$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json) Hash identifier: ChiDoTNuGgaTBJmkAS6J9x3tYibikS4K/+SyEfDAodY= Subject key identifier: 4C:18:C7:1B:36:BA:9D:DA:1F:D9:F4:00:AE:D7:82:82:BE:10:33:DA Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Certificate issuer: /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Certificate serial: 7190DB62185CA95A249C21A81479203D99F64DEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft Manifest number: AB Signing time: Sat 23 Nov 2024 11:41:33 +0000 Manifest this update: Sat 23 Nov 2024 11:36:33 +0000 Manifest next update: Tue 26 Nov 2024 21:27:33 +0000 Files and hashes: 1: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: pkviEMyYQsap3UMDceAFgODplNjvjM9caIG60HVIv8w=) 2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: n0wSfYokNi/npNPzftcDmS3sdBSeLLSMYOoHz/p9hrE=) 3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: RIPwkwrtUM/4ffKNW9yUN28LgPyDGB1P3EsXYFO7WUY=) 4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: fPtFW64rMVWWTfe0idTINB3BUS2Ju2ivrfcwXSv84rI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:90:db:62:18:5c:a9:5a:24:9c:21:a8:14:79:20:3d:99:f6:4d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Validity Not Before: Nov 23 11:36:33 2024 GMT Not After : Nov 26 21:27:33 2024 GMT Subject: CN=4C18C71B36BA9DDA1FD9F400AED78282BE1033DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4d:5f:ce:13:19:bd:b5:3f:83:b0:ef:2b:a8: 85:16:95:d1:aa:ec:be:be:47:35:34:71:d9:79:c2: 07:0a:27:ae:1e:16:de:0a:a1:a8:10:5b:ea:56:08: b6:49:ab:c0:e9:2f:ed:4a:be:db:4a:84:e7:91:90: fc:95:e0:71:cd:8c:04:a3:88:c1:9c:ab:4c:30:21: 77:bf:85:52:96:cf:28:6b:dd:21:c9:d8:dc:b0:23: 11:cc:ac:9c:b6:02:e3:11:e8:3d:43:5a:b7:09:61: 1a:2b:f2:68:f5:00:17:9c:3e:c5:c8:91:01:1e:08: fc:9f:76:5a:2b:06:01:6f:0c:f4:1f:60:2a:a1:8d: bd:78:4f:b8:bf:08:96:ed:fe:1a:bc:25:77:42:b1: 68:e8:1b:68:51:61:b4:57:99:c2:a5:76:eb:ad:79: 8e:e3:5f:58:2c:46:6a:65:2a:5b:2a:36:64:89:4c: 55:b9:dd:76:d4:26:bc:21:a8:4c:6b:2e:60:69:cd: 71:74:02:5b:8a:ec:e4:ef:af:44:e3:d9:3e:78:d5: 7f:27:55:79:c1:9a:f4:bd:f0:6f:13:9f:f3:ea:79: 20:26:b3:69:71:f5:f1:e3:da:62:8a:80:d5:70:ac: a0:9a:1a:ae:ed:e7:1e:61:57:45:da:a1:0e:f3:eb: 01:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:18:C7:1B:36:BA:9D:DA:1F:D9:F4:00:AE:D7:82:82:BE:10:33:DA X509v3 Authority Key Identifier: keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ea:ca:bc:be:11:93:7d:5a:0d:8b:94:ea:77:42:32:c3:64: 14:35:a4:d6:59:9c:fe:00:9a:cd:93:f7:38:e1:5e:29:1f:5e: a1:df:7a:8e:20:55:e9:1e:17:21:75:aa:27:77:52:36:e9:c7: 30:52:91:b4:65:d4:c8:14:3f:a2:18:6a:17:0d:81:df:26:2d: 59:70:5a:d4:82:0a:b0:26:d9:42:45:d6:1b:47:f2:4b:68:f2: be:68:57:1a:c0:c5:c3:fa:a1:3e:cd:d3:be:4c:a4:3e:c9:0a: aa:98:34:82:ee:35:08:3a:b5:94:6c:25:11:0d:1b:5f:8f:b7: 28:fb:04:26:f0:4b:b3:eb:ef:e3:2c:a8:e2:1c:e8:68:96:1f: bc:ee:af:d1:94:1d:91:65:22:92:4b:d4:00:39:44:3f:83:5d: 79:98:70:5d:f2:15:1f:0d:91:9b:2d:0d:35:88:4d:e6:9e:4c: 7b:63:62:87:53:9c:fa:5a:78:b2:ad:85:35:b8:f8:f2:8c:5e: e9:2d:ba:63:ef:17:48:4a:fc:90:0e:2c:f3:5f:a2:14:ff:ba: ca:cd:e9:51:a8:27:50:19:f0:96:f3:e5:c1:2f:56:59:ce:c4: 0e:21:1d:5b:7e:dc:4f:cd:1e:2e:dc:a6:f3:11:b2:24:0a:cf: 74:06:e5:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZDbYhhcqVoknCGoFHkgPZn2Te4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcy Nzc5NjJCNzAeFw0yNDExMjMxMTM2MzNaFw0yNDExMjYyMTI3MzNaMDMxMTAvBgNV BAMTKDRDMThDNzFCMzZCQTlEREExRkQ5RjQwMEFFRDc4MjgyQkUxMDMzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1TV/OExm9tT+DsO8rqIUWldGq 7L6+RzU0cdl5wgcKJ64eFt4KoagQW+pWCLZJq8DpL+1KvttKhOeRkPyV4HHNjASj iMGcq0wwIXe/hVKWzyhr3SHJ2NywIxHMrJy2AuMR6D1DWrcJYRor8mj1ABecPsXI kQEeCPyfdlorBgFvDPQfYCqhjb14T7i/CJbt/hq8JXdCsWjoG2hRYbRXmcKlduut eY7jX1gsRmplKlsqNmSJTFW53XbUJrwhqExrLmBpzXF0AluK7OTvr0Tj2T541X8n VXnBmvS98G8Tn/PqeSAms2lx9fHj2mKKgNVwrKCaGq7t5x5hV0XaoQ7z6wEfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTBjHGza6ndof2fQArteCgr4QM9owHwYDVR0j BBgwFoAUx/P3rGSMYHPH/nNicaGo5yd5YrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0 OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2MkI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcyNzc5 NjJCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4 RTcyNzc5NjJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvqyry+EZN9Wg2LlOp3QjLDZBQ1pNZZnP4A ms2T9zjhXikfXqHfeo4gVekeFyF1qid3UjbpxzBSkbRl1MgUP6IYahcNgd8mLVlw WtSCCrAm2UJF1htH8kto8r5oVxrAxcP6oT7N075MpD7JCqqYNILuNQg6tZRsJREN G1+Ptyj7BCbwS7Pr7+MsqOIc6GiWH7zur9GUHZFlIpJL1AA5RD+DXXmYcF3yFR8N kZstDTWITeaeTHtjYodTnPpaeLKthTW4+PKMXuktumPvF0hK/JAOLPNfohT/usrN 6VGoJ1AZ8Jbz5cEvVlnOxA4hHVt+3E/NHi7cpvMRsiQKz3QG5dU= -----END CERTIFICATE-----Generated at Sat Nov 23 13:12:10 2024 by rpki-client on console-fra.rpki-client.org