$ rpki-client -vvf repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft File: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft (raw, json) Hash identifier: 84nS/Lg3jXuKvOHM8g/gVamdaJ7W0azkBtwzsweUxlw= Subject key identifier: E7:FA:CC:D6:C3:53:4A:37:8E:5A:EC:38:BD:41:16:3C:36:A8:1E:A1 Authority key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 Certificate issuer: /CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Certificate serial: 31884DEDF2AF907807C55424C0D296ECDA400790 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft Manifest number: 22 Signing time: Fri 22 Nov 2024 05:50:00 +0000 Manifest this update: Fri 22 Nov 2024 05:45:00 +0000 Manifest next update: Mon 25 Nov 2024 08:30:00 +0000 Files and hashes: 1: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl (hash: 9d7dWGOrNYsOG6RtJV7trfAjv6Bg9dV58GpqKaDsIBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:88:4d:ed:f2:af:90:78:07:c5:54:24:c0:d2:96:ec:da:40:07:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Validity Not Before: Nov 22 05:45:00 2024 GMT Not After : Nov 25 08:30:00 2024 GMT Subject: CN=E7FACCD6C3534A378E5AEC38BD41163C36A81EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0a:c2:ff:eb:26:11:bc:7c:02:a1:76:28:3a: df:e7:da:af:76:37:ec:ff:df:50:3d:18:e2:b9:47: c8:ed:35:7e:e2:d7:c0:5f:6f:55:3f:25:5d:c4:2a: f0:ea:aa:5b:a2:3b:67:ef:ce:3c:04:c3:e2:8a:77: e4:6f:42:4c:9f:75:c4:99:78:54:04:98:65:a5:8d: 0c:a6:47:ae:6d:65:07:d8:c5:74:2a:57:74:86:9d: 08:2e:96:1c:11:7c:1d:84:59:87:60:95:2c:29:a4: 3a:b4:a1:5c:a8:e6:ec:49:47:21:9f:0e:e8:4f:1f: d6:70:52:ed:78:37:60:24:54:c2:25:17:23:77:34: 27:59:40:27:af:e9:9f:26:8a:3d:da:88:5d:1a:a1: fd:3e:0e:a0:0f:65:4d:88:be:35:de:2a:a4:d7:ea: 12:01:3b:6d:23:a9:2e:c8:5c:a8:6c:8a:4a:f8:9e: 77:8e:c6:a9:3d:62:bf:09:96:34:6a:e7:a4:f4:c1: 06:19:91:6a:e1:a5:3e:a9:09:bf:3b:d3:80:5a:99: 19:71:74:51:a3:0c:a7:f0:a8:c2:67:0d:2e:c9:10: f2:dd:97:e1:68:ce:6f:bd:8c:0f:09:8b:9f:2d:95: 60:b3:0d:e7:68:67:16:db:f5:9b:d2:99:69:05:09: 3e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FA:CC:D6:C3:53:4A:37:8E:5A:EC:38:BD:41:16:3C:36:A8:1E:A1 X509v3 Authority Key Identifier: keyid:20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e6:6f:76:87:fd:8b:49:ce:f2:d6:3b:11:96:4a:a3:22:93: ec:13:05:e6:ed:0f:d1:5c:db:9f:1e:5d:2a:e3:8d:c3:97:b7: e3:9c:d9:bf:52:d6:01:3b:37:70:13:83:d3:2b:0c:6c:db:a2: 1d:58:81:37:46:e3:5b:a1:ec:1e:e6:67:fa:b8:b3:49:37:95: 63:22:08:99:ba:9c:3b:70:45:ee:06:02:44:f0:d4:d9:29:6a: 40:e4:c7:bb:a9:ca:9c:db:a1:66:64:e8:cf:d4:f4:5e:f1:49: b7:8c:a5:76:3e:01:eb:00:0a:04:ef:e0:2a:d7:06:c5:82:ad: 62:83:2c:fe:14:c7:b8:59:3b:7e:6a:45:4d:6f:c8:25:4a:be: bf:3a:a5:c3:eb:2c:43:ad:5b:12:3c:d8:1b:c9:68:c0:ac:b9: 5c:9c:3d:e1:99:ab:b0:d4:34:d2:e9:46:72:09:f2:56:26:0d: 93:2b:ca:42:e2:1f:ef:3d:71:af:7e:c8:aa:7d:fb:1f:c5:f5: 22:0b:97:c8:0e:d7:ef:e8:1f:22:18:7d:7a:a5:84:c1:14:37: e0:64:f1:02:73:43:1d:a3:91:c2:b1:be:a1:a3:91:72:b6:78: 42:63:35:51:c6:fd:2d:4c:c0:79:f5:4c:18:02:1a:20:b8:d4: 0c:23:3e:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMYhN7fKvkHgHxVQkwNKW7NpAB5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1 RDdGMThENTAeFw0yNDExMjIwNTQ1MDBaFw0yNDExMjUwODMwMDBaMDMxMTAvBgNV BAMTKEU3RkFDQ0Q2QzM1MzRBMzc4RTVBRUMzOEJENDExNjNDMzZBODFFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaCsL/6yYRvHwCoXYoOt/n2q92 N+z/31A9GOK5R8jtNX7i18Bfb1U/JV3EKvDqqluiO2fvzjwEw+KKd+RvQkyfdcSZ eFQEmGWljQymR65tZQfYxXQqV3SGnQgulhwRfB2EWYdglSwppDq0oVyo5uxJRyGf DuhPH9ZwUu14N2AkVMIlFyN3NCdZQCev6Z8mij3aiF0aof0+DqAPZU2IvjXeKqTX 6hIBO20jqS7IXKhsikr4nneOxqk9Yr8JljRq56T0wQYZkWrhpT6pCb8704BamRlx dFGjDKfwqMJnDS7JEPLdl+Fozm+9jA8Ji58tlWCzDedoZxbb9ZvSmWkFCT6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/rM1sNTSjeOWuw4vUEWPDaoHqEwHwYDVR0j BBgwFoAUIKSizqAJiECvahxb89hOQV1/GNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMC8yMEE0QTJDRUEw MDk4ODQwQUY2QTFDNUJGM0Q4NEU0MTVEN0YxOEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1RDdG MThENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRF NDE1RDdGMThENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjmb3aH/YtJzvLWOxGWSqMik+wTBebtD9Fc 258eXSrjjcOXt+Oc2b9S1gE7N3ATg9MrDGzboh1YgTdG41uh7B7mZ/q4s0k3lWMi CJm6nDtwRe4GAkTw1NkpakDkx7upypzboWZk6M/U9F7xSbeMpXY+AesACgTv4CrX BsWCrWKDLP4Ux7hZO35qRU1vyCVKvr86pcPrLEOtWxI82BvJaMCsuVycPeGZq7DU NNLpRnIJ8lYmDZMrykLiH+89ca9+yKp9+x/F9SILl8gO1+/oHyIYfXqlhMEUN+Bk 8QJzQx2jkcKxvqGjkXK2eEJjNVHG/S1MwHn1TBgCGiC41AwjPms= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org