$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: IszbpbCU9HULwWJC6GLbj2jMnprRgK3JzpUHy08PGkE= Subject key identifier: 55:59:C1:64:15:85:81:61:98:0B:CD:A6:44:C7:4B:FA:C2:73:2F:DB Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: 4D73B33A0F52B4C33571FDFC2E9C4B8329E06D0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 03E3 Signing time: Mon 25 Nov 2024 08:00:03 +0000 Manifest this update: Mon 25 Nov 2024 07:55:03 +0000 Manifest next update: Thu 28 Nov 2024 10:20:03 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: Fr1TsKPpkzb+X/r/2lj9MamGrCTOZXio0f7fGcKJG+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 10:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:73:b3:3a:0f:52:b4:c3:35:71:fd:fc:2e:9c:4b:83:29:e0:6d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: Nov 25 07:55:03 2024 GMT Not After : Nov 28 10:20:03 2024 GMT Subject: CN=5559C16415858161980BCDA644C74BFAC2732FDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0e:0d:b5:1d:26:41:ab:ee:91:bc:78:38:ba: 82:44:4f:ee:76:ba:45:64:66:f4:4b:9e:9e:bb:51: db:75:7d:d1:18:b1:2d:df:a1:15:28:72:6f:9a:d1: b6:a8:40:5c:5e:27:eb:a7:74:9c:fc:6c:ee:c1:0d: df:cb:69:2c:41:46:55:b1:d1:51:9d:3a:0a:e2:f3: 97:2b:84:78:5a:ec:12:e6:82:ff:6a:da:53:49:16: 0e:eb:59:ce:34:22:dd:c8:70:f0:6e:65:d7:c5:74: e6:23:d5:72:90:5e:2c:75:86:32:2b:8c:4a:b7:2d: 12:79:c8:ee:3e:2b:83:ca:7a:34:8d:83:93:b7:19: 7a:70:a2:43:fd:e7:b1:7a:5d:2d:7c:3c:b1:f8:2b: 51:db:bc:53:7b:12:49:8d:7e:3a:8f:b8:0b:a5:2f: fa:81:74:d8:30:be:84:77:be:63:7f:1a:d4:46:da: cb:84:72:af:0c:01:3c:9c:2d:fc:05:df:00:97:3c: 53:49:0c:3b:94:55:ff:0c:02:77:0f:04:5a:a4:f4: 52:47:cb:f8:d7:d4:85:04:ab:27:09:6d:8d:9d:43: 6f:27:a5:f8:ee:c2:56:58:22:30:d6:ff:2c:c2:f6: f7:87:9d:04:d4:e5:4c:98:de:f0:c2:42:af:5a:1a: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:59:C1:64:15:85:81:61:98:0B:CD:A6:44:C7:4B:FA:C2:73:2F:DB X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:61:c8:7c:b9:87:ad:bf:96:48:05:46:12:f7:a1:ea:61:1b: ef:ae:12:c5:66:72:4a:00:03:34:3d:79:8d:6b:e1:7a:47:98: 1d:6c:7d:a0:66:22:40:4e:a1:45:bf:2f:3c:74:95:23:36:e6: 8a:a4:78:86:d6:14:ff:7e:a0:df:65:57:9a:1c:42:a8:e0:40: 8a:bf:1b:59:4c:98:b4:a1:b4:d8:73:33:ab:90:c3:3c:b2:08: 95:ee:6d:db:7d:1b:49:1d:22:30:87:56:2a:ff:f4:72:8b:2a: e7:b4:da:7e:dc:cd:49:7f:b5:74:f8:46:f6:c0:1c:65:a5:5a: 02:d3:3d:28:f7:7d:a9:a3:ea:12:82:07:3b:80:c2:69:de:d8: af:95:67:1c:f6:30:d9:e4:c3:a1:16:14:f6:94:c6:09:1a:37: 57:2c:2a:39:28:bc:e9:35:f8:36:5f:93:ca:b0:0b:a3:e8:b8: 1d:d7:67:44:4e:26:4d:80:3f:67:08:41:d7:44:31:c8:3d:12: af:e5:a6:ab:4e:97:57:fc:c1:f0:26:b0:13:67:7d:10:c2:05: 63:dd:ef:8a:fa:dc:5d:9c:1a:91:c1:4f:c3:fb:7b:f4:2b:66: db:98:e8:1b:9e:55:95:36:55:b0:6d:0d:a6:eb:ec:28:1c:a4: 6a:ba:cf:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTXOzOg9StMM1cf38LpxLgyngbQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNDExMjUwNzU1MDNaFw0yNDExMjgxMDIwMDNaMDMxMTAvBgNV BAMTKDU1NTlDMTY0MTU4NTgxNjE5ODBCQ0RBNjQ0Qzc0QkZBQzI3MzJGREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiDg21HSZBq+6RvHg4uoJET+52 ukVkZvRLnp67Udt1fdEYsS3foRUocm+a0baoQFxeJ+undJz8bO7BDd/LaSxBRlWx 0VGdOgri85crhHha7BLmgv9q2lNJFg7rWc40It3IcPBuZdfFdOYj1XKQXix1hjIr jEq3LRJ5yO4+K4PKejSNg5O3GXpwokP957F6XS18PLH4K1HbvFN7EkmNfjqPuAul L/qBdNgwvoR3vmN/GtRG2suEcq8MATycLfwF3wCXPFNJDDuUVf8MAncPBFqk9FJH y/jX1IUEqycJbY2dQ28npfjuwlZYIjDW/yzC9veHnQTU5UyY3vDCQq9aGkJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVVnBZBWFgWGYC82mRMdL+sJzL9swHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5hyHy5h62/lkgFRhL3oephG++uEsVmckoA AzQ9eY1r4XpHmB1sfaBmIkBOoUW/Lzx0lSM25oqkeIbWFP9+oN9lV5ocQqjgQIq/ G1lMmLShtNhzM6uQwzyyCJXubdt9G0kdIjCHVir/9HKLKue02n7czUl/tXT4RvbA HGWlWgLTPSj3famj6hKCBzuAwmne2K+VZxz2MNnkw6EWFPaUxgkaN1csKjkovOk1 +DZfk8qwC6PouB3XZ0ROJk2AP2cIQddEMcg9Eq/lpqtOl1f8wfAmsBNnfRDCBWPd 74r63F2cGpHBT8P7e/QrZtuY6BueVZU2VbBtDabr7CgcpGq6z8A= -----END CERTIFICATE-----Generated at Mon Nov 25 09:01:50 2024 by rpki-client on console-ams.rpki-client.org