$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: Sqya+8EDTt75JyMHKMalQYPy1Ta8DXezNG0E6VCKlpA= Subject key identifier: 42:A3:FA:D0:6B:F6:1C:78:96:2E:DB:E4:D3:1F:BA:29:13:1B:81:52 Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 01549D49968EA67F5CF2AFA825F140DD71E4DDFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: 3A Signing time: Fri 22 Nov 2024 10:40:51 +0000 Manifest this update: Fri 22 Nov 2024 10:35:51 +0000 Manifest next update: Mon 25 Nov 2024 19:34:51 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: /I8ZiwJD0UpekOBhkr1gsid2/eXX22NcUmM66ble2BA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 19:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:54:9d:49:96:8e:a6:7f:5c:f2:af:a8:25:f1:40:dd:71:e4:dd:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Nov 22 10:35:51 2024 GMT Not After : Nov 25 19:34:51 2024 GMT Subject: CN=42A3FAD06BF61C78962EDBE4D31FBA29131B8152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:c5:1c:c8:88:9d:80:72:76:51:6e:78:58: 85:4c:77:cf:90:2f:cc:50:6c:43:92:2d:1d:9b:46: ff:b4:17:4b:dd:20:07:3b:44:d9:89:ef:2e:14:dc: 99:c8:2e:52:13:65:36:b6:c4:09:a8:36:c6:cd:a8: f0:85:1a:f0:d2:73:e4:3a:0e:d6:fa:27:6a:45:a8: 7c:34:ba:38:da:f0:77:2b:24:2f:76:b3:04:f5:92: df:eb:8a:bd:98:94:86:bb:9b:c8:3b:22:65:f2:b3: e4:c6:53:ee:2c:0f:43:22:84:c8:45:12:89:12:1c: b3:de:a9:97:8a:8c:d9:c3:65:e0:36:4b:7c:33:62: a7:67:30:35:55:74:88:50:a4:0b:30:51:3d:89:7c: ff:a8:28:78:15:b9:ff:d9:a6:17:2f:c1:a4:a3:ea: d6:f7:09:72:95:af:96:93:38:01:61:72:32:f2:9a: f6:57:18:1c:a7:80:ae:14:4b:cc:c3:66:8f:32:c3: 20:15:e3:10:21:6b:63:c0:63:72:59:48:8a:1e:bb: 20:a2:39:6f:6f:67:4c:d6:a2:da:29:6a:d5:d7:3c: 87:4d:2f:4b:ff:ef:81:6b:a9:17:bc:cb:77:1a:f8: 7e:ef:2a:b7:77:3e:0a:6b:7c:43:28:80:45:dc:68: da:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A3:FA:D0:6B:F6:1C:78:96:2E:DB:E4:D3:1F:BA:29:13:1B:81:52 X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:bf:cd:f6:34:a9:d4:9e:7d:bc:9e:b8:80:7f:54:7f:c0:46: 15:c5:d3:4a:08:20:a8:61:ea:19:5e:68:3a:57:38:53:79:0f: 30:a7:85:1b:6a:49:a3:f1:46:4d:de:9b:6a:34:12:58:f4:c8: 52:86:90:7a:04:a5:dd:e2:e3:db:59:c9:93:da:c1:02:0f:10: 2f:29:da:4d:52:e4:5e:ad:2a:6e:34:29:fd:2a:16:2b:f9:c1: d5:28:3d:29:6e:28:02:43:78:22:b1:76:81:45:8f:6b:50:e6: 29:5c:63:ef:62:7a:2f:f0:55:35:c3:9b:05:06:c1:17:85:71: cd:6f:19:ee:3b:d7:56:c2:eb:4c:ca:8f:40:6c:b8:87:21:13: f8:b8:3b:fe:97:f3:c7:8e:28:dc:de:e8:37:c7:11:92:76:b0: 20:92:06:53:cc:b2:fc:25:ee:ee:e6:01:ad:b7:c7:40:d7:b6: aa:49:38:21:f0:1d:ae:6b:8f:71:29:db:de:51:de:8f:5f:76: 8a:16:8b:a8:ef:a5:02:3c:85:58:25:bb:a4:38:27:a2:3b:ad: d1:9d:5a:59:e9:0b:03:43:d1:e3:ac:ad:be:f6:2a:71:8a:db: 00:d3:ed:4a:bf:5b:0c:bd:0d:bc:2a:df:60:ba:b5:e4:66:17: 13:e1:a6:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVSdSZaOpn9c8q+oJfFA3XHk3fowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNDExMjIxMDM1NTFaFw0yNDExMjUxOTM0NTFaMDMxMTAvBgNV BAMTKDQyQTNGQUQwNkJGNjFDNzg5NjJFREJFNEQzMUZCQTI5MTMxQjgxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCowcUcyIidgHJ2UW54WIVMd8+Q L8xQbEOSLR2bRv+0F0vdIAc7RNmJ7y4U3JnILlITZTa2xAmoNsbNqPCFGvDSc+Q6 Dtb6J2pFqHw0ujja8HcrJC92swT1kt/rir2YlIa7m8g7ImXys+TGU+4sD0MihMhF EokSHLPeqZeKjNnDZeA2S3wzYqdnMDVVdIhQpAswUT2JfP+oKHgVuf/ZphcvwaSj 6tb3CXKVr5aTOAFhcjLymvZXGByngK4US8zDZo8ywyAV4xAha2PAY3JZSIoeuyCi OW9vZ0zWotopatXXPIdNL0v/74FrqRe8y3ca+H7vKrd3PgprfEMogEXcaNpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQqP60Gv2HHiWLtvk0x+6KRMbgVIwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABS/zfY0qdSefbyeuIB/VH/ARhXF00oIIKhh 6hleaDpXOFN5DzCnhRtqSaPxRk3em2o0Elj0yFKGkHoEpd3i49tZyZPawQIPEC8p 2k1S5F6tKm40Kf0qFiv5wdUoPSluKAJDeCKxdoFFj2tQ5ilcY+9iei/wVTXDmwUG wReFcc1vGe4711bC60zKj0BsuIchE/i4O/6X88eOKNze6DfHEZJ2sCCSBlPMsvwl 7u7mAa23x0DXtqpJOCHwHa5rj3Ep295R3o9fdooWi6jvpQI8hVglu6Q4J6I7rdGd WlnpCwND0eOsrb72KnGK2wDT7Uq/Wwy9Dbwq32C6teRmFxPhpjo= -----END CERTIFICATE-----Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org