$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft (raw, json) Hash identifier: LIqM3L8gMcKAaxrUPooXuLVl87sDK3mdzFCY6TwkRsU= Subject key identifier: 28:B1:49:6A:89:BE:1E:47:8A:8F:F3:E6:88:2D:A7:90:8C:10:26:6A Authority key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Certificate issuer: /CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Certificate serial: 54F615B1E6A9DAF68B18B4D42B72EE935F953343 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft Manifest number: 4D Signing time: Sat 23 Nov 2024 18:01:28 +0000 Manifest this update: Sat 23 Nov 2024 17:56:28 +0000 Manifest next update: Wed 27 Nov 2024 04:39:28 +0000 Files and hashes: 1: 3136302e31392e38382e302f32342d3234203d3e20313437303838.roa (hash: PiWVlKjUs0amBWCdvxLs5cX1/7M8WB7XrVQaBgAMMxY=) 2: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl (hash: ousEGoE49z3+WgGhKZGaWZNsWkRx6ny1ZIEdBm/PjXk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f6:15:b1:e6:a9:da:f6:8b:18:b4:d4:2b:72:ee:93:5f:95:33:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Validity Not Before: Nov 23 17:56:28 2024 GMT Not After : Nov 27 04:39:28 2024 GMT Subject: CN=28B1496A89BE1E478A8FF3E6882DA7908C10266A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:5b:cc:e4:74:d5:88:cf:c1:e7:9d:a1:50: 20:f2:03:9e:8a:e5:e9:54:6e:44:79:a6:bd:e0:70: 04:bd:fe:88:61:56:4d:b8:9f:75:8a:a8:62:05:6f: 43:5f:10:ad:97:6f:7a:1a:9a:90:a5:cb:8b:c4:42: dc:82:9d:e0:8b:be:5d:84:1e:05:6d:ce:24:47:fa: 84:c1:9d:8f:44:30:92:9f:95:01:3d:48:72:f3:38: c1:74:7b:71:7d:e4:c8:7a:4d:6e:bd:a8:20:70:d9: 44:84:f8:bf:61:44:dc:af:5d:4e:e3:40:aa:8d:df: 7c:68:b1:cd:9d:1a:e5:59:07:43:f5:8a:66:0e:a9: 7a:22:fa:79:0e:33:70:02:72:55:d4:c9:53:46:d2: d0:43:cb:a1:f3:16:25:50:48:80:3e:42:a5:7c:90: 42:0b:f6:01:d7:48:a9:71:54:97:2a:db:a0:ad:e6: 26:12:67:48:30:ea:a0:93:6f:bb:8b:de:c3:ef:23: 9c:28:f8:ef:9a:21:25:aa:10:34:8b:d9:bf:8b:de: 37:a0:28:10:23:67:42:75:9f:4a:19:05:a5:f9:4b: ac:a2:0e:e3:e9:bd:03:d2:b8:bc:cb:f5:25:c5:f9: 51:7f:13:b6:92:61:37:b2:65:3e:fa:83:d9:ba:f0: c4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B1:49:6A:89:BE:1E:47:8A:8F:F3:E6:88:2D:A7:90:8C:10:26:6A X509v3 Authority Key Identifier: keyid:95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d1:49:31:a2:15:36:46:bb:8d:c6:78:e4:5d:a4:b1:5f:e4: 28:36:88:a3:57:5b:61:ce:d4:a6:40:76:6a:09:3f:3d:9d:73: 29:e5:d4:85:aa:3a:8d:1e:0b:10:f5:20:69:d7:04:cc:c8:86: 6b:f6:e5:59:b8:af:0e:2f:da:35:f1:ea:d2:11:d5:41:68:52: 01:26:e1:82:e2:d1:45:a9:b5:84:99:a2:41:dd:de:e0:97:0a: dd:ce:f2:52:1c:28:24:a7:17:63:71:93:60:29:21:78:06:ed: b4:48:48:0d:89:c8:8a:fa:ba:b5:a9:3c:25:8c:4b:a8:3b:53: 09:1e:99:98:5e:11:b5:25:5e:98:ef:8c:dc:cf:db:99:61:0e: a9:dd:57:7e:04:82:6b:01:e0:b2:7c:f0:e5:43:f9:69:5f:37: 92:e4:64:3d:51:3b:ec:37:c1:be:e3:0b:45:b1:6d:70:fa:ba: ae:a3:ba:6d:86:17:08:d3:08:75:93:73:f4:8d:2f:84:9f:ab: 7f:9b:bb:8b:b6:f9:7b:8a:5a:b7:02:03:29:2f:c1:4c:cf:ac: 7c:ff:12:f8:28:b1:43:13:1c:e5:4b:ff:02:4c:45:27:c8:33: 51:21:c3:d4:17:2f:65:62:05:e7:f6:9c:35:96:04:0c:38:c6: 5d:63:06:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPYVseap2vaLGLTUK3Luk1+VM0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVB MzI4RDY4OTAeFw0yNDExMjMxNzU2MjhaFw0yNDExMjcwNDM5MjhaMDMxMTAvBgNV BAMTKDI4QjE0OTZBODlCRTFFNDc4QThGRjNFNjg4MkRBNzkwOEMxMDI2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5VvM5HTViM/B552hUCDyA56K 5elUbkR5pr3gcAS9/ohhVk24n3WKqGIFb0NfEK2Xb3oampCly4vEQtyCneCLvl2E HgVtziRH+oTBnY9EMJKflQE9SHLzOMF0e3F95Mh6TW69qCBw2USE+L9hRNyvXU7j QKqN33xosc2dGuVZB0P1imYOqXoi+nkOM3ACclXUyVNG0tBDy6HzFiVQSIA+QqV8 kEIL9gHXSKlxVJcq26Ct5iYSZ0gw6qCTb7uL3sPvI5wo+O+aISWqEDSL2b+L3jeg KBAjZ0J1n0oZBaX5S6yiDuPpvQPSuLzL9SXF+VF/E7aSYTeyZT76g9m68MRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKLFJaom+HkeKj/PmiC2nkIwQJmowHwYDVR0j BBgwFoAUlfrDilyyzqPl/+JJVianvqMo1okwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMC85NUZBQzM4QTVD QjJDRUEzRTVGRkUyNDk1NjI2QTdCRUEzMjhENjg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3QkVBMzI4 RDY4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzAvOTVGQUMzOEE1Q0IyQ0VBM0U1RkZFMjQ5NTYyNkE3 QkVBMzI4RDY4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrRSTGiFTZGu43GeORdpLFf5Cg2iKNXW2HO 1KZAdmoJPz2dcynl1IWqOo0eCxD1IGnXBMzIhmv25Vm4rw4v2jXx6tIR1UFoUgEm 4YLi0UWptYSZokHd3uCXCt3O8lIcKCSnF2Nxk2ApIXgG7bRISA2JyIr6urWpPCWM S6g7UwkemZheEbUlXpjvjNzP25lhDqndV34EgmsB4LJ88OVD+WlfN5LkZD1RO+w3 wb7jC0WxbXD6uq6jum2GFwjTCHWTc/SNL4Sfq3+bu4u2+XuKWrcCAykvwUzPrHz/ EvgosUMTHOVL/wJMRSfIM1Ehw9QXL2ViBef2nDWWBAw4xl1jBkA= -----END CERTIFICATE-----Generated at Sat Nov 23 18:47:51 2024 by rpki-client on console-fra.rpki-client.org