$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft File: 41ABF792D14122AAA67E42BD42EBB8E02A096620.mft (raw, json) Hash identifier: yFvOuVOIGx0JMFqkFi0HiO+u7KfmC1xT7ml9cj+FjL8= Subject key identifier: 66:A3:9D:41:C9:A7:3A:9A:EB:AE:00:04:2B:FE:7E:47:5D:94:E1:B1 Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Certificate serial: 5128ACCEA8AA2D70DB3A5C9E6144114336D36A38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft Manifest number: 0486 Signing time: Sun 24 Nov 2024 21:42:30 +0000 Manifest this update: Sun 24 Nov 2024 21:37:30 +0000 Manifest next update: Thu 28 Nov 2024 09:23:30 +0000 Files and hashes: 1: 41ABF792D14122AAA67E42BD42EBB8E02A096620.crl (hash: vMulbvX4MhAhRS/sMkLQHEoToQscSIwZ7yYsnKeZ2Ak=) 2: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: e363Qmmr7aShBd/1Dt6hRaygfxaujoi+LkakMl8KvrY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:28:ac:ce:a8:aa:2d:70:db:3a:5c:9e:61:44:11:43:36:d3:6a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Validity Not Before: Nov 24 21:37:30 2024 GMT Not After : Nov 28 09:23:30 2024 GMT Subject: CN=66A39D41C9A73A9AEBAE00042BFE7E475D94E1B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:b1:83:5c:27:ae:80:a0:78:4b:c8:28:de: b0:96:18:40:88:f5:65:96:7d:7f:53:21:47:44:fc: db:6b:e7:3f:40:62:d9:63:cf:5d:4f:b4:09:af:4d: e3:8d:96:e9:0f:c4:6a:06:9c:dd:45:67:81:2f:6b: 6c:4b:b7:29:fe:33:fb:70:ba:4b:eb:38:9a:79:81: 02:18:bd:72:f8:21:d8:07:59:e1:a1:91:a4:b5:46: e3:84:40:50:09:86:ec:5e:54:07:80:a5:56:bd:20: 4b:6b:47:d7:c9:6e:fa:e0:58:38:0b:7f:b7:77:78: 9d:fa:1f:b1:b5:4e:19:b4:d1:e6:d8:4a:94:92:b6: ba:af:f8:9f:be:d4:f5:c4:49:38:f2:78:aa:50:b5: be:a6:b4:87:29:d9:e7:85:46:bc:31:27:95:ca:f6: ed:66:fd:8b:ad:b8:d4:c3:51:c2:94:22:59:c8:57: 29:a2:5b:5a:6c:62:00:b9:39:8f:dc:d4:2b:1c:15: 7a:59:c9:2f:9b:04:76:e4:82:2c:f9:22:f6:3c:0a: 5b:11:e4:a0:2a:d7:b4:20:c0:5d:32:68:73:24:3a: 5e:cc:60:ef:dd:1e:26:84:8d:ec:24:9d:62:b8:c9: a6:c2:58:14:c1:c9:8e:dd:fe:3e:7b:0c:14:9e:c0: f9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A3:9D:41:C9:A7:3A:9A:EB:AE:00:04:2B:FE:7E:47:5D:94:E1:B1 X509v3 Authority Key Identifier: keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4f:d3:04:7b:12:4a:bc:c0:a4:82:f7:fa:1a:6f:4f:6e:c7: 9c:45:03:82:3d:46:71:6b:a5:57:81:21:f0:7e:26:e6:e9:5e: 54:1e:e3:7d:6d:7b:32:77:bf:c7:98:4a:91:93:1c:5e:10:97: e6:8d:7e:ba:6d:fe:1a:a5:26:78:75:5e:78:5a:e5:e7:b1:d0: 51:23:30:a6:e9:f6:46:2c:18:21:7b:ce:53:78:59:7f:21:7b: b3:8d:21:a7:c9:b1:66:3e:3f:6a:c7:a5:fc:87:dd:25:f9:88: 88:35:86:85:d0:19:85:af:fa:51:9c:3f:4a:8b:a4:b6:b4:41: 54:8e:7d:e5:09:13:ff:86:83:d4:86:bf:b3:b5:ac:4c:82:34: 3b:9a:a3:87:4b:96:56:f9:85:cf:d7:c1:b9:df:8e:e5:c3:99: c4:14:87:88:31:ce:20:bb:90:e1:3f:92:ad:18:81:01:50:ca: e5:85:cf:d7:06:86:70:eb:c7:5e:75:84:52:07:c1:69:c7:e8: ec:8a:a6:1f:ec:6e:f8:fb:00:40:89:33:fc:4c:95:77:75:64: 56:34:a0:5e:33:3f:1c:79:30:67:8e:3d:27:d2:56:0b:36:c1: 01:19:b5:bc:c1:25:34:54:7d:92:82:4a:47:7b:2b:bf:6b:0b: 4b:80:1a:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUSiszqiqLXDbOlyeYUQRQzbTajgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAy QTA5NjYyMDAeFw0yNDExMjQyMTM3MzBaFw0yNDExMjgwOTIzMzBaMDMxMTAvBgNV BAMTKDY2QTM5RDQxQzlBNzNBOUFFQkFFMDAwNDJCRkU3RTQ3NUQ5NEUxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZbGDXCeugKB4S8go3rCWGECI 9WWWfX9TIUdE/Ntr5z9AYtljz11PtAmvTeONlukPxGoGnN1FZ4Eva2xLtyn+M/tw ukvrOJp5gQIYvXL4IdgHWeGhkaS1RuOEQFAJhuxeVAeApVa9IEtrR9fJbvrgWDgL f7d3eJ36H7G1Thm00ebYSpSStrqv+J++1PXESTjyeKpQtb6mtIcp2eeFRrwxJ5XK 9u1m/YutuNTDUcKUIlnIVymiW1psYgC5OY/c1CscFXpZyS+bBHbkgiz5IvY8ClsR 5KAq17QgwF0yaHMkOl7MYO/dHiaEjewknWK4yabCWBTByY7d/j57DBSewPn9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZqOdQcmnOprrrgAEK/5+R12U4bEwHwYDVR0j BBgwFoAUQav3ktFBIqqmfkK9Quu44CoJZiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTQ1ZWJhYi1lYzE2LTQ1ODktYTlhNi04YTM2NjFkNDNlM2UvMC80MUFCRjc5MkQx NDEyMkFBQTY3RTQyQkQ0MkVCQjhFMDJBMDk2NjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAyQTA5 NjYyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0NWViYWItZWMxNi00NTg5LWE5 YTYtOGEzNjYxZDQzZTNlLzAvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4 RTAyQTA5NjYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNP0wR7Ekq8wKSC9/oab09ux5xFA4I9RnFr pVeBIfB+JubpXlQe431tezJ3v8eYSpGTHF4Ql+aNfrpt/hqlJnh1Xnha5eex0FEj MKbp9kYsGCF7zlN4WX8he7ONIafJsWY+P2rHpfyH3SX5iIg1hoXQGYWv+lGcP0qL pLa0QVSOfeUJE/+Gg9SGv7O1rEyCNDuao4dLllb5hc/XwbnfjuXDmcQUh4gxziC7 kOE/kq0YgQFQyuWFz9cGhnDrx151hFIHwWnH6OyKph/sbvj7AECJM/xMlXd1ZFY0 oF4zPxx5MGeOPSfSVgs2wQEZtbzBJTRUfZKCSkd7K79rC0uAGvs= -----END CERTIFICATE-----Generated at Sun Nov 24 23:56:43 2024 by rpki-client on console-fra.rpki-client.org