$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: HfLGgAPEBsS/xi5n1I3MTNJPRH+1NytjAtcu9AFKgjg= Subject key identifier: 5C:6B:20:A0:07:5D:93:48:5F:24:2E:40:50:B9:ED:E9:E7:A4:8D:DD Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 7DB221D6DC30FA8962F7EC0F103A3342877FA75D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 0456 Signing time: Thu 21 Nov 2024 03:50:49 +0000 Manifest this update: Thu 21 Nov 2024 03:45:49 +0000 Manifest next update: Sun 24 Nov 2024 04:05:49 +0000 Files and hashes: 1: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: wM6q6UoCdeQD4cWDkH+UPNSzp5diuArfWDK2bTKuYl4=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: hy7MHDWEDjxGDvk+/qutfkgc+zuRrswWd+OhRhF5XYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 04:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b2:21:d6:dc:30:fa:89:62:f7:ec:0f:10:3a:33:42:87:7f:a7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Nov 21 03:45:49 2024 GMT Not After : Nov 24 04:05:49 2024 GMT Subject: CN=5C6B20A0075D93485F242E4050B9EDE9E7A48DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:5a:f3:37:32:f0:df:68:82:68:06:e4:7c: f2:94:91:c1:b7:79:54:f4:d9:6c:95:0d:62:1e:d6: 5d:e0:3e:17:51:c0:17:7f:c1:c7:fa:9f:82:ed:77: 89:6b:ab:ce:36:79:ff:84:2c:97:f1:96:47:98:a9: 81:6d:72:9b:e5:f5:fe:21:b0:b2:9f:30:22:e2:06: 13:90:be:de:3c:45:ad:89:21:fe:8a:97:c6:07:ae: 50:f7:ea:f1:86:5b:3c:01:84:4c:05:48:09:17:f3: c7:fb:15:e8:f1:8d:c8:ee:32:2c:e4:c2:88:6d:12: 90:18:6e:58:a8:bb:a9:20:b2:e6:7b:18:8c:97:0f: 08:52:f7:80:5c:3a:b4:fd:70:d5:67:85:90:c1:5a: 52:5e:46:51:f5:a6:8d:e8:48:30:e7:4a:1d:9b:eb: bc:c7:ef:4a:b8:4d:a5:a3:80:3a:36:42:45:ea:7a: 20:96:c9:e7:b5:e0:c1:13:95:93:5b:d5:25:52:a9: 49:ed:bf:11:04:6f:17:cc:20:34:2d:36:02:15:90: 19:c4:d0:d5:86:4a:fa:0a:6a:33:f0:44:b4:72:22: e0:44:c9:e2:dc:d4:02:b3:51:0f:ec:e6:f7:d2:ec: b6:d2:e0:57:03:05:32:d7:50:9f:6a:b0:61:6f:15: 55:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6B:20:A0:07:5D:93:48:5F:24:2E:40:50:B9:ED:E9:E7:A4:8D:DD X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:41:07:a8:4d:84:53:49:6c:3e:fa:fe:6e:9c:0e:b5:77:8b: 0f:f6:1d:08:06:92:e3:9f:1d:0c:66:47:31:f7:8e:fb:3c:61: c1:4b:ca:9f:89:9f:b5:11:05:e5:6c:26:8c:51:6a:6e:95:24: ce:ce:28:57:95:76:30:57:38:41:c7:a8:2d:11:e4:64:2e:9d: c3:66:97:b3:43:30:5b:8f:dd:89:85:1e:4f:56:37:83:df:44: 72:8f:d2:6d:0c:f6:67:b6:b2:20:7e:e8:be:c7:3c:bd:50:dc: 15:6d:b9:5b:0a:d8:e5:4f:4f:8d:cc:48:50:d4:02:f5:5c:81: 8e:ac:c8:07:51:fc:ca:68:25:ef:8c:38:fd:94:95:5f:71:81: 53:95:c7:0c:aa:14:54:87:f6:c4:7e:96:fc:1a:08:1e:6e:48: 0f:36:e3:74:89:ab:d2:e5:41:63:41:9e:d3:7a:ab:72:fe:c3: cd:6a:b2:2b:01:60:62:f8:e4:76:ec:e1:4d:e4:d9:61:b4:6a: dc:1b:60:1f:cf:86:88:71:4d:bb:df:b5:9e:9c:ee:76:e2:b7: 05:7f:65:a5:a1:97:b4:cb:f6:ca:c1:f5:46:b7:df:fb:51:8b: d9:05:da:9c:f2:15:cf:6c:fe:8f:da:d2:7c:a6:b3:fb:81:d5: 53:89:69:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbIh1tww+oli9+wPEDozQod/p10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNDExMjEwMzQ1NDlaFw0yNDExMjQwNDA1NDlaMDMxMTAvBgNV BAMTKDVDNkIyMEEwMDc1RDkzNDg1RjI0MkU0MDUwQjlFREU5RTdBNDhEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7FrzNzLw32iCaAbkfPKUkcG3 eVT02WyVDWIe1l3gPhdRwBd/wcf6n4Ltd4lrq842ef+ELJfxlkeYqYFtcpvl9f4h sLKfMCLiBhOQvt48Ra2JIf6Kl8YHrlD36vGGWzwBhEwFSAkX88f7FejxjcjuMizk wohtEpAYbliou6kgsuZ7GIyXDwhS94BcOrT9cNVnhZDBWlJeRlH1po3oSDDnSh2b 67zH70q4TaWjgDo2QkXqeiCWyee14METlZNb1SVSqUntvxEEbxfMIDQtNgIVkBnE 0NWGSvoKajPwRLRyIuBEyeLc1AKzUQ/s5vfS7LbS4FcDBTLXUJ9qsGFvFVXzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXGsgoAddk0hfJC5AULnt6eekjd0wHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZBB6hNhFNJbD76/m6cDrV3iw/2HQgGkuOf HQxmRzH3jvs8YcFLyp+Jn7URBeVsJoxRam6VJM7OKFeVdjBXOEHHqC0R5GQuncNm l7NDMFuP3YmFHk9WN4PfRHKP0m0M9me2siB+6L7HPL1Q3BVtuVsK2OVPT43MSFDU AvVcgY6syAdR/MpoJe+MOP2UlV9xgVOVxwyqFFSH9sR+lvwaCB5uSA8243SJq9Ll QWNBntN6q3L+w81qsisBYGL45Hbs4U3k2WG0atwbYB/PhohxTbvftZ6c7nbitwV/ ZaWhl7TL9srB9Ua33/tRi9kF2pzyFc9s/o/a0nyms/uB1VOJaVA= -----END CERTIFICATE-----Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org