$ rpki-client -vvf repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft File: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft (raw, json) Hash identifier: r9viLeQcGjjrLCzVSGTDRbyg2IW3rEdVwlqptdqZOis= Subject key identifier: 50:9A:5E:07:AB:09:0D:EE:7E:AF:D9:FB:2E:31:0D:25:E6:43:3C:A1 Authority key identifier: 7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 Certificate issuer: /CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Certificate serial: 15071EB74BD6F7ADF5D6B03D2EDAC324E863E595 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft Manifest number: 2D Signing time: Thu 21 Nov 2024 18:40:01 +0000 Manifest this update: Thu 21 Nov 2024 18:35:01 +0000 Manifest next update: Sun 24 Nov 2024 22:15:01 +0000 Files and hashes: 1: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: qwTtWBYi7rJ9MiRmHT0aPuVn4Q/HdC0kRQGNXWYVUNE=) 2: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl (hash: xTkKh18BHkoX51jmid6s0jL5i/BXFc2+6u84UlULdvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 22:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:07:1e:b7:4b:d6:f7:ad:f5:d6:b0:3d:2e:da:c3:24:e8:63:e5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Validity Not Before: Nov 21 18:35:01 2024 GMT Not After : Nov 24 22:15:01 2024 GMT Subject: CN=509A5E07AB090DEE7EAFD9FB2E310D25E6433CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:71:db:a2:e8:db:30:72:23:95:51:d2:e4: 1e:cf:91:8d:ee:af:c0:05:ba:a6:2d:7e:a2:6e:5e: 4c:87:41:dc:b1:12:2a:17:e1:cc:f8:2d:85:55:4f: c7:ee:e8:49:57:37:a0:d4:a4:2f:96:78:f4:7a:6b: 5a:99:4d:4d:cf:ff:17:b4:b1:2c:66:eb:35:9c:46: 4c:8f:b2:b4:e7:15:d5:d1:8d:43:e9:87:bb:0f:75: d4:f1:a1:e3:34:55:e0:e6:3e:5c:bd:7a:3b:9d:72: 80:2d:05:ba:d8:90:e7:ee:36:99:2b:af:e6:16:af: b8:33:10:17:3d:dc:d8:fd:27:da:03:e4:74:d8:20: 44:0f:07:07:1e:03:e3:8f:77:4b:54:03:32:6f:0d: 77:e6:1d:98:b4:ef:07:ef:28:38:ac:6d:8e:93:84: dc:cb:56:5a:3a:01:b7:fc:0e:77:93:8f:7d:09:83: a5:62:3c:b2:ec:c2:85:87:43:e0:bb:e8:6c:2c:53: 54:60:ed:19:f5:a8:2b:be:49:45:8a:39:f8:0d:9e: 8f:a9:98:d5:3d:af:f2:82:86:be:dc:6d:54:7b:ee: 6c:8b:4b:a2:74:0e:24:ee:dd:19:c9:c7:96:d2:22: 0e:bf:03:34:0d:63:88:d5:cb:9e:cc:08:ff:08:2a: f4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9A:5E:07:AB:09:0D:EE:7E:AF:D9:FB:2E:31:0D:25:E6:43:3C:A1 X509v3 Authority Key Identifier: keyid:7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bd:27:64:ae:27:39:a6:e1:e2:93:a0:3f:4e:58:40:d2:5d: 25:97:44:f3:b7:a3:b5:ef:92:dc:79:d8:5c:25:d4:dc:0c:16: f5:c7:48:cf:00:63:ba:86:e8:da:a6:11:01:24:3d:e5:15:20: 91:58:32:d8:7e:b1:22:36:fb:34:46:5e:fe:06:a0:bf:47:ac: ef:af:dd:e5:56:98:42:0d:09:06:0b:7f:87:fd:1f:b3:ea:ea: 34:76:53:ec:c8:e7:50:10:45:f2:9b:f2:f9:f0:8a:44:e4:e1: da:13:4d:8e:93:2c:cd:32:66:80:47:16:23:4a:2a:ac:b4:6b: be:77:bc:f6:82:95:7d:58:d5:45:b0:49:ad:db:31:f8:24:3d: da:5e:a4:7b:51:38:3b:22:b5:fe:81:c9:03:cf:55:75:10:b2: 43:76:90:42:8c:a8:15:7a:3e:69:c8:5e:56:be:f9:43:10:31: 20:e4:6e:ba:b4:36:a2:e2:c3:a6:65:06:80:dd:f6:71:87:a0: 5c:8c:b1:3f:8e:06:8f:38:d0:79:e7:00:11:cf:0a:62:40:e4: b9:4e:b5:74:fe:29:5d:8e:d0:12:8c:78:ff:ba:d1:6b:e4:b5: f7:3f:62:cc:58:43:89:c1:d7:af:8c:38:7d:f4:d9:39:bf:7a: d4:fa:7b:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQcet0vW96311rA9LtrDJOhj5ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIx NjY4NDc1NjAeFw0yNDExMjExODM1MDFaFw0yNDExMjQyMjE1MDFaMDMxMTAvBgNV BAMTKDUwOUE1RTA3QUIwOTBERUU3RUFGRDlGQjJFMzEwRDI1RTY0MzNDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiKHHboujbMHIjlVHS5B7PkY3u r8AFuqYtfqJuXkyHQdyxEioX4cz4LYVVT8fu6ElXN6DUpC+WePR6a1qZTU3P/xe0 sSxm6zWcRkyPsrTnFdXRjUPph7sPddTxoeM0VeDmPly9ejudcoAtBbrYkOfuNpkr r+YWr7gzEBc93Nj9J9oD5HTYIEQPBwceA+OPd0tUAzJvDXfmHZi07wfvKDisbY6T hNzLVlo6Abf8DneTj30Jg6ViPLLswoWHQ+C76GwsU1Rg7Rn1qCu+SUWKOfgNno+p mNU9r/KChr7cbVR77myLS6J0DiTu3RnJx5bSIg6/AzQNY4jVy57MCP8IKvRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUJpeB6sJDe5+r9n7LjENJeZDPKEwHwYDVR0j BBgwFoAUf4/p+U7UqPFp0sijeWbQYhZoR1YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzAwMjkyZi0yODY4LTQ3YjMtYWMyMS02MDBhNDY3YTcyMzcvMC83RjhGRTlGOTRF RDRBOEYxNjlEMkM4QTM3OTY2RDA2MjE2Njg0NzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIxNjY4 NDc1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj MjEtNjAwYTQ2N2E3MjM3LzAvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQw NjIxNjY4NDc1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+9J2SuJzmm4eKToD9OWEDSXSWXRPO3o7Xv ktx52Fwl1NwMFvXHSM8AY7qG6NqmEQEkPeUVIJFYMth+sSI2+zRGXv4GoL9HrO+v 3eVWmEINCQYLf4f9H7Pq6jR2U+zI51AQRfKb8vnwikTk4doTTY6TLM0yZoBHFiNK Kqy0a753vPaClX1Y1UWwSa3bMfgkPdpepHtRODsitf6ByQPPVXUQskN2kEKMqBV6 PmnIXla++UMQMSDkbrq0NqLiw6ZlBoDd9nGHoFyMsT+OBo840HnnABHPCmJA5LlO tXT+KV2O0BKMeP+60Wvktfc/YsxYQ4nB16+MOH302Tm/etT6e/s= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org