$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: zbjWZ115fdJOITloaq3fLQ5y8dWDb09liQ38aWhZRTU= Subject key identifier: EE:61:2D:85:3D:29:CD:7B:51:1B:F8:F8:D9:38:E7:24:13:84:9B:B9 Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 7191558CF4B4F7A2F9B01F15AA40F57CEE648A41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 0304 Signing time: Fri 22 Nov 2024 16:11:10 +0000 Manifest this update: Fri 22 Nov 2024 16:06:10 +0000 Manifest next update: Tue 26 Nov 2024 02:52:10 +0000 Files and hashes: 1: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: kJ2JIiJRV18e62nxc/qNPyRhUN7JJ5f3bAixzkWg1lw=) 2: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: UVa2BFyeyFnWWwBGER708Zkc5wG3hgx7lEbyHJ9YtXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:91:55:8c:f4:b4:f7:a2:f9:b0:1f:15:aa:40:f5:7c:ee:64:8a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Nov 22 16:06:10 2024 GMT Not After : Nov 26 02:52:10 2024 GMT Subject: CN=EE612D853D29CD7B511BF8F8D938E72413849BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:45:24:11:60:a3:cd:c6:4c:f4:f0:be:da:f1: 52:bb:91:cb:b9:77:a1:4a:29:cf:d6:9d:17:93:bf: 08:46:46:9b:39:90:39:cd:bf:c3:53:55:2a:c2:0d: 69:30:44:cc:e5:3c:be:f0:2d:8e:ae:6f:13:14:57: 16:a8:3a:29:f2:65:26:d1:7e:21:4b:03:6f:a2:8a: fb:fa:d4:63:94:93:f9:3c:65:23:b4:31:9e:b0:1c: 5c:c5:fb:6a:e7:fc:b5:e9:89:45:0c:96:9b:50:a6: 14:6d:11:7b:70:e5:a5:e2:43:2e:ca:93:7c:ff:33: 3b:d0:bb:c0:79:42:02:f8:52:84:36:74:d7:8a:9d: 9f:c3:30:4c:80:da:3d:28:aa:06:3b:dc:77:06:2e: ea:b3:89:5c:cd:86:a1:ef:bd:7e:7b:18:ed:2f:09: 8f:5d:ef:70:15:a3:0f:bf:a6:61:9b:cc:1f:66:94: e7:fe:a6:fa:07:5f:54:c3:8f:68:eb:d2:22:0f:b6: 17:24:3c:b0:43:9e:d6:90:6c:e3:d5:89:23:1f:72: 49:09:d6:f8:db:b4:a6:b1:a3:7a:2e:72:4a:ef:21: ba:a8:70:73:61:e8:8d:bf:9a:22:c1:fb:73:6b:bf: 16:1e:bb:c5:ef:80:e8:fc:2b:38:2b:ff:3e:47:17: 56:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:61:2D:85:3D:29:CD:7B:51:1B:F8:F8:D9:38:E7:24:13:84:9B:B9 X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4f:52:02:49:de:46:fc:f5:77:91:32:1c:95:03:ba:61:37: c6:f3:03:31:45:95:76:6c:d8:1e:d9:e8:8d:51:c4:31:f7:67: 37:1d:c3:20:20:94:fc:8a:e3:6e:fe:6f:a1:14:4a:06:93:f9: 35:c9:ab:0c:9c:81:28:66:cd:32:ac:66:f4:c2:10:b2:e6:62: 6d:50:b8:64:d4:d6:8d:3b:46:58:96:69:68:77:f0:78:73:7b: c3:5b:7f:5c:74:aa:f3:62:51:a3:74:22:52:d7:33:0d:cc:d5: 08:5b:e7:92:e2:43:e1:b6:d2:44:15:a5:1b:cc:8e:25:cd:83: db:3b:02:7f:60:8f:46:88:7c:cf:06:62:9b:b0:a0:47:2a:99: 4e:fc:13:84:88:fb:17:36:a0:0b:5f:f1:19:be:65:b8:79:78: 3c:1d:5a:7f:f5:35:4c:2f:1a:d6:b4:97:d3:ad:08:77:ac:94: 20:2a:e1:2a:d6:19:8b:1f:93:7d:1a:dd:6f:c6:e0:fb:67:f7: 3a:2f:b9:b4:ef:31:f3:57:8e:c5:94:91:5c:c7:c8:81:c8:51: cd:27:7d:47:67:71:4b:50:8e:8c:c1:08:55:d5:92:8c:37:41: fd:d4:db:a9:bf:25:d5:f7:d3:c1:89:2b:24:19:65:f5:9f:67: 10:ba:9b:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZFVjPS096L5sB8VqkD1fO5kikEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNDExMjIxNjA2MTBaFw0yNDExMjYwMjUyMTBaMDMxMTAvBgNV BAMTKEVFNjEyRDg1M0QyOUNEN0I1MTFCRjhGOEQ5MzhFNzI0MTM4NDlCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9RSQRYKPNxkz08L7a8VK7kcu5 d6FKKc/WnReTvwhGRps5kDnNv8NTVSrCDWkwRMzlPL7wLY6ubxMUVxaoOinyZSbR fiFLA2+iivv61GOUk/k8ZSO0MZ6wHFzF+2rn/LXpiUUMlptQphRtEXtw5aXiQy7K k3z/MzvQu8B5QgL4UoQ2dNeKnZ/DMEyA2j0oqgY73HcGLuqziVzNhqHvvX57GO0v CY9d73AVow+/pmGbzB9mlOf+pvoHX1TDj2jr0iIPthckPLBDntaQbOPViSMfckkJ 1vjbtKaxo3ouckrvIbqocHNh6I2/miLB+3NrvxYeu8XvgOj8Kzgr/z5HF1Y5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7mEthT0pzXtRG/j42TjnJBOEm7kwHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5PUgJJ3kb89XeRMhyVA7phN8bzAzFFlXZs 2B7Z6I1RxDH3ZzcdwyAglPyK427+b6EUSgaT+TXJqwycgShmzTKsZvTCELLmYm1Q uGTU1o07RliWaWh38Hhze8Nbf1x0qvNiUaN0IlLXMw3M1Qhb55LiQ+G20kQVpRvM jiXNg9s7An9gj0aIfM8GYpuwoEcqmU78E4SI+xc2oAtf8Rm+Zbh5eDwdWn/1NUwv Gta0l9OtCHeslCAq4SrWGYsfk30a3W/G4Ptn9zovubTvMfNXjsWUkVzHyIHIUc0n fUdncUtQjozBCFXVkow3Qf3U26m/JdX308GJKyQZZfWfZxC6m/w= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org