$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: 8n9u2kbnlOVxt1VbFsjGZBZf2fjtH36UwcrE9PQQ8zo= Subject key identifier: D1:84:C2:54:B8:9B:1D:12:E1:3A:10:11:E5:C7:4C:57:94:FD:9B:C9 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 0D464C4BD02BE0DCDE72FFBDC4A0DF245B8C02EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 01D6 Signing time: Mon 25 Nov 2024 04:51:15 +0000 Manifest this update: Mon 25 Nov 2024 04:46:15 +0000 Manifest next update: Thu 28 Nov 2024 07:56:15 +0000 Files and hashes: 1: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: 7BcuO54BhBB7wZmu2UhdXcs5NyH9QA0JfdmZbikmq8U=) 2: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: 6FLbYuy1S5qOt7tY0dfAZpELgfONO6cx6swxFm3099E=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: xAQ8nY4YiCbyThm1ahzRI7qCPhGk2b5venOiA8cHRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:46:4c:4b:d0:2b:e0:dc:de:72:ff:bd:c4:a0:df:24:5b:8c:02:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Nov 25 04:46:15 2024 GMT Not After : Nov 28 07:56:15 2024 GMT Subject: CN=D184C254B89B1D12E13A1011E5C74C5794FD9BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:8b:7b:5a:5a:8e:88:55:3e:5c:8f:9d:47: 39:7c:37:4c:c4:3e:58:b7:3f:14:ac:8b:d7:b9:5b: 3e:b3:6f:06:5b:37:ee:75:93:0a:25:83:00:a5:ca: fd:88:ae:87:33:c8:fc:c8:d4:05:c5:e1:ae:40:26: 2b:ee:15:c1:9d:86:fc:ff:ee:87:6e:50:31:40:8e: 40:53:52:fd:81:aa:2c:81:ef:87:e8:fd:5e:72:ba: b2:67:20:24:38:8e:ee:d8:53:f1:c7:9b:c8:e0:ee: 52:c0:1f:e4:7d:8a:90:6a:fe:3c:90:80:de:7b:5d: c1:7c:9c:ce:2a:69:bf:bb:fc:cf:b3:bc:98:43:d7: 2e:2c:f1:2f:05:87:6f:bc:18:84:3b:b1:8c:f9:bc: 60:1b:5b:27:5f:4e:8f:fd:06:76:30:67:29:4a:50: 13:54:1a:9d:17:bd:7f:05:34:45:6f:ce:d2:d1:46: 52:af:7b:39:6c:e2:83:b2:33:de:87:28:6e:1c:57: 4c:e7:69:2f:ab:aa:94:b2:22:22:6f:01:25:ca:bc: 96:c8:88:55:85:71:34:eb:82:b0:c8:26:b2:75:bd: 54:5c:23:a8:38:1c:88:8b:5b:5e:1f:47:78:45:e9: 2e:c3:a3:26:61:37:eb:2e:b9:66:38:fc:05:8f:1e: ca:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:84:C2:54:B8:9B:1D:12:E1:3A:10:11:E5:C7:4C:57:94:FD:9B:C9 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4e:b1:dd:6c:71:ee:b2:28:6f:34:d0:ef:d1:32:0c:b6:ad: 85:05:e3:2c:e7:04:61:ae:71:94:29:c4:41:1d:72:00:5d:a4: 71:9e:d2:35:66:c1:7c:3f:a4:79:4c:90:f5:9d:a3:60:9d:b7: d4:71:59:33:01:a6:19:8d:f1:ea:88:2c:bd:11:6d:ad:8e:12: d3:27:52:36:cb:10:21:99:4a:ba:53:f3:ef:67:66:fa:c2:b1: ee:b3:45:27:6a:73:1d:cf:9e:d8:1b:9a:3f:27:24:33:29:6b: fb:90:b9:99:21:4b:c5:0f:d6:a5:1d:d6:91:7d:d7:7d:11:fe: 10:d2:e8:e7:2b:30:00:30:e8:52:dd:ac:47:44:05:3a:8b:ba: fc:3d:38:df:1d:e0:f9:2d:95:a9:88:fd:47:e8:91:7e:f1:ee: 93:ab:dd:17:80:3e:75:f4:b1:af:8d:f5:a6:1e:20:12:06:0b: bb:72:6f:71:c1:24:cc:ce:95:1c:c1:33:25:5b:e7:95:5b:66: 78:fa:66:51:05:d5:a3:ae:62:af:6b:2f:e6:d4:f5:07:0b:65: fd:89:3e:65:6c:41:35:5c:a7:b8:d7:c9:f2:ff:21:1d:fc:24: 55:ca:54:57:74:e4:18:52:81:c5:a7:ec:82:29:65:5b:55:d1: 34:47:cd:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUZMS9Ar4Nzecv+9xKDfJFuMAuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNDExMjUwNDQ2MTVaFw0yNDExMjgwNzU2MTVaMDMxMTAvBgNV BAMTKEQxODRDMjU0Qjg5QjFEMTJFMTNBMTAxMUU1Qzc0QzU3OTRGRDlCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUN4t7WlqOiFU+XI+dRzl8N0zE Pli3PxSsi9e5Wz6zbwZbN+51kwolgwClyv2IroczyPzI1AXF4a5AJivuFcGdhvz/ 7oduUDFAjkBTUv2BqiyB74fo/V5yurJnICQ4ju7YU/HHm8jg7lLAH+R9ipBq/jyQ gN57XcF8nM4qab+7/M+zvJhD1y4s8S8Fh2+8GIQ7sYz5vGAbWydfTo/9BnYwZylK UBNUGp0XvX8FNEVvztLRRlKvezls4oOyM96HKG4cV0znaS+rqpSyIiJvASXKvJbI iFWFcTTrgrDIJrJ1vVRcI6g4HIiLW14fR3hF6S7DoyZhN+suuWY4/AWPHsrDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0YTCVLibHRLhOhAR5cdMV5T9m8kwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClOsd1sce6yKG800O/RMgy2rYUF4yznBGGu cZQpxEEdcgBdpHGe0jVmwXw/pHlMkPWdo2Cdt9RxWTMBphmN8eqILL0Rba2OEtMn UjbLECGZSrpT8+9nZvrCse6zRSdqcx3Pntgbmj8nJDMpa/uQuZkhS8UP1qUd1pF9 130R/hDS6OcrMAAw6FLdrEdEBTqLuvw9ON8d4PktlamI/UfokX7x7pOr3ReAPnX0 sa+N9aYeIBIGC7tyb3HBJMzOlRzBMyVb55VbZnj6ZlEF1aOuYq9rL+bU9QcLZf2J PmVsQTVcp7jXyfL/IR38JFXKVFd05BhSgcWn7IIpZVtV0TRHzfU= -----END CERTIFICATE-----Generated at Mon Nov 25 06:02:39 2024 by rpki-client on console-ams.rpki-client.org