$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: jdWFpHME7v40YNo2oln81GTA7rBOElfYniAL0TQpiAU= Subject key identifier: E6:3B:42:17:36:69:7A:16:85:93:DD:89:C1:60:7D:1D:77:6D:AD:48 Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 75F29E2ACD09A06BB31BD881839E0A0E82D55972 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: 27 Signing time: Mon 25 Nov 2024 13:50:47 +0000 Manifest this update: Mon 25 Nov 2024 13:45:47 +0000 Manifest next update: Thu 28 Nov 2024 15:53:47 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: ahpewd0XGg6nae8pj9n4g6OSSawo+dyE8mgOhginknk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 15:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f2:9e:2a:cd:09:a0:6b:b3:1b:d8:81:83:9e:0a:0e:82:d5:59:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Nov 25 13:45:47 2024 GMT Not After : Nov 28 15:53:47 2024 GMT Subject: CN=E63B421736697A168593DD89C1607D1D776DAD48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:de:d0:98:a2:65:31:9f:71:aa:ab:05:ec: a4:a6:61:b6:de:be:24:9a:71:c9:25:53:9a:4c:b1: 41:74:7c:48:a7:2f:62:54:b8:4e:04:0f:f8:b0:ac: 98:9d:38:38:09:81:b2:92:8a:87:0a:54:09:23:4b: ad:06:fb:b6:c8:cb:66:d3:f7:ac:3e:40:76:e0:46: 79:d6:64:9b:c9:c0:84:8b:7f:b9:5c:5f:8d:84:4d: 17:86:97:13:17:1f:73:9a:5e:84:d4:4f:1a:89:52: 2c:65:61:f5:f5:52:52:a2:52:68:7f:c8:29:43:2c: 56:2f:ed:bd:9d:40:c8:38:49:ff:ec:cd:e6:6c:cd: 75:6d:e6:19:70:bf:fc:3a:d3:04:e8:2b:e3:49:38: 5e:69:4a:b0:ee:a2:1a:0d:f7:40:b0:31:f6:17:62: b1:66:c5:42:2f:29:18:b1:18:9f:9c:45:6f:c9:0e: fd:78:12:b0:a8:8f:b0:92:42:ad:3b:99:4e:56:cd: 44:63:f5:cc:ea:c9:55:12:60:62:9d:23:f3:3f:bd: e9:44:90:14:b8:37:ae:75:f9:70:de:17:cf:0a:fa: 17:5e:6e:0e:ee:65:60:5d:74:7f:7d:f9:24:02:e3: f8:f7:68:51:ca:82:93:42:f0:24:c8:b3:a2:56:c5: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3B:42:17:36:69:7A:16:85:93:DD:89:C1:60:7D:1D:77:6D:AD:48 X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:6d:ae:ae:0e:58:ed:d4:2f:ff:cd:52:c1:d4:bd:cd:19:88: 95:10:f8:fe:93:d9:6a:79:8a:d5:d3:64:57:74:19:f3:d5:9c: 6a:38:db:16:e9:f2:49:7d:72:84:4c:22:10:04:de:34:e0:91: d3:ce:da:43:e1:27:43:57:b9:a5:10:2a:b6:f4:a1:af:c8:27: 9b:9b:ce:f5:50:a1:6d:af:e4:7a:97:0c:46:20:2a:39:5b:d1: 5d:0f:7b:e6:74:bd:8e:e0:28:b4:9b:b4:48:b6:c4:11:64:62: 43:88:1e:1b:95:a0:cd:b7:49:17:f6:c7:70:e4:d3:fe:09:51: df:2d:16:d8:81:55:6e:5a:75:c6:ce:47:24:70:20:60:b7:99: 09:37:0d:26:c0:9b:df:29:f0:12:1f:99:22:97:99:bd:72:79: d7:67:5e:fc:67:7d:c7:2d:8e:99:3f:80:dc:09:7e:56:75:51: af:26:62:f4:f4:95:7b:f2:a6:44:5f:6d:da:07:e2:06:f3:2f: d1:e5:86:d1:99:fc:97:62:f3:41:54:8f:42:b0:37:95:40:fd: f7:55:4f:dd:29:c4:e9:96:ad:4e:53:7a:80:f6:46:9e:ff:a5: ad:fb:51:ca:62:b7:84:f5:8c:69:99:b8:64:54:59:b2:da:f7: 6f:e5:3b:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdfKeKs0JoGuzG9iBg54KDoLVWXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNDExMjUxMzQ1NDdaFw0yNDExMjgxNTUzNDdaMDMxMTAvBgNV BAMTKEU2M0I0MjE3MzY2OTdBMTY4NTkzREQ4OUMxNjA3RDFENzc2REFENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+N7QmKJlMZ9xqqsF7KSmYbbe viSaccklU5pMsUF0fEinL2JUuE4ED/iwrJidODgJgbKSiocKVAkjS60G+7bIy2bT 96w+QHbgRnnWZJvJwISLf7lcX42ETReGlxMXH3OaXoTUTxqJUixlYfX1UlKiUmh/ yClDLFYv7b2dQMg4Sf/szeZszXVt5hlwv/w60wToK+NJOF5pSrDuohoN90CwMfYX YrFmxUIvKRixGJ+cRW/JDv14ErCoj7CSQq07mU5WzURj9czqyVUSYGKdI/M/velE kBS4N651+XDeF88K+hdebg7uZWBddH99+SQC4/j3aFHKgpNC8CTIs6JWxYHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5jtCFzZpehaFk92JwWB9HXdtrUgwHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRtrq4OWO3UL//NUsHUvc0ZiJUQ+P6T2Wp5 itXTZFd0GfPVnGo42xbp8kl9coRMIhAE3jTgkdPO2kPhJ0NXuaUQKrb0oa/IJ5ub zvVQoW2v5HqXDEYgKjlb0V0Pe+Z0vY7gKLSbtEi2xBFkYkOIHhuVoM23SRf2x3Dk 0/4JUd8tFtiBVW5adcbORyRwIGC3mQk3DSbAm98p8BIfmSKXmb1yeddnXvxnfcct jpk/gNwJflZ1Ua8mYvT0lXvypkRfbdoH4gbzL9HlhtGZ/Jdi80FUj0KwN5VA/fdV T90pxOmWrU5TeoD2Rp7/pa37Ucpit4T1jGmZuGRUWbLa92/lO4E= -----END CERTIFICATE-----Generated at Mon Nov 25 15:49:32 2024 by rpki-client on console-ams.rpki-client.org