$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: QZQEuE2BswBpnxIV9Uu24l0ZwpdmwtYA1j+7uzBH/04= Subject key identifier: 21:29:17:DB:93:6D:21:FB:3A:E7:14:89:47:0E:2B:B1:1B:0C:1E:55 Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 20EAAE69A37C393D0FC2AF27F61E271112E3B0F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: EA Signing time: Sat 23 Nov 2024 20:50:37 +0000 Manifest this update: Sat 23 Nov 2024 20:45:37 +0000 Manifest next update: Wed 27 Nov 2024 04:26:37 +0000 Files and hashes: 1: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: 0M6DJeH8iLeSRNaDUkGpn3/hFTRPtiNSVTy7W3mP6+w=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: kIIeMyYHLpwRsUVcjh/TOWu2x/y3f9Oc8PMmrWTrStE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ea:ae:69:a3:7c:39:3d:0f:c2:af:27:f6:1e:27:11:12:e3:b0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Nov 23 20:45:37 2024 GMT Not After : Nov 27 04:26:37 2024 GMT Subject: CN=212917DB936D21FB3AE71489470E2BB11B0C1E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b5:4d:45:83:41:71:79:94:f7:6f:3f:81:93: e4:ca:05:7b:58:63:b1:5f:14:a6:59:53:41:f3:d4: 84:5e:89:0a:3e:b7:79:ab:46:2b:33:d3:fc:3f:3e: e2:a8:00:ad:d4:cc:c2:a8:e1:83:ff:a2:11:16:62: e4:7d:27:b3:cb:63:37:a1:5f:71:e3:97:14:4e:10: ed:dd:67:c1:71:80:39:1f:2c:5a:74:c3:16:09:46: b7:b6:c5:39:fb:77:b1:14:0a:22:f0:bf:fe:ab:79: e7:03:d8:e2:4b:2c:44:f4:76:cf:b6:3a:79:06:28: aa:64:a0:6b:c1:5c:9a:cb:f1:98:05:e5:88:a9:dc: 6f:56:6e:c7:8c:2a:a0:6e:c4:01:fc:21:01:a2:e7: 6e:33:00:7f:c5:df:3d:a4:a7:25:86:0d:bf:07:5f: a7:4a:9f:03:a4:c2:06:89:6c:9c:06:48:f6:b8:3b: 52:35:b8:d3:12:7a:5c:e4:5f:f5:4e:99:b5:26:13: c4:c4:c7:11:89:67:e9:55:6f:9b:c3:54:14:46:14: 33:a3:b7:be:1e:b6:69:55:7c:42:12:11:a1:ef:58: 61:62:2c:48:cd:f6:db:07:0d:cc:60:76:04:0a:9d: 94:fa:b2:40:49:94:ad:7b:dc:9e:9a:84:85:96:48: 58:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:29:17:DB:93:6D:21:FB:3A:E7:14:89:47:0E:2B:B1:1B:0C:1E:55 X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2a:2c:7a:6e:d7:a5:22:7d:15:a3:b9:c6:ff:59:7c:48:6a: 9b:60:bc:b0:1b:dc:e1:2c:3e:28:af:ff:b2:3c:bd:07:3a:a8: 2b:aa:87:0f:41:30:cc:fd:ff:d3:97:cf:ae:a9:60:c8:45:d7: 23:2e:a8:21:77:78:82:23:a1:82:15:6f:03:bf:3b:42:88:68: fa:3d:f3:0c:de:91:79:65:38:25:25:e4:34:17:c3:87:0b:49: 2d:a6:89:8f:7c:55:1a:c7:55:6e:d6:64:0f:e3:68:12:fc:a9: ce:55:3a:16:91:2c:c0:71:f4:4a:2a:2f:79:60:ee:48:ed:77: a6:60:e7:2b:58:a5:ec:83:93:06:a9:22:e3:4b:a2:4e:be:38: 2c:7b:95:28:36:82:04:9a:97:e6:ad:c9:48:29:16:b6:9f:6b: 5e:1f:b4:c1:f0:42:f1:cd:7d:23:3f:9c:8a:e0:88:c6:33:e1: f1:ab:82:0c:e7:cb:4c:d1:08:ae:5c:f5:f3:6d:ec:b7:33:f9: 6c:e1:1f:69:28:6d:a7:87:2b:a5:1f:c7:2f:cb:23:b4:7e:cd: c2:86:70:38:f4:0a:0d:af:17:43:c9:f8:66:3c:cb:5c:12:a9: 7a:00:93:30:52:a0:fe:c2:1a:d6:20:b3:10:1e:87:94:57:4d: 72:d7:cd:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOquaaN8OT0Pwq8n9h4nERLjsPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNDExMjMyMDQ1MzdaFw0yNDExMjcwNDI2MzdaMDMxMTAvBgNV BAMTKDIxMjkxN0RCOTM2RDIxRkIzQUU3MTQ4OTQ3MEUyQkIxMUIwQzFFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvtU1Fg0FxeZT3bz+Bk+TKBXtY Y7FfFKZZU0Hz1IReiQo+t3mrRisz0/w/PuKoAK3UzMKo4YP/ohEWYuR9J7PLYzeh X3HjlxROEO3dZ8FxgDkfLFp0wxYJRre2xTn7d7EUCiLwv/6reecD2OJLLET0ds+2 OnkGKKpkoGvBXJrL8ZgF5Yip3G9WbseMKqBuxAH8IQGi524zAH/F3z2kpyWGDb8H X6dKnwOkwgaJbJwGSPa4O1I1uNMSelzkX/VOmbUmE8TExxGJZ+lVb5vDVBRGFDOj t74etmlVfEISEaHvWGFiLEjN9tsHDcxgdgQKnZT6skBJlK173J6ahIWWSFhbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUISkX25NtIfs65xSJRw4rsRsMHlUwHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcqLHpu16UifRWjucb/WXxIaptgvLAb3OEs Piiv/7I8vQc6qCuqhw9BMMz9/9OXz66pYMhF1yMuqCF3eIIjoYIVbwO/O0KIaPo9 8wzekXllOCUl5DQXw4cLSS2miY98VRrHVW7WZA/jaBL8qc5VOhaRLMBx9EoqL3lg 7kjtd6Zg5ytYpeyDkwapIuNLok6+OCx7lSg2ggSal+atyUgpFrafa14ftMHwQvHN fSM/nIrgiMYz4fGrggzny0zRCK5c9fNt7Lcz+WzhH2kobaeHK6Ufxy/LI7R+zcKG cDj0Cg2vF0PJ+GY8y1wSqXoAkzBSoP7CGtYgsxAeh5RXTXLXzQQ= -----END CERTIFICATE-----Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org