$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json) Hash identifier: ueSvRWoSnV3EeMgUsiDjpS6IgeuH6PzPBpj5lzD5PaI= Subject key identifier: 99:0C:31:F2:8F:8D:CD:42:80:7F:BE:0D:5E:4D:C1:FF:5E:34:1A:57 Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Certificate serial: 705E23D163DAAFC75CE7CF11FF9663D449FEF76D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft Manifest number: 13 Signing time: Thu 21 Nov 2024 23:42:20 +0000 Manifest this update: Thu 21 Nov 2024 23:37:20 +0000 Manifest next update: Mon 25 Nov 2024 05:47:20 +0000 Files and hashes: 1: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: fxC4j/hcnAbfh7G9r18M5hB2F6hz+4SbQ0vBs6l+Yz4=) 2: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: ebv5717pdfrOCM6UKJpRU8pwWSSBsU7X9vMbWD9pgi8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:5e:23:d1:63:da:af:c7:5c:e7:cf:11:ff:96:63:d4:49:fe:f7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Validity Not Before: Nov 21 23:37:20 2024 GMT Not After : Nov 25 05:47:20 2024 GMT Subject: CN=990C31F28F8DCD42807FBE0D5E4DC1FF5E341A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:0f:3c:57:04:7d:6b:b2:c3:86:b6:4e:6f: 9c:d7:f2:db:6b:9f:b9:3d:f7:4a:bb:f7:8f:78:35: ae:54:03:9f:b1:de:3b:61:f7:20:36:07:92:40:91: 9e:cd:8c:13:79:4c:6d:de:f6:58:5b:04:95:6c:50: 2f:a5:1e:57:45:bb:93:54:26:8d:d5:cc:34:e2:a1: 77:cd:30:7e:9e:38:d6:26:3f:89:55:17:17:7e:42: 46:5f:11:81:07:e6:8d:cd:0d:b3:d2:11:05:ac:66: 46:27:ec:62:69:0f:15:f5:5a:9a:64:ab:e2:93:96: 99:95:1c:52:54:94:93:de:dd:7b:59:a4:dd:b0:c4: a1:2b:91:41:a1:13:43:c7:a7:d8:35:da:c0:31:45: 48:57:b8:ad:c8:2c:00:eb:9c:c9:8e:17:cf:05:58: 39:86:ef:39:a7:ac:ea:f5:63:35:9c:2f:79:36:f0: 5f:9c:6b:10:5b:48:16:21:8e:49:87:84:43:b9:6c: 8f:a3:21:e7:9d:be:ab:e9:a0:49:9c:99:3a:05:ae: 84:74:83:77:d1:1c:bf:79:b4:64:ee:1d:d7:44:81: 03:d5:36:1c:26:6e:53:1a:7c:ea:70:c6:e0:78:57: c3:af:d0:ac:d5:94:76:61:f1:4f:0a:ff:ff:de:bf: 74:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0C:31:F2:8F:8D:CD:42:80:7F:BE:0D:5E:4D:C1:FF:5E:34:1A:57 X509v3 Authority Key Identifier: keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c2:8a:55:18:77:fb:9e:4f:58:48:12:2c:62:0a:53:53:c3: f0:c3:cf:85:b7:5b:1f:01:a0:be:c2:76:07:d2:39:dc:bd:1d: d9:f4:12:95:0d:45:49:97:44:25:15:e4:01:30:9f:cb:ec:6a: 65:99:22:03:ec:78:4e:8c:f1:4f:3b:e5:84:70:79:61:23:1e: 24:b0:d4:0e:63:34:8b:78:ea:5c:6d:34:64:a3:2c:f7:98:1f: 2a:96:1a:56:18:9a:5d:1c:04:03:e8:1f:8e:d1:33:f5:18:e7: fb:3f:02:f1:02:62:a6:38:49:aa:0a:11:9a:aa:c5:6e:a5:8b: d3:d5:79:37:35:50:df:df:aa:bd:5f:57:a1:82:64:ec:9e:ff: 3a:71:e2:7b:ef:93:e0:6a:0d:93:80:49:c7:b7:d6:70:ec:dc: e0:ec:82:1c:74:c7:b6:a3:89:8b:fa:13:26:f1:ff:90:1d:15: cb:95:ad:d5:a8:e5:fd:2a:6a:44:a3:e9:68:6b:3b:86:9c:95: 2e:ea:a0:af:31:ae:db:08:c5:62:23:a0:c1:03:98:c0:55:80: ea:7f:bc:db:48:ff:c2:73:6d:7d:bf:8e:df:74:f6:cf:07:ff: b4:54:ab:57:7a:9b:03:7f:e2:7b:8b:d8:9f:38:ca:bf:46:b1: ec:a8:85:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcF4j0WPar8dc588R/5Zj1En+920wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdG Qjg1RjgwQTAeFw0yNDExMjEyMzM3MjBaFw0yNDExMjUwNTQ3MjBaMDMxMTAvBgNV BAMTKDk5MEMzMUYyOEY4RENENDI4MDdGQkUwRDVFNERDMUZGNUUzNDFBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TQ88VwR9a7LDhrZOb5zX8ttr n7k990q79494Na5UA5+x3jth9yA2B5JAkZ7NjBN5TG3e9lhbBJVsUC+lHldFu5NU Jo3VzDTioXfNMH6eONYmP4lVFxd+QkZfEYEH5o3NDbPSEQWsZkYn7GJpDxX1Wppk q+KTlpmVHFJUlJPe3XtZpN2wxKErkUGhE0PHp9g12sAxRUhXuK3ILADrnMmOF88F WDmG7zmnrOr1YzWcL3k28F+caxBbSBYhjkmHhEO5bI+jIeedvqvpoEmcmToFroR0 g3fRHL95tGTuHddEgQPVNhwmblMafOpwxuB4V8Ov0KzVlHZh8U8K///ev3S1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmQwx8o+NzUKAf74NXk3B/140GlcwHwYDVR0j BBgwFoAU1ps4fmucrxvSayhqlI1ad/uF+AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMC9ENjlCMzg3RTZC OUNBRjFCRDI2QjI4NkE5NDhENUE3N0ZCODVGODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdGQjg1 RjgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj NmMtNmIyNzU2NmZlNzBjLzAvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVB NzdGQjg1RjgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTCilUYd/ueT1hIEixiClNTw/DDz4W3Wx8B oL7CdgfSOdy9Hdn0EpUNRUmXRCUV5AEwn8vsamWZIgPseE6M8U875YRweWEjHiSw 1A5jNIt46lxtNGSjLPeYHyqWGlYYml0cBAPoH47RM/UY5/s/AvECYqY4SaoKEZqq xW6li9PVeTc1UN/fqr1fV6GCZOye/zpx4nvvk+BqDZOASce31nDs3ODsghx0x7aj iYv6Eybx/5AdFcuVrdWo5f0qakSj6WhrO4aclS7qoK8xrtsIxWIjoMEDmMBVgOp/ vNtI/8JzbX2/jt909s8H/7RUq1d6mwN/4nuL2J84yr9GseyohfI= -----END CERTIFICATE-----Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org