$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: 9gdMOP+FxVVhyMe8Yp+7BvlX8w+kcI3Snzm4maz8ous= Subject key identifier: 98:A5:C2:05:99:9D:6A:FC:E1:13:26:56:4A:F5:AA:9C:A9:8F:39:7D Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 6422E50FF9480F3C63F387B58A8EEA74E1B364AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 0374 Signing time: Mon 25 Nov 2024 10:32:04 +0000 Manifest this update: Mon 25 Nov 2024 10:27:04 +0000 Manifest next update: Thu 28 Nov 2024 18:30:04 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: gcLqt+UHdDrYAwvg/SoyNx8fB31h31dp64L2uBTTYMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 18:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:22:e5:0f:f9:48:0f:3c:63:f3:87:b5:8a:8e:ea:74:e1:b3:64:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Nov 25 10:27:04 2024 GMT Not After : Nov 28 18:30:04 2024 GMT Subject: CN=98A5C205999D6AFCE11326564AF5AA9CA98F397D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:80:64:13:db:52:e3:68:dc:cd:bd:0f:b8:0a: 73:85:81:3a:17:da:2d:69:9c:db:35:62:c4:fb:a3: ff:4a:00:6e:2e:eb:b2:e2:2e:ad:e6:97:c4:01:1d: 19:04:66:3a:74:bb:b9:61:ba:ea:89:d4:61:c4:ce: 28:32:c9:31:75:aa:73:72:3e:0c:a4:0e:fc:a4:59: 4c:6e:a7:00:b0:e7:6e:82:11:05:b9:19:30:32:b1: 8c:17:49:93:80:9b:c0:99:73:19:cc:1b:eb:b6:ec: a0:30:c3:11:68:8f:d8:83:73:5c:70:e2:79:6d:7e: 16:49:3f:62:da:ab:02:b6:38:eb:ed:b4:6d:43:0d: a9:42:de:9a:1d:37:fd:c5:15:55:8f:92:5e:8d:21: db:ae:2f:17:be:06:86:ae:af:c3:b7:1b:14:98:4e: 45:cc:20:76:22:0f:5b:d3:0e:19:6f:d6:fa:60:12: 70:b1:dd:39:0f:cd:2b:36:2a:23:53:ee:2f:d2:44: 79:93:ad:11:53:0d:c6:ff:3c:51:c1:67:94:db:5a: 2e:e1:99:0e:43:d6:c9:a7:25:c0:4a:c7:12:8e:12: 92:dd:1c:c1:65:e6:6a:be:96:27:0c:8c:79:85:c1: a9:f3:b6:c0:a7:33:13:70:f0:34:7d:43:83:8e:31: 05:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A5:C2:05:99:9D:6A:FC:E1:13:26:56:4A:F5:AA:9C:A9:8F:39:7D X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ff:90:0f:9c:1f:51:c7:05:53:5d:ec:99:2c:76:0f:b0:a2: 3f:da:11:69:f5:2c:d7:05:49:bd:c7:c8:4d:8c:ea:2b:c5:7e: f6:ec:12:74:56:bc:1c:f6:ab:7f:e6:b7:bb:9e:93:6b:d1:8d: 9f:da:0d:e6:59:cd:dd:1c:fa:9e:45:0b:3f:a6:c9:08:28:37: f3:4f:b7:82:ce:7f:2b:69:55:17:7f:2d:de:2e:e8:ca:00:18: 61:d3:35:3c:c4:2e:57:0e:b8:09:5a:42:5c:16:6b:e6:e4:1d: c6:93:57:5d:41:70:08:21:29:26:b8:1e:78:ae:aa:c3:6a:e5: dc:1b:04:59:be:8f:a4:c2:df:84:22:ec:3c:60:1e:4e:f5:ca: ac:94:ff:e1:a1:3f:36:2d:c1:e4:8e:f8:c8:e4:99:70:78:29: 9a:fe:da:08:e0:72:14:98:c5:99:50:92:33:9b:fd:be:b7:5b: 05:92:b5:0e:a5:4a:f7:f6:94:f3:6c:56:aa:1c:db:7b:de:39: 95:a0:36:4a:de:48:26:32:1e:3c:f7:5a:d9:cc:54:9c:c8:b0: e7:4e:0d:27:64:bb:25:cd:32:36:59:f9:e8:99:5e:35:9b:3c: 04:b2:23:bc:cb:38:be:78:b7:90:1e:70:a2:0d:d0:67:61:48: cc:43:f0:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZCLlD/lIDzxj84e1io7qdOGzZK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNDExMjUxMDI3MDRaFw0yNDExMjgxODMwMDRaMDMxMTAvBgNV BAMTKDk4QTVDMjA1OTk5RDZBRkNFMTEzMjY1NjRBRjVBQTlDQTk4RjM5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDagGQT21LjaNzNvQ+4CnOFgToX 2i1pnNs1YsT7o/9KAG4u67LiLq3ml8QBHRkEZjp0u7lhuuqJ1GHEzigyyTF1qnNy PgykDvykWUxupwCw526CEQW5GTAysYwXSZOAm8CZcxnMG+u27KAwwxFoj9iDc1xw 4nltfhZJP2LaqwK2OOvttG1DDalC3podN/3FFVWPkl6NIduuLxe+Boaur8O3GxSY TkXMIHYiD1vTDhlv1vpgEnCx3TkPzSs2KiNT7i/SRHmTrRFTDcb/PFHBZ5TbWi7h mQ5D1smnJcBKxxKOEpLdHMFl5mq+licMjHmFwanztsCnMxNw8DR9Q4OOMQWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmKXCBZmdavzhEyZWSvWqnKmPOX0wHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP/kA+cH1HHBVNd7Jksdg+woj/aEWn1LNcF Sb3HyE2M6ivFfvbsEnRWvBz2q3/mt7uek2vRjZ/aDeZZzd0c+p5FCz+myQgoN/NP t4LOfytpVRd/Ld4u6MoAGGHTNTzELlcOuAlaQlwWa+bkHcaTV11BcAghKSa4Hniu qsNq5dwbBFm+j6TC34Qi7DxgHk71yqyU/+GhPzYtweSO+MjkmXB4KZr+2gjgchSY xZlQkjOb/b63WwWStQ6lSvf2lPNsVqoc23veOZWgNkreSCYyHjz3WtnMVJzIsOdO DSdkuyXNMjZZ+eiZXjWbPASyI7zLOL54t5AecKIN0GdhSMxD8Dc= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org