$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: ptncqlQuPGEvmaIcTrIQqO1+bBRpfY7y6mrK2s46khY= Subject key identifier: 39:4E:22:08:9B:C4:D5:3D:C1:EE:CE:80:C5:89:A1:9A:84:C8:EE:F9 Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 656519DB3F4AB416C20D63A00F76FA210D3BCBCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: 06 Signing time: Thu 21 Nov 2024 21:21:07 +0000 Manifest this update: Thu 21 Nov 2024 21:16:07 +0000 Manifest next update: Mon 25 Nov 2024 04:42:07 +0000 Files and hashes: 1: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: xMOBtsThKXAR2QXUbKTY8/pQKp/5MaUipNuZLh9EvNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:65:19:db:3f:4a:b4:16:c2:0d:63:a0:0f:76:fa:21:0d:3b:cb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Nov 21 21:16:07 2024 GMT Not After : Nov 25 04:42:07 2024 GMT Subject: CN=394E22089BC4D53DC1EECE80C589A19A84C8EEF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:86:d1:04:4c:6c:5c:a7:9d:3e:5c:b8:42:99: c9:5f:f4:0c:6c:47:84:51:6c:5d:1f:35:57:41:f8: 8e:3c:46:4e:5a:98:cb:1e:c8:d0:5a:36:e9:9d:7b: 7d:8e:dc:ce:eb:8e:82:d7:ee:53:f0:cf:ef:79:ab: 0d:ac:4f:c8:46:6b:29:4e:24:6a:51:56:b6:e7:5e: 55:e9:07:21:04:bc:dc:d6:da:d6:d1:0f:b2:5e:42: 7c:c5:65:6b:9a:1e:40:d9:61:96:0e:49:83:b9:51: 82:2f:9f:f4:9f:34:e0:46:33:6f:bd:8f:02:ec:b7: 96:ee:19:d0:5a:bb:85:2c:63:df:39:9d:53:af:d7: fe:2c:87:9d:f0:2f:3d:db:cc:56:d4:72:ae:40:ae: 17:67:e0:bc:1f:a1:3d:0d:6a:5b:bc:66:23:f3:21: 96:f1:ab:72:62:49:55:5f:a3:9d:f7:38:1f:88:fb: 67:89:68:e6:22:0f:1a:27:b0:b9:e8:55:c4:29:4f: d0:93:f1:eb:58:67:1d:c5:c5:96:ec:31:ca:92:fa: 01:1f:2e:80:99:87:03:bb:52:74:e0:3a:90:c9:46: 4f:63:16:f7:52:aa:9b:79:4a:27:53:e5:88:c0:0f: 2c:90:98:dd:e4:d8:a6:dc:f7:3d:47:34:56:5e:99: 89:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4E:22:08:9B:C4:D5:3D:C1:EE:CE:80:C5:89:A1:9A:84:C8:EE:F9 X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b9:40:17:a4:1d:dc:77:c2:fc:a2:bc:97:7f:f3:a4:9c:17: 40:a8:1b:be:81:9b:e1:8e:01:b4:5a:54:f0:3b:ae:5f:1d:ec: a2:20:b5:3d:67:85:9c:f4:3a:44:f6:be:b7:46:65:db:af:5d: b8:33:3f:d9:8b:8c:0e:12:cb:83:03:bc:33:91:a7:f1:f3:e9: 9f:24:4d:71:45:8c:b8:3f:1f:55:da:95:02:02:a4:3c:da:fb: ac:44:35:46:9e:17:0a:ac:76:cc:d5:99:cf:2b:aa:1c:6b:15: 75:4c:09:42:fa:7f:fc:df:41:4d:4f:e5:24:2a:2c:45:d4:c5: 67:86:52:9c:ad:74:5c:27:c0:8b:14:26:0d:c4:40:38:97:fe: 56:52:91:59:54:c0:85:fb:55:83:1d:2b:46:47:4d:83:84:e7: b7:27:a0:08:7b:1f:2a:47:b7:0d:31:e0:41:17:20:74:65:18: 7c:39:ed:52:52:a9:36:11:ea:0e:ee:3c:b5:a4:3b:52:54:ad: 85:72:d8:16:e0:08:df:80:76:58:b8:07:d8:ff:cd:b8:1e:7d: e0:71:50:63:40:f7:1f:e3:74:24:37:82:a5:83:87:d0:62:63: 75:5a:0c:12:41:62:78:83:f2:e6:87:ef:bc:ce:7b:91:20:f5: f3:be:58:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWUZ2z9KtBbCDWOgD3b6IQ07y80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNDExMjEyMTE2MDdaFw0yNDExMjUwNDQyMDdaMDMxMTAvBgNV BAMTKDM5NEUyMjA4OUJDNEQ1M0RDMUVFQ0U4MEM1ODlBMTlBODRDOEVFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDshtEETGxcp50+XLhCmclf9Axs R4RRbF0fNVdB+I48Rk5amMseyNBaNumde32O3M7rjoLX7lPwz+95qw2sT8hGaylO JGpRVrbnXlXpByEEvNzW2tbRD7JeQnzFZWuaHkDZYZYOSYO5UYIvn/SfNOBGM2+9 jwLst5buGdBau4UsY985nVOv1/4sh53wLz3bzFbUcq5Arhdn4LwfoT0Nalu8ZiPz IZbxq3JiSVVfo533OB+I+2eJaOYiDxonsLnoVcQpT9CT8etYZx3FxZbsMcqS+gEf LoCZhwO7UnTgOpDJRk9jFvdSqpt5SidT5YjADyyQmN3k2Kbc9z1HNFZemYl7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOU4iCJvE1T3B7s6AxYmhmoTI7vkwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAC5QBekHdx3wvyivJd/86ScF0CoG76Bm+GO AbRaVPA7rl8d7KIgtT1nhZz0OkT2vrdGZduvXbgzP9mLjA4Sy4MDvDORp/Hz6Z8k TXFFjLg/H1XalQICpDza+6xENUaeFwqsdszVmc8rqhxrFXVMCUL6f/zfQU1P5SQq LEXUxWeGUpytdFwnwIsUJg3EQDiX/lZSkVlUwIX7VYMdK0ZHTYOE57cnoAh7HypH tw0x4EEXIHRlGHw57VJSqTYR6g7uPLWkO1JUrYVy2BbgCN+Adli4B9j/zbgefeBx UGNA9x/jdCQ3gqWDh9BiY3VaDBJBYniD8uaH77zOe5Eg9fO+WEs= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org