$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: Llg8TUD3y0l68Fazwna7dMn407uX5TFVACLIdoG/vnA= Subject key identifier: D8:65:53:95:83:70:A3:D2:76:A3:4B:C1:B9:D7:11:D1:B5:EE:F7:E3 Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 1D07BEF25AC54E800DBDFA000DB9EB1341E9825B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 010E Signing time: Mon 25 Nov 2024 20:02:06 +0000 Manifest this update: Mon 25 Nov 2024 19:57:06 +0000 Manifest next update: Fri 29 Nov 2024 00:31:06 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: O+mEnVy516aIKsB9WjaXM3ZMjk3PZaGkDaFmulWGx8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:07:be:f2:5a:c5:4e:80:0d:bd:fa:00:0d:b9:eb:13:41:e9:82:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Nov 25 19:57:06 2024 GMT Not After : Nov 29 00:31:06 2024 GMT Subject: CN=D86553958370A3D276A34BC1B9D711D1B5EEF7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:10:d3:ba:2a:e3:73:64:93:d6:57:09:d5:61: a2:e0:d1:85:a4:ff:a5:82:bc:ee:d0:43:6d:e3:51: 6c:b6:6a:64:e7:f4:f4:95:bf:8a:87:83:2b:47:70: bf:9f:39:83:e4:76:98:b4:e8:9b:5f:f2:60:78:b1: 37:39:75:18:a5:cd:03:7c:89:57:11:ba:01:9d:d6: 6b:3d:71:ec:f0:9d:42:c3:97:f8:8d:0e:fe:c9:e5: 04:01:64:84:57:86:f6:61:35:c2:96:42:9e:66:f7: 81:e8:90:74:6b:b8:54:60:2a:29:95:b3:29:3f:82: 04:02:19:25:bc:41:f7:59:57:d7:29:df:8f:6e:b1: 7e:07:0e:26:8e:e0:a9:16:c1:0e:9a:68:0b:0e:04: 7f:c8:e6:ed:9d:20:d8:b6:3a:c2:50:b0:a2:e1:ed: 2c:09:a9:2d:46:cf:96:7c:c0:37:45:dd:af:67:46: b7:63:cf:6f:1f:31:cb:1d:3f:b4:0f:e5:b8:47:3b: 2f:ad:ac:83:c0:aa:de:76:f1:a8:8b:c2:84:46:e5: c9:24:e9:b3:8a:0e:8f:dc:34:a7:70:7b:c6:6c:d2: 4e:6b:e6:7f:d8:d5:3e:92:71:2a:64:bc:23:1c:8f: 32:e3:1e:dc:46:f7:0a:0e:7c:f9:fd:4f:49:82:73: 09:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:65:53:95:83:70:A3:D2:76:A3:4B:C1:B9:D7:11:D1:B5:EE:F7:E3 X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:58:03:c0:b7:ea:bd:c1:59:6c:df:2a:d1:19:dc:08:c1:71: d1:a8:d3:ba:e6:46:62:09:f4:a3:16:27:24:32:fc:fb:90:27: e5:93:41:01:43:aa:6c:09:96:af:ea:63:ec:dd:58:4f:72:20: 0c:90:09:c6:8a:f4:07:ef:8e:3e:e7:02:14:bc:9b:43:a5:f7: 65:9c:4f:5d:ce:9e:d2:fc:14:0a:89:3d:8e:43:5c:ac:68:c4: d9:84:14:28:fc:d2:69:2d:7b:01:83:c8:88:ec:35:a4:51:7c: ee:e9:bc:df:ff:4c:a6:18:ca:1e:d0:34:ea:8b:47:3c:de:a1: 45:9f:25:9a:14:d4:4a:1b:b5:65:cb:61:ce:e7:d4:ff:d3:bf: 6b:15:c7:9a:4c:23:b4:9e:40:c0:56:96:57:f8:6a:58:9e:9c: 50:d9:12:e2:84:16:85:46:8f:e8:53:ef:1f:5f:4d:65:c9:cc: 3e:97:da:78:b4:e1:d7:e8:57:f1:08:fa:04:3a:78:69:51:db: 48:ef:ac:43:3a:f9:ec:9a:bb:19:4c:38:25:d1:91:4f:b5:77: fc:b5:6a:63:38:2a:52:e0:01:f2:ea:73:90:1f:f5:bd:aa:08: 2e:ca:ab:e2:90:3c:ae:ee:fa:b1:ae:ab:2e:e0:b1:ee:33:58: a8:b1:cc:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQe+8lrFToANvfoADbnrE0HpglswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNDExMjUxOTU3MDZaFw0yNDExMjkwMDMxMDZaMDMxMTAvBgNV BAMTKEQ4NjU1Mzk1ODM3MEEzRDI3NkEzNEJDMUI5RDcxMUQxQjVFRUY3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcENO6KuNzZJPWVwnVYaLg0YWk /6WCvO7QQ23jUWy2amTn9PSVv4qHgytHcL+fOYPkdpi06Jtf8mB4sTc5dRilzQN8 iVcRugGd1ms9cezwnULDl/iNDv7J5QQBZIRXhvZhNcKWQp5m94HokHRruFRgKimV syk/ggQCGSW8QfdZV9cp349usX4HDiaO4KkWwQ6aaAsOBH/I5u2dINi2OsJQsKLh 7SwJqS1Gz5Z8wDdF3a9nRrdjz28fMcsdP7QP5bhHOy+trIPAqt528aiLwoRG5ckk 6bOKDo/cNKdwe8Zs0k5r5n/Y1T6ScSpkvCMcjzLjHtxG9woOfPn9T0mCcwklAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2GVTlYNwo9J2o0vBudcR0bXu9+MwHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJYA8C36r3BWWzfKtEZ3AjBcdGo07rmRmIJ 9KMWJyQy/PuQJ+WTQQFDqmwJlq/qY+zdWE9yIAyQCcaK9Afvjj7nAhS8m0Ol92Wc T13OntL8FAqJPY5DXKxoxNmEFCj80mktewGDyIjsNaRRfO7pvN//TKYYyh7QNOqL RzzeoUWfJZoU1EobtWXLYc7n1P/Tv2sVx5pMI7SeQMBWllf4alienFDZEuKEFoVG j+hT7x9fTWXJzD6X2ni04dfoV/EI+gQ6eGlR20jvrEM6+eyauxlMOCXRkU+1d/y1 amM4KlLgAfLqc5Af9b2qCC7Kq+KQPK7u+rGuqy7gse4zWKixzDU= -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org