$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: w64xldr9thC4jgBG8mSyT/U2rKBC6wlcVdYRZGHcne8= Subject key identifier: 3A:34:28:29:63:B6:D3:1E:0A:FA:8D:A7:78:FB:B0:1B:5F:3C:1D:91 Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 2D43D4BA44722984204F24477830EEB00268B8EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: 56 Signing time: Thu 21 Nov 2024 04:00:41 +0000 Manifest this update: Thu 21 Nov 2024 03:55:41 +0000 Manifest next update: Sun 24 Nov 2024 12:44:41 +0000 Files and hashes: 1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: oZcKTmYCJqDy9qRd0DlVW5dVuhLNvdkEUxYoj4jIWDo=) 2: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: yi1IOitogXZmV3YUTi2j0lunt/TFaGgu7rAIBg531bo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:43:d4:ba:44:72:29:84:20:4f:24:47:78:30:ee:b0:02:68:b8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Nov 21 03:55:41 2024 GMT Not After : Nov 24 12:44:41 2024 GMT Subject: CN=3A34282963B6D31E0AFA8DA778FBB01B5F3C1D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:f5:11:8c:fc:0a:59:7e:05:9e:8a:24:5c: d6:fd:5a:4d:3c:7e:96:5e:5e:b5:7b:fa:a1:5e:b8: 26:2a:17:8f:be:25:e4:1d:54:08:fd:91:40:69:04: 45:9b:b1:1c:76:a1:1a:fc:78:1e:b0:db:09:9b:cc: b8:3f:9c:0a:99:69:d6:f8:f3:f5:bd:d4:fd:6e:4e: 2a:38:cb:3c:ae:f0:6f:a0:b1:8b:24:95:bd:f3:83: 21:b2:69:67:5d:40:59:ea:e1:e8:d6:a4:33:ab:69: fb:0d:c9:b4:b7:d9:94:55:36:64:2a:23:73:a6:05: c5:05:eb:9e:b9:b7:02:bf:53:b4:8b:e9:ea:37:16: 3d:91:98:d0:00:85:d6:6e:47:07:04:cc:36:b1:ef: 02:5d:c8:b4:a9:3c:64:d3:06:db:89:51:60:35:a1: cf:bc:3b:8c:0d:f3:84:d4:5a:f7:21:7c:05:69:5a: 61:c8:29:27:5b:b4:9e:a5:50:29:41:70:db:13:64: f3:2e:a8:d5:5b:bc:39:85:1b:02:56:bc:93:2b:d0: a5:74:0d:f3:1d:dd:38:2b:0d:ea:f4:59:f8:d0:1c: 21:9f:9b:9a:cd:6f:18:92:63:ce:d5:c1:2a:75:a1: c7:6b:b1:b0:2f:5a:46:4a:f9:4c:cb:60:29:74:71: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:34:28:29:63:B6:D3:1E:0A:FA:8D:A7:78:FB:B0:1B:5F:3C:1D:91 X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c9:3b:9c:a9:3d:6d:11:54:1b:33:16:e1:57:19:ce:44:8c: 0b:8e:a7:b8:95:09:1f:ac:20:05:ec:53:ca:24:bf:77:f8:21: 91:47:d1:bf:74:0b:c9:35:1a:50:b8:ae:03:8b:10:6a:3e:41: f3:ff:12:39:32:c3:e2:e1:3d:ed:92:b6:62:1d:d3:81:5f:db: 45:b0:6c:8b:31:3a:6f:e7:34:17:24:ca:32:ff:d3:b6:d8:cd: e8:1a:b3:3e:3f:eb:2c:78:d8:34:3b:0f:c7:1b:98:50:5a:de: d6:e1:47:ce:c8:f7:43:6b:c0:b0:81:84:21:f6:b9:1c:b7:c5: b4:ba:66:c4:86:37:d3:ad:bc:d2:2a:9f:53:4d:f1:be:65:9b: 4b:1d:43:08:f9:2f:27:e2:a5:96:3f:79:78:6b:7f:2a:ba:09: 6b:68:40:9f:ee:64:f8:73:f6:2e:03:c8:bd:ef:d5:5e:4d:c6: d4:48:fa:20:93:9d:be:01:ed:15:f4:d9:cd:85:68:f1:ad:54: 58:21:84:ca:22:36:4c:46:a9:26:d3:c1:94:86:fb:23:d1:ca: ce:23:d0:a3:dc:fd:e0:d5:d2:ce:f2:9b:e9:ea:c7:d7:38:9b: d1:a2:fa:27:9d:b0:a1:70:cb:d6:7e:ab:95:e2:e5:4a:2f:6e: 72:7e:6e:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUPUukRyKYQgTyRHeDDusAJouOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNDExMjEwMzU1NDFaFw0yNDExMjQxMjQ0NDFaMDMxMTAvBgNV BAMTKDNBMzQyODI5NjNCNkQzMUUwQUZBOERBNzc4RkJCMDFCNUYzQzFEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkvURjPwKWX4FnookXNb9Wk08 fpZeXrV7+qFeuCYqF4++JeQdVAj9kUBpBEWbsRx2oRr8eB6w2wmbzLg/nAqZadb4 8/W91P1uTio4yzyu8G+gsYsklb3zgyGyaWddQFnq4ejWpDOrafsNybS32ZRVNmQq I3OmBcUF6565twK/U7SL6eo3Fj2RmNAAhdZuRwcEzDax7wJdyLSpPGTTBtuJUWA1 oc+8O4wN84TUWvchfAVpWmHIKSdbtJ6lUClBcNsTZPMuqNVbvDmFGwJWvJMr0KV0 DfMd3TgrDer0WfjQHCGfm5rNbxiSY87VwSp1ocdrsbAvWkZK+UzLYCl0cab7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOjQoKWO20x4K+o2nePuwG188HZEwHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnJO5ypPW0RVBszFuFXGc5EjAuOp7iVCR+s IAXsU8okv3f4IZFH0b90C8k1GlC4rgOLEGo+QfP/Ejkyw+LhPe2StmId04Ff20Ww bIsxOm/nNBckyjL/07bYzegasz4/6yx42DQ7D8cbmFBa3tbhR87I90NrwLCBhCH2 uRy3xbS6ZsSGN9OtvNIqn1NN8b5lm0sdQwj5LyfipZY/eXhrfyq6CWtoQJ/uZPhz 9i4DyL3v1V5NxtRI+iCTnb4B7RX02c2FaPGtVFghhMoiNkxGqSbTwZSG+yPRys4j 0KPc/eDV0s7ym+nqx9c4m9Gi+iedsKFwy9Z+q5Xi5UovbnJ+biU= -----END CERTIFICATE-----Generated at Thu Nov 21 05:34:31 2024 by rpki-client on console-ams.rpki-client.org