$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: 0RqdZPTv2boksWm9iPkGq56KbmW+sx8KolzapZwT+5k= Subject key identifier: 49:5A:0C:1A:A0:68:D0:30:A3:A7:C9:F9:1B:8E:84:E1:99:15:3D:E3 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 3AE6EB8754E8F6D2A07931D764C8CDBE51898741 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: 4E Signing time: Sun 24 Nov 2024 12:01:28 +0000 Manifest this update: Sun 24 Nov 2024 11:56:28 +0000 Manifest next update: Wed 27 Nov 2024 23:04:28 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: KQ2UHKe1vKiTt7QSC9mWGYjcpDkqGlQpm2Db6kswVMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e6:eb:87:54:e8:f6:d2:a0:79:31:d7:64:c8:cd:be:51:89:87:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Nov 24 11:56:28 2024 GMT Not After : Nov 27 23:04:28 2024 GMT Subject: CN=495A0C1AA068D030A3A7C9F91B8E84E199153DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:30:a6:b2:96:e3:39:75:77:16:6c:97:ef: 5d:fd:8b:d3:77:04:e1:a8:01:38:9f:e1:00:b7:43: 73:aa:5b:bd:d0:5a:9b:ae:2b:47:74:f8:df:50:48: 20:2e:d2:35:a4:22:c5:e9:ae:14:30:d5:c9:84:fe: 2b:0d:ee:28:b1:d9:61:db:fb:a8:72:7d:e0:c2:67: c4:bb:2e:b4:ee:62:fa:be:42:e3:b7:49:be:a5:d0: 69:d9:7a:2d:65:3c:b0:ba:bf:41:b6:8a:15:6f:2b: b9:c4:69:21:74:a6:c1:4c:8d:2b:5f:dd:a8:c4:e7: 14:8a:05:fa:b7:22:25:c5:44:1b:e0:bc:52:9c:bb: 52:8e:ad:73:74:b4:19:33:62:e7:ef:ce:46:48:70: 67:bb:c7:72:b7:8d:3b:cb:4f:82:43:d8:32:70:70: 7e:7c:e6:cb:47:21:86:3b:fe:a8:23:bf:ca:8b:07: b6:7c:0c:6b:6d:81:e1:59:74:db:63:07:f2:d3:38: aa:24:05:ee:b7:a7:1f:28:24:de:56:f1:d9:59:bc: ab:c1:cb:b8:54:5c:51:fe:38:72:63:43:fe:cd:23: 96:cb:43:17:e3:34:a0:12:a5:04:a2:96:94:03:ef: be:e8:02:69:f3:96:0b:a4:66:c6:12:7a:a2:07:48: 6d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5A:0C:1A:A0:68:D0:30:A3:A7:C9:F9:1B:8E:84:E1:99:15:3D:E3 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:d2:ae:0b:a6:1e:9a:a6:e8:83:93:db:a2:31:fa:65:eb:77: 1b:4f:a0:0f:84:ca:b3:5e:40:31:89:04:1a:7c:c6:66:f0:14: b1:3c:9a:b0:f7:ff:48:04:64:12:59:d0:af:66:95:25:0f:ea: 77:7d:f6:d5:dc:f4:96:aa:c2:e0:6c:01:a7:a1:b7:79:de:a2: bd:a4:08:eb:63:af:d9:e8:6e:ca:ae:38:6c:56:54:cf:9a:1d: d2:23:ac:38:44:75:8e:eb:3f:4b:61:ba:f9:55:d5:79:6b:fa: 30:d9:3f:a8:f5:6c:ca:b9:d6:9b:bd:a6:fc:00:b8:f7:68:97: eb:8b:7a:5e:5e:37:67:3d:3c:e3:02:2e:47:4e:34:95:12:5b: 87:4f:dc:23:b2:2c:5e:39:ef:29:7e:2d:ad:80:2f:24:7f:c9: af:64:f0:00:a3:c7:43:17:ed:bd:ff:5b:eb:ac:47:41:cc:49: 5e:93:8c:fa:b9:00:c4:8f:c7:0c:bc:24:fb:91:ff:71:76:8e: a7:14:9b:3a:cd:a2:80:2d:90:15:f9:67:35:d8:21:6f:92:5d: 31:89:6a:96:0f:49:fe:ec:1e:8c:7f:d2:d0:c2:58:72:25:22: 99:d6:00:53:91:1b:67:45:07:41:ed:37:af:ef:d8:c0:39:bc: b0:d8:2b:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOubrh1To9tKgeTHXZMjNvlGJh0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNDExMjQxMTU2MjhaFw0yNDExMjcyMzA0MjhaMDMxMTAvBgNV BAMTKDQ5NUEwQzFBQTA2OEQwMzBBM0E3QzlGOTFCOEU4NEUxOTkxNTNERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUEDCmspbjOXV3FmyX7139i9N3 BOGoATif4QC3Q3OqW73QWpuuK0d0+N9QSCAu0jWkIsXprhQw1cmE/isN7iix2WHb +6hyfeDCZ8S7LrTuYvq+QuO3Sb6l0GnZei1lPLC6v0G2ihVvK7nEaSF0psFMjStf 3ajE5xSKBfq3IiXFRBvgvFKcu1KOrXN0tBkzYufvzkZIcGe7x3K3jTvLT4JD2DJw cH585stHIYY7/qgjv8qLB7Z8DGttgeFZdNtjB/LTOKokBe63px8oJN5W8dlZvKvB y7hUXFH+OHJjQ/7NI5bLQxfjNKASpQSilpQD777oAmnzlgukZsYSeqIHSG2BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSVoMGqBo0DCjp8n5G46E4ZkVPeMwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMTSrgumHpqm6IOT26Ix+mXrdxtPoA+EyrNe QDGJBBp8xmbwFLE8mrD3/0gEZBJZ0K9mlSUP6nd99tXc9JaqwuBsAaeht3neor2k COtjr9nobsquOGxWVM+aHdIjrDhEdY7rP0thuvlV1Xlr+jDZP6j1bMq51pu9pvwA uPdol+uLel5eN2c9POMCLkdONJUSW4dP3COyLF457yl+La2ALyR/ya9k8ACjx0MX 7b3/W+usR0HMSV6TjPq5AMSPxwy8JPuR/3F2jqcUmzrNooAtkBX5ZzXYIW+SXTGJ apYPSf7sHox/0tDCWHIlIpnWAFORG2dFB0HtN6/v2MA5vLDYK+M= -----END CERTIFICATE-----Generated at Sun Nov 24 13:13:45 2024 by rpki-client on console-fra.rpki-client.org