$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: OMXLy/hFfrakDy50FyUneb7msmJb68wGUVQ/4krPROI= Subject key identifier: 87:A0:F9:A4:A4:C4:A9:70:1D:C5:7B:77:82:79:8D:D5:56:52:8D:82 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 3503322101821C0587703E96D70B53959DD64694 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 0138 Signing time: Fri 22 Nov 2024 14:00:43 +0000 Manifest this update: Fri 22 Nov 2024 13:55:43 +0000 Manifest next update: Mon 25 Nov 2024 22:09:43 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: 4eZuNsM8WM/eUuHHwUibtmIKYaXh6GTcw7FhpjdHWlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:03:32:21:01:82:1c:05:87:70:3e:96:d7:0b:53:95:9d:d6:46:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Nov 22 13:55:43 2024 GMT Not After : Nov 25 22:09:43 2024 GMT Subject: CN=87A0F9A4A4C4A9701DC57B7782798DD556528D82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b9:d4:8d:73:ba:3a:05:15:32:4e:4a:81:82: 38:aa:e4:6e:58:ce:bb:c5:33:6e:e9:6d:12:82:ef: cc:2e:b6:0a:0a:d4:48:fb:47:ce:78:f9:65:15:55: 0d:05:43:6c:86:63:87:1b:50:97:77:06:6e:63:65: b9:73:59:13:e5:5c:48:5d:3c:4d:58:ed:09:20:d8: 77:14:63:6b:ee:c8:f5:7f:45:1f:73:37:a9:4a:26: 34:29:4b:47:04:db:5f:48:0e:18:0d:ac:2a:ae:2d: 41:0b:84:dd:f7:31:f5:b4:bc:81:c7:ca:b7:15:5e: db:c8:76:45:e2:9c:5e:2e:6c:a9:dc:2e:8f:44:4d: b9:7a:4d:d9:85:57:47:c7:6d:27:94:51:38:24:9a: 99:f6:5d:9f:31:fe:10:a3:16:ff:f9:9e:fe:ab:29: 2e:4a:a1:ea:79:a6:ac:db:76:0b:38:48:56:54:ee: ff:d4:76:d8:1a:01:90:ec:36:f1:5a:ea:5c:99:18: 0c:8a:c0:20:96:78:12:61:79:e7:9e:42:cd:04:fa: af:86:e7:22:8a:73:e6:e0:ba:e7:f3:a7:80:e6:12: 9d:d2:78:dd:52:b9:57:69:0e:c3:9c:b5:4c:6b:fd: 54:97:4b:e8:9d:76:03:30:05:ad:0f:dd:26:03:b7: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A0:F9:A4:A4:C4:A9:70:1D:C5:7B:77:82:79:8D:D5:56:52:8D:82 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:12:a4:39:5f:5b:ce:1d:e2:6a:0f:16:d8:2c:94:d7:96:6b: 96:48:25:80:b7:d3:17:29:a8:fd:39:a0:29:1a:7c:0f:d1:97: 59:f1:f6:d8:b3:85:16:85:84:3a:37:f7:f7:66:d5:e5:66:5b: 33:c6:e2:aa:33:29:06:66:31:c7:b3:26:25:d5:42:af:1e:f1: 35:b9:5d:ff:a9:b7:db:84:e6:6b:ab:e1:a8:b3:ee:8d:4f:e1: 70:e5:eb:2f:55:88:96:34:08:e1:83:dc:17:f8:0d:bd:b0:67: 97:ee:9f:a3:93:0e:4f:80:8d:2b:2f:37:02:25:63:d4:fe:53: 67:46:2b:1d:ff:aa:44:c1:ff:41:10:b3:93:e1:e1:50:75:c2: 2d:0b:c3:8c:7d:c4:47:3d:28:2e:67:6b:08:0f:ad:75:fc:bc: 95:e5:e9:68:ba:e6:40:fa:79:f2:f4:98:5b:41:75:89:45:5e: ac:5e:42:da:8e:ca:a7:8e:06:95:31:d4:21:36:7e:de:af:84: a6:f6:3d:a1:2a:f3:ef:8d:01:89:1e:af:6e:1b:72:37:e2:e1: 9d:9d:49:63:42:cb:e6:37:e2:53:4f:f4:84:af:45:f0:73:1f: d7:50:6c:23:35:84:83:6d:8c:87:4f:87:46:52:8a:47:f8:82: 37:9d:4d:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQMyIQGCHAWHcD6W1wtTlZ3WRpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNDExMjIxMzU1NDNaFw0yNDExMjUyMjA5NDNaMDMxMTAvBgNV BAMTKDg3QTBGOUE0QTRDNEE5NzAxREM1N0I3NzgyNzk4REQ1NTY1MjhEODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGudSNc7o6BRUyTkqBgjiq5G5Y zrvFM27pbRKC78wutgoK1Ej7R854+WUVVQ0FQ2yGY4cbUJd3Bm5jZblzWRPlXEhd PE1Y7Qkg2HcUY2vuyPV/RR9zN6lKJjQpS0cE219IDhgNrCquLUELhN33MfW0vIHH yrcVXtvIdkXinF4ubKncLo9ETbl6TdmFV0fHbSeUUTgkmpn2XZ8x/hCjFv/5nv6r KS5Koep5pqzbdgs4SFZU7v/UdtgaAZDsNvFa6lyZGAyKwCCWeBJheeeeQs0E+q+G 5yKKc+bguufzp4DmEp3SeN1SuVdpDsOctUxr/VSXS+iddgMwBa0P3SYDt0ZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6D5pKTEqXAdxXt3gnmN1VZSjYIwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8SpDlfW84d4moPFtgslNeWa5ZIJYC30xcp qP05oCkafA/Rl1nx9tizhRaFhDo39/dm1eVmWzPG4qozKQZmMcezJiXVQq8e8TW5 Xf+pt9uE5mur4aiz7o1P4XDl6y9ViJY0COGD3Bf4Db2wZ5fun6OTDk+AjSsvNwIl Y9T+U2dGKx3/qkTB/0EQs5Ph4VB1wi0Lw4x9xEc9KC5nawgPrXX8vJXl6Wi65kD6 efL0mFtBdYlFXqxeQtqOyqeOBpUx1CE2ft6vhKb2PaEq8++NAYker24bcjfi4Z2d SWNCy+Y34lNP9ISvRfBzH9dQbCM1hINtjIdPh0ZSikf4gjedTdU= -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org