$ rpki-client -vvf repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft File: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft (raw, json) Hash identifier: OTLpwbilrXchCUiOi3ahd3I5n4yfA82Hu+L0rBwpDbE= Subject key identifier: 94:D2:45:23:85:AA:5B:F2:BC:FE:A6:3B:EF:F5:B6:10:63:5D:A4:1A Authority key identifier: F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 Certificate issuer: /CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Certificate serial: 2A0EC557C47DE264200136CFB13071B02364812E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft Manifest number: 0483 Signing time: Thu 21 Nov 2024 05:01:25 +0000 Manifest this update: Thu 21 Nov 2024 04:56:25 +0000 Manifest next update: Sun 24 Nov 2024 07:52:25 +0000 Files and hashes: 1: 3230322e39342e38332e302f32342d3234203d3e203535363732.roa (hash: Ixm7ifW1MV0NJkzYpRAOaXDcBc0UAsgPk2HmJSCGIc4=) 2: F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl (hash: OVrPIA66j8HhXiGxGbIkRMPhHoOYXUDUP+0biuBQqhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0e:c5:57:c4:7d:e2:64:20:01:36:cf:b1:30:71:b0:23:64:81:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2441731A38F6F03ED8BFDB14F3CF89CED26A880 Validity Not Before: Nov 21 04:56:25 2024 GMT Not After : Nov 24 07:52:25 2024 GMT Subject: CN=94D2452385AA5BF2BCFEA63BEFF5B610635DA41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:11:6c:70:40:13:c3:a9:d8:cf:25:42:63: 47:cf:16:19:43:ec:1c:36:aa:76:f5:56:be:0d:b4: 3f:97:7f:9f:07:9d:a0:b8:a6:83:61:47:4c:55:82: ef:7d:64:c9:39:fd:b2:51:db:e2:bf:43:07:77:5a: 47:02:fc:d0:42:7f:12:3c:48:85:37:b0:96:da:c4: c8:cf:8c:7c:29:8f:84:57:82:6b:26:10:35:be:e1: 5b:90:49:67:31:bc:fb:1a:07:28:53:b2:44:c2:7f: d7:7f:c7:8b:d3:98:97:8b:9c:09:a9:fe:5c:b1:c1: 89:d6:ab:d5:ae:2c:1f:db:70:e4:c2:cc:dc:9b:e3: 66:21:a8:2a:f8:19:ff:b0:00:4b:52:c6:1e:eb:c0: 22:c8:e2:ba:af:44:37:98:5a:b8:9b:36:97:51:0a: d1:8c:ec:d1:ef:04:e7:de:fb:69:1e:79:4b:17:7c: 40:aa:43:57:6f:95:ca:6f:2b:43:7d:51:5f:87:65: fb:fd:98:99:c4:d8:8a:7a:87:0f:d3:2d:5b:1a:2a: 12:b5:1f:db:a3:a4:50:0f:94:93:a0:0c:fc:b0:4e: dc:90:5c:0b:c4:65:9f:7d:e5:8c:cc:f5:e4:ae:fa: b4:d7:3e:60:26:ac:43:8c:4f:fc:37:1e:a0:cf:93: 41:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D2:45:23:85:AA:5B:F2:BC:FE:A6:3B:EF:F5:B6:10:63:5D:A4:1A X509v3 Authority Key Identifier: keyid:F2:44:17:31:A3:8F:6F:03:ED:8B:FD:B1:4F:3C:F8:9C:ED:26:A8:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8b441ad-f1aa-48d3-9edb-b9a5d5ce9ba8/0/F2441731A38F6F03ED8BFDB14F3CF89CED26A880.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b7:48:c2:ab:f8:06:da:c5:23:ba:45:1e:de:03:15:32:3d: dd:97:c9:f7:2d:b6:87:94:2e:69:35:9e:57:69:31:2d:1a:99: ed:44:75:9c:80:6d:a7:c5:cf:06:a7:9f:f5:95:aa:1d:03:e6: 1f:e2:d4:72:f2:5a:cc:fc:2e:3c:d4:1f:42:c2:44:c2:94:7d: 4f:eb:f4:aa:8b:8c:70:9c:7a:dc:20:c4:0f:d0:66:86:12:bc: c0:68:89:4e:0d:fb:80:3f:3e:fb:a9:db:e1:46:33:dc:01:58: af:25:16:3d:37:68:91:83:27:65:8f:1d:9a:e4:bc:64:bb:1d: 32:77:7a:6f:09:bb:19:9c:fa:9b:f4:b0:7b:c7:24:76:18:c1: fb:63:b4:17:e6:2a:4b:93:00:4b:b8:4a:99:b7:fe:c0:78:aa: 4b:93:8f:87:b3:6b:1b:46:57:02:7e:0a:bd:2a:06:bb:de:7b: 6e:af:2d:b7:8c:9e:31:b4:5b:cf:00:0f:db:b4:26:a3:d0:9d: f2:65:b4:12:e4:ac:61:37:f1:3c:1d:63:b6:f5:cf:5e:51:db: e3:c2:f9:11:e8:de:04:22:f1:4f:62:46:27:ba:be:14:47:96: 0e:21:89:97:83:28:2d:b3:99:1a:b7:9f:20:ae:27:8d:99:11: 57:de:4d:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKg7FV8R94mQgATbPsTBxsCNkgS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNF RDI2QTg4MDAeFw0yNDExMjEwNDU2MjVaFw0yNDExMjQwNzUyMjVaMDMxMTAvBgNV BAMTKDk0RDI0NTIzODVBQTVCRjJCQ0ZFQTYzQkVGRjVCNjEwNjM1REE0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvhFscEATw6nYzyVCY0fPFhlD 7Bw2qnb1Vr4NtD+Xf58HnaC4poNhR0xVgu99ZMk5/bJR2+K/Qwd3WkcC/NBCfxI8 SIU3sJbaxMjPjHwpj4RXgmsmEDW+4VuQSWcxvPsaByhTskTCf9d/x4vTmJeLnAmp /lyxwYnWq9WuLB/bcOTCzNyb42YhqCr4Gf+wAEtSxh7rwCLI4rqvRDeYWribNpdR CtGM7NHvBOfe+2keeUsXfECqQ1dvlcpvK0N9UV+HZfv9mJnE2Ip6hw/TLVsaKhK1 H9ujpFAPlJOgDPywTtyQXAvEZZ995YzM9eSu+rTXPmAmrEOMT/w3HqDPk0ELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlNJFI4WqW/K8/qY77/W2EGNdpBowHwYDVR0j BBgwFoAU8kQXMaOPbwPti/2xTzz4nO0mqIAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OGI0NDFhZC1mMWFhLTQ4ZDMtOWVkYi1iOWE1ZDVjZTliYTgvMC9GMjQ0MTczMUEz OEY2RjAzRUQ4QkZEQjE0RjNDRjg5Q0VEMjZBODgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4OUNFRDI2 QTg4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjhiNDQxYWQtZjFhYS00OGQzLTll ZGItYjlhNWQ1Y2U5YmE4LzAvRjI0NDE3MzFBMzhGNkYwM0VEOEJGREIxNEYzQ0Y4 OUNFRDI2QTg4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHG3SMKr+AbaxSO6RR7eAxUyPd2XyfcttoeU Lmk1nldpMS0ame1EdZyAbafFzwann/WVqh0D5h/i1HLyWsz8LjzUH0LCRMKUfU/r 9KqLjHCcetwgxA/QZoYSvMBoiU4N+4A/Pvup2+FGM9wBWK8lFj03aJGDJ2WPHZrk vGS7HTJ3em8Juxmc+pv0sHvHJHYYwftjtBfmKkuTAEu4Spm3/sB4qkuTj4ezaxtG VwJ+Cr0qBrvee26vLbeMnjG0W88AD9u0JqPQnfJltBLkrGE38TwdY7b1z15R2+PC +RHo3gQi8U9iRie6vhRHlg4hiZeDKC2zmRq3nyCuJ42ZEVfeTUQ= -----END CERTIFICATE-----Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org