$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: FWiCeY5+x2gFWqBrfU0fKlgcuiCO2pnw1zCVoozmEUI= Subject key identifier: D3:1F:44:2F:2A:AC:D8:9F:0F:A0:79:CB:0B:93:51:FD:7D:CD:E3:2E Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 15E56B564FE06F5A6E7E67FAA4CB531403FA9AF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 0423 Signing time: Sun 24 Nov 2024 18:22:00 +0000 Manifest this update: Sun 24 Nov 2024 18:17:00 +0000 Manifest next update: Wed 27 Nov 2024 19:37:00 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: hATAFAg8MKTwAvqc0qDoXyzNnHlMgHAQmt2TdZZrzXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e5:6b:56:4f:e0:6f:5a:6e:7e:67:fa:a4:cb:53:14:03:fa:9a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Nov 24 18:17:00 2024 GMT Not After : Nov 27 19:37:00 2024 GMT Subject: CN=D31F442F2AACD89F0FA079CB0B9351FD7DCDE32E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:8c:13:d4:1c:68:29:cd:1b:fc:76:bb:64: 23:cd:d5:7a:75:4d:b7:ae:26:cc:71:19:dc:66:dd: 33:77:d5:8f:7b:b1:b2:ec:4f:7e:aa:96:63:d5:47: 2b:d8:97:9d:dc:b2:e8:fa:54:fa:f6:78:20:ed:b8: 02:8b:c4:34:d7:c6:a8:7a:ab:1e:30:39:6b:34:dd: 15:63:7a:01:a4:c3:83:f3:cd:04:3b:9a:d8:ca:0f: 03:db:ff:d6:ec:ed:19:5d:d3:9e:f0:5d:03:48:8a: 42:ff:62:1c:5c:cd:2d:fa:86:13:a0:18:e2:27:0b: 7d:1d:57:02:83:07:2f:e4:16:46:20:ab:c6:2b:22: 3a:17:90:72:a0:de:42:87:bf:1c:57:d8:8b:f7:14: 80:d8:da:f3:ea:a3:2e:e9:04:be:97:8c:ad:3f:39: bd:db:d0:5e:66:5d:3f:53:42:d1:cc:45:6f:3f:e4: 05:37:83:70:c9:55:24:12:8d:17:75:b5:34:dc:bb: 93:ad:37:a9:f1:2c:22:d9:72:4c:a6:85:9b:88:35: 4e:ae:de:45:7b:7e:43:1f:e4:5f:9e:d1:f7:7f:3b: 56:1c:a3:cb:03:c1:10:a7:d9:0d:68:18:d0:96:4d: 69:1d:e9:b0:f6:a3:00:9a:7c:d5:c1:ca:e8:d7:aa: fb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1F:44:2F:2A:AC:D8:9F:0F:A0:79:CB:0B:93:51:FD:7D:CD:E3:2E X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:70:0a:1f:51:ed:c6:9c:04:90:67:23:c3:d9:48:e0:77:0a: df:78:38:97:0d:0c:7f:49:e5:a9:9f:1e:37:6d:d8:fc:21:f0: 28:3d:e9:d9:27:30:6b:f7:34:b1:e6:c2:1b:be:de:0b:91:d4: 03:25:16:19:2c:c3:06:13:fd:ac:2d:15:c0:8b:16:4f:b0:60: 36:c5:61:7e:19:c3:79:aa:bb:fe:2e:96:7f:30:98:63:14:1f: 31:73:30:43:d9:c2:6c:f9:51:12:f0:ad:57:d1:3d:76:eb:b6: be:af:06:2f:94:42:36:c5:81:f0:90:53:f1:f3:52:1a:87:de: 09:8e:24:22:55:26:4e:3b:96:23:69:3e:fc:76:8b:ee:53:79: 2a:db:9d:03:83:0b:4c:61:05:6a:d4:de:9f:66:5d:63:d5:05: 4e:89:14:8f:82:13:14:da:e8:f8:57:10:f7:da:00:2c:01:eb: 1b:b1:ad:06:71:32:5b:c9:3f:c9:10:4d:3b:53:21:e6:72:83: 67:da:14:da:65:fa:a2:09:e6:8d:24:96:c7:8b:e6:c8:24:c8: 1e:ad:7e:c0:94:61:0e:33:07:27:15:5e:d9:0d:82:ea:51:6a: 92:0e:2f:5b:35:a7:53:4b:19:1f:e5:65:bd:be:ab:a2:c3:2c: 21:31:c2:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFeVrVk/gb1pufmf6pMtTFAP6mvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNDExMjQxODE3MDBaFw0yNDExMjcxOTM3MDBaMDMxMTAvBgNV BAMTKEQzMUY0NDJGMkFBQ0Q4OUYwRkEwNzlDQjBCOTM1MUZEN0RDREUzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8IwT1BxoKc0b/Ha7ZCPN1Xp1 TbeuJsxxGdxm3TN31Y97sbLsT36qlmPVRyvYl53csuj6VPr2eCDtuAKLxDTXxqh6 qx4wOWs03RVjegGkw4PzzQQ7mtjKDwPb/9bs7Rld057wXQNIikL/YhxczS36hhOg GOInC30dVwKDBy/kFkYgq8YrIjoXkHKg3kKHvxxX2Iv3FIDY2vPqoy7pBL6XjK0/ Ob3b0F5mXT9TQtHMRW8/5AU3g3DJVSQSjRd1tTTcu5OtN6nxLCLZckymhZuINU6u 3kV7fkMf5F+e0fd/O1Yco8sDwRCn2Q1oGNCWTWkd6bD2owCafNXByujXqvtfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0x9ELyqs2J8PoHnLC5NR/X3N4y4wHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtwCh9R7cacBJBnI8PZSOB3Ct94OJcNDH9J 5amfHjdt2Pwh8Cg96dknMGv3NLHmwhu+3guR1AMlFhkswwYT/awtFcCLFk+wYDbF YX4Zw3mqu/4uln8wmGMUHzFzMEPZwmz5URLwrVfRPXbrtr6vBi+UQjbFgfCQU/Hz UhqH3gmOJCJVJk47liNpPvx2i+5TeSrbnQODC0xhBWrU3p9mXWPVBU6JFI+CExTa 6PhXEPfaACwB6xuxrQZxMlvJP8kQTTtTIeZyg2faFNpl+qIJ5o0klseL5sgkyB6t fsCUYQ4zBycVXtkNgupRapIOL1s1p1NLGR/lZb2+q6LDLCExwtQ= -----END CERTIFICATE-----Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org