$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: O6pE2DBSchjqElyvp6Nwrpz/HcF3gN/4jvMsIal+9zI= Subject key identifier: 28:C7:42:32:75:EC:39:6B:6D:D5:1D:C9:A1:D7:14:2E:82:8D:3F:43 Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 7E6EF971A535E451C23B7E7F7738EB202ABF8AD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 0111 Signing time: Mon 25 Nov 2024 04:00:50 +0000 Manifest this update: Mon 25 Nov 2024 03:55:50 +0000 Manifest next update: Thu 28 Nov 2024 13:37:50 +0000 Files and hashes: 1: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: nacjGs+QQMkPG9i3h6gtKz6mdu10kPcc+NfaP4MFvik=) 2: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: fS9YlC0TCFthKdGamovK5GpQvuzry8i4kfiozrYHNoE=) 3: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: W62mqCDSCeTzLGK0Syfc4fOVTr/m++28J7V4d4tPsTg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6e:f9:71:a5:35:e4:51:c2:3b:7e:7f:77:38:eb:20:2a:bf:8a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Nov 25 03:55:50 2024 GMT Not After : Nov 28 13:37:50 2024 GMT Subject: CN=28C7423275EC396B6DD51DC9A1D7142E828D3F43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:14:9a:49:09:d4:7b:1f:b0:bc:89:1b:a5:bc: b0:e5:71:1f:1a:f2:f4:95:b5:e8:fb:4e:a3:61:63: 8c:df:e7:b9:ed:b9:51:91:1a:58:c5:c4:fd:82:26: 1e:03:96:9e:bb:43:3b:e7:d7:c2:45:9b:51:b9:2a: 19:91:be:dc:80:69:ed:c7:e3:dc:86:d3:5f:c5:55: 13:2a:cb:a5:7c:84:1e:eb:06:97:7e:a9:8d:f7:3c: 5d:f3:e8:37:6f:e2:cc:22:d8:63:b5:23:a0:6f:46: 12:3f:73:ef:5b:65:5a:5e:2e:95:a1:29:be:e7:d6: a8:45:48:e4:4c:d4:f7:b7:a1:61:d4:92:c0:be:a9: f3:9b:9e:cc:fb:1b:88:ad:d8:7c:a6:00:18:9f:29: fb:68:f1:87:21:0b:f6:a2:ab:4f:a9:11:f9:8f:d0: b7:f8:b7:3f:ae:39:65:c6:60:77:0f:23:43:cc:6e: 0d:b6:55:d8:3e:56:28:63:13:ee:55:ed:31:e5:0d: c1:b7:39:1c:c1:c9:1d:f2:c5:84:8f:1b:0f:0f:5d: c1:73:3c:61:42:1d:80:c0:0c:2d:7a:e1:75:91:7b: 3a:31:cb:38:b7:fb:0b:e2:61:eb:4a:34:19:c3:a6: 55:cc:02:83:38:80:26:f3:14:3d:8a:dd:07:29:ed: 3a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C7:42:32:75:EC:39:6B:6D:D5:1D:C9:A1:D7:14:2E:82:8D:3F:43 X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4c:ef:91:52:54:84:27:da:e4:2b:7b:ba:a5:8d:4f:5a:e1: 97:12:b9:6e:f1:30:5d:68:af:0c:1c:56:51:5f:b7:b4:50:63: 8b:f0:6b:4d:73:2e:ea:54:f7:63:42:d5:e0:35:05:f3:7d:71: 10:f2:da:44:d0:ca:28:52:fd:31:8f:c3:9a:3e:6f:4c:7b:5a: 9e:82:35:eb:26:93:65:81:ae:63:3b:c1:b0:ed:00:10:de:de: 10:a0:49:4b:9f:53:9f:88:24:2a:cc:f0:50:c1:17:a6:b0:f5: c5:bf:b4:a4:cd:e4:da:b9:94:4c:bc:ff:0a:35:46:be:83:4a: 98:dd:76:be:f3:77:63:dc:98:e0:76:a6:1a:a0:35:0a:c7:9a: ad:2a:08:8a:b7:b9:a2:4a:e8:0d:70:bd:b4:0b:b4:f0:05:27: a6:13:df:99:6b:fa:4d:ae:2e:62:76:04:14:47:d8:4c:49:de: 74:a8:de:53:e0:a8:a5:a6:71:0f:ce:64:64:c7:80:c3:2e:5e: 20:b6:9e:ef:ae:1e:f7:f6:71:9b:22:fb:f2:3e:bd:08:6c:fb: c1:12:6f:aa:4f:43:48:e1:87:75:a7:6a:2c:c6:ea:d5:1c:14: 79:69:cf:4c:c7:a8:a1:ee:b6:3c:54:ae:3d:01:7b:ed:24:fc: d9:b1:9a:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfm75caU15FHCO35/dzjrICq/itYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNDExMjUwMzU1NTBaFw0yNDExMjgxMzM3NTBaMDMxMTAvBgNV BAMTKDI4Qzc0MjMyNzVFQzM5NkI2REQ1MURDOUExRDcxNDJFODI4RDNGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXFJpJCdR7H7C8iRulvLDlcR8a 8vSVtej7TqNhY4zf57ntuVGRGljFxP2CJh4Dlp67Qzvn18JFm1G5KhmRvtyAae3H 49yG01/FVRMqy6V8hB7rBpd+qY33PF3z6Ddv4swi2GO1I6BvRhI/c+9bZVpeLpWh Kb7n1qhFSORM1Pe3oWHUksC+qfObnsz7G4it2HymABifKfto8YchC/aiq0+pEfmP 0Lf4tz+uOWXGYHcPI0PMbg22Vdg+VihjE+5V7THlDcG3ORzByR3yxYSPGw8PXcFz PGFCHYDADC164XWRezoxyzi3+wviYetKNBnDplXMAoM4gCbzFD2K3Qcp7TrzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMdCMnXsOWtt1R3JodcULoKNP0MwHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxM75FSVIQn2uQre7qljU9a4ZcSuW7xMF1o rwwcVlFft7RQY4vwa01zLupU92NC1eA1BfN9cRDy2kTQyihS/TGPw5o+b0x7Wp6C Nesmk2WBrmM7wbDtABDe3hCgSUufU5+IJCrM8FDBF6aw9cW/tKTN5Nq5lEy8/wo1 Rr6DSpjddr7zd2PcmOB2phqgNQrHmq0qCIq3uaJK6A1wvbQLtPAFJ6YT35lr+k2u LmJ2BBRH2ExJ3nSo3lPgqKWmcQ/OZGTHgMMuXiC2nu+uHvf2cZsi+/I+vQhs+8ES b6pPQ0jhh3WnaizG6tUcFHlpz0zHqKHutjxUrj0Be+0k/NmxmmE= -----END CERTIFICATE-----Generated at Mon Nov 25 04:52:34 2024 by rpki-client on console-fra.rpki-client.org