$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json) Hash identifier: 7j8+azwxPjf1t8VrT68MQZ/GRMd+dM7Qf1dX7PvpbLs= Subject key identifier: A7:27:33:AC:CE:ED:72:0C:7C:E6:42:F9:6D:98:15:BB:19:1A:3B:C6 Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 51BE594C8FF08F6C1113FEC70C25F9E7E2D635F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft Manifest number: 0181 Signing time: Sun 24 Nov 2024 17:11:55 +0000 Manifest this update: Sun 24 Nov 2024 17:06:55 +0000 Manifest next update: Wed 27 Nov 2024 20:32:55 +0000 Files and hashes: 1: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: XlKQ5OSGDwtuHNG+MvTCqf+kuzw1BT9qnWwuN63a2cw=) 2: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: EW+Pr1fwXxfLFpLk5lKFG1FBMg+YzIOxk9FROjClcJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:be:59:4c:8f:f0:8f:6c:11:13:fe:c7:0c:25:f9:e7:e2:d6:35:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Nov 24 17:06:55 2024 GMT Not After : Nov 27 20:32:55 2024 GMT Subject: CN=A72733ACCEED720C7CE642F96D9815BB191A3BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:d6:6c:60:da:a2:35:a6:92:75:d7:9c:e4: 85:2f:e6:1a:b2:8b:94:27:9a:54:6a:c9:4b:cf:9a: c1:24:2b:04:04:ba:62:77:45:f5:e6:00:09:c0:78: 73:cb:b8:7a:76:e0:58:80:a5:e9:4e:1f:6c:53:4a: 59:dd:6a:63:4d:0f:f9:4a:a0:6c:3a:c4:b7:cc:3c: 54:ba:6f:18:ab:72:b8:d0:9b:52:95:d0:e0:6c:68: 4b:ab:34:5c:a6:9a:c5:b4:a8:f5:1e:42:f1:58:50: bf:40:0b:bd:69:a8:19:ca:a0:76:89:53:01:c6:1a: 57:fa:f1:d5:4b:d4:7e:1b:b4:a1:e3:7d:97:98:3b: 71:40:3e:27:4a:92:fe:51:cf:cd:ab:31:78:e8:0d: 13:f8:ef:a4:c9:05:c5:90:19:74:70:af:58:a1:1f: 1b:fe:4a:d9:f6:3b:03:64:97:35:ce:cf:64:a0:b3: f6:ba:16:41:ed:78:8e:04:d4:16:af:bd:77:2d:9b: 58:d0:14:01:fe:4f:f9:57:13:62:85:5b:30:e4:92: b9:fa:72:e5:c0:e2:90:c6:a5:a7:ff:3b:8d:c5:17: 5a:33:67:fd:66:7c:2a:0e:68:59:66:17:ad:12:d1: 3d:49:ad:02:62:05:f8:4d:3d:d0:c8:bd:8d:87:bc: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:27:33:AC:CE:ED:72:0C:7C:E6:42:F9:6D:98:15:BB:19:1A:3B:C6 X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:db:ce:b8:f5:90:33:e3:e0:c5:0b:78:90:3a:3c:18:58:10: 39:74:b6:a7:d6:9b:0f:22:18:f0:69:17:4b:f6:1d:47:6f:a5: ec:50:f6:be:2a:6c:e5:a3:d4:e9:aa:77:0c:bd:02:70:14:38: 3c:65:b0:da:77:b5:9e:b0:ef:56:49:65:c9:cb:e2:dc:c1:94: f6:1e:db:5b:29:ea:a1:95:5b:16:50:88:ca:11:95:04:8f:24: a7:c2:83:81:9c:50:c1:b3:f2:9e:f4:8e:d3:3d:dc:b7:5e:b0: 52:e1:6d:4e:7b:f6:69:55:36:2b:d5:6a:07:f8:01:03:c6:af: 2c:d6:59:f9:04:58:d2:49:74:62:ad:42:65:1d:d6:3c:67:23: 94:31:f2:f5:ce:28:8b:ca:5d:d3:29:12:52:f8:d2:c0:3d:fa: 7b:4b:ed:cd:3d:23:83:0c:ed:66:a8:40:f2:5d:f4:25:11:9c: 2d:dd:44:18:e7:3d:7b:15:02:b4:0d:12:61:82:03:18:05:7f: 5f:a4:82:9e:fc:0b:7c:3d:ad:27:fb:73:ef:51:65:85:6d:c4: 8e:65:b2:8c:fb:db:19:8f:77:f9:e3:29:d1:0c:58:85:bd:10: 29:04:24:8d:46:51:79:b1:08:52:ce:33:11:2a:24:66:8f:96: 5b:08:1e:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUb5ZTI/wj2wRE/7HDCX55+LWNfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNDExMjQxNzA2NTVaFw0yNDExMjcyMDMyNTVaMDMxMTAvBgNV BAMTKEE3MjczM0FDQ0VFRDcyMEM3Q0U2NDJGOTZEOTgxNUJCMTkxQTNCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6O9ZsYNqiNaaSddec5IUv5hqy i5QnmlRqyUvPmsEkKwQEumJ3RfXmAAnAeHPLuHp24FiApelOH2xTSlndamNND/lK oGw6xLfMPFS6bxircrjQm1KV0OBsaEurNFymmsW0qPUeQvFYUL9AC71pqBnKoHaJ UwHGGlf68dVL1H4btKHjfZeYO3FAPidKkv5Rz82rMXjoDRP476TJBcWQGXRwr1ih Hxv+Stn2OwNklzXOz2Sgs/a6FkHteI4E1BavvXctm1jQFAH+T/lXE2KFWzDkkrn6 cuXA4pDGpaf/O43FF1ozZ/1mfCoOaFlmF60S0T1JrQJiBfhNPdDIvY2HvONfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpyczrM7tcgx85kL5bZgVuxkaO8YwHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdmOWY1NjItNzI5Mi00NGYxLThl MmMtNDQwYTA1MzFjMzk2LzAvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEy MzlDOTAzRUFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrbzrj1kDPj4MULeJA6PBhYEDl0tqfWmw8i GPBpF0v2HUdvpexQ9r4qbOWj1Omqdwy9AnAUODxlsNp3tZ6w71ZJZcnL4tzBlPYe 21sp6qGVWxZQiMoRlQSPJKfCg4GcUMGz8p70jtM93LdesFLhbU579mlVNivVagf4 AQPGryzWWfkEWNJJdGKtQmUd1jxnI5Qx8vXOKIvKXdMpElL40sA9+ntL7c09I4MM 7WaoQPJd9CURnC3dRBjnPXsVArQNEmGCAxgFf1+kgp78C3w9rSf7c+9RZYVtxI5l soz72xmPd/njKdEMWIW9ECkEJI1GUXmxCFLOMxEqJGaPllsIHsA= -----END CERTIFICATE-----Generated at Sun Nov 24 18:33:16 2024 by rpki-client on console-fra.rpki-client.org