$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: /FxU/20NOO/CEucD+hv7OY9UdWD+1iomrU/19QoHzpc= Subject key identifier: C4:80:B3:01:83:35:5D:48:87:D1:88:CD:19:49:9B:CA:70:06:81:75 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 5994EDFFDDFA6D20B6F56D24F28E37E7F9A1DFA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: 3A Signing time: Wed 20 Nov 2024 09:21:42 +0000 Manifest this update: Wed 20 Nov 2024 09:16:42 +0000 Manifest next update: Sat 23 Nov 2024 17:09:42 +0000 Files and hashes: 1: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: wNMT0zYX+f8XBOCVQ/kqu+I7LCmfP69VNbuz7saCaNE=) 2: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: TRzh/s2ZOYCYAenew/B30dVp+nMC2XftxOW1QRTM5DE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:94:ed:ff:dd:fa:6d:20:b6:f5:6d:24:f2:8e:37:e7:f9:a1:df:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Nov 20 09:16:42 2024 GMT Not After : Nov 23 17:09:42 2024 GMT Subject: CN=C480B30183355D4887D188CD19499BCA70068175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a6:05:e9:4f:4a:f5:30:06:a2:aa:a1:b6:21: a0:f2:61:b9:2d:8e:a0:0e:1c:5e:91:8f:59:ae:f3: db:a9:17:8e:69:34:7d:af:b8:08:e8:60:79:a6:ad: d4:87:8d:8d:76:65:db:d7:25:12:50:54:6d:95:d4: ee:d6:b1:c1:ea:bb:be:05:95:f4:2f:bc:4a:db:b3: 64:6a:40:5d:20:3b:7c:f2:d0:ce:59:29:62:c4:b5: 16:fe:b5:6b:6a:1f:f5:08:98:e9:1f:35:00:e3:83: 7d:5c:11:b4:27:36:5d:df:fd:31:54:e4:cb:6d:54: 66:d3:43:83:c7:60:68:f4:36:ff:7d:89:c2:b7:81: 42:30:79:3d:9c:4d:7e:ec:49:93:b3:9e:8c:e4:0b: 0d:43:43:04:c5:b4:63:0b:34:3f:ed:5d:d6:29:e3: 82:f8:95:36:0b:76:64:ca:b8:14:77:9a:ea:8e:4c: 04:15:05:4e:72:58:16:42:46:aa:89:48:dc:13:5f: be:93:fe:3e:2e:0b:ce:a5:3b:b4:64:9d:14:c1:ce: e8:df:cb:42:05:83:a0:5d:05:17:ca:f6:f3:a5:3d: e2:83:c9:ec:41:ef:6e:77:19:b5:e1:22:a0:04:4a: 69:3e:4c:c5:d3:dd:e2:e4:eb:4b:4a:5e:d3:ce:7f: d2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:80:B3:01:83:35:5D:48:87:D1:88:CD:19:49:9B:CA:70:06:81:75 X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:05:c3:b3:83:13:15:74:45:c9:f8:03:68:0b:e2:cb:b3:c0: df:28:03:27:81:94:45:6d:5b:31:0b:21:fd:aa:79:da:53:47: 1f:fe:36:d5:a4:12:c8:96:52:9b:47:fe:b5:28:8d:7d:5e:56: 16:d7:fc:ec:2c:01:9a:f5:36:38:e1:8d:ed:36:f1:7e:be:9e: f3:52:91:33:96:f1:1a:bb:2b:ac:a4:16:87:87:33:3f:87:1c: 78:96:3a:4c:72:90:70:9e:14:26:7d:77:9e:ef:a7:08:d7:c8: 5e:1d:47:67:5e:74:ba:36:33:90:ec:84:5e:ea:95:2c:4f:e9: 98:9a:d6:ab:4d:03:19:9f:8c:be:1c:37:29:bf:94:97:ba:52: a2:38:66:50:5f:ca:3c:bb:06:4f:66:a6:4d:ef:0f:50:24:ce: e1:cf:72:f7:24:f3:78:45:70:d3:5d:1d:63:54:72:fb:56:05: 0f:3e:fc:cc:b3:f8:8e:4c:cb:36:13:05:2a:80:07:f4:a1:4f: 73:6a:32:fd:e1:3e:d5:20:72:66:75:ac:df:a9:28:e5:d6:ba: 26:48:08:59:af:4b:ae:30:1d:2b:9b:33:31:25:f7:cc:02:14: 6f:01:63:4f:7c:d5:e9:df:0f:53:dc:76:65:4b:09:1f:43:5e: 3a:db:35:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWZTt/936bSC29W0k8o435/mh36UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNDExMjAwOTE2NDJaFw0yNDExMjMxNzA5NDJaMDMxMTAvBgNV BAMTKEM0ODBCMzAxODMzNTVENDg4N0QxODhDRDE5NDk5QkNBNzAwNjgxNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpgXpT0r1MAaiqqG2IaDyYbkt jqAOHF6Rj1mu89upF45pNH2vuAjoYHmmrdSHjY12ZdvXJRJQVG2V1O7WscHqu74F lfQvvErbs2RqQF0gO3zy0M5ZKWLEtRb+tWtqH/UImOkfNQDjg31cEbQnNl3f/TFU 5MttVGbTQ4PHYGj0Nv99icK3gUIweT2cTX7sSZOznozkCw1DQwTFtGMLND/tXdYp 44L4lTYLdmTKuBR3muqOTAQVBU5yWBZCRqqJSNwTX76T/j4uC86lO7RknRTBzujf y0IFg6BdBRfK9vOlPeKDyexB7253GbXhIqAESmk+TMXT3eLk60tKXtPOf9LBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxICzAYM1XUiH0YjNGUmbynAGgXUwHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUFw7ODExV0Rcn4A2gL4suzwN8oAyeBlEVt WzELIf2qedpTRx/+NtWkEsiWUptH/rUojX1eVhbX/OwsAZr1Njjhje028X6+nvNS kTOW8Rq7K6ykFoeHMz+HHHiWOkxykHCeFCZ9d57vpwjXyF4dR2dedLo2M5DshF7q lSxP6Zia1qtNAxmfjL4cNym/lJe6UqI4ZlBfyjy7Bk9mpk3vD1AkzuHPcvck83hF cNNdHWNUcvtWBQ8+/Myz+I5MyzYTBSqAB/ShT3NqMv3hPtUgcmZ1rN+pKOXWuiZI CFmvS64wHSubMzEl98wCFG8BY0981enfD1PcdmVLCR9DXjrbNbY= -----END CERTIFICATE-----Generated at Wed Nov 20 10:24:13 2024 by rpki-client on console-fra.rpki-client.org