$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: JhEEtyNBrIqCKXBy1DaO22KaWKdpTWuqv7b1mgPX0BI= Subject key identifier: A8:BA:AB:2B:E5:0E:29:B1:8F:61:93:2A:DA:1D:1B:80:20:35:7B:29 Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: 50C5004FB9C3BE92A6265801F38E322F98A9165B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 0208 Signing time: Fri 22 Nov 2024 17:01:07 +0000 Manifest this update: Fri 22 Nov 2024 16:56:07 +0000 Manifest next update: Tue 26 Nov 2024 01:16:07 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: NUUpVnEvIOy53WiqZczaRrZ3XFu+PI6s9WUQ9nt6aMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c5:00:4f:b9:c3:be:92:a6:26:58:01:f3:8e:32:2f:98:a9:16:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: Nov 22 16:56:07 2024 GMT Not After : Nov 26 01:16:07 2024 GMT Subject: CN=A8BAAB2BE50E29B18F61932ADA1D1B8020357B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:77:f0:de:46:35:2a:17:c1:80:57:b0:a2: 17:d4:98:37:fe:d0:0e:88:ac:bb:2e:f3:60:c8:14: 19:54:50:cb:02:df:70:b0:d9:0f:46:a0:ba:fd:a5: 39:3c:ed:53:96:56:b6:32:c1:a6:c2:dd:80:d8:50: f6:22:4e:1c:19:e6:af:05:e2:23:5c:c2:c7:b6:80: b2:d8:32:4a:b4:41:a0:b1:41:78:94:ac:c9:7e:39: 6a:f9:cf:cf:1f:7c:13:36:3f:d1:f1:1e:f2:8d:10: 4b:8c:c8:51:53:c2:10:64:c4:32:4e:5f:d6:f7:23: ca:56:6c:80:76:a7:03:ad:f7:69:b2:49:4f:d8:c2: 1d:03:9e:76:e1:eb:42:b2:d0:01:ff:dc:16:36:ae: 0f:85:88:18:61:10:4b:e3:5f:f9:d9:f4:72:c2:93: a2:ea:e8:fb:a7:91:d0:ba:3a:e6:df:a2:88:cc:65: 47:f9:8d:29:cc:85:da:b3:28:2b:99:6f:66:c7:5f: 55:68:d6:17:60:d0:01:97:d0:8f:85:46:7d:7f:f2: 28:c0:3b:be:77:fc:89:ab:57:e6:5f:72:7d:bf:99: 79:f3:8d:44:f8:ba:09:2e:25:12:f8:79:21:0c:df: 81:78:88:88:79:0d:05:7d:b0:0c:13:12:d2:7f:a4: 87:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:BA:AB:2B:E5:0E:29:B1:8F:61:93:2A:DA:1D:1B:80:20:35:7B:29 X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:68:20:3a:14:c8:2c:47:ed:55:d8:46:bb:65:8c:24:6a:91: 3b:75:4e:af:5f:4e:09:80:54:62:ca:d1:d7:05:01:1f:e8:08: 40:b1:57:47:cd:fd:ec:d1:b9:69:37:85:2e:33:bb:f6:fb:40: d1:5e:c7:62:15:f6:53:20:fd:af:09:44:7c:9e:d6:fc:a3:8a: 76:49:c1:35:1e:27:e9:37:77:f8:74:aa:4b:8a:01:a4:bd:72: 01:2b:1b:7b:67:1f:c6:fc:5e:ac:5e:da:23:4d:88:c0:fb:e9: e9:0d:58:a6:9e:53:33:7a:80:03:02:d1:cb:9e:c7:3a:07:d6: b7:29:57:95:bd:88:23:f3:b7:5c:66:00:bf:08:f6:67:df:f3: bd:84:36:56:9b:80:36:4a:8e:b5:f8:14:6f:d6:a6:7a:dd:02: 3d:4b:3f:b2:43:cb:3f:05:21:4a:9f:3e:7d:96:3a:a4:79:68: 4e:c6:4e:41:0c:d8:49:6e:8e:41:26:8b:ca:05:47:37:c1:e7: c1:d0:3a:aa:4f:74:52:df:01:61:bf:53:c4:6c:62:c1:1b:88: 2c:c2:54:5d:a4:be:57:96:33:ec:9b:14:0c:55:40:a7:c1:cc: 0a:93:f0:b3:fd:fb:d6:72:37:b4:35:e5:ee:a2:d2:48:09:7d: cd:4c:4f:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUMUAT7nDvpKmJlgB844yL5ipFlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNDExMjIxNjU2MDdaFw0yNDExMjYwMTE2MDdaMDMxMTAvBgNV BAMTKEE4QkFBQjJCRTUwRTI5QjE4RjYxOTMyQURBMUQxQjgwMjAzNTdCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8i3fw3kY1KhfBgFewohfUmDf+ 0A6IrLsu82DIFBlUUMsC33Cw2Q9GoLr9pTk87VOWVrYywabC3YDYUPYiThwZ5q8F 4iNcwse2gLLYMkq0QaCxQXiUrMl+OWr5z88ffBM2P9HxHvKNEEuMyFFTwhBkxDJO X9b3I8pWbIB2pwOt92mySU/Ywh0Dnnbh60Ky0AH/3BY2rg+FiBhhEEvjX/nZ9HLC k6Lq6PunkdC6OubfoojMZUf5jSnMhdqzKCuZb2bHX1Vo1hdg0AGX0I+FRn1/8ijA O753/ImrV+Zfcn2/mXnzjUT4ugkuJRL4eSEM34F4iIh5DQV9sAwTEtJ/pIfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqLqrK+UOKbGPYZMq2h0bgCA1eykwHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBoIDoUyCxH7VXYRrtljCRqkTt1Tq9fTgmA VGLK0dcFAR/oCECxV0fN/ezRuWk3hS4zu/b7QNFex2IV9lMg/a8JRHye1vyjinZJ wTUeJ+k3d/h0qkuKAaS9cgErG3tnH8b8Xqxe2iNNiMD76ekNWKaeUzN6gAMC0cue xzoH1rcpV5W9iCPzt1xmAL8I9mff872ENlabgDZKjrX4FG/WpnrdAj1LP7JDyz8F IUqfPn2WOqR5aE7GTkEM2ElujkEmi8oFRzfB58HQOqpPdFLfAWG/U8RsYsEbiCzC VF2kvleWM+ybFAxVQKfBzAqT8LP9+9ZyN7Q15e6i0kgJfc1MTyY= -----END CERTIFICATE-----Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org