$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: 0VuQgDwfYqlqoASiJBkuttmrCdJAcTonB9MUKHgz9EA= Subject key identifier: FE:8A:E2:20:C8:7A:C4:6F:A0:26:1E:8F:6E:D1:45:40:F0:0A:44:3D Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 235AB700BC9E199DDF04C183226A292E6A75C61C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 0184 Signing time: Sun 24 Nov 2024 08:22:00 +0000 Manifest this update: Sun 24 Nov 2024 08:17:00 +0000 Manifest next update: Wed 27 Nov 2024 13:10:00 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: 9NKBynpJkVGwRDb9KcWpvMBS+dnSjL7pHrhvGujiIJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5a:b7:00:bc:9e:19:9d:df:04:c1:83:22:6a:29:2e:6a:75:c6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Nov 24 08:17:00 2024 GMT Not After : Nov 27 13:10:00 2024 GMT Subject: CN=FE8AE220C87AC46FA0261E8F6ED14540F00A443D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:c3:2f:e6:59:4a:5d:b0:9d:e7:0c:cb:ff: 8f:44:dd:5a:dd:a1:2d:5b:4f:97:03:89:bc:18:a5: e8:ef:18:a5:8a:c2:6d:d7:49:ce:54:7e:4f:8b:b0: da:b4:56:54:27:ac:aa:a0:dd:5c:f3:cf:f0:68:75: b7:c0:0b:64:95:82:f8:b6:0c:86:06:98:b8:0c:ff: 31:d0:06:e2:4b:52:e2:7a:e7:8b:10:71:c2:bf:5c: 33:6e:7a:e6:34:e6:5f:56:da:95:a5:52:9b:1e:dc: 50:c9:f6:22:3d:4d:87:f8:2a:31:c3:53:24:fd:73: c5:ad:01:14:ff:60:6c:13:1d:dc:f5:96:7c:53:42: e4:d9:69:fb:5a:c8:ac:30:ef:92:64:3b:92:f2:c6: 0a:6a:a1:48:e5:36:ce:66:ff:9d:95:34:af:5a:e8: 14:0c:be:0c:f3:b5:e9:f8:35:1d:72:6a:91:23:49: 95:be:c8:ec:a4:ca:ca:51:62:38:7b:32:54:65:5f: ce:ab:90:34:b9:4c:64:f1:c7:f0:46:41:fa:ec:9b: 75:b4:14:94:67:04:2e:cd:0d:1f:74:4c:e1:ce:1e: 2e:58:0c:9a:bf:72:82:47:54:6a:5b:a7:da:07:48: 3c:70:5d:69:34:88:3b:c4:d2:05:b6:25:89:68:2e: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8A:E2:20:C8:7A:C4:6F:A0:26:1E:8F:6E:D1:45:40:F0:0A:44:3D X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9e:40:0d:af:03:ac:85:6f:11:0c:84:d6:47:c7:6b:1a:d3: 76:df:8c:a9:53:d4:89:be:83:5f:1d:d1:01:25:a8:5d:55:e4: e0:f2:af:4e:90:8a:1a:27:bf:0c:47:d9:fd:32:63:d4:ac:c6: e3:79:6b:a1:36:b4:37:f9:e2:5a:d7:51:32:5c:72:74:f4:6c: 83:aa:66:47:2a:f8:d7:62:4c:f7:ea:d4:71:62:97:34:47:44: 2a:30:bf:47:50:78:4d:3a:eb:a7:0a:b3:60:7c:39:2e:a3:c4: d3:b9:77:8a:46:8b:27:bd:1e:c3:34:2d:2e:43:7a:5b:27:d2: 37:e4:57:93:50:62:57:f5:f0:6b:30:31:b5:92:a6:d0:76:aa: 32:24:f7:52:d2:b8:cb:c9:8e:9e:e0:81:4f:df:d6:5d:aa:e3: d0:5a:63:00:4a:32:d9:c0:6a:22:91:fc:91:cc:f1:5b:39:12: 88:58:6d:26:99:02:91:b4:82:bf:f2:6e:cc:64:3c:8a:21:d5: e5:c3:0e:23:ab:d5:14:d6:7b:bb:83:72:f2:d6:ab:43:92:c9: 9e:ef:ea:fe:90:d9:b6:e9:a0:e5:4b:f0:3e:87:8e:a6:bb:e4: 8f:d8:44:91:84:c8:16:8b:3d:10:83:da:5b:4d:1c:c1:0c:c7: dd:90:c9:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1q3ALyeGZ3fBMGDImopLmp1xhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNDExMjQwODE3MDBaFw0yNDExMjcxMzEwMDBaMDMxMTAvBgNV BAMTKEZFOEFFMjIwQzg3QUM0NkZBMDI2MUU4RjZFRDE0NTQwRjAwQTQ0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyMMv5llKXbCd5wzL/49E3Vrd oS1bT5cDibwYpejvGKWKwm3XSc5Ufk+LsNq0VlQnrKqg3Vzzz/BodbfAC2SVgvi2 DIYGmLgM/zHQBuJLUuJ654sQccK/XDNueuY05l9W2pWlUpse3FDJ9iI9TYf4KjHD UyT9c8WtART/YGwTHdz1lnxTQuTZaftayKww75JkO5LyxgpqoUjlNs5m/52VNK9a 6BQMvgzzten4NR1yapEjSZW+yOykyspRYjh7MlRlX86rkDS5TGTxx/BGQfrsm3W0 FJRnBC7NDR90TOHOHi5YDJq/coJHVGpbp9oHSDxwXWk0iDvE0gW2JYloLo6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/oriIMh6xG+gJh6PbtFFQPAKRD0wHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFueQA2vA6yFbxEMhNZHx2sa03bfjKlT1Im+ g18d0QElqF1V5ODyr06QihonvwxH2f0yY9SsxuN5a6E2tDf54lrXUTJccnT0bIOq Zkcq+NdiTPfq1HFilzRHRCowv0dQeE0666cKs2B8OS6jxNO5d4pGiye9HsM0LS5D elsn0jfkV5NQYlf18GswMbWSptB2qjIk91LSuMvJjp7ggU/f1l2q49BaYwBKMtnA aiKR/JHM8Vs5EohYbSaZApG0gr/ybsxkPIoh1eXDDiOr1RTWe7uDcvLWq0OSyZ7v 6v6Q2bbpoOVL8D6Hjqa75I/YRJGEyBaLPRCD2ltNHMEMx92QyRs= -----END CERTIFICATE-----Generated at Sun Nov 24 09:08:48 2024 by rpki-client on console-fra.rpki-client.org