$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: Q6ZTp7HMrUTYDMSXJoNwC3DI4Rxn3AxoqZYn/NpjaMs= Subject key identifier: 1F:CB:C1:43:11:73:AC:10:BD:43:7A:70:4B:C7:3B:A2:04:89:E6:68 Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 1D0F037DD831DF70C60F6AAEE60B09FFBDA5FF3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: AA Signing time: Wed 20 Nov 2024 09:40:52 +0000 Manifest this update: Wed 20 Nov 2024 09:35:52 +0000 Manifest next update: Sat 23 Nov 2024 20:50:52 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: vlBPT/ltNJJvLZFm6JL2aPyAAtxoMYO2ASvHlcu2qQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 10:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0f:03:7d:d8:31:df:70:c6:0f:6a:ae:e6:0b:09:ff:bd:a5:ff:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Nov 20 09:35:52 2024 GMT Not After : Nov 23 20:50:52 2024 GMT Subject: CN=1FCBC1431173AC10BD437A704BC73BA20489E668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:ab:42:0b:a6:0e:4d:88:0f:41:2f:a7:2f: e5:ab:ab:22:eb:4f:04:34:46:10:6d:12:d8:ed:06: ad:e5:a9:2a:a2:ea:a1:15:3c:dd:5f:a3:43:4a:33: b1:73:34:ae:09:1f:89:fd:a1:66:10:e0:cd:a6:d4: 38:17:55:e9:ac:4c:da:28:5e:ec:ae:2c:d9:69:8a: c3:cc:9b:5a:ae:7b:26:0c:af:9b:f7:d9:d9:82:fd: ca:69:ec:8e:f6:d1:18:be:38:e2:9b:94:dc:4f:54: 41:e2:d9:ad:17:08:96:5e:8f:5e:5b:dd:a2:44:66: c4:c8:fd:61:5d:39:0f:a4:35:69:20:76:bf:c1:e8: 4b:a6:e6:61:7a:23:a0:62:c5:d3:12:b7:84:88:72: fe:bd:61:b5:22:9b:4c:55:43:4a:b4:04:b0:e8:64: f8:45:0f:c5:cf:28:c6:b5:53:8d:3f:f5:2c:4d:e8: ca:f5:dc:73:13:85:2a:7c:29:6a:9f:18:b8:2f:c5: 95:ad:2d:c6:f5:37:cc:24:e0:71:02:82:c5:83:84: fd:45:27:40:c3:ad:9b:11:4c:7b:ed:4f:e7:de:07: 3a:03:eb:09:b8:60:80:18:0f:23:b4:28:4b:be:59: c1:e6:b4:6d:39:14:22:e6:96:ce:45:4f:b6:ec:70: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CB:C1:43:11:73:AC:10:BD:43:7A:70:4B:C7:3B:A2:04:89:E6:68 X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c5:a0:53:3c:f6:7e:96:9c:69:2a:6b:f2:34:d4:20:fb:7f: e0:5a:66:b5:65:84:33:03:fb:9a:52:a0:c3:0a:1d:ae:d3:d4: e2:a1:7d:a1:0e:f4:98:8c:7a:03:c7:1e:74:63:3a:c3:a0:9c: 37:4c:be:b6:4e:fd:24:c1:d8:74:f2:14:bd:8d:28:f4:68:f9: 19:6b:4d:14:8e:96:ec:17:87:46:af:17:c1:28:f0:62:d2:ae: ba:c7:1f:e1:07:af:87:05:6e:86:54:e2:80:7f:f3:1f:0c:27: 70:3f:77:9d:05:68:f0:04:34:a1:fe:58:03:ef:03:e7:d5:8e: 07:08:9d:d1:8c:b7:dc:50:f0:17:76:37:4c:e8:99:81:96:bc: 21:40:19:d1:59:a9:aa:74:b5:fb:65:15:64:f9:98:c0:5d:a2: ea:c3:05:27:fc:86:0b:1f:15:02:94:9a:ca:2e:25:63:d4:1c: ea:94:d4:e5:e7:cd:55:24:e1:ae:ba:f3:0c:3b:85:de:c4:7d: e9:44:cd:fc:8f:18:f8:19:3c:8d:53:b1:f3:9f:bf:75:3f:22: aa:42:70:01:33:7e:c7:f4:66:13:a1:6f:bf:d1:ca:4b:36:44: 03:89:f4:8b:a4:11:79:17:f8:03:b7:30:5b:b0:65:0d:16:81: 24:77:4a:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQ8Dfdgx33DGD2qu5gsJ/72l/z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNDExMjAwOTM1NTJaFw0yNDExMjMyMDUwNTJaMDMxMTAvBgNV BAMTKDFGQ0JDMTQzMTE3M0FDMTBCRDQzN0E3MDRCQzczQkEyMDQ4OUU2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hqtCC6YOTYgPQS+nL+WrqyLr TwQ0RhBtEtjtBq3lqSqi6qEVPN1fo0NKM7FzNK4JH4n9oWYQ4M2m1DgXVemsTNoo XuyuLNlpisPMm1queyYMr5v32dmC/cpp7I720Ri+OOKblNxPVEHi2a0XCJZej15b 3aJEZsTI/WFdOQ+kNWkgdr/B6Eum5mF6I6BixdMSt4SIcv69YbUim0xVQ0q0BLDo ZPhFD8XPKMa1U40/9SxN6Mr13HMThSp8KWqfGLgvxZWtLcb1N8wk4HECgsWDhP1F J0DDrZsRTHvtT+feBzoD6wm4YIAYDyO0KEu+WcHmtG05FCLmls5FT7bscF3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH8vBQxFzrBC9Q3pwS8c7ogSJ5mgwHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTFoFM89n6WnGkqa/I01CD7f+BaZrVlhDMD +5pSoMMKHa7T1OKhfaEO9JiMegPHHnRjOsOgnDdMvrZO/STB2HTyFL2NKPRo+Rlr TRSOluwXh0avF8Eo8GLSrrrHH+EHr4cFboZU4oB/8x8MJ3A/d50FaPAENKH+WAPv A+fVjgcIndGMt9xQ8Bd2N0zomYGWvCFAGdFZqap0tftlFWT5mMBdourDBSf8hgsf FQKUmsouJWPUHOqU1OXnzVUk4a668ww7hd7EfelEzfyPGPgZPI1TsfOfv3U/IqpC cAEzfsf0ZhOhb7/Ryks2RAOJ9IukEXkX+AO3MFuwZQ0WgSR3Slg= -----END CERTIFICATE-----Generated at Wed Nov 20 10:24:14 2024 by rpki-client on console-fra.rpki-client.org