$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json) Hash identifier: NSPp3kaGpdnnO8icV3bomom3XPQspb9jO2d2TrW5o6U= Subject key identifier: F8:A8:D5:F0:AA:45:A9:28:BB:84:52:70:8B:01:92:68:31:0B:63:D7 Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Certificate serial: 379CAF3B8FF920FAF9E9802C86BCDEB3B855FA5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft Manifest number: AD Signing time: Fri 22 Nov 2024 05:12:11 +0000 Manifest this update: Fri 22 Nov 2024 05:07:11 +0000 Manifest next update: Mon 25 Nov 2024 05:37:11 +0000 Files and hashes: 1: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: VU3wVFD9SBhBoUxmCwB6Zg8vxoBOc16aeIKEaPxk76M=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: /A9HXd13I0+DkmsbISwlDHjrM6YvxlLYkQQcEaMVLGM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9c:af:3b:8f:f9:20:fa:f9:e9:80:2c:86:bc:de:b3:b8:55:fa:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Validity Not Before: Nov 22 05:07:11 2024 GMT Not After : Nov 25 05:37:11 2024 GMT Subject: CN=F8A8D5F0AA45A928BB8452708B019268310B63D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:9b:73:e9:17:93:03:cc:5e:88:8f:69:2a: e4:39:58:5b:90:fa:d7:bf:7a:bc:e2:0c:9f:c5:2a: 39:a1:10:5b:82:75:d5:b2:21:05:ad:66:b5:5f:c2: d8:0f:e6:cd:19:88:4d:1e:27:f0:04:38:12:b4:2b: ce:ec:d4:ba:9a:7f:35:55:2a:fa:cc:7f:17:83:89: 4f:53:93:13:70:15:51:d7:9b:34:c3:aa:d1:0a:81: dc:32:b2:72:cb:6c:ce:ae:1e:f8:e2:b3:a4:08:2c: 34:92:7c:bf:50:7b:24:11:b9:a2:02:87:05:c8:cb: f5:53:eb:83:84:42:93:be:f6:e8:75:ec:2c:6a:88: d9:d2:c1:23:45:85:8c:27:0e:81:51:99:7f:63:3e: dc:44:41:77:68:d5:23:82:d9:04:f4:7f:62:f2:d9: 7c:f8:d7:72:5a:3b:48:c5:3e:bd:c6:e1:be:e8:85: ad:a3:44:9e:60:e6:e1:6e:07:d6:9d:5b:24:75:b5: 54:76:2c:9f:c8:b5:67:00:d8:86:18:04:01:76:74: ea:a0:97:af:02:55:00:6c:0a:d6:7f:13:fb:56:e0: f5:c8:38:74:30:54:7e:7e:98:26:34:a6:27:fc:74: 01:e4:68:54:31:1c:ef:d5:ef:6e:ad:27:e5:10:6e: 5d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A8:D5:F0:AA:45:A9:28:BB:84:52:70:8B:01:92:68:31:0B:63:D7 X509v3 Authority Key Identifier: keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e9:a5:af:d2:4e:f9:a9:d9:bb:d0:f2:62:53:8c:ae:c3:67: c9:fb:45:12:31:2e:bf:bc:26:a3:16:f1:4d:55:c9:c3:6e:be: 50:7e:39:5a:0a:a0:bc:36:5a:80:16:7b:fd:3f:32:47:a2:9f: 13:4f:d6:3a:94:df:01:f9:80:44:51:b2:f5:0a:9b:f0:e5:15: 08:1e:ae:01:55:40:a7:54:3e:d0:ee:a1:cc:9a:97:31:81:28: 82:31:b6:14:70:fb:e9:4a:5e:34:81:65:21:3f:eb:b8:ef:c4: ce:34:44:70:5f:3a:9c:58:33:b9:09:3e:18:77:d6:a2:f8:a7: 19:91:3b:55:91:b9:fe:96:e2:10:b7:cc:bc:2e:79:8e:13:38: 29:8c:67:a4:67:bc:43:df:e7:2a:4d:ee:11:52:f5:8e:d6:b9: 5f:21:3d:8b:47:c8:3a:be:e2:3f:58:fa:49:fa:c0:65:18:64: cb:6e:fb:d9:06:3c:dc:78:48:38:6e:4d:c8:cc:36:e1:58:ec: 02:5d:6b:3c:34:98:80:2e:96:c7:1b:c7:fd:23:36:ab:7c:ab: ec:34:e3:16:0b:97:ed:68:3b:dc:dc:5c:4d:93:e7:54:68:80: 79:0a:c8:17:5f:77:1b:42:fe:9c:98:0d:ab:d2:cd:dd:67:0c: 50:e0:7e:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5yvO4/5IPr56YAshrzes7hV+lswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZE NDBGQjhDMjAeFw0yNDExMjIwNTA3MTFaFw0yNDExMjUwNTM3MTFaMDMxMTAvBgNV BAMTKEY4QThENUYwQUE0NUE5MjhCQjg0NTI3MDhCMDE5MjY4MzEwQjYzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/ptz6ReTA8xeiI9pKuQ5WFuQ +te/erziDJ/FKjmhEFuCddWyIQWtZrVfwtgP5s0ZiE0eJ/AEOBK0K87s1LqafzVV KvrMfxeDiU9TkxNwFVHXmzTDqtEKgdwysnLLbM6uHvjis6QILDSSfL9QeyQRuaIC hwXIy/VT64OEQpO+9uh17CxqiNnSwSNFhYwnDoFRmX9jPtxEQXdo1SOC2QT0f2Ly 2Xz413JaO0jFPr3G4b7oha2jRJ5g5uFuB9adWyR1tVR2LJ/ItWcA2IYYBAF2dOqg l68CVQBsCtZ/E/tW4PXIOHQwVH5+mCY0pif8dAHkaFQxHO/V726tJ+UQbl0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+KjV8KpFqSi7hFJwiwGSaDELY9cwHwYDVR0j BBgwFoAUV1w5hl064j3MwyKtCNFCT9QPuMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTFkOWFiYy00OTg3LTRkYmMtOTc2ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVE M0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZCOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZENDBG QjhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQy NEZENDBGQjhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLppa/STvmp2bvQ8mJTjK7DZ8n7RRIxLr+8 JqMW8U1VycNuvlB+OVoKoLw2WoAWe/0/MkeinxNP1jqU3wH5gERRsvUKm/DlFQge rgFVQKdUPtDuocyalzGBKIIxthRw++lKXjSBZSE/67jvxM40RHBfOpxYM7kJPhh3 1qL4pxmRO1WRuf6W4hC3zLwueY4TOCmMZ6RnvEPf5ypN7hFS9Y7WuV8hPYtHyDq+ 4j9Y+kn6wGUYZMtu+9kGPNx4SDhuTcjMNuFY7AJdazw0mIAulscbx/0jNqt8q+w0 4xYLl+1oO9zcXE2T51RogHkKyBdfdxtC/pyYDavSzd1nDFDgfqk= -----END CERTIFICATE-----Generated at Fri Nov 22 05:48:03 2024 by rpki-client on console-fra.rpki-client.org