$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: aJFNLnty4O2wslNaRvOKASrYGDleTveLIp0xcDP6WBI= Subject key identifier: A0:66:A8:CF:50:66:E8:E1:1B:71:0B:07:79:2F:43:A2:F1:48:B3:73 Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 678CAE6BB6DCF08071E7A7E98E2E77E9EACE17C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 01AA Signing time: Sun 24 Nov 2024 06:02:04 +0000 Manifest this update: Sun 24 Nov 2024 05:57:04 +0000 Manifest next update: Wed 27 Nov 2024 11:25:04 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: aSdRjkWCOe+68R7DCQvE4MwwwHaAbU0bFhZ0nL0Gq/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8c:ae:6b:b6:dc:f0:80:71:e7:a7:e9:8e:2e:77:e9:ea:ce:17:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Nov 24 05:57:04 2024 GMT Not After : Nov 27 11:25:04 2024 GMT Subject: CN=A066A8CF5066E8E11B710B07792F43A2F148B373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:fe:5e:26:0c:f2:f4:0e:49:a4:13:cc:7f: 42:e1:b5:4b:20:3b:11:24:00:36:21:fd:49:b1:e4: 3d:e0:a7:90:7e:b3:58:77:d0:22:52:e1:6a:dc:b4: f5:e7:64:6e:15:07:e9:e7:a2:69:3e:37:a4:c5:f5: 8a:f4:92:6b:ee:e4:b7:6f:63:a8:a1:d5:58:60:45: 8a:3d:98:f8:0b:c0:a8:a9:65:1c:60:cc:68:71:39: d8:63:56:dc:df:0e:74:08:2a:12:23:b0:e9:cc:b5: bc:00:53:e6:00:21:2c:86:81:99:34:ba:97:46:c8: e6:7c:e1:f0:67:c6:0c:27:a1:59:9c:06:01:f9:ce: ac:53:b8:19:cd:5f:bb:5b:05:a6:52:02:ae:a9:be: 31:f0:8a:85:61:e5:48:47:67:01:6c:03:36:95:84: b9:1d:87:d0:ef:aa:70:84:31:db:45:45:3b:4a:37: 9b:4c:5a:2c:85:8a:28:b9:dc:76:51:18:88:b1:d6: 18:a3:46:3e:bf:d8:6c:4d:b5:80:08:17:d1:3c:89: ae:63:8f:b5:77:e8:e4:2d:71:88:0e:2b:94:35:18: c4:7e:c7:3f:3e:8b:12:7e:c6:94:9b:ab:06:62:06: e2:9d:6f:a4:57:1a:31:37:8b:bf:ad:4f:47:5e:76: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:66:A8:CF:50:66:E8:E1:1B:71:0B:07:79:2F:43:A2:F1:48:B3:73 X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d5:bd:bb:72:b1:3c:25:f4:b9:50:d9:1a:1a:a0:95:a4:b8: 3f:43:3a:fe:cd:7d:09:10:08:35:43:65:cd:a0:ec:02:36:9e: 75:7e:ce:5c:61:f4:8c:95:86:c3:22:86:32:dc:95:38:ce:15: e1:9b:80:67:b5:49:a9:26:67:e6:5e:ca:69:9a:95:20:56:1c: 2b:a0:8b:6a:05:87:5c:39:07:5c:d1:d9:28:db:2c:1f:0b:60: 73:82:50:34:cb:01:8f:c5:01:d4:ba:8c:c9:c5:30:9f:63:0d: f1:6a:bc:ed:f9:a7:a1:9e:f0:3c:e6:91:b8:5f:0f:09:0d:ee: b0:90:49:f3:9a:58:38:f6:1f:41:fa:d5:22:17:7b:de:28:b1: 74:ce:e5:92:34:ae:e4:15:f9:3b:45:d2:a4:b7:78:77:4b:da: 0f:ab:df:f2:af:4b:67:71:e3:48:6b:24:88:18:b2:53:97:5f: 8b:2f:98:c3:88:49:b1:b6:e0:db:ea:65:ec:3c:d2:27:9e:7b: 8c:8d:21:ef:58:ab:a2:5a:a8:b2:b3:5e:3e:81:94:28:cc:9a: 0e:72:5d:67:f3:e4:5e:98:93:9a:b4:1e:d1:e8:a6:66:92:ad: 8c:3c:9a:cc:76:25:41:3b:d3:97:e8:af:68:a5:a3:5c:61:bc: e3:0f:05:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ4yua7bc8IBx56fpji536erOF8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNDExMjQwNTU3MDRaFw0yNDExMjcxMTI1MDRaMDMxMTAvBgNV BAMTKEEwNjZBOENGNTA2NkU4RTExQjcxMEIwNzc5MkY0M0EyRjE0OEIzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC84P5eJgzy9A5JpBPMf0LhtUsg OxEkADYh/Umx5D3gp5B+s1h30CJS4WrctPXnZG4VB+nnomk+N6TF9Yr0kmvu5Ldv Y6ih1VhgRYo9mPgLwKipZRxgzGhxOdhjVtzfDnQIKhIjsOnMtbwAU+YAISyGgZk0 updGyOZ84fBnxgwnoVmcBgH5zqxTuBnNX7tbBaZSAq6pvjHwioVh5UhHZwFsAzaV hLkdh9DvqnCEMdtFRTtKN5tMWiyFiii53HZRGIix1hijRj6/2GxNtYAIF9E8ia5j j7V36OQtcYgOK5Q1GMR+xz8+ixJ+xpSbqwZiBuKdb6RXGjE3i7+tT0deduBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoGaoz1Bm6OEbcQsHeS9DovFIs3MwHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7VvbtysTwl9LlQ2RoaoJWkuD9DOv7NfQkQ CDVDZc2g7AI2nnV+zlxh9IyVhsMihjLclTjOFeGbgGe1SakmZ+ZeymmalSBWHCug i2oFh1w5B1zR2SjbLB8LYHOCUDTLAY/FAdS6jMnFMJ9jDfFqvO35p6Ge8Dzmkbhf DwkN7rCQSfOaWDj2H0H61SIXe94osXTO5ZI0ruQV+TtF0qS3eHdL2g+r3/KvS2dx 40hrJIgYslOXX4svmMOISbG24NvqZew80ieee4yNIe9Yq6JaqLKzXj6BlCjMmg5y XWfz5F6Yk5q0HtHopmaSrYw8msx2JUE705for2ilo1xhvOMPBTc= -----END CERTIFICATE-----Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org