$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft File: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json) Hash identifier: z9LideRq1EDjOZwchb+SoVQdmvbXfmagV44Td7jPiWE= Subject key identifier: 8A:96:76:70:B4:B6:B7:05:B0:7A:08:8B:00:26:D2:BB:BA:D3:1E:D2 Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 Certificate issuer: /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Certificate serial: 7F71C4DD3C6B221505280B8331538A1F18AA5D3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft Manifest number: 01D9 Signing time: Wed 20 Nov 2024 17:21:49 +0000 Manifest this update: Wed 20 Nov 2024 17:16:49 +0000 Manifest next update: Sat 23 Nov 2024 20:30:49 +0000 Files and hashes: 1: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: 2JYe6/1SBEnuUtH7BQx2tAfNAVOpCBrH/yWRE1K4xx4=) 2: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: ufTh3NuQ02tKvK6+AzJYb6zEYLra1UIfIsPq97spTJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:71:c4:dd:3c:6b:22:15:05:28:0b:83:31:53:8a:1f:18:aa:5d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Validity Not Before: Nov 20 17:16:49 2024 GMT Not After : Nov 23 20:30:49 2024 GMT Subject: CN=8A967670B4B6B705B07A088B0026D2BBBAD31ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:04:4c:bc:57:69:38:f3:be:a9:a1:e4:42:0a: bb:c6:55:03:a8:8b:c8:91:42:22:69:3c:3b:a5:a6: 30:ef:5b:3c:be:2f:33:c9:ac:4a:14:eb:f9:55:4a: 01:0a:1c:54:14:7f:f8:a6:0a:5a:b4:99:47:31:da: 1d:28:b2:4e:90:d2:fa:70:33:2b:9e:ce:c2:a8:fc: f5:85:67:15:a4:d5:32:e3:89:c2:88:7d:49:97:51: 47:36:b1:ed:bd:d5:3b:5c:b7:52:33:9f:74:93:96: f8:d7:ff:9c:7b:b1:3d:7a:4f:2f:b8:aa:66:e6:ab: 3e:ff:4a:fb:55:a5:8a:58:bc:bf:20:b4:30:74:90: 4a:6f:2c:9d:cc:24:e1:8e:94:dd:ad:a5:a0:63:62: a7:8c:e7:05:6e:2f:59:1b:79:e5:90:4b:57:83:4b: 9b:00:6b:08:ac:64:38:00:50:a4:38:a2:e0:da:54: ed:5c:53:ef:e6:07:c5:bb:7c:78:4d:69:08:4a:43: e7:7b:23:2e:f1:92:41:88:61:6e:df:5c:c0:bd:ac: bb:a4:ee:ee:2b:90:e9:c3:1a:06:2f:e1:48:e9:2d: 1d:96:f7:2a:9d:fd:97:35:90:ab:73:e4:55:5f:a5: c1:59:6a:8f:ad:59:eb:05:d5:8d:75:a9:e6:45:bb: f0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:96:76:70:B4:B6:B7:05:B0:7A:08:8B:00:26:D2:BB:BA:D3:1E:D2 X509v3 Authority Key Identifier: keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:38:79:c6:a8:fe:3a:53:90:ec:bf:56:69:34:03:b0:49:a6: 28:7e:4d:43:24:ab:56:0f:40:37:5a:82:dd:3c:24:a8:83:b4: 0a:a4:07:fe:a1:9b:87:a0:a2:e4:34:ab:0e:79:d1:76:37:6e: 4e:de:4d:b2:87:9f:ab:bb:b9:96:df:c9:92:ff:9c:67:5f:d5: 7f:eb:a1:37:bd:f7:d2:13:4c:93:ea:74:cb:8c:2f:c2:4e:05: fa:ae:6f:2f:3a:13:3c:9a:81:10:82:a2:f7:a0:fc:c2:90:41: 19:b1:22:f7:e5:c5:b0:71:96:a9:8d:2b:42:4a:e0:06:dc:ff: aa:9d:96:ef:6c:07:0f:a4:d4:62:2f:d0:3f:ec:5e:8f:27:cc: 3b:78:80:cc:08:87:ea:5b:06:aa:81:ec:13:90:fc:59:5e:12: ce:a2:66:b3:67:56:c6:e3:45:c9:bd:c3:9b:35:4c:54:3b:7d: ac:d8:1a:56:4c:a8:05:4a:66:b2:56:4a:0c:ac:5b:01:6c:17: ff:8f:03:76:f4:c5:68:66:29:be:2f:b9:84:2e:8f:37:cc:42: c3:eb:74:17:4f:ad:a0:e5:89:e9:0f:0a:bd:d0:28:be:a6:d9: c4:59:bb:50:c8:b8:b7:8d:4e:3f:51:ec:5e:af:3a:b6:66:5e: 0a:16:d4:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3HE3TxrIhUFKAuDMVOKHxiqXT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3 RUYyRDZBMTAeFw0yNDExMjAxNzE2NDlaFw0yNDExMjMyMDMwNDlaMDMxMTAvBgNV BAMTKDhBOTY3NjcwQjRCNkI3MDVCMDdBMDg4QjAwMjZEMkJCQkFEMzFFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSBEy8V2k4876poeRCCrvGVQOo i8iRQiJpPDulpjDvWzy+LzPJrEoU6/lVSgEKHFQUf/imClq0mUcx2h0osk6Q0vpw MyuezsKo/PWFZxWk1TLjicKIfUmXUUc2se291Ttct1Izn3STlvjX/5x7sT16Ty+4 qmbmqz7/SvtVpYpYvL8gtDB0kEpvLJ3MJOGOlN2tpaBjYqeM5wVuL1kbeeWQS1eD S5sAawisZDgAUKQ4ouDaVO1cU+/mB8W7fHhNaQhKQ+d7Iy7xkkGIYW7fXMC9rLuk 7u4rkOnDGgYv4UjpLR2W9yqd/Zc1kKtz5FVfpcFZao+tWesF1Y11qeZFu/CRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUipZ2cLS2twWwegiLACbSu7rTHtIwHwYDVR0j BBgwFoAU2oyEDLQdJmhYGYPCxOlk5n7y1qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDgyN2NiOC0xYjJjLTQ0YjEtODE5MC05ODVkODIwNWE0NjQvMC9EQThDODQwQ0I0 MUQyNjY4NTgxOTgzQzJDNEU5NjRFNjdFRjJENkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3RUYy RDZBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4MjdjYjgtMWIyYy00NGIxLTgx OTAtOTg1ZDgyMDVhNDY0LzAvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0 RTY3RUYyRDZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQ4ecao/jpTkOy/Vmk0A7BJpih+TUMkq1YP QDdagt08JKiDtAqkB/6hm4egouQ0qw550XY3bk7eTbKHn6u7uZbfyZL/nGdf1X/r oTe999ITTJPqdMuML8JOBfquby86EzyagRCCoveg/MKQQRmxIvflxbBxlqmNK0JK 4Abc/6qdlu9sBw+k1GIv0D/sXo8nzDt4gMwIh+pbBqqB7BOQ/FleEs6iZrNnVsbj Rcm9w5s1TFQ7fazYGlZMqAVKZrJWSgysWwFsF/+PA3b0xWhmKb4vuYQujzfMQsPr dBdPraDliekPCr3QKL6m2cRZu1DIuLeNTj9R7F6vOrZmXgoW1Mc= -----END CERTIFICATE-----Generated at Wed Nov 20 18:59:26 2024 by rpki-client on console-ams.rpki-client.org