$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft (raw, json) Hash identifier: NvW+UzynFBkSY6jtPc8PUiXrSTUIebdMLIE88usu2fY= Subject key identifier: B3:70:98:B3:5E:83:34:EB:14:4A:AB:CA:9B:8B:0C:E4:BB:12:7F:EE Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Certificate serial: 4735A25209388EF082F2AA5182DDA5C6487C4DC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft Manifest number: B5 Signing time: Sun 24 Nov 2024 00:41:07 +0000 Manifest this update: Sun 24 Nov 2024 00:36:07 +0000 Manifest next update: Wed 27 Nov 2024 07:16:07 +0000 Files and hashes: 1: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl (hash: WNIE99el1CWy26b04XAOCk7+vXSitGJFOTUjnYkhmLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:35:a2:52:09:38:8e:f0:82:f2:aa:51:82:dd:a5:c6:48:7c:4d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Validity Not Before: Nov 24 00:36:07 2024 GMT Not After : Nov 27 07:16:07 2024 GMT Subject: CN=B37098B35E8334EB144AABCA9B8B0CE4BB127FEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:2e:aa:55:29:a6:72:a5:bb:ba:c6:3c:6a: 39:b0:e5:25:38:e9:a6:3d:be:f2:76:ae:4b:06:67: 6c:f4:86:a2:fe:6c:ee:8c:b4:9c:98:56:f8:b6:91: c3:d1:c1:50:f9:d0:76:26:fb:b0:9b:0b:95:18:72: 52:c4:12:10:66:d5:b2:cd:16:4a:6d:e1:0d:70:25: c1:99:04:bc:38:55:2d:7d:cb:1b:b8:47:c4:34:43: af:f4:f4:3c:e9:63:44:28:7e:9a:c7:54:de:65:12: 75:15:1c:86:29:d5:fa:ad:7f:a1:05:82:41:0a:be: dc:51:e3:3f:47:f2:eb:8c:0a:61:b2:0a:0e:3d:62: c5:26:3c:5d:8e:7a:1c:49:c2:80:26:2c:91:f7:32: 1b:e7:6a:76:c0:86:63:bd:23:c5:5f:f7:a9:e0:90: e7:8f:bc:cb:86:c0:e6:94:30:c7:7d:e7:77:76:e4: 12:c5:53:fe:7b:6b:cd:9b:38:7c:f8:d4:1f:7b:96: 09:b0:31:bf:92:53:ef:f7:66:0a:02:de:b2:c6:85: bc:e6:08:f8:af:d3:ed:2f:b1:e8:97:53:0f:86:26: f4:07:d6:fc:72:39:c5:ce:f2:c7:af:dc:6e:2c:40: 70:70:e3:61:e9:d8:81:f0:96:5e:d5:cd:03:83:23: 05:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:70:98:B3:5E:83:34:EB:14:4A:AB:CA:9B:8B:0C:E4:BB:12:7F:EE X509v3 Authority Key Identifier: keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:33:2f:ea:50:4b:ce:d2:e6:28:3f:84:ce:be:fa:f4:8c:6b: 4e:09:56:6b:e8:31:19:f6:16:fa:53:36:8e:b2:d3:29:a9:15: 23:89:0e:21:99:61:db:8e:a4:64:f2:41:be:4a:19:f5:11:6c: b6:2b:02:ba:92:a2:42:90:a0:71:97:fd:cf:b0:f0:a4:79:1a: 75:19:a6:2e:26:af:fa:10:34:95:01:c8:b0:5d:c2:53:ae:7b: b6:bf:c8:6a:12:20:94:47:41:01:30:16:cc:45:a1:ad:b7:45: b4:56:19:a4:4b:78:3c:28:e8:98:37:68:d7:36:97:f5:75:69: 12:57:db:53:93:f5:49:d6:15:7b:20:f5:de:ee:f1:8c:07:59: 45:4d:0b:7e:3e:c9:0e:6d:29:a9:37:14:aa:fd:9c:e2:52:0c: d5:87:07:64:6f:0f:c3:ee:a5:72:06:81:0d:27:c7:6f:93:c0: 81:11:d9:0e:f9:df:de:b6:eb:3d:56:f0:85:35:06:5c:c0:55: c6:a6:45:f4:b7:e3:32:16:98:a2:6d:29:0b:fa:1a:68:b5:35: b8:4f:aa:74:c5:8f:7b:92:31:bc:30:60:98:c7:37:1e:02:df: 03:55:07:e4:8e:8e:ce:74:93:28:6e:db:58:56:40:2c:1e:61: 07:46:91:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzWiUgk4jvCC8qpRgt2lxkh8TcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5 M0QxOTZENjAeFw0yNDExMjQwMDM2MDdaFw0yNDExMjcwNzE2MDdaMDMxMTAvBgNV BAMTKEIzNzA5OEIzNUU4MzM0RUIxNDRBQUJDQTlCOEIwQ0U0QkIxMjdGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19i6qVSmmcqW7usY8ajmw5SU4 6aY9vvJ2rksGZ2z0hqL+bO6MtJyYVvi2kcPRwVD50HYm+7CbC5UYclLEEhBm1bLN Fkpt4Q1wJcGZBLw4VS19yxu4R8Q0Q6/09DzpY0QofprHVN5lEnUVHIYp1fqtf6EF gkEKvtxR4z9H8uuMCmGyCg49YsUmPF2OehxJwoAmLJH3MhvnanbAhmO9I8Vf96ng kOePvMuGwOaUMMd953d25BLFU/57a82bOHz41B97lgmwMb+SU+/3ZgoC3rLGhbzm CPiv0+0vseiXUw+GJvQH1vxyOcXO8sev3G4sQHBw42Hp2IHwll7VzQODIwWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs3CYs16DNOsUSqvKm4sM5LsSf+4wHwYDVR0j BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx OTZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkz QUU5M0QxOTZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIzL+pQS87S5ig/hM6++vSMa04JVmvoMRn2 FvpTNo6y0ympFSOJDiGZYduOpGTyQb5KGfURbLYrArqSokKQoHGX/c+w8KR5GnUZ pi4mr/oQNJUByLBdwlOue7a/yGoSIJRHQQEwFsxFoa23RbRWGaRLeDwo6Jg3aNc2 l/V1aRJX21OT9UnWFXsg9d7u8YwHWUVNC34+yQ5tKak3FKr9nOJSDNWHB2RvD8Pu pXIGgQ0nx2+TwIER2Q7539626z1W8IU1BlzAVcamRfS34zIWmKJtKQv6Gmi1NbhP qnTFj3uSMbwwYJjHNx4C3wNVB+SOjs50kyhu21hWQCweYQdGkcs= -----END CERTIFICATE-----Generated at Sun Nov 24 02:34:16 2024 by rpki-client on console-fra.rpki-client.org