$ rpki-client -vvf repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft File: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft (raw, json) Hash identifier: qar4WV5mZQ1Yp6hA5o+nt7Tn9iW2O62ydAF1AYlYDCM= Subject key identifier: 1C:15:1A:58:65:42:1C:B2:A7:4A:67:6C:37:D2:CA:39:9C:5D:A6:D8 Authority key identifier: 70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 Certificate issuer: /CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Certificate serial: 388ADA769D9ED0277758A915A445F61684F03246 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft Manifest number: A4 Signing time: Fri 22 Nov 2024 03:31:03 +0000 Manifest this update: Fri 22 Nov 2024 03:26:03 +0000 Manifest next update: Mon 25 Nov 2024 09:36:03 +0000 Files and hashes: 1: 708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl (hash: MAHAVnT3VFmLYmfB3sAUrcV8dLfV5T6ooJ+u4DLBMvU=) 2: 3131352e3138372e32382e302f32332d3234203d3e20313532303334.roa (hash: xFoVEBixfaV59f5eLoKvzCfI+maBpFsE/LQmHoFGuNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8a:da:76:9d:9e:d0:27:77:58:a9:15:a4:45:f6:16:84:f0:32:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520 Validity Not Before: Nov 22 03:26:03 2024 GMT Not After : Nov 25 09:36:03 2024 GMT Subject: CN=1C151A5865421CB2A74A676C37D2CA399C5DA6D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:55:b8:eb:b6:9c:69:cd:e8:30:f8:d4:7d:ba: 47:b8:41:87:2e:8e:79:a3:0e:23:c1:fc:49:69:4d: 52:8a:08:f8:7f:b5:68:14:d8:13:ab:79:74:bf:76: 2f:49:5d:ca:76:77:ac:8f:43:9b:55:3f:a7:bc:8b: a0:bd:6c:5f:d8:87:4c:38:66:89:ab:6b:c0:d0:92: 36:24:34:32:d1:70:54:01:66:17:cb:e2:18:f1:7e: 89:f7:b3:64:88:77:b1:50:89:8c:f8:fe:b1:31:93: 61:43:62:31:2b:96:a6:31:cf:10:c0:ff:95:67:8c: 3c:5d:f6:19:63:d4:93:4f:94:16:ae:5e:3b:f9:6e: 26:c0:53:a5:34:6c:81:92:9d:43:48:42:0e:75:6b: ba:3d:76:1d:b0:5c:4b:51:ad:80:cc:1d:5a:af:74: f9:6d:a4:9f:f9:a5:82:20:f8:a5:14:d4:78:fd:50: de:f2:06:c6:1f:b9:34:ed:89:90:15:28:63:4e:8e: 36:9b:44:6a:9e:31:00:6e:55:7d:52:e6:95:ab:31: 96:7e:e8:42:f9:52:f8:05:74:3f:d0:7f:6a:48:0d: 60:15:e0:e6:e0:cd:fc:0e:eb:ce:dc:72:0b:bd:55: d4:22:f8:3e:77:96:bb:ce:bb:8c:95:0c:91:bf:12: d6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:15:1A:58:65:42:1C:B2:A7:4A:67:6C:37:D2:CA:39:9C:5D:A6:D8 X509v3 Authority Key Identifier: keyid:70:8D:1F:99:C0:BD:2A:17:83:D1:CE:42:6B:BF:E8:3C:9C:0C:C5:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb74ece6-880c-4cef-add2-77719ebedec9/0/708D1F99C0BD2A1783D1CE426BBFE83C9C0CC520.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:60:ab:4b:01:59:f3:42:93:51:ca:14:16:e3:1e:7d:c2:df: e2:56:59:9a:f7:16:27:28:ad:94:50:cc:3b:24:01:0c:c1:3e: 5f:a7:30:be:41:2a:a9:78:e6:2c:67:f4:39:4b:ba:f5:a5:cf: 6e:4f:4b:7c:53:c9:a8:23:57:04:a7:2c:a4:a2:a6:ab:b7:76: d0:5a:a2:7c:08:df:e3:94:7a:49:9f:a9:e5:1e:19:fd:d3:6f: 67:55:e4:61:07:06:32:75:96:63:4d:3c:c0:46:27:44:88:1c: 3e:9d:b5:4f:df:95:3e:1a:56:40:d8:99:21:f4:26:ba:3d:b2: 7a:31:cc:ce:d5:f3:54:05:7e:71:5d:78:b9:82:34:de:7c:50: 22:0f:29:e3:db:be:f4:df:13:1b:bb:4e:59:5b:4d:40:8a:3b: ee:e2:c8:98:72:84:40:02:08:de:be:3f:42:dc:17:80:02:5b: 85:c4:89:60:6a:ae:52:40:19:aa:a9:b2:c0:1f:7d:5f:f3:7e: e8:08:fa:4c:a1:4c:6e:0e:57:11:0a:75:26:4b:a8:3d:ba:43: 7b:d4:74:8e:9b:18:b0:16:d6:cf:ad:0e:96:a8:25:2f:fa:02: 64:52:98:58:29:2f:b3:b7:b7:01:fb:85:6a:34:a1:45:30:00: 05:6c:83:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOIradp2e0Cd3WKkVpEX2FoTwMkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5 QzBDQzUyMDAeFw0yNDExMjIwMzI2MDNaFw0yNDExMjUwOTM2MDNaMDMxMTAvBgNV BAMTKDFDMTUxQTU4NjU0MjFDQjJBNzRBNjc2QzM3RDJDQTM5OUM1REE2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzVbjrtpxpzegw+NR9uke4QYcu jnmjDiPB/ElpTVKKCPh/tWgU2BOreXS/di9JXcp2d6yPQ5tVP6e8i6C9bF/Yh0w4 Zomra8DQkjYkNDLRcFQBZhfL4hjxfon3s2SId7FQiYz4/rExk2FDYjErlqYxzxDA /5VnjDxd9hlj1JNPlBauXjv5bibAU6U0bIGSnUNIQg51a7o9dh2wXEtRrYDMHVqv dPltpJ/5pYIg+KUU1Hj9UN7yBsYfuTTtiZAVKGNOjjabRGqeMQBuVX1S5pWrMZZ+ 6EL5UvgFdD/Qf2pIDWAV4ObgzfwO687ccgu9VdQi+D53lrvOu4yVDJG/EtaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHBUaWGVCHLKnSmdsN9LKOZxdptgwHwYDVR0j BBgwFoAUcI0fmcC9KheD0c5Ca7/oPJwMxSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc0ZWNlNi04ODBjLTRjZWYtYWRkMi03NzcxOWViZWRlYzkvMC83MDhEMUY5OUMw QkQyQTE3ODNEMUNFNDI2QkJGRTgzQzlDMENDNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4M0M5QzBD QzUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3NGVjZTYtODgwYy00Y2VmLWFk ZDItNzc3MTllYmVkZWM5LzAvNzA4RDFGOTlDMEJEMkExNzgzRDFDRTQyNkJCRkU4 M0M5QzBDQzUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBgq0sBWfNCk1HKFBbjHn3C3+JWWZr3Fico rZRQzDskAQzBPl+nML5BKql45ixn9DlLuvWlz25PS3xTyagjVwSnLKSipqu3dtBa onwI3+OUekmfqeUeGf3Tb2dV5GEHBjJ1lmNNPMBGJ0SIHD6dtU/flT4aVkDYmSH0 Jro9snoxzM7V81QFfnFdeLmCNN58UCIPKePbvvTfExu7TllbTUCKO+7iyJhyhEAC CN6+P0LcF4ACW4XEiWBqrlJAGaqpssAffV/zfugI+kyhTG4OVxEKdSZLqD26Q3vU dI6bGLAW1s+tDpaoJS/6AmRSmFgpL7O3twH7hWo0oUUwAAVsg6Q= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:39 2024 by rpki-client on console-ams.rpki-client.org