$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft File: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft (raw, json) Hash identifier: aYwArMBTQPznbO6Uuw6yQJYEX5tF1SotiG1v8NhS7UU= Subject key identifier: DA:3C:5A:5B:CE:23:EC:1A:7A:77:09:ED:5F:82:A6:6F:68:56:2E:0D Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 0EA4C6B25351BD2472CC230F7F6F5CAEE5EEEA28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft Manifest number: 2B Signing time: Sun 24 Nov 2024 18:11:12 +0000 Manifest this update: Sun 24 Nov 2024 18:06:12 +0000 Manifest next update: Thu 28 Nov 2024 01:50:12 +0000 Files and hashes: 1: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (hash: yxxXXRwK7yFLR89I5uMrJEdDWAqzJPaOalUN3EScIQ0=) 2: 809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl (hash: oroN8T2hhXPKDbKsNEYgmkx5IP46wkbT77W9qxskj6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a4:c6:b2:53:51:bd:24:72:cc:23:0f:7f:6f:5c:ae:e5:ee:ea:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Nov 24 18:06:12 2024 GMT Not After : Nov 28 01:50:12 2024 GMT Subject: CN=DA3C5A5BCE23EC1A7A7709ED5F82A66F68562E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:91:23:bc:8b:5c:3c:4c:cc:d1:cd:36:23: b7:3b:10:86:6d:7e:2d:4e:81:22:31:2c:f6:be:05: 48:bc:ae:cc:83:7b:be:dc:98:4a:6a:f9:41:3a:88: ea:97:f2:8b:70:1f:54:56:e7:d3:18:ed:ad:56:d2: 2b:fc:66:42:8c:3c:47:12:19:02:e8:a6:9d:c1:d8: 47:8b:25:c4:a6:54:f2:97:4c:0d:4b:80:31:6b:71: f4:65:29:2f:9e:aa:ac:00:f8:1c:36:b7:0e:dc:3d: 9e:53:00:31:54:96:db:62:21:70:45:05:13:fe:b1: fe:28:d9:ef:8e:26:62:52:51:48:7b:e8:b4:8b:81: 14:11:08:5b:f0:14:b1:34:a5:65:c4:6a:11:d3:fa: e3:88:ef:d5:a8:5f:a4:98:a6:46:17:19:54:45:54: 56:5a:ec:e4:d3:0e:80:f3:81:db:ab:d8:4a:a5:75: 20:cf:0e:70:51:c2:17:fc:b0:89:25:03:8a:9a:9d: 92:f7:1c:48:db:6f:ce:c6:1f:77:b3:99:bc:40:5f: 93:5e:a9:0e:03:0e:fb:a1:c6:71:52:b1:48:ab:d8: 26:09:81:c1:f3:2f:15:ad:04:2b:ce:7b:44:bd:22: b3:2e:79:70:3a:5c:9f:f2:d2:d3:26:27:cd:3b:07: f1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3C:5A:5B:CE:23:EC:1A:7A:77:09:ED:5F:82:A6:6F:68:56:2E:0D X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:9c:e8:56:40:04:e9:d4:a2:d3:7f:03:76:f9:39:87:9e:46: 61:ce:b2:08:c9:ce:0f:e0:50:ec:6a:eb:83:ea:dd:fc:5c:a9: 10:e9:60:ee:c0:0c:f0:4d:3a:a5:08:ef:81:19:4c:1e:eb:94: fb:f5:66:ff:af:a2:5a:1d:2d:f7:a5:aa:d7:76:c7:68:d3:2d: 5f:d1:cf:8e:dd:e1:49:b4:b9:b9:1a:65:bc:4b:17:55:cf:13: 1c:03:c5:12:27:b5:2c:08:f5:58:46:27:d8:e5:8a:78:cb:e0: 5f:8c:49:3c:f5:5c:79:ee:4c:60:4a:db:e8:42:6d:2e:fe:1e: 37:71:35:53:73:e2:5a:98:c6:77:bc:d2:1d:f8:c1:d8:72:11: c9:61:a0:16:06:db:7c:46:6a:07:8f:e3:92:bf:2a:81:b9:86: 8f:c8:ce:86:a2:2c:e1:c0:58:eb:8e:b2:e5:4a:2c:4d:06:d4: 40:b5:ec:37:fa:aa:74:81:9d:f2:03:d5:ee:86:1e:00:e4:8a: d4:60:08:c0:6c:3e:44:d6:75:0d:db:f3:96:22:14:f7:20:83: 9c:b2:5c:f7:c6:c9:e2:0c:fe:84:cb:d2:53:5a:6c:99:42:6e: 5b:72:a4:5b:d4:b8:61:bf:dc:c7:97:e1:3a:71:1c:c6:65:80: f5:da:a8:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDqTGslNRvSRyzCMPf29cruXu6igwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNDExMjQxODA2MTJaFw0yNDExMjgwMTUwMTJaMDMxMTAvBgNV BAMTKERBM0M1QTVCQ0UyM0VDMUE3QTc3MDlFRDVGODJBNjZGNjg1NjJFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4JEjvItcPEzM0c02I7c7EIZt fi1OgSIxLPa+BUi8rsyDe77cmEpq+UE6iOqX8otwH1RW59MY7a1W0iv8ZkKMPEcS GQLopp3B2EeLJcSmVPKXTA1LgDFrcfRlKS+eqqwA+Bw2tw7cPZ5TADFUlttiIXBF BRP+sf4o2e+OJmJSUUh76LSLgRQRCFvwFLE0pWXEahHT+uOI79WoX6SYpkYXGVRF VFZa7OTTDoDzgdur2EqldSDPDnBRwhf8sIklA4qanZL3HEjbb87GH3ezmbxAX5Ne qQ4DDvuhxnFSsUir2CYJgcHzLxWtBCvOe0S9IrMueXA6XJ/y0tMmJ807B/FHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2jxaW84j7Bp6dwntX4Kmb2hWLg0wHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzgxZjQ0YWEtODlhMy00YmMzLWJi MjktZGI2Yzk4MmExMzZiLzAvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNE OUVGM0EyNzJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyc6FZABOnUotN/A3b5OYeeRmHOsgjJzg/g UOxq64Pq3fxcqRDpYO7ADPBNOqUI74EZTB7rlPv1Zv+volodLfelqtd2x2jTLV/R z47d4Um0ubkaZbxLF1XPExwDxRIntSwI9VhGJ9jlinjL4F+MSTz1XHnuTGBK2+hC bS7+HjdxNVNz4lqYxne80h34wdhyEclhoBYG23xGageP45K/KoG5ho/IzoaiLOHA WOuOsuVKLE0G1EC17Df6qnSBnfID1e6GHgDkitRgCMBsPkTWdQ3b85YiFPcgg5yy XPfGyeIM/oTL0lNabJlCbltypFvUuGG/3MeX4TpxHMZlgPXaqFE= -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org