$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft File: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft (raw, json) Hash identifier: 3ctkyJwHEFEGtxhGb0AQr+ZcoB7PEbLDwnMMnBTZt8A= Subject key identifier: 2E:F2:DB:B4:3E:88:C2:BD:9E:83:EF:6E:08:1D:70:2F:6A:D0:0D:DF Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Certificate serial: 2090DE76E24C9FB820851EECC9E526A70CFDC036 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft Manifest number: AD Signing time: Mon 25 Nov 2024 13:42:00 +0000 Manifest this update: Mon 25 Nov 2024 13:37:00 +0000 Manifest next update: Thu 28 Nov 2024 14:47:00 +0000 Files and hashes: 1: AS23693.roa (hash: VC6P7VQPjQz96MNRFjSpVzH2VemASbGshqOKfkcPLJ0=) 2: 66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl (hash: gXR1w3LcgKOafQJHyHzVPoPAjnor0Y588H6iJifG2I8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:90:de:76:e2:4c:9f:b8:20:85:1e:ec:c9:e5:26:a7:0c:fd:c0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A Validity Not Before: Nov 25 13:37:00 2024 GMT Not After : Nov 28 14:47:00 2024 GMT Subject: CN=2EF2DBB43E88C2BD9E83EF6E081D702F6AD00DDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:94:05:8f:1a:04:73:ee:f0:74:09:ee:f9: e3:fc:28:48:af:90:2d:c3:e1:88:85:b4:2a:ae:51: da:25:ae:9a:6d:23:80:47:1b:d2:9c:96:2d:90:44: cf:00:a2:a2:e2:c6:2c:26:4c:6e:11:b8:ea:09:4e: 61:cc:fd:21:33:b6:6d:82:dc:b7:c9:35:51:67:9a: bc:42:3b:5e:91:64:e3:e4:b4:a4:9e:16:10:23:a3: f1:62:ff:96:65:36:8e:5e:70:18:08:8f:55:44:74: 8c:cf:00:20:f6:c1:d6:db:57:db:9d:ad:9f:80:ad: 50:f8:0e:0f:a8:21:ad:cb:f0:90:40:27:98:d6:f7: bc:38:41:d3:4d:9d:2a:51:74:9c:3b:6e:b9:1a:19: e8:b0:02:19:35:e6:e2:36:97:44:65:06:9d:84:8b: f8:2e:ef:69:30:c7:32:52:30:9b:3f:db:9b:a0:23: 58:0e:ee:60:a9:18:76:45:ff:c6:c9:c6:5b:8e:0a: d5:65:79:21:01:68:01:f3:4d:af:c8:39:ec:00:17: 11:bd:eb:ca:b4:84:53:f3:df:97:5f:33:b2:12:43: e5:b5:14:68:05:b1:c1:ef:9b:63:fc:c7:12:06:02: 1b:9f:86:b8:69:75:fe:d1:42:9e:d6:fc:33:1f:52: b6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F2:DB:B4:3E:88:C2:BD:9E:83:EF:6E:08:1D:70:2F:6A:D0:0D:DF X509v3 Authority Key Identifier: keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:37:01:e7:d7:80:c3:e2:24:3e:5d:22:a9:ec:78:b2:a1:27: a5:f7:a1:12:b4:a5:61:dd:c4:65:8a:a1:4a:bb:90:74:2a:96: 6e:7d:c4:3c:d0:3a:f0:66:df:a2:c3:c4:a0:c2:00:e5:f7:43: 07:26:92:a0:56:74:dc:fa:b7:14:73:e3:ca:80:18:28:35:c5: ba:e2:7b:f9:73:b9:96:f0:cb:10:dd:77:77:e8:05:08:2e:f6: d0:d2:d5:e6:11:99:40:3f:97:59:aa:4b:bd:69:f1:05:dc:f7: 62:bb:db:f2:22:92:11:06:04:c9:2d:f8:f1:4c:b1:5c:92:6b: 2a:89:7c:18:60:e9:c8:fb:c8:af:7c:fd:28:75:a0:21:32:92: 88:d0:8a:c6:c6:f7:1b:20:60:07:64:86:c1:ff:bf:3e:71:54: 80:0e:95:f0:0d:b5:cf:58:f2:c5:70:95:69:c7:8c:b2:e5:3a: 3f:57:53:70:89:e3:07:50:03:7c:75:18:ba:c5:d2:d9:3b:5b: 2d:55:23:ca:75:3d:7c:e2:24:d6:6f:05:49:68:ad:84:fd:70: 4a:1e:21:95:e6:d8:ad:59:9e:5d:5d:28:12:d7:35:b6:25:c0: b4:7b:7f:9d:0a:69:bc:c7:03:10:3f:5c:8d:c7:1f:65:a1:a9: ae:d7:90:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJDeduJMn7gghR7syeUmpwz9wDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2 QjlDOUYzQTAeFw0yNDExMjUxMzM3MDBaFw0yNDExMjgxNDQ3MDBaMDMxMTAvBgNV BAMTKDJFRjJEQkI0M0U4OEMyQkQ5RTgzRUY2RTA4MUQ3MDJGNkFEMDBEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFx5QFjxoEc+7wdAnu+eP8KEiv kC3D4YiFtCquUdolrpptI4BHG9Kcli2QRM8AoqLixiwmTG4RuOoJTmHM/SEztm2C 3LfJNVFnmrxCO16RZOPktKSeFhAjo/Fi/5ZlNo5ecBgIj1VEdIzPACD2wdbbV9ud rZ+ArVD4Dg+oIa3L8JBAJ5jW97w4QdNNnSpRdJw7brkaGeiwAhk15uI2l0RlBp2E i/gu72kwxzJSMJs/25ugI1gO7mCpGHZF/8bJxluOCtVleSEBaAHzTa/IOewAFxG9 68q0hFPz35dfM7ISQ+W1FGgFscHvm2P8xxIGAhufhrhpdf7RQp7W/DMfUrb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULvLbtD6Iwr2eg+9uCB1wL2rQDd8wHwYDVR0j BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD OUYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1 MWQtZTJlMzhjMzY3N2QxLzAvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3 QTE2QjlDOUYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF03AefXgMPiJD5dIqnseLKhJ6X3oRK0pWHd xGWKoUq7kHQqlm59xDzQOvBm36LDxKDCAOX3QwcmkqBWdNz6txRz48qAGCg1xbri e/lzuZbwyxDdd3foBQgu9tDS1eYRmUA/l1mqS71p8QXc92K72/IikhEGBMkt+PFM sVySayqJfBhg6cj7yK98/Sh1oCEykojQisbG9xsgYAdkhsH/vz5xVIAOlfANtc9Y 8sVwlWnHjLLlOj9XU3CJ4wdQA3x1GLrF0tk7Wy1VI8p1PXziJNZvBUlorYT9cEoe IZXm2K1Znl1dKBLXNbYlwLR7f50KabzHAxA/XI3HH2Whqa7XkD4= -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:44 2024 by rpki-client on console-fra.rpki-client.org