$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: uR4C3k1cVKxXjXxX3Ll5BjCWiP5jRJsoY02DHr+loyM= Subject key identifier: 65:58:B9:82:84:9B:8F:B5:5D:34:89:43:8A:23:F9:28:B8:05:8C:BB Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 2A486DE1B9F0B41B17FD90E9C48D51633A3F5168 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 02B4 Signing time: Thu 21 Nov 2024 19:12:04 +0000 Manifest this update: Thu 21 Nov 2024 19:07:04 +0000 Manifest next update: Mon 25 Nov 2024 05:20:04 +0000 Files and hashes: 1: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: SkqtP9Io0G9hUW/qhUdIHoj9c+c0K4/Y9iK3dxjatYw=) 2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: xmfvEBw1P8sSqglSjh5fK7KpklmguFj/KUnvIPf2TYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:48:6d:e1:b9:f0:b4:1b:17:fd:90:e9:c4:8d:51:63:3a:3f:51:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Nov 21 19:07:04 2024 GMT Not After : Nov 25 05:20:04 2024 GMT Subject: CN=6558B982849B8FB55D3489438A23F928B8058CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:75:75:b2:fb:42:85:ec:7d:fb:b5:46:7d: e4:82:c7:4e:de:0c:6e:72:f0:c9:52:7b:23:92:2d: 72:03:4c:9b:c2:a1:00:71:53:4d:dd:dc:7c:19:e0: c1:f4:a6:91:5a:38:dd:f5:12:d0:77:34:e0:fd:85: 0b:b8:9a:3c:6e:c9:19:bd:68:42:0b:e5:7e:e0:c4: 27:29:87:bf:0f:1b:cf:4d:46:ab:4f:6f:b6:2a:eb: 19:87:5d:95:cf:e3:ca:23:7d:1d:c0:73:a2:9f:95: dc:5c:92:77:15:7d:18:30:94:14:15:23:f7:cd:51: 60:a5:b5:6f:6b:ba:53:2f:10:06:c2:57:0e:6d:a5: dc:2e:7b:e5:73:c8:5d:09:33:dd:46:8b:a7:72:e6: 37:a7:52:f1:75:bd:e1:5c:12:cb:95:2a:e2:93:9b: 77:62:3f:17:6e:56:b6:6c:04:62:5c:e7:e2:8b:4f: 8e:01:6a:f5:48:99:44:f6:4e:ab:c9:50:05:c0:4d: 9d:ba:86:6b:96:fa:8a:a5:3f:8a:e4:66:c3:35:af: f8:c7:a0:17:c4:c1:c2:70:d5:e1:f2:e2:f3:d2:d9: 46:47:22:01:75:db:03:2a:25:86:2c:0f:d0:d2:05: bd:49:c7:ca:6e:ae:f1:1f:11:b1:81:e0:11:c0:95: 9d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:58:B9:82:84:9B:8F:B5:5D:34:89:43:8A:23:F9:28:B8:05:8C:BB X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:eb:42:aa:f9:a7:46:64:30:89:56:39:89:1e:2d:09:43:a2: 85:fb:09:c2:b3:d2:95:97:89:99:27:14:cd:e3:8d:66:83:36: 2c:47:aa:a0:ab:e3:9e:3b:be:f2:d8:d2:89:5c:52:48:2d:9b: bf:d1:92:3c:f9:49:93:8b:b9:1a:9c:35:63:64:27:d8:71:36: 47:81:d9:6b:0c:db:8a:d9:74:15:65:b7:26:6a:bb:2b:73:3e: a3:90:a3:8e:89:09:39:ec:f6:1c:f3:15:20:91:9d:aa:70:d6: a0:4e:a2:97:ec:24:28:31:78:b2:5d:5d:d2:6e:de:d2:a7:1a: a0:8d:53:d8:dc:51:d5:44:54:a7:c7:d7:b5:c7:de:d5:e8:39: 22:b7:f1:78:f6:83:31:ce:d8:5c:7c:62:c2:91:1c:74:73:b0: 7d:db:48:05:00:51:2d:f0:b8:b1:12:e6:70:4a:f9:6e:86:b4: 86:f3:31:49:f6:77:22:0d:f7:78:42:a1:4b:90:32:47:88:c9: f7:76:c9:2f:a6:c6:6d:13:28:02:5f:e7:ce:e0:1c:06:07:04: b7:4f:86:86:39:04:13:e7:68:2c:0d:44:9d:69:cf:b6:12:8b: 58:40:36:2e:c4:b4:d6:c9:d0:24:22:fa:d0:0f:2c:27:0d:80: 40:a8:32:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkht4bnwtBsX/ZDpxI1RYzo/UWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNDExMjExOTA3MDRaFw0yNDExMjUwNTIwMDRaMDMxMTAvBgNV BAMTKDY1NThCOTgyODQ5QjhGQjU1RDM0ODk0MzhBMjNGOTI4QjgwNThDQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRanV1svtChex9+7VGfeSCx07e DG5y8MlSeyOSLXIDTJvCoQBxU03d3HwZ4MH0ppFaON31EtB3NOD9hQu4mjxuyRm9 aEIL5X7gxCcph78PG89NRqtPb7Yq6xmHXZXP48ojfR3Ac6KfldxckncVfRgwlBQV I/fNUWCltW9rulMvEAbCVw5tpdwue+VzyF0JM91Gi6dy5jenUvF1veFcEsuVKuKT m3diPxduVrZsBGJc5+KLT44BavVImUT2TqvJUAXATZ26hmuW+oqlP4rkZsM1r/jH oBfEwcJw1eHy4vPS2UZHIgF12wMqJYYsD9DSBb1Jx8purvEfEbGB4BHAlZ2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZVi5goSbj7VdNIlDiiP5KLgFjLswHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPrQqr5p0ZkMIlWOYkeLQlDooX7CcKz0pWX iZknFM3jjWaDNixHqqCr4547vvLY0olcUkgtm7/Rkjz5SZOLuRqcNWNkJ9hxNkeB 2WsM24rZdBVltyZquytzPqOQo46JCTns9hzzFSCRnapw1qBOopfsJCgxeLJdXdJu 3tKnGqCNU9jcUdVEVKfH17XH3tXoOSK38Xj2gzHO2Fx8YsKRHHRzsH3bSAUAUS3w uLES5nBK+W6GtIbzMUn2dyIN93hCoUuQMkeIyfd2yS+mxm0TKAJf587gHAYHBLdP hoY5BBPnaCwNRJ1pz7YSi1hANi7EtNbJ0CQi+tAPLCcNgECoMjY= -----END CERTIFICATE-----Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org