$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft File: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft (raw, json) Hash identifier: /fxvwH3bYwJR1oWwD1r0vCZnhBnNP4CBzl/1fAxWYOw= Subject key identifier: 6B:EC:26:F0:6B:8E:BE:B8:95:4A:9A:43:0E:27:58:30:DD:65:08:46 Authority key identifier: CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C Certificate issuer: /CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Certificate serial: 56B0D1413C8D57C73CD40C633C7BB61AE6E01D0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft Manifest number: 1C Signing time: Sun 24 Nov 2024 04:32:29 +0000 Manifest this update: Sun 24 Nov 2024 04:27:29 +0000 Manifest next update: Wed 27 Nov 2024 05:41:29 +0000 Files and hashes: 1: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl (hash: bQWwnzESEalDqIqEHZz9z2dFy9E6e7wsz1UPj8831y0=) 2: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: LDJv6wYx3HsP5pbUhXvKMJKGJv2fMd2X2nhqPoeeYwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b0:d1:41:3c:8d:57:c7:3c:d4:0c:63:3c:7b:b6:1a:e6:e0:1d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Validity Not Before: Nov 24 04:27:29 2024 GMT Not After : Nov 27 05:41:29 2024 GMT Subject: CN=6BEC26F06B8EBEB8954A9A430E275830DD650846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:50:3b:09:55:e7:8c:44:e9:72:fd:08:24: 7f:64:86:d3:b5:a8:7b:d0:7e:2a:3f:79:42:54:8c: 39:cd:34:43:6b:61:f5:4b:64:a7:57:95:22:2f:b3: 2b:20:9b:f9:fc:51:b4:45:6e:dc:26:1c:ff:5f:a7: fd:dd:93:8c:5e:6c:1f:50:5e:41:51:d1:9a:8b:28: a9:d6:c7:82:a5:46:ea:71:68:02:1b:70:47:bb:37: df:47:b2:e4:f3:36:a8:81:6e:7d:b0:f3:96:ef:4d: e8:5d:27:38:3f:72:69:19:1d:49:ad:10:74:d6:f4: 17:e9:27:c3:f3:d3:39:f1:f8:96:13:92:05:81:14: 3c:3e:09:8c:9a:f4:f3:3b:3e:43:21:20:b6:20:9a: 25:a8:63:00:33:7c:9b:73:e1:9c:8b:6e:64:42:bb: 5f:e1:12:94:f1:8a:02:78:5e:76:a2:d8:bc:ce:89: 7a:d8:bb:31:e8:cc:4a:97:d5:92:19:a5:83:07:b8: 17:2e:50:cd:ba:54:67:df:22:53:ab:0f:c7:1f:be: d6:6d:ab:f5:5a:7a:9c:08:37:d0:d9:81:1b:a7:24: 1e:93:72:e1:93:fa:d5:15:19:2d:a8:b3:b0:59:47: 98:dc:eb:6d:77:68:e1:f5:80:77:d7:1f:21:75:f7: 0a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EC:26:F0:6B:8E:BE:B8:95:4A:9A:43:0E:27:58:30:DD:65:08:46 X509v3 Authority Key Identifier: keyid:CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:cc:6a:b3:b9:12:64:d9:26:20:fb:25:02:38:df:eb:18:bb: 41:31:83:35:42:47:c2:d0:05:97:d4:44:e9:90:89:f8:f5:9c: 1d:c4:fc:66:8d:b4:2a:42:44:8b:09:61:86:ff:6d:8a:9b:b0: a1:c7:56:51:82:5b:8b:0a:6d:0c:b1:f2:3e:89:2a:30:27:dc: f0:1d:9f:11:f8:5e:cd:a4:94:1e:f6:41:a1:bd:8f:dc:21:97: 4a:57:ce:97:62:51:88:40:f1:32:94:76:4c:62:4b:81:14:ea: d6:8e:a5:fb:a2:7c:f3:10:b3:c1:5e:d6:e0:6b:73:ae:1f:65: 67:64:30:70:3d:08:ff:35:26:c5:5e:2a:bc:28:c3:62:ea:3e: d6:e3:47:ca:43:31:52:87:a8:ca:94:4c:6d:78:89:73:9b:8e: c0:39:d4:eb:c9:27:6d:32:89:07:24:0a:03:f9:ac:c5:48:0b: c6:fa:0c:f5:f2:ca:fd:43:96:ce:79:15:c5:ed:dd:40:b0:4c: 3b:7f:1a:fd:f8:16:8b:d5:f9:eb:ee:dd:bc:ca:18:04:d4:5d: fc:03:0a:6a:23:a6:be:6b:b3:81:2e:20:c5:ee:f1:06:40:6b: 5f:6e:10:23:b8:c5:eb:f4:5b:29:01:2e:63:9d:9d:c7:4e:16: 90:b4:d5:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrDRQTyNV8c81AxjPHu2GubgHQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNE MkU1MDQzQzAeFw0yNDExMjQwNDI3MjlaFw0yNDExMjcwNTQxMjlaMDMxMTAvBgNV BAMTKDZCRUMyNkYwNkI4RUJFQjg5NTRBOUE0MzBFMjc1ODMwREQ2NTA4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFalA7CVXnjETpcv0IJH9khtO1 qHvQfio/eUJUjDnNNENrYfVLZKdXlSIvsysgm/n8UbRFbtwmHP9fp/3dk4xebB9Q XkFR0ZqLKKnWx4KlRupxaAIbcEe7N99HsuTzNqiBbn2w85bvTehdJzg/cmkZHUmt EHTW9BfpJ8Pz0znx+JYTkgWBFDw+CYya9PM7PkMhILYgmiWoYwAzfJtz4ZyLbmRC u1/hEpTxigJ4Xnai2LzOiXrYuzHozEqX1ZIZpYMHuBcuUM26VGffIlOrD8cfvtZt q/VaepwIN9DZgRunJB6TcuGT+tUVGS2os7BZR5jc6213aOH1gHfXHyF19woDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa+wm8GuOvriVSppDDidYMN1lCEYwHwYDVR0j BBgwFoAUyvyIJfmAAq8qPLVO8nnVnNLlBDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMC9DQUZDODgyNUY5 ODAwMkFGMkEzQ0I1NEVGMjc5RDU5Q0QyRTUwNDNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNEMkU1 MDQzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1 OUNEMkU1MDQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHMarO5EmTZJiD7JQI43+sYu0ExgzVCR8LQ BZfUROmQifj1nB3E/GaNtCpCRIsJYYb/bYqbsKHHVlGCW4sKbQyx8j6JKjAn3PAd nxH4Xs2klB72QaG9j9whl0pXzpdiUYhA8TKUdkxiS4EU6taOpfuifPMQs8Fe1uBr c64fZWdkMHA9CP81JsVeKrwow2LqPtbjR8pDMVKHqMqUTG14iXObjsA51OvJJ20y iQckCgP5rMVIC8b6DPXyyv1Dls55FcXt3UCwTDt/Gv34FovV+evu3bzKGATUXfwD Cmojpr5rs4EuIMXu8QZAa19uECO4xev0WykBLmOdncdOFpC01WY= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:21 2024 by rpki-client on console-fra.rpki-client.org