$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: Kme8BigAxZJzRvlpaL9gFQLEcmxen5Y/jutDOCp7R1w= Subject key identifier: CB:AF:44:F6:F2:91:9C:BA:3C:2C:27:4A:21:A0:93:17:5C:CA:78:78 Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 71A1763A887F93002F2522EE8EAA01E614F82FC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: 69 Signing time: Thu 21 Nov 2024 15:51:47 +0000 Manifest this update: Thu 21 Nov 2024 15:46:47 +0000 Manifest next update: Sun 24 Nov 2024 20:15:47 +0000 Files and hashes: 1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: UjZ9HKe4t+7r7t+IKr4y+23xPHgn74XVfZTC8BFSkvM=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: M93pxbIAs1Pryd9TjQFFBfJQwjvArbju+c3MXIwtsaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a1:76:3a:88:7f:93:00:2f:25:22:ee:8e:aa:01:e6:14:f8:2f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Nov 21 15:46:47 2024 GMT Not After : Nov 24 20:15:47 2024 GMT Subject: CN=CBAF44F6F2919CBA3C2C274A21A093175CCA7878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:47:e1:d9:d2:a3:06:b8:b9:67:e6:98:6e: d8:0a:a5:a5:33:a0:a7:6a:11:a8:19:c3:ef:b1:21: 17:09:5e:34:6f:62:6e:d9:f4:e7:db:0b:7a:82:dc: bd:df:fe:2f:6c:9d:ca:76:c6:2e:05:33:99:e2:ae: 4a:79:0d:d2:b0:4a:e7:04:db:ac:08:fe:f5:02:d7: a2:ba:b3:aa:b2:8d:bb:79:37:3d:ea:7e:dd:1d:0c: 1a:0f:73:71:05:04:5f:f6:13:55:f8:66:dc:58:f2: 19:b6:a3:32:2f:0c:48:67:4b:d7:00:e0:e6:bb:87: 11:46:f0:14:e5:4d:b9:3c:07:b3:b5:79:c9:e7:5e: 42:86:c1:0d:67:e9:e3:23:55:d9:e4:4a:24:b3:f0: e4:0d:e9:69:ff:55:44:ba:ad:c0:eb:c4:ec:de:b8: 75:37:90:fb:f0:27:9e:fb:9f:2d:60:93:42:89:56: 54:a9:fe:99:a3:85:eb:81:4e:40:bc:1d:f0:78:6e: c5:94:58:22:da:24:47:51:17:a1:97:94:e0:37:7e: 8e:ba:36:35:5e:89:3d:98:91:91:4f:34:02:e4:41: 11:98:ff:55:e1:aa:a8:43:7c:75:cc:2b:f2:b3:e7: db:6b:8b:e1:3e:37:7f:ab:61:78:94:4b:d0:4a:eb: c8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AF:44:F6:F2:91:9C:BA:3C:2C:27:4A:21:A0:93:17:5C:CA:78:78 X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8f:48:de:63:62:a3:2e:e8:ad:15:33:a5:2c:ea:43:85:3b: 0a:c1:ba:7e:e0:c6:0d:66:90:4e:cf:0f:25:e1:c8:69:62:a6: ee:ff:62:61:97:ea:07:bf:23:94:93:6a:7f:bf:33:3d:d3:e0: c3:0e:d3:26:40:c9:d3:4b:45:1a:62:05:ec:0d:86:07:5b:47: e1:83:b7:f2:ba:5d:17:46:d7:25:49:5b:4d:d8:ca:df:a6:a7: a0:68:50:76:bd:f3:74:16:5d:03:0e:9e:ce:e4:94:3a:9a:a3: af:66:c9:ef:b8:b8:18:15:0b:e7:36:c4:c6:58:24:18:15:3e: ac:dc:da:d8:e6:c7:32:43:d2:ad:06:8a:c5:34:1a:10:cc:98: 49:b0:92:a0:18:42:23:ac:05:9f:39:57:2c:41:d2:58:da:1e: 53:32:31:70:5b:76:2e:8a:b2:f3:6e:57:be:92:9e:55:c1:f0: 1a:f5:9a:cd:d0:82:6a:a1:87:4b:de:26:c1:9e:fb:49:2b:00: 83:9e:aa:00:cb:5d:6e:37:04:a4:3e:92:3e:92:72:a5:4d:f0: b4:73:3f:d4:48:f3:43:06:24:d5:db:09:6d:48:51:dd:29:d3: 8d:0e:fd:2f:bf:16:03:47:f1:46:e4:86:f5:17:52:00:14:c7: 5e:7b:ba:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcaF2Ooh/kwAvJSLujqoB5hT4L8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNDExMjExNTQ2NDdaFw0yNDExMjQyMDE1NDdaMDMxMTAvBgNV BAMTKENCQUY0NEY2RjI5MTlDQkEzQzJDMjc0QTIxQTA5MzE3NUNDQTc4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVm0fh2dKjBri5Z+aYbtgKpaUz oKdqEagZw++xIRcJXjRvYm7Z9OfbC3qC3L3f/i9sncp2xi4FM5nirkp5DdKwSucE 26wI/vUC16K6s6qyjbt5Nz3qft0dDBoPc3EFBF/2E1X4ZtxY8hm2ozIvDEhnS9cA 4Oa7hxFG8BTlTbk8B7O1ecnnXkKGwQ1n6eMjVdnkSiSz8OQN6Wn/VUS6rcDrxOze uHU3kPvwJ577ny1gk0KJVlSp/pmjheuBTkC8HfB4bsWUWCLaJEdRF6GXlOA3fo66 NjVeiT2YkZFPNALkQRGY/1XhqqhDfHXMK/Kz59tri+E+N3+rYXiUS9BK68hVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy69E9vKRnLo8LCdKIaCTF1zKeHgwHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+PSN5jYqMu6K0VM6Us6kOFOwrBun7gxg1m kE7PDyXhyGlipu7/YmGX6ge/I5STan+/Mz3T4MMO0yZAydNLRRpiBewNhgdbR+GD t/K6XRdG1yVJW03Yyt+mp6BoUHa983QWXQMOns7klDqao69mye+4uBgVC+c2xMZY JBgVPqzc2tjmxzJD0q0GisU0GhDMmEmwkqAYQiOsBZ85VyxB0ljaHlMyMXBbdi6K svNuV76SnlXB8Br1ms3Qgmqhh0veJsGe+0krAIOeqgDLXW43BKQ+kj6ScqVN8LRz P9RI80MGJNXbCW1IUd0p040O/S+/FgNH8UbkhvUXUgAUx157ut8= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org