$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft File: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft (raw, json) Hash identifier: peDR2or60sLJ4BelwpVI0wrtbPCMjih4FeiJH7+ne4A= Subject key identifier: 33:FE:2E:5E:66:00:5B:83:DB:3D:C6:5A:B9:26:27:8A:ED:3E:9D:7D Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 3002021FDE87E30D15CBE158003A5863220D56BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft Manifest number: 0158 Signing time: Sun 24 Nov 2024 05:11:14 +0000 Manifest this update: Sun 24 Nov 2024 05:06:14 +0000 Manifest next update: Wed 27 Nov 2024 11:10:14 +0000 Files and hashes: 1: 30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl (hash: 5XR2X5Yl2LlqPcwFBi2MGbq6RnrS2Ly9Jk37HkuDW54=) 2: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (hash: D8GjnN9iSeoHD+w8PHTjqQPYgM2654viBTgPlB7vaQ8=) 3: 3130332e3136362e3235342e302f32342d3234203d3e20313431393636.roa (hash: 26YINQme/iBjXm8kI77CvEcmVoMDQs4ckNihzd85Z90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:02:02:1f:de:87:e3:0d:15:cb:e1:58:00:3a:58:63:22:0d:56:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Nov 24 05:06:14 2024 GMT Not After : Nov 27 11:10:14 2024 GMT Subject: CN=33FE2E5E66005B83DB3DC65AB926278AED3E9D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:99:84:75:87:35:79:e5:f5:5e:12:70:88:98: b6:14:0e:a0:d5:49:ca:fb:9b:ce:d4:ab:4f:cf:f4: 4f:b7:f5:67:f7:85:86:7a:92:99:89:a2:92:cd:0d: 17:66:5c:f2:b8:3c:f3:75:cc:2e:e4:dc:e9:ff:ac: 85:4a:1e:ab:39:36:60:ba:f3:63:c4:da:97:b9:3d: b1:4a:25:2d:ad:ee:71:b2:9f:8b:1a:18:79:07:1a: b8:71:fe:3d:b1:9f:54:95:3b:89:da:6c:0f:f1:2b: 4d:90:0c:2d:9a:6a:06:26:c3:6a:22:e3:cf:fd:47: 4a:91:0f:fe:a8:0e:b5:af:bf:f5:e9:a2:84:45:ee: 71:25:67:0b:a2:a7:fb:c7:b9:eb:78:7e:97:fc:1f: 15:ae:d3:d2:db:d5:eb:98:60:49:3b:82:c9:d5:3f: 7b:74:1e:e8:b0:63:64:4a:a2:f6:4b:70:0b:18:f9: 0d:c9:2a:a2:32:34:1d:77:78:7f:f3:75:30:7e:e9: 36:4b:94:56:cd:42:dd:b7:36:32:5b:dd:9d:93:59: e9:a8:1e:ed:93:86:f3:37:41:9c:cd:69:0e:a3:e0: e1:3e:d5:ee:ca:78:b9:e9:47:c1:a3:ee:70:64:27: 30:13:e7:0e:3c:24:7f:a6:24:0a:98:92:7f:9f:f1: 1d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FE:2E:5E:66:00:5B:83:DB:3D:C6:5A:B9:26:27:8A:ED:3E:9D:7D X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c2:9d:78:57:22:9d:8a:05:71:9f:66:64:3a:08:86:31:c0: 9f:c1:1b:f3:c4:e8:23:11:52:7d:7d:9c:84:29:a3:6e:c9:65: da:d8:77:5f:5e:b9:91:42:9b:da:cf:78:42:3e:7c:1f:71:ab: d6:60:32:7c:0c:e6:39:63:dd:ef:ca:55:02:e0:28:69:d0:28: 98:81:25:c5:c1:b5:62:ed:9b:f9:8a:68:a6:c0:36:9a:f1:5a: c6:bd:18:a3:bc:0f:ee:b6:51:bc:55:01:14:78:e1:fe:06:c1: 52:d2:40:69:d9:6d:f3:e8:94:0e:9a:b2:4f:eb:f8:25:1b:89: 80:12:e3:bb:e9:cf:a4:4b:d0:73:c3:d4:2b:58:98:0a:97:af: 96:21:7d:74:59:0f:4e:80:f0:ab:43:79:e8:99:54:fd:e3:6d: 65:78:a9:8e:a8:89:a8:db:cd:33:87:38:f8:ef:bd:33:ee:b2: fa:6b:f2:a6:81:1e:e4:63:f5:7e:34:4e:b8:c6:6b:e0:78:41: b3:32:4a:db:b7:04:c8:59:ab:f4:61:a8:b3:98:21:fd:dd:ac: a2:80:f6:c6:94:9e:39:20:45:43:4d:62:55:b6:8d:f5:c4:6f: ad:f4:05:6f:7f:ea:a5:a7:e1:38:a6:f0:17:6c:89:6c:90:0a: a9:bb:6c:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMAICH96H4w0Vy+FYADpYYyINVrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNDExMjQwNTA2MTRaFw0yNDExMjcxMTEwMTRaMDMxMTAvBgNV BAMTKDMzRkUyRTVFNjYwMDVCODNEQjNEQzY1QUI5MjYyNzhBRUQzRTlEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmYR1hzV55fVeEnCImLYUDqDV Scr7m87Uq0/P9E+39Wf3hYZ6kpmJopLNDRdmXPK4PPN1zC7k3On/rIVKHqs5NmC6 82PE2pe5PbFKJS2t7nGyn4saGHkHGrhx/j2xn1SVO4nabA/xK02QDC2aagYmw2oi 48/9R0qRD/6oDrWvv/XpooRF7nElZwuip/vHuet4fpf8HxWu09Lb1euYYEk7gsnV P3t0HuiwY2RKovZLcAsY+Q3JKqIyNB13eH/zdTB+6TZLlFbNQt23NjJb3Z2TWemo Hu2ThvM3QZzNaQ6j4OE+1e7KeLnpR8Gj7nBkJzAT5w48JH+mJAqYkn+f8R1jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM/4uXmYAW4PbPcZauSYniu0+nX0wHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI5Zjg5MDItMWEwNi00NWE4LWE5 OTgtNzJlNDZhYWFlOGZjLzAvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0 RkM3RTkxMkQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjCnXhXIp2KBXGfZmQ6CIYxwJ/BG/PE6CMR Un19nIQpo27JZdrYd19euZFCm9rPeEI+fB9xq9ZgMnwM5jlj3e/KVQLgKGnQKJiB JcXBtWLtm/mKaKbANprxWsa9GKO8D+62UbxVARR44f4GwVLSQGnZbfPolA6ask/r +CUbiYAS47vpz6RL0HPD1CtYmAqXr5YhfXRZD06A8KtDeeiZVP3jbWV4qY6oiajb zTOHOPjvvTPusvpr8qaBHuRj9X40TrjGa+B4QbMyStu3BMhZq/RhqLOYIf3drKKA 9saUnjkgRUNNYlW2jfXEb630BW9/6qWn4Tim8BdsiWyQCqm7bCA= -----END CERTIFICATE-----Generated at Sun Nov 24 07:10:00 2024 by rpki-client on console-ams.rpki-client.org