$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: G19H5roShBAWEFiOVL0fhNUKUlRjSyOwSE9PeNd4uZc= Subject key identifier: 79:CD:E6:85:21:A7:BD:60:F5:7C:FA:75:71:8D:D6:EE:DF:AF:20:E6 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 69E24173BF22C6F437387DDEF32D7C2D30BD14C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 8E Signing time: Thu 21 Nov 2024 07:40:00 +0000 Manifest this update: Thu 21 Nov 2024 07:35:00 +0000 Manifest next update: Sun 24 Nov 2024 13:01:00 +0000 Files and hashes: 1: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: 0nem4wuy1SCB0c94gWSP4e6qqR7jPhjd/26SYz1frlk=) 2: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: dv83ads6B98JXr6W2nivuRbVpP9Jt3nhky2RYXKBVC0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e2:41:73:bf:22:c6:f4:37:38:7d:de:f3:2d:7c:2d:30:bd:14:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Nov 21 07:35:00 2024 GMT Not After : Nov 24 13:01:00 2024 GMT Subject: CN=79CDE68521A7BD60F57CFA75718DD6EEDFAF20E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:83:60:a3:f9:3a:54:f9:3d:48:c3:5f:9a: 63:76:e7:ef:43:6c:f7:15:d8:e5:99:90:59:7d:61: b8:dc:28:ab:dc:5b:c7:a2:6a:d2:9c:b7:b3:0f:1b: 09:ca:2e:ab:6c:ce:d6:e5:2f:9a:73:63:2d:8b:22: 50:f6:95:4e:88:41:5d:82:61:ba:9f:9a:9b:54:00: cd:81:7e:69:8c:02:78:2c:12:8a:de:4c:84:3d:05: 09:61:e6:e2:20:2e:4a:4e:0f:4a:db:2d:fc:0e:6b: 61:50:bd:9e:46:99:2f:0f:fb:44:44:6d:9d:76:55: 59:ab:21:2c:ef:5d:97:51:75:4b:67:f2:7c:c6:84: c1:f3:68:7c:ed:09:d5:71:65:f2:ba:77:e2:fb:04: da:24:37:90:d7:62:c5:97:5b:1f:18:a8:c9:57:dd: a0:30:78:27:db:89:02:f6:3a:88:77:cc:12:91:db: 5d:fd:52:5c:d4:39:32:9d:5b:0b:1e:00:fc:de:53: d2:f3:80:d4:a9:b3:bc:c8:f0:5a:eb:c9:5c:76:21: ac:74:92:74:cd:e0:84:58:45:00:e8:41:af:5f:19: f6:e2:db:36:84:51:6b:1f:b8:26:e7:ee:92:84:f5: a7:c0:2d:f8:26:37:37:eb:41:fa:55:37:95:8a:bd: 94:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CD:E6:85:21:A7:BD:60:F5:7C:FA:75:71:8D:D6:EE:DF:AF:20:E6 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b7:61:90:12:1c:b1:4b:ac:57:ff:4c:5a:e6:12:5d:92:ed: 41:ec:79:59:84:16:0e:fd:43:eb:5d:6e:ba:5d:97:a0:6c:af: 6c:c1:6e:bf:e4:36:b6:2f:50:1d:6f:7a:93:a4:b2:d9:51:1f: 03:33:8c:a0:8e:b2:4b:c1:e9:cc:46:2c:bc:0b:42:d0:af:1e: 6f:85:19:a3:a2:ea:2c:62:23:4f:11:3b:6a:c0:dd:0a:da:ad: a3:76:f2:7a:6b:72:29:d1:ae:2d:24:18:2b:9d:0e:d1:a1:7e: 3f:8e:72:70:64:2f:42:a9:c7:64:0e:f5:01:66:f4:94:65:a6: 57:63:70:19:a1:86:87:57:1f:ab:56:2a:34:ce:91:d2:b3:86: bf:48:a7:04:09:79:c2:73:82:ee:a7:a1:75:42:1e:a8:d0:5b: 68:13:ad:23:1f:6f:39:4f:89:75:31:d2:ec:fb:7b:a8:af:6e: 71:3f:57:b4:58:2f:a8:8a:12:26:84:28:ff:f4:c2:c0:86:a4: 72:4b:2e:bc:12:58:aa:01:78:7e:24:34:d0:0e:78:53:47:f1: 6a:0a:09:62:cd:23:6e:90:56:f5:87:44:b5:c7:b1:5b:a4:ca: 7b:51:fe:fe:8d:1c:9d:23:87:92:70:4a:b4:b0:0e:4e:eb:bb: 50:c7:da:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaeJBc78ixvQ3OH3e8y18LTC9FMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNDExMjEwNzM1MDBaFw0yNDExMjQxMzAxMDBaMDMxMTAvBgNV BAMTKDc5Q0RFNjg1MjFBN0JENjBGNTdDRkE3NTcxOERENkVFREZBRjIwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO74Ngo/k6VPk9SMNfmmN25+9D bPcV2OWZkFl9YbjcKKvcW8eiatKct7MPGwnKLqtsztblL5pzYy2LIlD2lU6IQV2C YbqfmptUAM2BfmmMAngsEoreTIQ9BQlh5uIgLkpOD0rbLfwOa2FQvZ5GmS8P+0RE bZ12VVmrISzvXZdRdUtn8nzGhMHzaHztCdVxZfK6d+L7BNokN5DXYsWXWx8YqMlX 3aAweCfbiQL2Ooh3zBKR2139UlzUOTKdWwseAPzeU9LzgNSps7zI8FrryVx2Iax0 knTN4IRYRQDoQa9fGfbi2zaEUWsfuCbn7pKE9afALfgmNzfrQfpVN5WKvZT7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUec3mhSGnvWD1fPp1cY3W7t+vIOYwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABu3YZASHLFLrFf/TFrmEl2S7UHseVmEFg79 Q+tdbrpdl6Bsr2zBbr/kNrYvUB1vepOkstlRHwMzjKCOskvB6cxGLLwLQtCvHm+F GaOi6ixiI08RO2rA3QraraN28nprcinRri0kGCudDtGhfj+OcnBkL0Kpx2QO9QFm 9JRlpldjcBmhhodXH6tWKjTOkdKzhr9IpwQJecJzgu6noXVCHqjQW2gTrSMfbzlP iXUx0uz7e6ivbnE/V7RYL6iKEiaEKP/0wsCGpHJLLrwSWKoBeH4kNNAOeFNH8WoK CWLNI26QVvWHRLXHsVukyntR/v6NHJ0jh5JwSrSwDk7ru1DH2vo= -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:39 2024 by rpki-client on console-fra.rpki-client.org