$ rpki-client -vvf repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft File: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft (raw, json) Hash identifier: knCDmPTVSZ7/mEo4fR6rDBt3vgNkMo3Q5VcL+gcyCwc= Subject key identifier: CF:C6:24:29:D9:34:0B:5B:08:85:11:88:EC:A5:46:82:FE:A7:3E:72 Authority key identifier: 3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 Certificate issuer: /CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Certificate serial: 5199838EAFFCE07B4C3CC73326816830504A1575 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft Manifest number: 0140 Signing time: Mon 25 Nov 2024 01:01:25 +0000 Manifest this update: Mon 25 Nov 2024 00:56:25 +0000 Manifest next update: Thu 28 Nov 2024 11:16:25 +0000 Files and hashes: 1: 3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl (hash: Uvwstm3Jy9Nh/OehQVjUukWxSm1FxYa27XW4NmWYlKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:99:83:8e:af:fc:e0:7b:4c:3c:c7:33:26:81:68:30:50:4a:15:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B764ECE3DB30DE57C6036DCCBAE958BED349AE0 Validity Not Before: Nov 25 00:56:25 2024 GMT Not After : Nov 28 11:16:25 2024 GMT Subject: CN=CFC62429D9340B5B08851188ECA54682FEA73E72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:9a:89:8c:80:2c:8f:4e:60:5c:1e:5e:23: fd:aa:e9:6a:ed:aa:f1:75:bc:d2:31:4c:20:38:50: 81:4c:75:26:c2:0b:3e:96:b1:83:9f:85:0a:74:d8: 38:85:42:3a:88:33:b7:46:81:54:05:0f:b1:9f:06: a2:b4:6f:5e:70:ab:5d:51:a5:2b:1a:6a:3a:e7:af: db:00:30:49:36:b3:5a:90:49:09:b8:95:d0:0f:e5: 6f:cc:75:83:56:f9:df:7c:f8:51:fb:4e:93:82:53: 52:06:37:06:c8:bd:45:8e:57:fd:e6:f6:16:1b:77: 74:dd:f9:9a:9c:ec:38:85:a7:5b:94:79:fd:de:bb: 49:71:df:d6:62:82:59:6c:0e:87:7a:48:81:85:17: ab:41:a2:e7:a4:e2:25:27:31:2b:ea:dd:91:29:a2: a7:9b:29:64:89:e1:07:c0:ad:a0:9d:34:a0:f3:07: 4d:c3:00:af:7c:ae:1e:57:ce:0b:bb:67:04:c6:00: 65:d2:dd:84:4b:0e:30:f1:5e:2b:01:f6:b4:b2:48: 7e:4b:2c:d3:ef:34:19:fe:7a:ec:c4:a1:ad:34:7d: 48:99:41:d4:a1:05:7e:5f:20:54:8c:de:87:0e:16: e1:42:59:7c:41:c7:51:fa:2e:66:77:d3:f9:ab:28: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C6:24:29:D9:34:0B:5B:08:85:11:88:EC:A5:46:82:FE:A7:3E:72 X509v3 Authority Key Identifier: keyid:3B:76:4E:CE:3D:B3:0D:E5:7C:60:36:DC:CB:AE:95:8B:ED:34:9A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd029c22-2215-48c1-9ab6-bb13c01b43b1/0/3B764ECE3DB30DE57C6036DCCBAE958BED349AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:29:e7:68:09:5b:a7:88:ba:87:5d:ad:77:ef:fe:2e:ec:08: b2:b5:1e:b5:c5:77:82:ae:26:f1:a8:b1:e9:26:62:26:c0:a0: 09:e2:ca:c7:d8:ef:c6:42:25:1b:ea:39:b4:47:ad:ac:cd:94: bd:4a:15:7f:92:ce:ef:ab:c4:e9:ce:50:41:be:f1:cc:78:3c: 87:7a:56:19:8d:5d:f5:0e:5f:32:d0:b6:22:ae:3c:5a:d2:c4: 9f:14:9c:c8:62:92:bb:35:b9:5c:bd:00:eb:fd:ca:34:5c:f0: 5b:d0:e0:b6:c2:0a:7c:43:cd:25:48:80:27:e8:dc:87:05:df: 49:e8:1b:9a:f3:ef:98:ca:82:de:1d:49:17:d3:d0:db:64:65: 53:7a:fa:d5:09:c9:e4:43:f9:66:31:e5:32:05:94:46:4b:6d: df:2a:72:ad:b0:c6:f2:15:e0:93:84:16:ed:e7:3a:b0:df:ea: 01:7a:db:f5:ca:a1:3d:97:32:fb:bc:5f:b2:1c:5e:62:1f:bd: 5e:f9:42:7a:6d:a4:5c:2d:83:c7:d4:a4:45:6c:9d:be:7e:91: 1d:0e:61:60:ad:d8:4a:18:b3:59:45:10:6c:7d:46:5d:c3:5d: 43:c2:f5:4a:18:bc:fd:ad:19:c3:db:97:7b:af:49:3e:10:87: 37:30:ad:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZmDjq/84HtMPMczJoFoMFBKFXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJF RDM0OUFFMDAeFw0yNDExMjUwMDU2MjVaFw0yNDExMjgxMTE2MjVaMDMxMTAvBgNV BAMTKENGQzYyNDI5RDkzNDBCNUIwODg1MTE4OEVDQTU0NjgyRkVBNzNFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/ZqJjIAsj05gXB5eI/2q6Wrt qvF1vNIxTCA4UIFMdSbCCz6WsYOfhQp02DiFQjqIM7dGgVQFD7GfBqK0b15wq11R pSsaajrnr9sAMEk2s1qQSQm4ldAP5W/MdYNW+d98+FH7TpOCU1IGNwbIvUWOV/3m 9hYbd3Td+Zqc7DiFp1uUef3eu0lx39ZigllsDod6SIGFF6tBouek4iUnMSvq3ZEp oqebKWSJ4QfAraCdNKDzB03DAK98rh5Xzgu7ZwTGAGXS3YRLDjDxXisB9rSySH5L LNPvNBn+euzEoa00fUiZQdShBX5fIFSM3ocOFuFCWXxBx1H6LmZ30/mrKL7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz8YkKdk0C1sIhRGI7KVGgv6nPnIwHwYDVR0j BBgwFoAUO3ZOzj2zDeV8YDbcy66Vi+00muAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDAyOWMyMi0yMjE1LTQ4YzEtOWFiNi1iYjEzYzAxYjQzYjEvMC8zQjc2NEVDRTNE QjMwREU1N0M2MDM2RENDQkFFOTU4QkVEMzQ5QUUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1OEJFRDM0 OUFFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQwMjljMjItMjIxNS00OGMxLTlh YjYtYmIxM2MwMWI0M2IxLzAvM0I3NjRFQ0UzREIzMERFNTdDNjAzNkRDQ0JBRTk1 OEJFRDM0OUFFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAp52gJW6eIuoddrXfv/i7sCLK1HrXFd4Ku JvGosekmYibAoAniysfY78ZCJRvqObRHrazNlL1KFX+Szu+rxOnOUEG+8cx4PId6 VhmNXfUOXzLQtiKuPFrSxJ8UnMhikrs1uVy9AOv9yjRc8FvQ4LbCCnxDzSVIgCfo 3IcF30noG5rz75jKgt4dSRfT0NtkZVN6+tUJyeRD+WYx5TIFlEZLbd8qcq2wxvIV 4JOEFu3nOrDf6gF62/XKoT2XMvu8X7IcXmIfvV75QnptpFwtg8fUpEVsnb5+kR0O YWCt2EoYs1lFEGx9Rl3DXUPC9UoYvP2tGcPbl3uvST4QhzcwrVc= -----END CERTIFICATE-----Generated at Mon Nov 25 02:45:37 2024 by rpki-client on console-ams.rpki-client.org