSfbXw7zN PCjet3kn+BtWA+je414W0QWgSTXSl/znlZkm5pyt/PChFCtFQZHoP/3Y1yqwYUo1 Om5cR83cXdCdcBbGn1pwkQD7pJ0Z7wvCjd7wvyfjhzSy8PFWf3KR7ACwUaZhLVYt dmDgImKIbFNw7Ju/YgPo2b6SbBqgZSr+vkCHo28KSraRGuK1Dl7zUTiDIMDRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSSIPhefSlro7t3sCFT27vMLWyrUwHwYDVR0j BBgwFoAUF2LSITHuln2GU20rR1qajAjOYAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjBmYTE0YS1hYWFjLTQwZjQtOWM4NC02OTI1Nzg2OGYyY2IvMC8xNzYyRDIyMTMx RUU5NjdEODY1MzZEMkI0NzVBOUE4QzA4Q0U2MDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlBOEMwOENF NjAwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIwZmExNGEtYWFhYy00MGY0LTlj ODQtNjkyNTc4NjhmMmNiLzAvMTc2MkQyMjEzMUVFOTY3RDg2NTM2RDJCNDc1QTlB OEMwOENFNjAwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlEnzjd7MePghhTt4papftKdrZ/VZO5wExL +qjEetiUyi/r8hCgEgU6csGUnO0MP9dHClWpCeydSRaYeffd/N4nYhLjUW61ErO0 RdGtllv76h808kIldS2W/cAPSGcL0Fz0nG4PEU5g33/ykNw3EnuuVov7UL23yv+B IPjzeg9jdIy7e090X7NRZ34GU5xq9T7mTY9iuTMFhvIne7HQjM1kcJhipcqTTvhQ AdV9Rm6WfsEvf4Y+YPfb2oEn75jBvUgoSsXbYeEGxHmMVPZZ3IEHRDKqEGJO3eSc 0FBT89e1+WJkrmFm9qXDv9rYCXwx8+Xhthj/VTiUkFcfeKTAIi4= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org