$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: /puubUpyLohAZ1e6pVW6NT4vDCXbjnbFfdcGmQF1ae8= Subject key identifier: 5C:63:B8:F0:71:3F:21:D7:0A:C3:0E:2C:60:D8:4F:EE:ED:A7:B4:0B Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 686B7A51A79BEE3200627A85E3BF5013473C2D95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: 16 Signing time: Mon 25 Nov 2024 09:21:28 +0000 Manifest this update: Mon 25 Nov 2024 09:16:28 +0000 Manifest next update: Thu 28 Nov 2024 20:25:28 +0000 Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: srPPl8ZsXFE4rrUcKN4jMNsfycx+jdjLyHY7j1ib8L0=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: yfEz4xxyhhlIrThNudtzDBzlif+6LokGlIAmgcn6z/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 19:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6b:7a:51:a7:9b:ee:32:00:62:7a:85:e3:bf:50:13:47:3c:2d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Nov 25 09:16:28 2024 GMT Not After : Nov 28 20:25:28 2024 GMT Subject: CN=5C63B8F0713F21D70AC30E2C60D84FEEEDA7B40B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b1:1d:3e:fc:76:0f:28:1a:85:fa:ac:1b:32: d6:5e:44:4b:e1:fa:fb:1d:24:c7:95:5f:06:cb:f8: 7f:a2:b0:81:2f:6f:40:4a:97:69:e9:44:eb:25:df: cd:cc:ff:50:51:27:b3:bd:09:9b:f8:73:0f:d0:ec: 57:1b:3e:ed:21:44:8d:80:be:fa:05:bb:00:97:36: da:c7:e2:3c:2b:02:ea:cb:be:90:63:5c:6b:18:c0: 31:13:2f:6c:1c:be:39:74:48:2a:51:7f:98:f3:37: d4:e0:78:cb:82:d7:3b:f8:b0:36:98:26:38:df:db: bb:a9:7d:70:b2:5c:71:14:4b:12:21:d6:a8:05:72: 6e:44:59:ae:20:21:13:c4:bf:74:c6:3b:b8:5c:bf: 2c:41:5b:60:51:f3:cd:bf:70:f7:29:b1:57:ce:cc: b0:3a:db:ed:da:26:e6:6a:61:a0:c8:3e:03:ed:c7: 03:98:20:5f:dd:61:0f:7c:95:6b:81:b0:ed:3b:29: 40:05:0a:fb:33:f1:99:c8:94:7c:9a:d1:18:0e:a9: 40:22:c6:f5:63:ea:69:fe:c9:9d:78:f4:a6:4c:5d: 9f:87:80:8e:af:4b:af:96:65:25:97:bb:d8:1e:24: ef:9f:7f:8a:1a:6e:61:b9:36:2c:77:df:a9:2c:38: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:63:B8:F0:71:3F:21:D7:0A:C3:0E:2C:60:D8:4F:EE:ED:A7:B4:0B X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:28:b4:11:04:9d:ce:93:55:45:b2:69:d5:3d:24:ba:76:12: 57:71:02:9f:84:69:c2:6e:3a:c0:6f:48:53:1c:3f:a7:31:bf: 63:e9:ec:a6:16:c7:33:6b:4b:3a:82:d1:4e:a0:4f:b6:90:be: 32:7e:39:e2:d6:e7:49:f2:47:9a:68:d2:5f:d0:e0:fa:0f:7c: ad:4b:7c:01:e0:c4:11:5c:24:b9:ef:19:09:aa:8f:4f:d9:e5: cd:39:ac:69:40:13:da:2e:dc:b4:4c:e2:91:4b:35:72:71:cf: f1:4d:52:9f:3f:74:56:3b:ae:b5:f0:46:c9:5b:34:d0:d2:52: 6b:ae:bc:e4:e9:cb:3f:b9:b2:d9:21:15:ab:44:66:de:f7:ca: f1:72:37:0e:4a:86:4c:15:27:a2:f1:27:fc:62:26:33:6b:95: d2:03:15:22:8f:ad:59:1b:67:50:bb:61:d8:24:7a:1b:66:25: f7:f5:53:52:52:f6:00:6f:9f:7e:a7:ac:3d:db:94:eb:8d:52: b2:df:58:42:f3:55:26:4e:d9:10:00:27:7e:1c:e5:71:ad:51: b0:41:f7:0f:f3:62:c5:e7:17:12:07:b6:a4:1d:b1:6c:46:c1: 49:30:93:95:c2:5f:32:d1:8a:b3:85:dc:24:54:ae:f5:2d:a9: 09:45:0a:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaGt6Uaeb7jIAYnqF479QE0c8LZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNDExMjUwOTE2MjhaFw0yNDExMjgyMDI1MjhaMDMxMTAvBgNV BAMTKDVDNjNCOEYwNzEzRjIxRDcwQUMzMEUyQzYwRDg0RkVFRURBN0I0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhsR0+/HYPKBqF+qwbMtZeREvh +vsdJMeVXwbL+H+isIEvb0BKl2npROsl383M/1BRJ7O9CZv4cw/Q7FcbPu0hRI2A vvoFuwCXNtrH4jwrAurLvpBjXGsYwDETL2wcvjl0SCpRf5jzN9TgeMuC1zv4sDaY Jjjf27upfXCyXHEUSxIh1qgFcm5EWa4gIRPEv3TGO7hcvyxBW2BR882/cPcpsVfO zLA62+3aJuZqYaDIPgPtxwOYIF/dYQ98lWuBsO07KUAFCvsz8ZnIlHya0RgOqUAi xvVj6mn+yZ149KZMXZ+HgI6vS6+WZSWXu9geJO+ff4oabmG5Nix336ksODGZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXGO48HE/IdcKww4sYNhP7u2ntAswHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0otBEEnc6TVUWyadU9JLp2EldxAp+EacJu OsBvSFMcP6cxv2Pp7KYWxzNrSzqC0U6gT7aQvjJ+OeLW50nyR5po0l/Q4PoPfK1L fAHgxBFcJLnvGQmqj0/Z5c05rGlAE9ou3LRM4pFLNXJxz/FNUp8/dFY7rrXwRslb NNDSUmuuvOTpyz+5stkhFatEZt73yvFyNw5KhkwVJ6LxJ/xiJjNrldIDFSKPrVkb Z1C7YdgkehtmJff1U1JS9gBvn36nrD3blOuNUrLfWELzVSZO2RAAJ34c5XGtUbBB 9w/zYsXnFxIHtqQdsWxGwUkwk5XCXzLRirOF3CRUrvUtqQlFChc= -----END CERTIFICATE-----Generated at Mon Nov 25 10:55:39 2024 by rpki-client on console-ams.rpki-client.org