$ rpki-client -vvf repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft File: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft (raw, json) Hash identifier: 5Et+eCD4VezpA5gsgb2lj5euufHtubC0e29+ppwd2GI= Subject key identifier: 72:A3:A1:1E:67:C3:0A:E3:26:BB:BF:5E:E3:84:65:94:15:DD:B4:84 Authority key identifier: 96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 Certificate issuer: /CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Certificate serial: 50D7F2DB200F64C65E516B49EFDD0B6EC6A71E77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft Manifest number: 29 Signing time: Sun 24 Nov 2024 13:42:14 +0000 Manifest this update: Sun 24 Nov 2024 13:37:14 +0000 Manifest next update: Wed 27 Nov 2024 23:58:14 +0000 Files and hashes: 1: 967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl (hash: yunlIRbPvvKIwxSoo3PhtCEXcbd43i0CCoX9i2mFd6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d7:f2:db:20:0f:64:c6:5e:51:6b:49:ef:dd:0b:6e:c6:a7:1e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967E94B3DE771E4C5977FF1E0C2A61A1DF444939 Validity Not Before: Nov 24 13:37:14 2024 GMT Not After : Nov 27 23:58:14 2024 GMT Subject: CN=72A3A11E67C30AE326BBBF5EE384659415DDB484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:60:12:4f:27:65:be:f5:25:21:07:50:99: 1f:f4:94:14:a0:98:b1:a5:dd:07:a0:06:c7:eb:6d: f7:f3:29:9d:53:91:a5:f9:ca:0d:8d:72:6b:ee:14: 41:7f:56:08:79:85:a1:23:f9:39:73:62:34:e4:b6: 39:93:f1:20:0c:e6:04:6f:3e:7d:82:d8:45:0d:cd: 20:43:df:7c:d9:50:b8:ed:6d:69:2c:86:47:89:ec: a6:3d:1e:ae:0b:96:83:d1:43:56:eb:3c:bf:e8:68: 95:de:03:c3:d0:95:2e:20:b3:70:72:09:b9:1d:07: d9:4e:40:97:6b:3a:b3:69:eb:2c:b6:65:c7:0e:76: 80:6a:cc:8b:5b:b9:6e:47:50:50:68:7a:5c:42:80: a4:83:ad:a8:e5:67:48:61:8e:5c:0a:79:2f:e4:38: 96:86:c7:ed:9d:58:f6:b8:86:65:55:fb:fc:35:b3: c8:ba:91:cb:1a:76:56:d1:88:ec:82:20:1e:cf:86: db:52:bf:1f:7d:9a:40:e7:f1:d2:f1:53:8b:34:a2: 38:b4:41:5f:f5:37:3a:8b:10:14:6f:a6:bd:df:c3: 91:0f:46:0a:2d:ca:f5:39:c0:3e:c0:19:4a:e5:ff: 78:5c:7c:ee:1e:98:66:f8:5f:b7:2f:e9:0d:bf:73: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A3:A1:1E:67:C3:0A:E3:26:BB:BF:5E:E3:84:65:94:15:DD:B4:84 X509v3 Authority Key Identifier: keyid:96:7E:94:B3:DE:77:1E:4C:59:77:FF:1E:0C:2A:61:A1:DF:44:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d50c867b-2cb9-457b-856b-a2afa38f57cc/0/967E94B3DE771E4C5977FF1E0C2A61A1DF444939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ef:82:7b:d1:2c:2f:b2:32:ea:a7:27:9f:09:bc:18:8a:b7: bb:61:22:be:d4:46:b0:d5:6f:b4:be:bc:9b:20:b2:bc:e2:e9: 1e:18:75:ab:2d:47:8f:11:16:40:66:89:6d:00:e2:e7:55:6a: ea:2b:61:2f:9b:19:79:3a:14:c3:c4:35:4e:a3:98:b1:fb:de: 69:06:de:23:3c:c3:e4:14:1c:47:25:9a:4d:c4:f1:41:56:5e: 23:fa:71:ce:ea:83:45:b4:f0:c1:ca:22:35:75:5a:6f:29:16: a4:a2:2b:5c:30:cf:47:f0:3a:66:72:9b:e9:d3:c1:9d:fb:9a: 4c:f2:71:ca:2b:d1:13:a4:bd:e5:76:93:b1:dc:96:c6:ff:6c: d3:ed:9d:a7:d5:fa:44:bd:fc:a7:d9:a8:53:a3:b1:1a:9d:2b: 2d:aa:4c:94:7b:9d:37:2b:b6:0e:9f:8f:5b:09:38:93:55:bf: 7f:52:e4:10:f8:e7:75:15:f4:6c:8d:91:b0:69:b1:89:be:29: a8:38:3f:2c:72:5e:0c:c5:20:ab:7e:3e:c7:99:ff:de:b7:38: fd:61:15:40:11:c3:52:6b:92:90:dd:25:30:82:ec:54:21:df: 6d:fc:c5:60:f5:61:4f:21:f3:08:01:01:16:a7:8d:e6:4f:e5: c3:30:20:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUNfy2yAPZMZeUWtJ790LbsanHncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFE RjQ0NDkzOTAeFw0yNDExMjQxMzM3MTRaFw0yNDExMjcyMzU4MTRaMDMxMTAvBgNV BAMTKDcyQTNBMTFFNjdDMzBBRTMyNkJCQkY1RUUzODQ2NTk0MTVEREI0ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpGASTydlvvUlIQdQmR/0lBSg mLGl3QegBsfrbffzKZ1TkaX5yg2NcmvuFEF/Vgh5haEj+TlzYjTktjmT8SAM5gRv Pn2C2EUNzSBD33zZULjtbWkshkeJ7KY9Hq4LloPRQ1brPL/oaJXeA8PQlS4gs3By CbkdB9lOQJdrOrNp6yy2ZccOdoBqzItbuW5HUFBoelxCgKSDrajlZ0hhjlwKeS/k OJaGx+2dWPa4hmVV+/w1s8i6kcsadlbRiOyCIB7PhttSvx99mkDn8dLxU4s0oji0 QV/1NzqLEBRvpr3fw5EPRgotyvU5wD7AGUrl/3hcfO4emGb4X7cv6Q2/cw9BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcqOhHmfDCuMmu79e44RllBXdtIQwHwYDVR0j BBgwFoAUln6Us953HkxZd/8eDCphod9ESTkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTBjODY3Yi0yY2I5LTQ1N2ItODU2Yi1hMmFmYTM4ZjU3Y2MvMC85NjdFOTRCM0RF NzcxRTRDNTk3N0ZGMUUwQzJBNjFBMURGNDQ0OTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYxQTFERjQ0 NDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUwYzg2N2ItMmNiOS00NTdiLTg1 NmItYTJhZmEzOGY1N2NjLzAvOTY3RTk0QjNERTc3MUU0QzU5NzdGRjFFMEMyQTYx QTFERjQ0NDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXvgnvRLC+yMuqnJ58JvBiKt7thIr7URrDV b7S+vJsgsrzi6R4YdastR48RFkBmiW0A4udVauorYS+bGXk6FMPENU6jmLH73mkG 3iM8w+QUHEclmk3E8UFWXiP6cc7qg0W08MHKIjV1Wm8pFqSiK1wwz0fwOmZym+nT wZ37mkzyccor0ROkveV2k7Hclsb/bNPtnafV+kS9/KfZqFOjsRqdKy2qTJR7nTcr tg6fj1sJOJNVv39S5BD453UV9GyNkbBpsYm+Kag4PyxyXgzFIKt+PseZ/963OP1h FUARw1JrkpDdJTCC7FQh3238xWD1YU8h8wgBARanjeZP5cMwIJI= -----END CERTIFICATE-----Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org