$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: 6ClAwyGHn5M6H5o+J3L5+xFaSDsWz/nAWvt0Nf1lNRE= Subject key identifier: 99:9A:78:FD:0D:C5:C6:89:71:5A:33:B8:80:3F:4A:9C:7D:30:2C:8B Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 1C90E7AE3B59D4A2EBC28FF056490D12CCADFACC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 0232 Signing time: Thu 21 Nov 2024 20:51:21 +0000 Manifest this update: Thu 21 Nov 2024 20:46:21 +0000 Manifest next update: Mon 25 Nov 2024 03:15:21 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: XxRiEuQp5vP5LxoceOiRMLk+tJ6hFw/ZAwI7qAyonu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:90:e7:ae:3b:59:d4:a2:eb:c2:8f:f0:56:49:0d:12:cc:ad:fa:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Nov 21 20:46:21 2024 GMT Not After : Nov 25 03:15:21 2024 GMT Subject: CN=999A78FD0DC5C689715A33B8803F4A9C7D302C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:a7:cd:61:21:d6:36:d6:35:20:b0:56:f9: c5:69:8d:f2:af:4e:92:be:af:58:c9:83:2a:71:df: ba:95:ca:f5:87:42:3d:36:d9:d9:99:ea:fc:ef:05: 1e:93:58:9f:ef:31:fe:e9:b8:6f:f3:d9:58:00:83: c2:d2:12:af:85:9d:c9:d5:ab:10:1e:b1:27:bc:09: ae:d8:94:3d:9f:35:9e:80:76:94:86:dc:8f:5d:f7: f5:a0:d8:0d:c8:a6:07:3f:a0:06:23:eb:db:3a:2f: e2:ca:1f:91:af:05:a5:e4:f4:7c:e1:57:2b:d4:17: f5:5e:c0:6a:7a:69:85:a4:9f:7c:42:e9:2e:42:b8: 36:62:61:c4:2b:e4:3f:85:80:86:3d:da:3a:2f:4d: 52:7a:d6:43:36:0f:be:b8:f7:b6:53:35:11:74:65: d1:fc:6b:1d:36:ea:9d:bc:3d:53:d5:7c:17:6d:88: bb:7b:4a:d4:13:cb:dd:1a:df:57:f1:36:0d:eb:c5: 52:14:6a:7e:35:0e:45:28:a2:5f:c0:f4:f3:22:52: bb:89:46:98:c6:61:6b:24:d9:24:d6:26:ee:72:79: 81:79:be:7e:9b:d9:e7:71:b1:28:89:4c:28:b9:e8: e9:26:c9:21:eb:ba:34:94:cf:2f:76:b3:2b:7b:14: a4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9A:78:FD:0D:C5:C6:89:71:5A:33:B8:80:3F:4A:9C:7D:30:2C:8B X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8f:7e:ae:86:a9:ad:7a:30:da:ea:0f:16:e6:56:7d:76:e5: 93:d8:ab:e0:68:36:80:64:2f:69:ca:17:7a:9f:50:7a:87:0a: 51:8e:a1:a4:24:fc:a6:0b:f0:18:c2:38:e2:1e:2c:3e:aa:97: a3:c4:48:8a:04:d8:86:6f:21:c7:87:ae:a5:91:66:b2:44:f4: 00:cc:f3:69:e8:98:c6:50:be:83:67:c7:3c:be:53:d5:d7:7d: b9:c6:05:6e:f9:d2:83:39:40:08:43:ba:c9:64:6f:85:42:49: 32:56:af:e0:bd:2a:24:51:f1:df:1e:d2:82:6e:a4:a3:a1:81: 10:61:0d:92:30:66:12:0c:f3:3f:bb:33:f9:33:e5:25:9a:f7: 78:c2:b8:0f:d7:d6:95:e6:5b:aa:56:4b:d1:39:cb:b4:16:3e: f1:e8:f0:97:39:5e:4e:99:bd:45:ca:cf:34:c4:9b:cc:ad:21: 5b:04:39:67:50:68:c7:88:01:d6:32:8d:da:e1:cc:87:70:6c: 80:dd:f3:3f:ab:bc:9a:a5:05:f2:d3:b1:99:c0:ab:57:4d:c4: 78:f8:c0:0c:4c:bb:4b:5c:3a:f3:2c:42:b3:cd:9d:d5:53:37: 54:f9:b1:35:b7:f3:60:13:5b:81:51:5e:9a:a3:13:b6:f0:df: 05:5d:33:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJDnrjtZ1KLrwo/wVkkNEsyt+swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNDExMjEyMDQ2MjFaFw0yNDExMjUwMzE1MjFaMDMxMTAvBgNV BAMTKDk5OUE3OEZEMERDNUM2ODk3MTVBMzNCODgwM0Y0QTlDN0QzMDJDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGD6fNYSHWNtY1ILBW+cVpjfKv TpK+r1jJgypx37qVyvWHQj022dmZ6vzvBR6TWJ/vMf7puG/z2VgAg8LSEq+FncnV qxAesSe8Ca7YlD2fNZ6AdpSG3I9d9/Wg2A3Ipgc/oAYj69s6L+LKH5GvBaXk9Hzh VyvUF/VewGp6aYWkn3xC6S5CuDZiYcQr5D+FgIY92jovTVJ61kM2D76497ZTNRF0 ZdH8ax026p28PVPVfBdtiLt7StQTy90a31fxNg3rxVIUan41DkUool/A9PMiUruJ RpjGYWsk2STWJu5yeYF5vn6b2edxsSiJTCi56OkmySHrujSUzy92syt7FKTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZp4/Q3FxolxWjO4gD9KnH0wLIswHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+Pfq6Gqa16MNrqDxbmVn125ZPYq+BoNoBk L2nKF3qfUHqHClGOoaQk/KYL8BjCOOIeLD6ql6PESIoE2IZvIceHrqWRZrJE9ADM 82nomMZQvoNnxzy+U9XXfbnGBW750oM5QAhDuslkb4VCSTJWr+C9KiRR8d8e0oJu pKOhgRBhDZIwZhIM8z+7M/kz5SWa93jCuA/X1pXmW6pWS9E5y7QWPvHo8Jc5Xk6Z vUXKzzTEm8ytIVsEOWdQaMeIAdYyjdrhzIdwbIDd8z+rvJqlBfLTsZnAq1dNxHj4 wAxMu0tcOvMsQrPNndVTN1T5sTW382ATW4FRXpqjE7bw3wVdM2A= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org