$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: Wf0j/2e5tYTZ2LpuWNoNFujvE/HsneU2okmJkzCgbOw= Subject key identifier: 88:29:16:6D:77:4A:ED:B7:2B:78:B5:CA:6F:81:6F:55:4C:2F:92:89 Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 207DDD7A0C9CF6338098CA3DF571738419961D6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 0184 Signing time: Fri 29 Nov 2024 07:21:02 +0000 Manifest this update: Fri 29 Nov 2024 07:16:02 +0000 Manifest next update: Mon 02 Dec 2024 17:28:02 +0000 Files and hashes: 1: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: D9ElUQYQqbnd19jqH4xEkk4zy2SIU1QWphw5i3jyVoc=) 2: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: wrwXYHiVExbuxEse8hLvJxXI/WdhLaEx4yaUE17RFII=) 3: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: 7kBXcboL2jHFjdd02YtvBlwcB5lKWSfbCS3efI6GDFA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 22:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7d:dd:7a:0c:9c:f6:33:80:98:ca:3d:f5:71:73:84:19:96:1d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Nov 29 07:16:02 2024 GMT Not After : Dec 2 17:28:02 2024 GMT Subject: CN=8829166D774AEDB72B78B5CA6F816F554C2F9289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c9:23:6e:69:17:38:c6:62:60:72:d7:c7:bb: 88:84:7b:d3:61:bb:ff:5a:d8:d7:da:e8:94:6d:12: 7f:65:47:71:2d:2f:ae:64:1e:1f:ef:f9:80:28:cd: c5:33:18:c5:ab:f0:a0:99:dd:d6:d8:da:b5:35:c1: 40:b3:28:f3:d3:d2:cb:9f:c6:f2:cf:31:2d:b9:a9: 96:0c:84:7f:7d:2d:97:24:ea:79:31:de:23:da:fb: aa:da:b4:25:11:e6:ed:d9:4d:72:9b:bb:49:0c:ed: f9:3b:b3:29:37:f4:79:08:a2:31:e4:4a:5b:78:fa: 4d:83:90:ea:07:2a:b1:83:b4:45:34:20:11:6f:5f: 88:70:27:62:0d:78:30:ba:34:84:c9:d6:e7:b2:ce: 8f:1d:86:e5:38:83:20:7d:68:fe:07:42:8f:f2:a1: eb:bb:c4:aa:9d:53:af:1d:18:cd:96:db:b0:1e:b5: 8b:dd:53:93:84:b1:3a:4c:3c:fb:53:db:6b:e7:ef: cd:30:f0:35:f9:af:30:3b:3f:1b:3c:f3:1f:4d:01: bb:53:28:19:99:4d:33:c2:71:e2:d7:f9:42:68:73: d2:17:ad:7e:9b:2c:b8:e2:49:1c:62:fd:6e:b0:df: db:af:58:55:ef:fe:09:5f:be:89:2b:3a:ea:f7:2f: de:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:29:16:6D:77:4A:ED:B7:2B:78:B5:CA:6F:81:6F:55:4C:2F:92:89 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:79:fe:ca:af:d1:21:1c:b2:02:4d:67:10:bb:b2:63:02:d0: ad:c6:0c:2f:a7:d8:9d:df:33:27:55:21:60:c9:65:0e:b8:85: 44:4c:5b:09:0b:bd:18:6e:2d:51:17:21:c2:f9:57:db:46:55: 1b:26:c5:9f:a7:49:67:59:84:3c:8e:2a:13:78:8b:7a:56:8a: 9b:1f:fa:03:0f:e9:c9:90:26:90:6c:db:04:1b:7a:aa:8f:25: d4:dd:d2:19:2e:5c:d1:c7:02:a2:01:8c:83:4a:11:b5:d1:55: 52:0a:c9:16:6f:4f:55:50:77:fb:31:c4:5c:9b:e5:a7:49:87: e8:0f:36:2f:3e:7b:9e:c6:57:14:88:dc:a9:1c:3e:3e:2b:4d: 52:81:8c:0a:a1:5e:b1:00:89:4e:3a:ac:53:6b:88:76:3b:b5: f5:96:3c:fb:23:cc:77:b0:60:bd:80:34:c3:33:fe:fa:aa:b4: 16:31:b1:76:16:b9:75:9b:bd:95:2c:4b:26:14:46:14:e3:d5: 4e:bc:c4:d3:1c:fa:46:c8:b0:8e:6e:05:f9:fd:37:ed:f7:97: 6e:40:df:f6:0c:25:17:1c:66:4b:90:0a:e4:78:71:19:7c:26: 46:43:61:db:a4:f8:c0:d9:f5:df:f3:b5:aa:82:db:73:64:ba: 7e:2d:bb:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIH3degyc9jOAmMo99XFzhBmWHWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNDExMjkwNzE2MDJaFw0yNDEyMDIxNzI4MDJaMDMxMTAvBgNV BAMTKDg4MjkxNjZENzc0QUVEQjcyQjc4QjVDQTZGODE2RjU1NEMyRjkyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ySNuaRc4xmJgctfHu4iEe9Nh u/9a2Nfa6JRtEn9lR3EtL65kHh/v+YAozcUzGMWr8KCZ3dbY2rU1wUCzKPPT0suf xvLPMS25qZYMhH99LZck6nkx3iPa+6ratCUR5u3ZTXKbu0kM7fk7syk39HkIojHk Slt4+k2DkOoHKrGDtEU0IBFvX4hwJ2INeDC6NITJ1ueyzo8dhuU4gyB9aP4HQo/y oeu7xKqdU68dGM2W27AetYvdU5OEsTpMPPtT22vn780w8DX5rzA7Pxs88x9NAbtT KBmZTTPCceLX+UJoc9IXrX6bLLjiSRxi/W6w39uvWFXv/glfvokrOur3L95pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiCkWbXdK7bcreLXKb4FvVUwvkokwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFF5/sqv0SEcsgJNZxC7smMC0K3GDC+n2J3f MydVIWDJZQ64hURMWwkLvRhuLVEXIcL5V9tGVRsmxZ+nSWdZhDyOKhN4i3pWipsf +gMP6cmQJpBs2wQbeqqPJdTd0hkuXNHHAqIBjINKEbXRVVIKyRZvT1VQd/sxxFyb 5adJh+gPNi8+e57GVxSI3KkcPj4rTVKBjAqhXrEAiU46rFNriHY7tfWWPPsjzHew YL2ANMMz/vqqtBYxsXYWuXWbvZUsSyYURhTj1U68xNMc+kbIsI5uBfn9N+33l25A 3/YMJRccZkuQCuR4cRl8JkZDYduk+MDZ9d/ztaqC23Nkun4tu0g= -----END CERTIFICATE-----Generated at Fri Nov 29 08:55:25 2024 by rpki-client on console-ams.rpki-client.org