$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json) Hash identifier: +aZbITCXyfEjTV6ChsNwRu/wbm1F9Mzhj1dN7js1Ryc= Subject key identifier: 08:63:A3:33:D8:41:9E:00:CF:B9:47:A2:37:70:80:D6:94:29:3B:44 Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 768A67D0826D8CBC231D179A0667DE0A452EF745 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft Manifest number: 77 Signing time: Mon 25 Nov 2024 07:32:06 +0000 Manifest this update: Mon 25 Nov 2024 07:27:06 +0000 Manifest next update: Thu 28 Nov 2024 09:11:06 +0000 Files and hashes: 1: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: 1LTuAsKGgo9XlBFzlMOuyRm62gXysB8LQlgFyYA32xo=) 2: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: 5jDpL7QEjYPKSYMByhJFIXLiqXsDF2veAII1Qgn0vew=) 3: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: 2iKtsTnwMherVDAttlOxKOUiZCK2+X50BGe9e3QaIYY=) 4: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: JvnboqDPTnY6QyZ8I00ii7NZBebtgdLprTOOG9nDLXU=) 5: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: Ch9kb0gfgSph6mketqEn1fzFFFRNc5Wq+2hb3B5I9EY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 09:11:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8a:67:d0:82:6d:8c:bc:23:1d:17:9a:06:67:de:0a:45:2e:f7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Nov 25 07:27:06 2024 GMT Not After : Nov 28 09:11:06 2024 GMT Subject: CN=0863A333D8419E00CFB947A2377080D694293B44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:79:8e:53:08:8f:19:c4:45:82:d5:e2:48: f8:cd:54:fc:f2:b4:3c:11:ca:88:a0:77:a9:92:09: 26:0f:24:35:02:fd:79:04:8f:18:b4:3c:e4:03:d3: 86:a6:4c:4a:78:bd:ab:e1:db:c8:ef:16:22:a8:27: fd:b1:78:cf:99:52:33:ff:45:e3:0c:f6:b3:59:d3: 5c:6c:b3:8f:a8:fa:c6:8c:2e:3a:1d:6f:1b:6b:41: b7:49:fb:15:a1:f9:9c:15:65:58:b5:42:d9:cb:ee: e6:8e:7a:64:51:0f:da:5d:72:5e:ad:47:fe:38:4d: 39:5c:40:f3:51:a9:3c:9b:a6:31:45:51:93:47:da: 65:35:2d:9e:d1:97:71:a6:3f:4e:08:6b:18:11:60: d1:29:f2:64:b2:0f:8b:aa:29:64:2e:17:4d:5a:dc: 0c:d5:8d:3d:d8:1b:82:a0:e4:89:d5:ea:be:8d:61: 59:ec:81:1f:76:a9:61:8e:9c:79:81:25:47:63:61: 6b:9f:fa:15:c6:2b:13:47:5d:88:a3:4a:93:ed:ff: 0b:9a:43:9f:12:7a:70:84:59:42:e9:79:d5:a3:22: 52:c7:13:31:07:4e:b3:53:8a:89:c6:e6:b7:12:00: ea:d4:0f:a1:25:a8:7d:35:27:b2:f6:34:60:79:a5: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:63:A3:33:D8:41:9E:00:CF:B9:47:A2:37:70:80:D6:94:29:3B:44 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:1e:2a:cd:b6:ae:b9:cd:55:37:17:6e:41:54:24:12:ae:c4: aa:84:69:53:d3:a9:10:df:91:c8:d5:df:95:f4:17:c8:69:61: 72:8e:44:71:6f:1e:8a:4b:eb:2b:95:52:06:e6:4e:97:33:bf: a8:47:b2:48:e7:8a:11:79:d3:3c:b5:92:a5:f5:11:45:c9:f1: 0e:74:b6:c0:b4:b2:42:ac:3a:d0:14:91:23:9a:69:58:37:a3: cf:cf:19:a6:83:13:ae:21:57:d8:aa:d9:ed:e7:80:c6:76:eb: e9:2b:d7:3b:dc:95:c3:4c:b1:46:db:08:60:ea:e0:af:4f:9b: f9:77:83:0e:1a:c2:96:a7:3d:24:07:fe:1f:d8:f4:45:60:ea: 9a:b3:80:db:7f:d0:f5:97:67:37:7d:97:00:f8:b7:0a:c0:e4: 39:2e:7f:f6:83:a6:86:99:b5:7a:b6:7e:ae:ff:ac:88:7c:40: 60:10:22:d6:a8:4b:2f:73:81:c7:cd:f6:d0:52:d0:18:6b:d3: 8a:aa:87:9a:9a:76:4c:ed:0b:da:a1:bc:86:38:04:ea:1f:f6: 52:be:5d:98:c8:26:57:a7:49:86:ce:5d:5f:da:1a:7b:e4:65: 14:21:d1:97:36:e0:77:2b:dc:23:39:ff:21:f8:05:f8:51:ae: 43:ae:57:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdopn0IJtjLwjHReaBmfeCkUu90UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNDExMjUwNzI3MDZaFw0yNDExMjgwOTExMDZaMDMxMTAvBgNV BAMTKDA4NjNBMzMzRDg0MTlFMDBDRkI5NDdBMjM3NzA4MEQ2OTQyOTNCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspXmOUwiPGcRFgtXiSPjNVPzy tDwRyoigd6mSCSYPJDUC/XkEjxi0POQD04amTEp4vavh28jvFiKoJ/2xeM+ZUjP/ ReMM9rNZ01xss4+o+saMLjodbxtrQbdJ+xWh+ZwVZVi1QtnL7uaOemRRD9pdcl6t R/44TTlcQPNRqTybpjFFUZNH2mU1LZ7Rl3GmP04IaxgRYNEp8mSyD4uqKWQuF01a 3AzVjT3YG4Kg5InV6r6NYVnsgR92qWGOnHmBJUdjYWuf+hXGKxNHXYijSpPt/wua Q58SenCEWULpedWjIlLHEzEHTrNTionG5rcSAOrUD6ElqH01J7L2NGB5pWc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCGOjM9hBngDPuUeiN3CA1pQpO0QwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3ZTgwODEtNjNhZi00OWU3LTk2 NDYtNzZjMjVhNWU5N2NhLzAvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEy NDVCRjBBRkIwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAeKs22rrnNVTcXbkFUJBKuxKqEaVPTqRDf kcjV35X0F8hpYXKORHFvHopL6yuVUgbmTpczv6hHskjnihF50zy1kqX1EUXJ8Q50 tsC0skKsOtAUkSOaaVg3o8/PGaaDE64hV9iq2e3ngMZ26+kr1zvclcNMsUbbCGDq 4K9Pm/l3gw4awpanPSQH/h/Y9EVg6pqzgNt/0PWXZzd9lwD4twrA5Dkuf/aDpoaZ tXq2fq7/rIh8QGAQItaoSy9zgcfN9tBS0Bhr04qqh5qadkztC9qhvIY4BOof9lK+ XZjIJlenSYbOXV/aGnvkZRQh0Zc24Hcr3CM5/yH4BfhRrkOuV5w= -----END CERTIFICATE-----Generated at Mon Nov 25 09:02:07 2024 by rpki-client on console-ams.rpki-client.org