$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: PmiHl3KhSIX4ZVaufUTEsJNkXaWRkdfTqPnMHQ8a+xM= Subject key identifier: 86:FF:1D:F2:30:B9:D8:06:95:5D:42:8A:60:A9:25:40:68:81:E8:F6 Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 0EB45C84A84AF0788628DEE2D25D72B89BDE0C62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 014E Signing time: Mon 25 Nov 2024 20:11:28 +0000 Manifest this update: Mon 25 Nov 2024 20:06:28 +0000 Manifest next update: Fri 29 Nov 2024 03:51:28 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: 3358piQFkD0RD0tO3pQH+Qin1ooRaaRXKlNOo5STjOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b4:5c:84:a8:4a:f0:78:86:28:de:e2:d2:5d:72:b8:9b:de:0c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Nov 25 20:06:28 2024 GMT Not After : Nov 29 03:51:28 2024 GMT Subject: CN=86FF1DF230B9D806955D428A60A925406881E8F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:fe:ea:18:8c:b9:a1:e4:d3:25:f2:7b:ed: 79:fb:e1:3e:0a:60:ec:16:aa:c7:2a:6e:6f:4f:b7: 8e:63:53:75:46:00:dd:2c:43:eb:b9:5f:b8:18:c1: 37:e1:85:88:8d:b1:f5:57:3c:0a:40:f7:f4:e3:7f: 85:e3:a3:d1:5b:93:11:9b:79:c7:6d:a5:ed:1a:68: 81:42:52:2c:40:4a:25:39:3d:40:ae:32:35:a6:44: b2:5a:d3:d2:26:ea:e7:74:c7:21:fb:49:50:bd:b6: aa:40:ae:5b:3f:2a:8b:81:03:80:f4:50:f7:b7:c9: ea:4d:44:9d:c9:e9:bf:08:42:7a:f6:df:17:4f:76: 8d:62:12:d3:f9:32:1f:b0:95:1c:7d:d2:39:cb:90: 7b:1d:fe:b8:0d:c2:95:a9:88:22:80:85:95:ca:be: eb:c7:22:b0:f3:99:f1:a3:2b:95:42:4d:1c:95:48: db:97:fc:7d:2a:5e:37:74:96:9f:9c:7c:6a:69:69: 78:3b:50:91:70:da:39:91:cb:47:8e:3a:fa:d4:56: 80:5e:0c:60:b9:d8:ee:76:88:69:c7:29:34:07:13: 39:22:ef:ec:c1:c7:25:e0:a6:5b:2b:20:6f:bd:3b: 27:08:97:12:5d:ed:cd:59:b1:d3:43:4b:25:fd:6e: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FF:1D:F2:30:B9:D8:06:95:5D:42:8A:60:A9:25:40:68:81:E8:F6 X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6b:ee:93:54:ca:07:09:0c:db:61:a1:49:d5:fa:8d:8c:39: 4e:f4:26:40:b4:71:9f:4b:90:7d:5e:80:07:59:d4:60:95:45: db:0d:fb:ca:4d:1c:1e:6d:2a:ff:31:ba:3f:e9:04:89:41:a4: 11:b7:f6:b9:e6:00:4d:b8:f0:31:0f:c9:3c:8c:c8:50:d6:0b: 3c:da:95:b3:43:8e:a1:ee:92:7e:80:28:00:6c:be:33:00:88: fc:4c:cf:c1:8d:72:bb:9f:77:af:b5:9e:ba:d0:b0:e1:6f:50: dc:a6:d1:a5:7d:58:a5:44:09:c6:28:f1:ac:45:b1:a0:43:08: 29:de:23:de:32:d4:8f:1e:5d:28:a4:f8:92:3d:56:c6:e0:90: ea:37:08:dc:e3:d9:37:a0:e6:03:2e:28:d1:86:77:ea:fa:62: 7c:87:9d:f2:ed:ec:19:5b:a4:4f:0a:62:0c:e8:99:b4:de:ca: 89:2e:8b:69:96:3b:f1:c7:88:92:f5:47:da:4f:84:13:bb:ec: 74:0a:51:ff:55:14:7f:3e:2c:95:a6:45:12:85:c4:18:a0:81: 0b:45:d8:73:32:08:b1:09:74:5a:70:53:0b:31:f4:20:ed:9c: cd:1e:cb:49:8c:39:b6:29:e6:4f:61:da:7c:91:b5:0f:5f:9b: 84:4f:8a:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrRchKhK8HiGKN7i0l1yuJveDGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNDExMjUyMDA2MjhaFw0yNDExMjkwMzUxMjhaMDMxMTAvBgNV BAMTKDg2RkYxREYyMzBCOUQ4MDY5NTVENDI4QTYwQTkyNTQwNjg4MUU4RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtL/7qGIy5oeTTJfJ77Xn74T4K YOwWqscqbm9Pt45jU3VGAN0sQ+u5X7gYwTfhhYiNsfVXPApA9/Tjf4Xjo9FbkxGb ecdtpe0aaIFCUixASiU5PUCuMjWmRLJa09Im6ud0xyH7SVC9tqpArls/KouBA4D0 UPe3yepNRJ3J6b8IQnr23xdPdo1iEtP5Mh+wlRx90jnLkHsd/rgNwpWpiCKAhZXK vuvHIrDzmfGjK5VCTRyVSNuX/H0qXjd0lp+cfGppaXg7UJFw2jmRy0eOOvrUVoBe DGC52O52iGnHKTQHEzki7+zBxyXgplsrIG+9OycIlxJd7c1ZsdNDSyX9btgBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhv8d8jC52AaVXUKKYKklQGiB6PYwHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVr7pNUygcJDNthoUnV+o2MOU70JkC0cZ9L kH1egAdZ1GCVRdsN+8pNHB5tKv8xuj/pBIlBpBG39rnmAE248DEPyTyMyFDWCzza lbNDjqHukn6AKABsvjMAiPxMz8GNcrufd6+1nrrQsOFvUNym0aV9WKVECcYo8axF saBDCCneI94y1I8eXSik+JI9VsbgkOo3CNzj2Teg5gMuKNGGd+r6YnyHnfLt7Blb pE8KYgzombTeyokui2mWO/HHiJL1R9pPhBO77HQKUf9VFH8+LJWmRRKFxBiggQtF 2HMyCLEJdFpwUwsx9CDtnM0ey0mMObYp5k9h2nyRtQ9fm4RPiuc= -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org