$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: qYtK067TkkErG4KndUo98bsO7KE3+mNdgRNl29UBJZg= Subject key identifier: 92:3B:6C:5A:05:AF:45:0F:61:8F:12:07:84:21:14:99:69:4C:3A:E9 Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 6AF639118BD621BBFAFF65A85B111FA540454422 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 0264 Signing time: Mon 25 Nov 2024 22:40:00 +0000 Manifest this update: Mon 25 Nov 2024 22:35:00 +0000 Manifest next update: Fri 29 Nov 2024 09:09:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: 2EVZi0R93qbRGT7VEYYVwr0O9lOp2eoWZQlWdKuwZms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f6:39:11:8b:d6:21:bb:fa:ff:65:a8:5b:11:1f:a5:40:45:44:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Nov 25 22:35:00 2024 GMT Not After : Nov 29 09:09:00 2024 GMT Subject: CN=923B6C5A05AF450F618F120784211499694C3AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:69:91:1f:2b:38:14:9a:65:2e:06:3c:2f: 31:fb:71:c9:8f:2e:a1:b3:62:aa:ba:4b:a0:9c:de: 7a:1d:c1:ba:78:0d:34:6a:79:7e:6f:dc:fd:43:28: 21:f2:f4:cf:8c:eb:ef:1b:05:75:e5:f9:96:a3:a5: 63:5f:71:f1:ec:b9:b4:b9:b4:9a:7f:11:e4:2e:ec: 92:50:7b:d1:53:5f:9f:85:0c:f9:ab:fd:98:4c:d6: 1d:a0:46:04:c6:ec:f5:3b:d3:f4:83:82:ce:82:54: a8:15:6a:ed:c4:1f:e6:2d:97:44:3f:f6:b1:e2:89: 90:d9:6d:0c:2a:5e:e7:1a:6f:c4:ff:b9:55:32:3f: ca:87:76:a9:52:70:e9:4f:20:8f:2c:7e:e9:dc:e6: 54:2d:d2:a7:69:b0:16:e2:05:4a:22:7a:eb:d3:bc: 9c:8f:cc:f3:18:3d:48:f5:19:1e:0a:24:4c:ec:f4: ba:7c:76:32:18:6d:07:0d:aa:d2:66:1e:11:57:b2: c8:57:87:a5:cf:1d:5f:ed:01:54:2c:31:6d:0f:7f: 4f:fa:91:07:4e:ac:64:09:19:5b:4a:23:de:b0:66: 99:ad:05:04:8d:32:51:83:c6:6f:4e:c5:33:3b:89: 16:a9:96:a8:15:77:d3:d7:93:2b:55:2d:63:01:b8: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3B:6C:5A:05:AF:45:0F:61:8F:12:07:84:21:14:99:69:4C:3A:E9 X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:2a:da:ee:0a:1b:37:8a:84:82:a6:a3:0a:1f:2a:2d:3c:bc: b2:a0:45:3d:05:5b:fc:a7:e9:49:c9:64:f3:9c:6a:b1:bb:8a: 5a:05:3a:b9:51:ab:d3:ae:cf:42:b7:77:0c:e2:07:3a:c8:6f: 2f:c4:79:17:8c:a4:5a:e5:50:a6:fb:b8:9e:e8:f2:94:34:40: d4:30:01:b3:e5:ee:39:02:c0:41:b9:d9:77:37:97:e9:5b:d7: e5:55:89:a6:a9:7b:b8:74:70:5a:b5:eb:68:b5:21:45:3d:fd: d3:d4:24:03:74:1a:73:f7:a6:fa:9f:7f:83:c2:a2:e9:02:31: ec:d7:1f:94:50:0e:2b:28:5c:66:13:ce:f3:21:6a:dc:91:d0: 20:52:26:c5:00:48:18:59:72:e7:fa:11:d2:82:6a:d8:9b:76: 21:61:b9:90:47:b0:d5:cc:d1:b3:24:09:2b:88:3c:56:92:67: e4:f5:82:73:cf:32:ba:bb:c1:77:9a:e4:9b:28:41:fe:e5:de: a9:c2:87:02:ef:99:f7:4e:03:33:09:c9:6e:d3:11:94:84:cb: 7d:cb:fd:ac:3b:de:b6:37:f3:29:20:1a:36:e5:5b:06:e4:3f: 69:94:f7:8b:cd:07:a1:40:49:d3:00:d5:84:56:b3:b5:cd:a8: 0a:b6:3c:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUavY5EYvWIbv6/2WoWxEfpUBFRCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNDExMjUyMjM1MDBaFw0yNDExMjkwOTA5MDBaMDMxMTAvBgNV BAMTKDkyM0I2QzVBMDVBRjQ1MEY2MThGMTIwNzg0MjExNDk5Njk0QzNBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoGmRHys4FJplLgY8LzH7ccmP LqGzYqq6S6Cc3nodwbp4DTRqeX5v3P1DKCHy9M+M6+8bBXXl+ZajpWNfcfHsubS5 tJp/EeQu7JJQe9FTX5+FDPmr/ZhM1h2gRgTG7PU70/SDgs6CVKgVau3EH+Ytl0Q/ 9rHiiZDZbQwqXucab8T/uVUyP8qHdqlScOlPII8sfunc5lQt0qdpsBbiBUoieuvT vJyPzPMYPUj1GR4KJEzs9Lp8djIYbQcNqtJmHhFXsshXh6XPHV/tAVQsMW0Pf0/6 kQdOrGQJGVtKI96wZpmtBQSNMlGDxm9OxTM7iRaplqgVd9PXkytVLWMBuH2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkjtsWgWvRQ9hjxIHhCEUmWlMOukwHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMYq2u4KGzeKhIKmowofKi08vLKgRT0FW/yn 6UnJZPOcarG7iloFOrlRq9Ouz0K3dwziBzrIby/EeReMpFrlUKb7uJ7o8pQ0QNQw AbPl7jkCwEG52Xc3l+lb1+VViaape7h0cFq162i1IUU9/dPUJAN0GnP3pvqff4PC oukCMezXH5RQDisoXGYTzvMhatyR0CBSJsUASBhZcuf6EdKCatibdiFhuZBHsNXM 0bMkCSuIPFaSZ+T1gnPPMrq7wXea5JsoQf7l3qnChwLvmfdOAzMJyW7TEZSEy33L /aw73rY38ykgGjblWwbkP2mU94vNB6FASdMA1YRWs7XNqAq2PE8= -----END CERTIFICATE-----Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org