$ rpki-client -vvf repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft File: F21589FF449CC6950642FB6826CF5416005D740C.mft (raw, json) Hash identifier: VbgFACv2L/BvSmCI7XaQd+XEg71eA633j5gmRNO76JY= Subject key identifier: 95:FD:AD:E8:65:C0:2E:CC:43:44:9A:C9:9C:DA:20:5C:26:88:22:70 Authority key identifier: F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C Certificate issuer: /CN=F21589FF449CC6950642FB6826CF5416005D740C Certificate serial: 2601F78FF690EE733FA323C3D8D09DFCC339404E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft Manifest number: AB Signing time: Sun 24 Nov 2024 19:20:59 +0000 Manifest this update: Sun 24 Nov 2024 19:15:59 +0000 Manifest next update: Thu 28 Nov 2024 00:56:59 +0000 Files and hashes: 1: F21589FF449CC6950642FB6826CF5416005D740C.crl (hash: EJHQuWBooncDoINwf5WWdLzAu1R0eM+oYztJJ6tF3H0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:01:f7:8f:f6:90:ee:73:3f:a3:23:c3:d8:d0:9d:fc:c3:39:40:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21589FF449CC6950642FB6826CF5416005D740C Validity Not Before: Nov 24 19:15:59 2024 GMT Not After : Nov 28 00:56:59 2024 GMT Subject: CN=95FDADE865C02ECC43449AC99CDA205C26882270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:5b:4e:3f:22:1e:67:18:11:47:c3:b1:b4: 7e:ff:cc:78:d6:19:f2:72:18:f3:2b:d0:cf:7b:f4: 50:3d:10:01:c7:d6:bb:00:08:b7:0d:65:16:93:c0: e6:8b:c2:d6:32:a7:17:4b:45:8b:86:73:ed:df:96: 35:51:45:16:0d:1d:50:fc:ac:a4:4e:09:34:19:97: 91:6e:8e:ea:cb:32:e6:bb:ff:d4:52:e2:05:91:14: c4:96:96:4a:cf:68:b0:bc:d3:44:2e:ab:88:73:17: 75:18:75:b7:63:93:ca:ce:64:df:47:6e:80:d4:13: 9e:13:23:9d:b5:5b:a2:4d:06:fb:e3:68:20:ae:e6: 22:7a:11:5b:5c:93:c9:25:6a:92:f2:6d:fe:a5:51: a9:bc:ef:4e:61:58:8e:56:6a:f2:69:be:86:4e:30: bc:e3:cd:c4:50:0c:71:67:ed:18:0c:72:f5:aa:04: c4:63:6c:5c:71:ff:46:f4:5f:85:61:00:5c:1a:8b: 1b:5f:dc:f9:99:e2:a8:1a:9f:5a:b7:68:20:43:76: 3f:b7:f2:93:64:dd:88:ec:83:ec:99:70:2c:fd:56: d5:97:cf:4b:45:75:f3:99:45:6a:03:08:2a:23:7a: 1f:f9:a0:4b:75:a7:aa:ea:2e:60:83:2a:07:15:a5: 00:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FD:AD:E8:65:C0:2E:CC:43:44:9A:C9:9C:DA:20:5C:26:88:22:70 X509v3 Authority Key Identifier: keyid:F2:15:89:FF:44:9C:C6:95:06:42:FB:68:26:CF:54:16:00:5D:74:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F21589FF449CC6950642FB6826CF5416005D740C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506b1bc7-c65a-4a11-9273-814c460b6cba/0/F21589FF449CC6950642FB6826CF5416005D740C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:76:87:49:f2:95:fb:32:1c:17:6f:9b:d6:80:1c:03:c3:95: 25:f6:ee:24:1d:b7:77:02:03:d2:46:eb:39:74:8b:7c:9a:73: a8:c6:c7:68:00:0f:08:a7:6b:9e:75:fb:73:79:51:a1:1a:7f: 4c:e7:89:db:a9:82:7d:a4:3e:1a:3a:23:33:e9:ba:05:40:35: 9a:dd:37:f9:54:8c:59:0f:a8:59:8d:8b:08:23:7e:44:82:23: 59:47:de:0f:d1:e0:d0:2a:ec:02:97:b6:84:34:94:06:c7:ea: 90:16:08:32:e8:be:5f:db:99:70:20:cb:4a:04:c4:d9:8c:7d: 77:fc:08:99:fc:05:1d:e8:24:f5:38:f7:b5:2e:5d:06:b5:66: f3:d1:dd:be:c9:4f:e5:9d:81:86:65:4d:2f:73:72:74:09:1d: cf:e3:3f:4b:5f:2c:b2:51:fa:19:e4:0c:c4:28:90:e3:46:c9: 2c:37:86:18:52:0c:05:59:27:52:62:b0:f3:03:ee:6b:72:86: c0:1e:6a:16:55:4e:be:38:4d:59:c4:99:9c:e8:ad:08:62:85: 31:34:da:91:9b:8d:b2:13:94:4f:53:46:7a:ee:95:c5:e0:5b: 6d:6b:7d:79:ea:b2:73:ef:a6:0f:5f:fa:e8:55:c5:3a:11:92: ba:1b:b5:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgH3j/aQ7nM/oyPD2NCd/MM5QE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYw MDVENzQwQzAeFw0yNDExMjQxOTE1NTlaFw0yNDExMjgwMDU2NTlaMDMxMTAvBgNV BAMTKDk1RkRBREU4NjVDMDJFQ0M0MzQ0OUFDOTlDREEyMDVDMjY4ODIyNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkFtOPyIeZxgRR8OxtH7/zHjW GfJyGPMr0M979FA9EAHH1rsACLcNZRaTwOaLwtYypxdLRYuGc+3fljVRRRYNHVD8 rKROCTQZl5FujurLMua7/9RS4gWRFMSWlkrPaLC800Quq4hzF3UYdbdjk8rOZN9H boDUE54TI521W6JNBvvjaCCu5iJ6EVtck8klapLybf6lUam8705hWI5WavJpvoZO MLzjzcRQDHFn7RgMcvWqBMRjbFxx/0b0X4VhAFwaixtf3PmZ4qgan1q3aCBDdj+3 8pNk3Yjsg+yZcCz9VtWXz0tFdfOZRWoDCCojeh/5oEt1p6rqLmCDKgcVpQAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlf2t6GXALsxDRJrJnNogXCaIInAwHwYDVR0j BBgwFoAU8hWJ/0ScxpUGQvtoJs9UFgBddAwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZiMWJjNy1jNjVhLTRhMTEtOTI3My04MTRjNDYwYjZjYmEvMC9GMjE1ODlGRjQ0 OUNDNjk1MDY0MkZCNjgyNkNGNTQxNjAwNUQ3NDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0MTYwMDVE NzQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2YjFiYzctYzY1YS00YTExLTky NzMtODE0YzQ2MGI2Y2JhLzAvRjIxNTg5RkY0NDlDQzY5NTA2NDJGQjY4MjZDRjU0 MTYwMDVENzQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADl2h0nylfsyHBdvm9aAHAPDlSX27iQdt3cC A9JG6zl0i3yac6jGx2gADwina551+3N5UaEaf0znidupgn2kPho6IzPpugVANZrd N/lUjFkPqFmNiwgjfkSCI1lH3g/R4NAq7AKXtoQ0lAbH6pAWCDLovl/bmXAgy0oE xNmMfXf8CJn8BR3oJPU497UuXQa1ZvPR3b7JT+WdgYZlTS9zcnQJHc/jP0tfLLJR +hnkDMQokONGySw3hhhSDAVZJ1JisPMD7mtyhsAeahZVTr44TVnEmZzorQhihTE0 2pGbjbITlE9TRnrulcXgW21rfXnqsnPvpg9f+uhVxToRkrobtRc= -----END CERTIFICATE-----Generated at Sun Nov 24 20:57:50 2024 by rpki-client on console-fra.rpki-client.org