$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft File: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft (raw, json) Hash identifier: fn1C+1C/oExyivg8mHZSL2Tx+3VH05WTQCqOF/le65o= Subject key identifier: A2:75:E2:95:3B:F8:97:B3:09:59:58:1C:9B:F9:E4:C6:1F:F2:C4:D7 Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 Certificate issuer: /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Certificate serial: 689D7E15A09E73F99F40919A8B81C20F53C00DF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft Manifest number: 019C Signing time: Mon 25 Nov 2024 02:31:55 +0000 Manifest this update: Mon 25 Nov 2024 02:26:55 +0000 Manifest next update: Thu 28 Nov 2024 06:19:55 +0000 Files and hashes: 1: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: RDDgBBtE0xos6kwYIBw+I6nY7IgKsTrVh7gyqIHaqoQ=) 2: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl (hash: jkHdf2K4A48zKlBLqi6idx1WSts1MciGZiazjGNYUhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9d:7e:15:a0:9e:73:f9:9f:40:91:9a:8b:81:c2:0f:53:c0:0d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Validity Not Before: Nov 25 02:26:55 2024 GMT Not After : Nov 28 06:19:55 2024 GMT Subject: CN=A275E2953BF897B30959581C9BF9E4C61FF2C4D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:b3:bb:46:7b:54:25:96:0f:02:e6:45:5d: 65:78:c2:e2:cb:af:28:b0:97:89:68:39:ba:3e:70: 66:68:c5:15:c9:97:05:26:cf:02:08:cf:4f:fe:4b: 6a:4f:aa:b9:3c:03:6c:9b:f0:e1:b2:3d:6e:01:0a: 78:4c:32:25:ab:d5:13:ab:b6:3d:12:04:42:e2:e4: 90:28:8e:93:36:be:d9:3b:ef:15:0a:a9:56:61:0a: ff:ed:ea:3e:9e:9a:5e:4c:2b:0c:01:a3:29:cc:e2: 3f:ac:f3:b9:43:60:c9:14:2d:b5:ba:f9:fd:43:1b: bc:1b:e5:9f:9d:d6:81:f2:e4:0b:d2:df:3f:c1:8b: 99:2e:77:37:2f:c4:0e:a0:19:df:9b:ac:be:42:f9: 61:cb:13:1a:ea:98:4d:a3:e8:a6:87:e5:73:d6:6c: 3f:ff:30:3e:1d:10:25:07:b2:00:28:38:17:8f:a4: 44:52:30:f3:ec:06:19:0d:89:f5:f6:d6:5a:ec:78: 5c:3b:1f:51:bf:ea:0a:1d:ee:54:2c:09:75:21:05: 28:43:01:ba:a8:20:97:89:ae:51:d3:3a:6e:7e:6b: 73:8f:ae:6a:fa:1e:80:6e:5c:3a:48:27:23:fd:ef: ab:cb:93:7f:c5:e4:a2:c5:ca:80:98:5e:e9:5a:cf: cb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:75:E2:95:3B:F8:97:B3:09:59:58:1C:9B:F9:E4:C6:1F:F2:C4:D7 X509v3 Authority Key Identifier: keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a0:a9:7a:bd:b9:11:eb:38:69:35:18:9e:0e:e2:a5:16:64: f0:0a:f0:2d:ac:7b:8d:d6:be:60:75:e1:4e:9a:3a:b6:26:14: 9a:9d:29:ed:fa:62:cf:26:00:db:77:5d:c6:69:fb:76:04:10: 57:01:f6:58:f7:e2:01:e3:c4:51:2f:fa:5e:5d:c3:40:4f:9f: 3c:27:0c:2a:7c:1b:ab:85:19:09:33:84:3e:7e:45:46:f4:1a: d3:55:d9:3c:70:6a:78:34:e9:3d:3f:06:3f:66:13:33:74:ef: 71:6b:ee:68:3b:41:c4:1b:99:c1:72:79:83:72:b6:a6:86:4c: c3:b1:53:a8:77:9a:6d:4f:fd:47:70:70:71:56:a2:00:2b:83: df:69:d0:bd:3f:fb:4b:94:fa:8c:f7:9b:37:66:55:fa:08:48: 85:8b:1c:92:0d:c4:7d:fa:10:49:47:4d:2d:13:9e:6f:d8:20: 20:5a:3b:17:28:d7:75:dc:b2:72:8e:36:fd:ba:9d:66:12:75: d1:4b:c2:31:24:59:78:a8:5b:74:4b:07:ee:0d:fa:b2:30:73: fd:b0:41:a2:ab:2a:7d:c0:f1:63:c2:f3:d5:d7:9c:ae:96:64: f1:89:fb:58:d0:2c:e7:30:b2:b6:ab:9f:18:f2:32:00:e1:f0: c6:7e:99:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJ1+FaCec/mfQJGai4HCD1PADfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2 NEREOUYyNjAeFw0yNDExMjUwMjI2NTVaFw0yNDExMjgwNjE5NTVaMDMxMTAvBgNV BAMTKEEyNzVFMjk1M0JGODk3QjMwOTU5NTgxQzlCRjlFNEM2MUZGMkM0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW27O7RntUJZYPAuZFXWV4wuLL ryiwl4loObo+cGZoxRXJlwUmzwIIz0/+S2pPqrk8A2yb8OGyPW4BCnhMMiWr1ROr tj0SBELi5JAojpM2vtk77xUKqVZhCv/t6j6eml5MKwwBoynM4j+s87lDYMkULbW6 +f1DG7wb5Z+d1oHy5AvS3z/Bi5kudzcvxA6gGd+brL5C+WHLExrqmE2j6KaH5XPW bD//MD4dECUHsgAoOBePpERSMPPsBhkNifX21lrseFw7H1G/6god7lQsCXUhBShD AbqoIJeJrlHTOm5+a3OPrmr6HoBuXDpIJyP976vLk3/F5KLFyoCYXulaz8vTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUonXilTv4l7MJWVgcm/nkxh/yxNcwHwYDVR0j BBgwFoAU0ho1l9e169mlR2gPHC7XpGTdnyYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2M1NjA1ZC1mMTdhLTQwMTAtOTI1My0yMTBjNjRmMTQ4YmQvMC9EMjFBMzU5N0Q3 QjVFQkQ5QTU0NzY4MEYxQzJFRDdBNDY0REQ5RjI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2NERE OUYyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3 QTQ2NEREOUYyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6gqXq9uRHrOGk1GJ4O4qUWZPAK8C2se43W vmB14U6aOrYmFJqdKe36Ys8mANt3XcZp+3YEEFcB9lj34gHjxFEv+l5dw0BPnzwn DCp8G6uFGQkzhD5+RUb0GtNV2Txwang06T0/Bj9mEzN073Fr7mg7QcQbmcFyeYNy tqaGTMOxU6h3mm1P/UdwcHFWogArg99p0L0/+0uU+oz3mzdmVfoISIWLHJINxH36 EElHTS0Tnm/YICBaOxco13XcsnKONv26nWYSddFLwjEkWXioW3RLB+4N+rIwc/2w QaKrKn3A8WPC89XXnK6WZPGJ+1jQLOcwsrarnxjyMgDh8MZ+mSY= -----END CERTIFICATE-----Generated at Mon Nov 25 04:52:34 2024 by rpki-client on console-fra.rpki-client.org