$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: xuiyAfjW3JdQKm86EsLjWNruqyZ/MNceqLCstFvYqnY= Subject key identifier: 94:82:47:57:86:B6:B2:63:6D:52:1A:9F:78:7A:AE:7A:F3:DF:95:9B Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 23B0D8ADCFE77978D1209D2566E6265624E8BB09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: 02 Signing time: Fri 22 Nov 2024 15:31:44 +0000 Manifest this update: Fri 22 Nov 2024 15:26:44 +0000 Manifest next update: Mon 25 Nov 2024 19:51:44 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: TDuZNcmgI7rkzzO/ASfmOm8ZIgjfDPIDKCDKNaZZVXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b0:d8:ad:cf:e7:79:78:d1:20:9d:25:66:e6:26:56:24:e8:bb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Nov 22 15:26:44 2024 GMT Not After : Nov 25 19:51:44 2024 GMT Subject: CN=9482475786B6B2636D521A9F787AAE7AF3DF959B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:a5:0a:87:e8:ef:bb:31:0f:ba:e2:76:88: 50:c6:5f:a3:a1:ff:eb:4b:fa:c0:6d:07:86:61:bc: b5:25:1b:5e:f5:c9:2f:54:44:2a:be:a7:f8:46:f4: b5:27:fd:6d:aa:00:d7:65:28:e7:8f:37:bf:e4:7a: 13:ab:2b:8b:74:ae:67:fc:49:fe:5f:db:74:f1:c7: 2a:6c:36:ab:46:7e:24:f6:e9:f0:0f:64:e2:5a:12: a8:71:ae:14:89:a3:0e:11:d6:12:a8:58:11:ef:4d: 40:65:d9:e3:b1:df:d7:63:2f:ff:06:ec:13:20:80: 09:14:9c:d6:16:f1:13:66:c5:89:84:47:35:f9:76: a9:27:e9:9a:1a:29:0b:73:51:71:d5:de:dd:4f:57: 1b:54:bb:37:5f:75:d2:83:17:3b:1c:2c:d9:21:3d: b3:e5:d1:57:f8:fb:ac:c3:2a:82:07:6e:20:3f:f6: 28:f4:ab:db:20:fa:ea:c5:c0:f2:af:2c:8a:e6:e1: 5a:a2:3e:51:a2:36:64:80:5b:77:85:e1:fa:32:eb: ee:45:40:92:2f:45:8a:23:dd:a3:13:38:04:d3:0e: a1:0d:d3:ab:6f:75:0d:8b:ba:b3:b2:7e:59:8a:b7: 95:cc:0e:d9:71:15:20:71:cf:16:23:51:ad:8b:16: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:82:47:57:86:B6:B2:63:6D:52:1A:9F:78:7A:AE:7A:F3:DF:95:9B X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:07:cd:7c:d5:ed:19:14:7e:29:47:18:29:02:39:6c:ed:d4: 3a:47:29:63:5d:d9:1c:ea:15:20:29:3c:43:ab:aa:4f:d3:bd: bf:11:1f:ce:9b:f9:c6:3c:d3:ef:ad:c7:f2:4c:65:91:66:41: 7a:7e:83:5e:df:b2:31:31:2c:75:39:4b:97:9d:e9:d4:d3:a3: 11:05:4a:a5:14:59:fe:ad:42:89:76:47:b4:a7:17:d5:eb:61: df:89:f7:99:c7:2d:e1:fb:d5:b5:6f:ae:4b:47:7c:9f:a1:1d: 8e:71:ea:0c:e4:85:22:68:fe:1c:f5:f3:b3:e0:be:2e:6c:d2: 17:d8:33:10:fe:20:37:e0:23:54:c3:fb:d6:2b:04:16:fb:68: 2e:d7:fd:97:0d:15:93:66:fc:de:fa:ed:66:72:15:bd:85:c0: 6b:fc:5d:09:6b:22:d3:0d:ee:7e:81:1e:8b:f5:e9:a7:ab:7d: 14:d0:6b:05:62:65:25:43:42:4c:75:7e:b8:cd:bb:74:30:c4: dd:7f:37:df:89:2f:d2:f2:df:61:e1:28:f1:4c:42:24:c7:2a: 1d:dc:28:22:ca:7f:01:d6:ef:a3:24:3b:cc:10:db:65:0c:2c: 39:3b:38:ff:d7:83:d6:fe:41:d2:a0:11:86:48:72:59:ad:81: 23:c5:6e:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7DYrc/neXjRIJ0lZuYmViTouwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNDExMjIxNTI2NDRaFw0yNDExMjUxOTUxNDRaMDMxMTAvBgNV BAMTKDk0ODI0NzU3ODZCNkIyNjM2RDUyMUE5Rjc4N0FBRTdBRjNERjk1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wKUKh+jvuzEPuuJ2iFDGX6Oh /+tL+sBtB4ZhvLUlG171yS9URCq+p/hG9LUn/W2qANdlKOePN7/kehOrK4t0rmf8 Sf5f23TxxypsNqtGfiT26fAPZOJaEqhxrhSJow4R1hKoWBHvTUBl2eOx39djL/8G 7BMggAkUnNYW8RNmxYmERzX5dqkn6ZoaKQtzUXHV3t1PVxtUuzdfddKDFzscLNkh PbPl0Vf4+6zDKoIHbiA/9ij0q9sg+urFwPKvLIrm4VqiPlGiNmSAW3eF4foy6+5F QJIvRYoj3aMTOATTDqEN06tvdQ2LurOyflmKt5XMDtlxFSBxzxYjUa2LFtOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlIJHV4a2smNtUhqfeHquevPflZswHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwHzXzV7RkUfilHGCkCOWzt1DpHKWNd2Rzq FSApPEOrqk/Tvb8RH86b+cY80++tx/JMZZFmQXp+g17fsjExLHU5S5ed6dTToxEF SqUUWf6tQol2R7SnF9XrYd+J95nHLeH71bVvrktHfJ+hHY5x6gzkhSJo/hz187Pg vi5s0hfYMxD+IDfgI1TD+9YrBBb7aC7X/ZcNFZNm/N767WZyFb2FwGv8XQlrItMN 7n6BHov16aerfRTQawViZSVDQkx1frjNu3QwxN1/N9+JL9Ly32HhKPFMQiTHKh3c KCLKfwHW76MkO8wQ22UMLDk7OP/Xg9b+QdKgEYZIclmtgSPFbk4= -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org