$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: boAIBsfn6r381IkmP+2KE5rLrJ+dgcFxbxrvdCd2gKA= Subject key identifier: BF:15:CB:DF:ED:5B:04:7D:55:76:9A:48:F8:FF:99:8C:F3:61:E5:4F Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 564A14C3DD4F36774A82787EC90A261B8EB61B8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 0481 Signing time: Thu 21 Nov 2024 07:01:20 +0000 Manifest this update: Thu 21 Nov 2024 06:56:20 +0000 Manifest next update: Sun 24 Nov 2024 09:00:20 +0000 Files and hashes: 1: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: xCVVEhOrBqgJUjdHY0/rcyRGYAvD6oc2Bc3Ghuiwv58=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: XRUL5OC/FVMM95Sr+TgKKKXzxAgbs6oPZwx6ooD6oPE=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: 3FQO/GU4KoR2pdteiQTTb2NEDc217LMm+LVE0TfeQnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4a:14:c3:dd:4f:36:77:4a:82:78:7e:c9:0a:26:1b:8e:b6:1b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Nov 21 06:56:20 2024 GMT Not After : Nov 24 09:00:20 2024 GMT Subject: CN=BF15CBDFED5B047D55769A48F8FF998CF361E54F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:02:4c:09:08:6c:5a:a8:37:ca:83:9c:b9: cc:91:c6:82:4c:17:60:9f:d8:44:7b:f8:59:59:77: ef:64:b9:54:69:01:c4:f4:3b:4f:e9:9a:9b:3e:40: 0d:3c:aa:5f:ce:1d:6a:79:8d:49:21:5b:f4:7d:f1: 53:90:6c:0a:de:cc:0d:5e:0f:9b:60:b3:86:c5:90: f3:ad:e8:55:dc:f7:e1:79:29:98:7c:1f:92:70:8a: 45:28:02:b4:53:0e:8c:a5:92:8e:6c:fa:fb:5f:70: 04:43:9b:de:7f:22:92:97:84:a5:14:1d:b8:ae:20: 0b:68:18:44:9a:1f:f7:3a:f9:cd:d3:d8:39:f9:55: a8:74:15:4f:e8:cf:fb:6a:dd:ad:57:27:d4:ae:ae: c1:12:24:4d:52:42:5a:f2:8d:b8:ff:c8:bb:61:fe: 00:cd:2d:e7:82:c6:30:ee:32:7d:b0:14:43:ce:28: 54:00:78:51:3d:68:e5:2b:28:7a:c5:d4:1b:60:c4: 2f:36:1a:c8:89:c0:26:76:08:b5:08:08:39:74:19: c9:99:d8:c6:d1:09:ff:0c:18:f7:7f:5d:7c:7e:16: 76:4e:95:a9:5c:a7:06:12:65:60:a8:79:f6:cf:fb: f9:f8:4e:10:e9:f8:91:c8:3f:07:d2:c1:e9:ec:4f: 4a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:15:CB:DF:ED:5B:04:7D:55:76:9A:48:F8:FF:99:8C:F3:61:E5:4F X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:06:c6:4b:49:d5:55:97:1c:fe:c9:ff:c7:bf:47:4d:f2:ea: d0:30:12:6e:71:c8:51:91:b6:7e:e7:04:27:e3:bb:38:27:e4: 82:1f:2d:c5:f2:73:a7:b4:54:7f:f1:2a:3b:f3:8b:95:fd:42: 4d:cc:f5:6e:45:56:66:12:d6:f1:de:f8:19:c4:53:9a:45:74: 09:71:44:5a:b8:c7:52:35:9a:19:ff:ff:69:cf:21:a8:bd:85: 54:c1:50:af:29:5c:84:2d:a9:7f:2e:1f:13:07:b2:42:83:81: dc:6e:b1:00:21:40:ae:a8:6a:cc:ae:04:29:21:bc:ef:1b:9f: 53:87:65:1b:5a:8e:0d:f4:8d:91:59:71:4d:55:03:47:70:f0: d2:3d:f6:b0:6b:6e:4d:6d:7e:f4:84:51:f4:2b:2e:81:48:9d: 7e:8d:e1:74:3e:8c:ea:00:6b:15:80:3c:5d:08:77:25:86:fc: f3:bf:ad:90:e6:7e:24:ba:d8:6a:97:01:9e:9c:9c:89:0e:45: 35:6b:97:63:73:73:d6:c6:37:a0:5c:86:98:69:c1:78:a0:d5: b2:29:73:13:fa:5a:d1:8c:6d:cd:c8:be:24:78:e9:f2:55:aa: 23:63:fb:ed:d7:59:62:87:3d:5a:2d:9c:d2:e7:8a:96:6f:13: f4:d1:3a:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkoUw91PNndKgnh+yQomG462G48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNDExMjEwNjU2MjBaFw0yNDExMjQwOTAwMjBaMDMxMTAvBgNV BAMTKEJGMTVDQkRGRUQ1QjA0N0Q1NTc2OUE0OEY4RkY5OThDRjM2MUU1NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpQJMCQhsWqg3yoOcucyRxoJM F2Cf2ER7+FlZd+9kuVRpAcT0O0/pmps+QA08ql/OHWp5jUkhW/R98VOQbArezA1e D5tgs4bFkPOt6FXc9+F5KZh8H5JwikUoArRTDoylko5s+vtfcARDm95/IpKXhKUU HbiuIAtoGESaH/c6+c3T2Dn5Vah0FU/oz/tq3a1XJ9SursESJE1SQlryjbj/yLth /gDNLeeCxjDuMn2wFEPOKFQAeFE9aOUrKHrF1BtgxC82GsiJwCZ2CLUICDl0GcmZ 2MbRCf8MGPd/XXx+FnZOlalcpwYSZWCoefbP+/n4ThDp+JHIPwfSwensT0opAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvxXL3+1bBH1VdppI+P+ZjPNh5U8wHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIGxktJ1VWXHP7J/8e/R03y6tAwEm5xyFGR tn7nBCfjuzgn5IIfLcXyc6e0VH/xKjvzi5X9Qk3M9W5FVmYS1vHe+BnEU5pFdAlx RFq4x1I1mhn//2nPIai9hVTBUK8pXIQtqX8uHxMHskKDgdxusQAhQK6oasyuBCkh vO8bn1OHZRtajg30jZFZcU1VA0dw8NI99rBrbk1tfvSEUfQrLoFInX6N4XQ+jOoA axWAPF0IdyWG/PO/rZDmfiS62GqXAZ6cnIkORTVrl2Nzc9bGN6BchphpwXig1bIp cxP6WtGMbc3IviR46fJVqiNj++3XWWKHPVotnNLnipZvE/TROos= -----END CERTIFICATE-----Generated at Thu Nov 21 09:07:04 2024 by rpki-client on console-ams.rpki-client.org