$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: cmiiz2a7PEapPsqGspmdZWTC0oSKDW7R9Bofz6i8/rk= Subject key identifier: 28:E5:85:30:AA:19:5A:B6:7D:D1:EB:69:59:D7:D1:D4:0A:89:63:CE Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 0F0C78BD190C89A7CBDB06E5CB3DFE9D744D9CD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: 48 Signing time: Thu 21 Nov 2024 01:22:16 +0000 Manifest this update: Thu 21 Nov 2024 01:17:16 +0000 Manifest next update: Sun 24 Nov 2024 12:10:16 +0000 Files and hashes: 1: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: aiEdZLgxoyl96G8Vu02ASOYMeHMP1Dj2jcuaJ1VSJ9A=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: GmOFMzAjvKi/R6Ihcjui8Ly/R+qTvmjieLr7Vq9tAb8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0c:78:bd:19:0c:89:a7:cb:db:06:e5:cb:3d:fe:9d:74:4d:9c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Nov 21 01:17:16 2024 GMT Not After : Nov 24 12:10:16 2024 GMT Subject: CN=28E58530AA195AB67DD1EB6959D7D1D40A8963CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:21:9d:c9:25:c4:8d:50:8f:61:49:6d:0e:44: 44:ac:3e:9a:ef:a0:d2:c6:be:77:e4:b8:9f:e4:bb: 09:a7:00:78:8f:ff:47:13:a3:f2:97:46:ff:2c:d8: 05:b6:d7:fa:78:d8:74:03:60:1b:88:2d:4d:78:09: dc:84:b3:95:89:63:3c:de:71:ea:ff:01:eb:11:c8: 41:0e:f0:d1:75:bf:9d:58:8a:e6:8a:85:6a:4a:39: 48:54:73:42:e2:35:30:f2:54:f2:7c:01:29:f0:0d: 44:02:6f:b0:2c:a1:f5:a7:33:d0:9b:29:97:f4:19: ab:68:c1:b1:74:39:f0:5b:8d:32:3e:3e:57:5f:d8: 22:cc:4c:27:33:36:01:de:c4:ce:71:81:d5:bf:79: da:83:8e:8a:60:b2:11:6c:92:5b:af:e7:15:cb:8b: 1d:b3:d3:f4:9c:57:89:4f:b5:65:76:9e:5b:9d:67: cc:06:c8:1e:9f:c1:f5:30:0f:30:38:c2:ca:9b:7c: e6:4b:8c:6a:ff:ec:14:70:a8:93:36:aa:53:e5:97: b7:2e:e8:2a:24:3c:48:3d:ce:00:d5:86:f4:45:1e: a1:12:d1:b8:0a:06:4f:5e:8e:54:5b:82:ec:43:f0: 39:21:dc:c2:ab:13:8a:ab:e7:94:3f:27:43:f2:40: 7f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E5:85:30:AA:19:5A:B6:7D:D1:EB:69:59:D7:D1:D4:0A:89:63:CE X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a0:21:c5:41:5e:d0:ad:3f:ce:0a:4b:9b:95:ed:8f:5b:0f: a9:7d:a3:8b:7b:13:d0:2b:ad:53:5f:5e:3b:80:45:6d:cd:42: b4:18:50:ea:5f:f1:8f:b5:3e:47:57:9e:4d:ee:60:6f:99:c6: dd:a3:eb:55:d5:a5:48:5a:73:79:21:79:83:ae:c8:1d:eb:39: e8:dd:58:23:cd:2f:89:f9:f0:e6:80:f3:10:8a:64:70:70:bf: ec:f6:52:69:8a:a3:f0:0c:32:25:17:10:cb:80:bb:2e:29:00: b2:f8:44:76:bc:5f:ab:5c:a5:ed:74:7e:6a:88:fb:2a:a2:d5: 96:33:99:d4:27:8b:5d:06:56:a2:37:46:fc:d1:07:5c:53:ff: aa:d9:e8:00:c7:ce:59:0e:b0:6a:95:99:0d:06:71:de:24:7b: 21:4a:53:ab:9b:80:2e:e6:df:aa:47:97:bf:38:70:77:ef:31: 2e:5b:d1:5e:c2:3a:2d:4f:d2:80:0f:df:2f:45:04:55:4b:8b: 6e:24:ce:9c:81:05:fd:a1:46:3d:a5:3a:da:5a:a3:de:71:09: a7:29:fc:24:d6:98:3b:c6:7b:92:a3:27:15:fd:75:d3:85:c7: fe:fc:ec:27:9f:03:d0:cb:79:6e:13:09:17:da:f8:56:4f:e8: c5:2f:95:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwx4vRkMiafL2wblyz3+nXRNnNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNDExMjEwMTE3MTZaFw0yNDExMjQxMjEwMTZaMDMxMTAvBgNV BAMTKDI4RTU4NTMwQUExOTVBQjY3REQxRUI2OTU5RDdEMUQ0MEE4OTYzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRIZ3JJcSNUI9hSW0ORESsPprv oNLGvnfkuJ/kuwmnAHiP/0cTo/KXRv8s2AW21/p42HQDYBuILU14CdyEs5WJYzze cer/AesRyEEO8NF1v51YiuaKhWpKOUhUc0LiNTDyVPJ8ASnwDUQCb7AsofWnM9Cb KZf0GatowbF0OfBbjTI+Pldf2CLMTCczNgHexM5xgdW/edqDjopgshFskluv5xXL ix2z0/ScV4lPtWV2nludZ8wGyB6fwfUwDzA4wsqbfOZLjGr/7BRwqJM2qlPll7cu 6CokPEg9zgDVhvRFHqES0bgKBk9ejlRbguxD8Dkh3MKrE4qr55Q/J0PyQH/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKOWFMKoZWrZ90etpWdfR1AqJY84wHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+gIcVBXtCtP84KS5uV7Y9bD6l9o4t7E9Ar rVNfXjuARW3NQrQYUOpf8Y+1PkdXnk3uYG+Zxt2j61XVpUhac3kheYOuyB3rOejd WCPNL4n58OaA8xCKZHBwv+z2UmmKo/AMMiUXEMuAuy4pALL4RHa8X6tcpe10fmqI +yqi1ZYzmdQni10GVqI3RvzRB1xT/6rZ6ADHzlkOsGqVmQ0Gcd4keyFKU6ubgC7m 36pHl784cHfvMS5b0V7COi1P0oAP3y9FBFVLi24kzpyBBf2hRj2lOtpao95xCacp /CTWmDvGe5KjJxX9ddOFx/787CefA9DLeW4TCRfa+FZP6MUvlR0= -----END CERTIFICATE-----Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org