$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: aNFBpyWioaLLYFgzfYDa00Xrfpl9mbzeQk8yxy7uVBw= Subject key identifier: 38:BC:35:1F:B7:25:C0:04:7C:DE:C4:B4:92:20:81:36:64:55:8B:54 Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 0DFD68C9C69B647E489B97CEC4006D7471219868 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: 46 Signing time: Fri 22 Nov 2024 06:02:27 +0000 Manifest this update: Fri 22 Nov 2024 05:57:27 +0000 Manifest next update: Mon 25 Nov 2024 08:20:27 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: 6D0LaUErPJaHd4kashUsWqvL1nidNkBK4KCPuxp+eHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fd:68:c9:c6:9b:64:7e:48:9b:97:ce:c4:00:6d:74:71:21:98:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Nov 22 05:57:27 2024 GMT Not After : Nov 25 08:20:27 2024 GMT Subject: CN=38BC351FB725C0047CDEC4B49220813664558B54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:63:7a:9d:d1:ba:a1:cd:dc:ec:ad:72:ef: 23:5d:c2:36:7b:c2:2f:01:11:3e:e3:20:43:96:cc: 45:77:b4:88:8e:64:41:a5:a3:c6:4c:a3:4e:fe:f3: 88:a1:66:18:77:c0:ca:76:d8:e6:62:64:95:0c:3f: 2e:ac:46:db:7e:95:f0:10:8f:4f:52:49:40:c1:92: 28:26:22:68:0c:7d:7e:a8:9b:2e:f5:e3:ca:19:50: 84:33:7e:f5:25:83:16:4f:59:a9:a4:94:50:c0:92: 28:48:cc:ae:1c:15:68:9e:d3:1b:8a:b7:10:27:d6: 99:95:97:ed:11:a6:6d:c8:38:25:1b:11:92:56:f8: b5:83:3f:e9:0d:80:a8:7b:eb:0d:6e:11:9f:d8:71: 60:ba:e9:be:62:ec:a3:c0:f3:d7:ac:05:f0:dd:db: 42:f9:d3:68:2a:9f:6d:c9:0c:64:b3:cb:0f:92:da: c6:ae:e7:44:98:af:40:00:a1:eb:1d:66:46:ed:10: 90:06:33:7b:1d:ff:dd:35:3f:02:3c:04:e4:ab:62: 32:84:43:48:39:d4:a9:c3:05:f2:b2:a5:3a:79:0a: d3:30:24:78:e4:9d:4e:ec:f0:42:c6:e2:23:04:22: 27:4b:89:31:05:55:50:ce:bd:c1:2c:07:8b:0f:47: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BC:35:1F:B7:25:C0:04:7C:DE:C4:B4:92:20:81:36:64:55:8B:54 X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:bd:71:1a:e9:f1:bf:ff:aa:e0:5d:f5:3d:87:5a:f7:c4:70: 0e:e2:4b:70:b8:0a:4b:e6:18:a1:f7:c8:f8:63:86:56:57:6b: bd:9d:87:1a:14:7d:f2:8a:a0:79:a9:40:18:39:61:5f:f6:59: cf:76:86:f6:52:36:66:9a:9e:4f:9b:20:5d:ac:bb:ee:15:73: 92:22:04:d3:33:24:0d:21:c5:93:4f:42:4f:ed:54:25:7a:c6: 26:5e:fe:bb:e4:a8:f6:47:65:4e:0a:2e:f2:32:56:1e:f2:11: 36:9e:4b:6f:37:c3:be:0b:ea:4c:a6:21:22:00:07:9f:c7:0b: 45:bb:d0:ba:c9:b1:dc:b3:20:85:19:82:ce:a8:02:ae:e6:0d: af:d2:43:78:98:d4:01:56:7a:2d:10:aa:4d:99:db:81:cf:23: d9:23:b3:77:73:13:bf:c6:15:51:43:c5:a4:8f:b6:87:7a:97: be:ea:75:ff:6f:b8:94:d3:3e:60:43:4a:02:80:db:36:b4:12: b6:74:7a:ee:0b:07:d2:e4:50:6e:76:2d:83:04:f0:8d:85:b4: 79:58:48:12:27:03:22:63:7c:dd:fc:bd:36:53:da:39:f3:1b: 3d:37:7e:ff:2c:78:e2:50:89:c0:89:d0:9c:9a:5c:61:9b:a5: 33:f6:1c:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDf1oycabZH5Im5fOxABtdHEhmGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNDExMjIwNTU3MjdaFw0yNDExMjUwODIwMjdaMDMxMTAvBgNV BAMTKDM4QkMzNTFGQjcyNUMwMDQ3Q0RFQzRCNDkyMjA4MTM2NjQ1NThCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnOGN6ndG6oc3c7K1y7yNdwjZ7 wi8BET7jIEOWzEV3tIiOZEGlo8ZMo07+84ihZhh3wMp22OZiZJUMPy6sRtt+lfAQ j09SSUDBkigmImgMfX6omy7148oZUIQzfvUlgxZPWamklFDAkihIzK4cFWie0xuK txAn1pmVl+0Rpm3IOCUbEZJW+LWDP+kNgKh76w1uEZ/YcWC66b5i7KPA89esBfDd 20L502gqn23JDGSzyw+S2sau50SYr0AAoesdZkbtEJAGM3sd/901PwI8BOSrYjKE Q0g51KnDBfKypTp5CtMwJHjknU7s8ELG4iMEIidLiTEFVVDOvcEsB4sPR8YXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOLw1H7clwAR83sS0kiCBNmRVi1QwHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFi9cRrp8b//quBd9T2HWvfEcA7iS3C4Ckvm GKH3yPhjhlZXa72dhxoUffKKoHmpQBg5YV/2Wc92hvZSNmaank+bIF2su+4Vc5Ii BNMzJA0hxZNPQk/tVCV6xiZe/rvkqPZHZU4KLvIyVh7yETaeS283w74L6kymISIA B5/HC0W70LrJsdyzIIUZgs6oAq7mDa/SQ3iY1AFWei0Qqk2Z24HPI9kjs3dzE7/G FVFDxaSPtod6l77qdf9vuJTTPmBDSgKA2za0ErZ0eu4LB9LkUG52LYME8I2FtHlY SBInAyJjfN38vTZT2jnzGz03fv8seOJQicCJ0JyaXGGbpTP2HIY= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org