$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: Y7NpVBlkbSih/4GxKLRJxCFwKBLR7CqCAqCJ4xxgRtE= Subject key identifier: 57:AD:D6:01:25:39:A2:22:9B:1D:28:DF:3D:E7:18:51:F1:E2:DC:00 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 53CA3D98AEF99E1A0A65072963F675AB7F8B0088 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 041C Signing time: Sun 24 Nov 2024 08:01:37 +0000 Manifest this update: Sun 24 Nov 2024 07:56:37 +0000 Manifest next update: Wed 27 Nov 2024 09:29:37 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: k5MlXRzyL2uw61leyzObQ7FDbXRee7HwiHsbiWPFCr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ca:3d:98:ae:f9:9e:1a:0a:65:07:29:63:f6:75:ab:7f:8b:00:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Nov 24 07:56:37 2024 GMT Not After : Nov 27 09:29:37 2024 GMT Subject: CN=57ADD6012539A2229B1D28DF3DE71851F1E2DC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:01:54:cd:5b:08:c0:b0:d4:a0:ab:04:81: db:ff:c9:9f:01:11:a8:c1:36:8c:c9:20:98:4e:e0: 58:eb:16:f0:ca:23:0b:2f:9f:32:8e:5e:ff:23:25: 3b:61:07:0d:fc:5d:33:72:fc:65:39:9a:85:ed:1b: df:70:cc:f6:00:8a:56:19:6a:db:a0:77:fa:1f:9e: 1c:0d:06:e6:9f:13:5c:fd:3f:8b:fd:d1:63:ed:95: b0:8e:da:ae:f1:d0:f7:32:ce:b9:b5:26:00:fc:de: 8a:4e:12:30:77:6b:fb:35:68:a8:ba:90:30:56:61: 85:5b:8e:17:c1:b3:da:7b:47:a6:b7:e1:0b:ce:c3: 97:b7:76:75:19:21:f5:ad:39:67:cc:d1:b0:3e:26: 4d:08:21:bd:c6:c0:d5:cf:04:3c:f6:e3:f1:03:91: 1f:44:84:dd:f4:63:38:69:96:54:4a:0e:36:f6:b3: 16:4a:75:59:9b:8f:6b:a0:de:89:38:4f:72:18:b6: da:40:4d:12:53:2f:03:bd:b3:6c:c7:0b:a2:7d:d8: c1:65:aa:cc:d9:ac:9c:c9:06:32:0f:b3:8f:6c:12: c6:55:08:37:c0:66:c5:4a:fc:e6:e3:20:ab:5b:eb: 70:ac:d5:50:d3:dd:57:92:07:b7:b1:ad:c0:02:59: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AD:D6:01:25:39:A2:22:9B:1D:28:DF:3D:E7:18:51:F1:E2:DC:00 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2e:77:af:9f:36:d4:dc:85:a7:b1:88:fd:52:3d:c3:79:44: cb:91:9f:27:f0:39:5c:09:67:6c:1b:45:24:e9:16:cb:55:5f: 80:15:c7:b0:7f:46:fc:b6:6c:7f:f5:6b:c0:12:1e:ea:24:90: cd:73:95:01:7c:dc:71:94:84:1b:ca:9f:c9:fe:77:34:ed:dc: 9b:54:d4:05:63:36:f3:98:eb:af:1d:f8:f6:a8:96:4a:39:a9: 5a:e0:b3:c4:3e:f1:46:61:65:bf:84:76:70:e3:bc:e1:9c:df: 9c:a3:c3:3d:a9:2b:e1:01:c2:eb:29:cf:26:ea:72:90:93:23: ec:6e:36:11:37:ae:d3:64:32:ee:03:03:27:7b:89:38:0e:6d: 84:f2:42:d2:bc:4d:15:ea:a9:67:03:50:51:2a:a2:0a:64:a7: 5e:6e:4f:e7:f5:d4:34:87:9d:ca:fb:a0:12:2a:24:de:00:84: 6b:f2:17:12:26:1d:9a:44:f7:fd:5e:1f:9b:70:7b:9e:83:c4: a5:bd:29:d4:70:1a:6b:9b:01:ba:7a:56:1c:31:17:8c:b8:a0: 35:f0:ea:ab:66:b6:dd:5b:fb:58:3f:2c:46:f9:07:be:b0:7f: 52:7a:01:87:90:51:ba:b9:c3:5b:e6:69:fa:fd:3e:ea:6c:d3: 4a:a4:fc:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8o9mK75nhoKZQcpY/Z1q3+LAIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNDExMjQwNzU2MzdaFw0yNDExMjcwOTI5MzdaMDMxMTAvBgNV BAMTKDU3QURENjAxMjUzOUEyMjI5QjFEMjhERjNERTcxODUxRjFFMkRDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRQFUzVsIwLDUoKsEgdv/yZ8B EajBNozJIJhO4FjrFvDKIwsvnzKOXv8jJTthBw38XTNy/GU5moXtG99wzPYAilYZ atugd/ofnhwNBuafE1z9P4v90WPtlbCO2q7x0Pcyzrm1JgD83opOEjB3a/s1aKi6 kDBWYYVbjhfBs9p7R6a34QvOw5e3dnUZIfWtOWfM0bA+Jk0IIb3GwNXPBDz24/ED kR9EhN30YzhpllRKDjb2sxZKdVmbj2ug3ok4T3IYttpATRJTLwO9s2zHC6J92MFl qszZrJzJBjIPs49sEsZVCDfAZsVK/ObjIKtb63Cs1VDT3VeSB7exrcACWX9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV63WASU5oiKbHSjfPecYUfHi3AAwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkud6+fNtTchaexiP1SPcN5RMuRnyfwOVwJ Z2wbRSTpFstVX4AVx7B/Rvy2bH/1a8ASHuokkM1zlQF83HGUhBvKn8n+dzTt3JtU 1AVjNvOY668d+Paolko5qVrgs8Q+8UZhZb+EdnDjvOGc35yjwz2pK+EBwuspzybq cpCTI+xuNhE3rtNkMu4DAyd7iTgObYTyQtK8TRXqqWcDUFEqogpkp15uT+f11DSH ncr7oBIqJN4AhGvyFxImHZpE9/1eH5twe56DxKW9KdRwGmubAbp6VhwxF4y4oDXw 6qtmtt1b+1g/LEb5B76wf1J6AYeQUbq5w1vmafr9Pups00qk/Ko= -----END CERTIFICATE-----Generated at Sun Nov 24 09:08:48 2024 by rpki-client on console-fra.rpki-client.org