$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json) Hash identifier: hNDnlCSmJNkALDxwIuysrutJXC91n/RVzRu25beeE4A= Subject key identifier: E3:A3:06:B2:1E:73:40:9F:07:53:EF:34:44:3A:9A:2D:0B:70:C7:02 Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Certificate serial: 2D7027436D95CFA0B729F70E9D9EEDD77890A882 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft Manifest number: 012F Signing time: Fri 22 Nov 2024 12:02:15 +0000 Manifest this update: Fri 22 Nov 2024 11:57:15 +0000 Manifest next update: Mon 25 Nov 2024 16:09:15 +0000 Files and hashes: 1: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: a+SftmDoxhe0futvwUxen9oseztIQ5ZAso8NP8K8mVE=) 2: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: 71RKMRkCzf+dsSgq8Q8+9kiI589hG8/JWQHbUqhmZBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 16:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:70:27:43:6d:95:cf:a0:b7:29:f7:0e:9d:9e:ed:d7:78:90:a8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Validity Not Before: Nov 22 11:57:15 2024 GMT Not After : Nov 25 16:09:15 2024 GMT Subject: CN=E3A306B21E73409F0753EF34443A9A2D0B70C702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:a4:bb:ff:ca:26:3a:1e:f3:e1:20:22:83: f7:4b:56:25:3f:6c:3b:24:2e:36:c6:59:df:33:4c: f1:8d:96:e2:73:9b:86:f2:3b:7c:0a:4b:4e:f2:df: b7:7a:39:6d:8e:45:4d:7f:75:49:16:9d:1b:ee:f8: 06:a0:be:20:3c:30:bb:98:64:7a:cf:53:24:43:5b: 5f:7e:a5:19:cc:8d:85:ec:21:14:d3:29:f9:c0:71: 87:e4:bf:53:2a:b1:c0:0f:d0:da:f6:34:54:40:ca: e1:79:5a:e0:b8:3c:6f:40:b2:eb:ce:37:26:2f:53: 6e:28:18:ca:6e:2a:d6:98:2c:53:2c:5c:30:de:79: 49:6e:63:5b:df:43:3f:04:a0:a5:0d:40:76:da:95: 59:49:b7:82:e2:38:8b:a1:74:21:8b:4b:10:4e:66: 0a:f6:84:4c:38:d7:b4:9e:e0:af:48:49:38:20:e8: e0:a4:82:20:e4:76:9b:c3:70:80:19:b7:16:42:59: f8:33:48:86:72:64:f1:25:bd:8c:dd:05:43:15:90: 62:b2:b3:7a:ee:a2:8e:ff:ee:a1:e8:0b:30:05:a1: 3e:80:28:9e:5c:b7:fa:65:7e:4b:db:dc:4f:97:c7: 92:0a:a1:96:65:e0:22:c8:da:f3:5b:c8:9b:bf:35: 1f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A3:06:B2:1E:73:40:9F:07:53:EF:34:44:3A:9A:2D:0B:70:C7:02 X509v3 Authority Key Identifier: keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:59:ea:ea:a8:e1:37:d6:fa:9f:eb:5a:94:5d:b3:1a:43:87: f5:fc:52:dd:55:23:cf:22:42:98:5e:bb:b0:c5:fb:b4:25:c8: 48:40:a9:6e:81:43:83:2b:2c:f9:a4:94:07:a4:90:fa:20:98: 09:46:b5:5c:53:41:6c:eb:d6:14:e7:87:23:59:06:a4:e2:1d: 17:b0:ce:11:e0:10:40:63:67:0f:27:ab:f3:51:20:5b:8d:54: a9:c0:d6:aa:31:fc:7b:4e:08:46:96:b3:da:a0:e1:9e:56:cc: 29:51:93:ec:17:02:63:fb:85:cf:df:4d:9c:84:46:e9:11:74: d3:71:f9:4c:02:0a:03:cc:83:06:ef:13:17:88:e0:6b:6c:8d: 00:7c:99:2b:eb:ff:54:46:e6:4c:9e:91:ed:63:8f:25:9f:bb: b5:4e:70:49:00:84:ff:d8:b5:ab:f1:2a:29:93:9e:e3:25:57: d4:26:ed:19:2a:ff:13:3e:af:24:d0:69:8c:90:43:cc:65:b2: 7e:f7:8f:1a:95:48:ff:78:57:61:a5:c6:2f:da:e7:6f:1a:94: 04:ca:b0:9f:8d:44:5e:87:8c:8a:cc:f8:f2:ee:d2:04:5b:ab: 5f:26:f3:f1:25:1b:2b:78:50:5d:d7:86:40:82:41:3f:13:f4: b0:93:49:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXAnQ22Vz6C3KfcOnZ7t13iQqIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMw RDNBMjUwMTAeFw0yNDExMjIxMTU3MTVaFw0yNDExMjUxNjA5MTVaMDMxMTAvBgNV BAMTKEUzQTMwNkIyMUU3MzQwOUYwNzUzRUYzNDQ0M0E5QTJEMEI3MEM3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6qS7/8omOh7z4SAig/dLViU/ bDskLjbGWd8zTPGNluJzm4byO3wKS07y37d6OW2ORU1/dUkWnRvu+AagviA8MLuY ZHrPUyRDW19+pRnMjYXsIRTTKfnAcYfkv1MqscAP0Nr2NFRAyuF5WuC4PG9AsuvO NyYvU24oGMpuKtaYLFMsXDDeeUluY1vfQz8EoKUNQHbalVlJt4LiOIuhdCGLSxBO Zgr2hEw417Se4K9ISTgg6OCkgiDkdpvDcIAZtxZCWfgzSIZyZPElvYzdBUMVkGKy s3ruoo7/7qHoCzAFoT6AKJ5ct/plfkvb3E+Xx5IKoZZl4CLI2vNbyJu/NR8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU46MGsh5zQJ8HU+80RDqaLQtwxwIwHwYDVR0j BBgwFoAU2Ae1p3FstW0Dbt5M6ZRjLA06JQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC9EODA3QjVBNzcx NkNCNTZEMDM2RURFNENFOTk0NjMyQzBEM0EyNTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMwRDNB MjUwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYz MkMwRDNBMjUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5Z6uqo4TfW+p/rWpRdsxpDh/X8Ut1VI88i Qpheu7DF+7QlyEhAqW6BQ4MrLPmklAekkPogmAlGtVxTQWzr1hTnhyNZBqTiHRew zhHgEEBjZw8nq/NRIFuNVKnA1qox/HtOCEaWs9qg4Z5WzClRk+wXAmP7hc/fTZyE RukRdNNx+UwCCgPMgwbvExeI4GtsjQB8mSvr/1RG5kyeke1jjyWfu7VOcEkAhP/Y tavxKimTnuMlV9Qm7Rkq/xM+ryTQaYyQQ8xlsn73jxqVSP94V2Glxi/a528alATK sJ+NRF6HjIrM+PLu0gRbq18m8/ElGyt4UF3XhkCCQT8T9LCTSSY= -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:27 2024 by rpki-client on console-ams.rpki-client.org