$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: YjiFf+0ZJO/x+MUHLt5pgo69LhzTBDj6iwCcyEQTx2w= Subject key identifier: 42:AA:7B:D2:ED:02:50:BD:FA:77:42:A7:CA:C4:09:7C:E4:A5:A0:31 Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 570B067D132EA4A6CBDB0CA0DA5E611892D0366F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: 3C Signing time: Mon 25 Nov 2024 04:41:47 +0000 Manifest this update: Mon 25 Nov 2024 04:36:47 +0000 Manifest next update: Thu 28 Nov 2024 05:17:47 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: HRHrHNTuksDwZTD6W3AiYHhRBtPwVpFvn+ySc8d7LnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0b:06:7d:13:2e:a4:a6:cb:db:0c:a0:da:5e:61:18:92:d0:36:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Nov 25 04:36:47 2024 GMT Not After : Nov 28 05:17:47 2024 GMT Subject: CN=42AA7BD2ED0250BDFA7742A7CAC4097CE4A5A031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:65:94:63:19:e3:bc:56:f0:40:af:de:a2:70: ce:d7:8f:6e:79:28:00:ab:0c:55:a2:c0:cb:ae:63: 9f:f7:70:48:9d:cd:37:71:79:a2:d8:2a:26:2a:5e: d6:01:4e:bc:a4:4c:e4:9c:0c:82:29:8b:b5:b7:e3: 62:a4:15:01:ec:c6:7f:03:fc:40:d6:e3:79:b8:19: d7:c4:a1:40:8d:8f:3c:89:5d:00:57:03:26:42:d0: dd:a9:83:89:34:1c:7a:46:d6:d7:82:56:ee:ed:c7: 21:0a:fc:3e:65:e8:fa:9f:bd:c1:da:ea:cd:cd:d5: d8:e9:1a:97:f4:85:49:9e:5d:b3:87:9a:cc:57:0a: 6e:54:43:9e:e6:5f:1e:e9:67:25:ff:a0:cf:21:04: a4:4b:28:6e:fb:ac:e6:aa:51:36:ac:08:ad:e1:30: 8b:86:16:a5:32:c9:f4:81:42:fe:6b:fc:a0:ca:7f: 10:43:b0:a5:2a:28:c4:0a:49:b0:e3:8d:ab:c3:61: d0:32:1e:93:4e:81:fc:4d:43:d6:31:18:f1:5c:90: ad:d5:85:e1:04:61:08:f5:1d:ac:f1:bd:0b:64:a9: ad:38:91:a7:8b:37:d3:f0:ef:ae:9c:fc:ba:e8:cb: 1c:b2:c9:a5:65:01:cd:00:6c:40:31:34:eb:4e:06: 21:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AA:7B:D2:ED:02:50:BD:FA:77:42:A7:CA:C4:09:7C:E4:A5:A0:31 X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:be:15:2b:b1:d2:31:22:0e:ee:fd:18:94:8c:cb:b6:7f:08: 91:9a:94:3e:3b:31:c1:29:86:bf:3b:04:8f:78:00:9c:ee:6f: 3b:ea:bc:dd:0a:6e:ea:f1:88:34:93:af:9e:9a:10:42:7a:b9: 74:85:46:3c:30:f0:66:e3:13:db:4d:33:ee:4b:c6:7f:07:6c: 08:2f:c4:19:6c:a5:22:0d:7a:79:83:e0:71:9a:f0:22:9e:9b: ef:62:75:0e:ff:04:1e:8d:b1:7a:77:22:a2:c3:fd:d3:0a:00: 30:75:14:66:06:58:e1:af:8b:83:0a:c5:c3:43:8b:58:93:6b: 81:4a:ad:af:93:b4:3b:6b:8d:f2:a8:e9:05:d8:b1:af:3c:7c: d7:fc:00:8c:4d:d7:02:16:24:de:2c:59:49:a9:52:9b:c5:e2: af:5a:9e:3d:5b:ea:86:41:0d:90:94:c6:17:eb:07:1e:0f:56: 66:32:50:fa:21:6c:f8:2a:66:40:65:13:8d:1d:b1:80:73:84: b4:5b:8c:4c:ab:ac:38:c7:91:64:ec:c4:8c:38:91:69:94:72: 57:23:94:88:4e:66:a4:d8:90:91:2e:32:17:76:5a:07:78:1d: fc:1a:5d:67:04:9c:cf:be:89:f4:86:20:21:73:a7:d8:4f:d5: 73:9c:22:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwsGfRMupKbL2wyg2l5hGJLQNm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNDExMjUwNDM2NDdaFw0yNDExMjgwNTE3NDdaMDMxMTAvBgNV BAMTKDQyQUE3QkQyRUQwMjUwQkRGQTc3NDJBN0NBQzQwOTdDRTRBNUEwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIZZRjGeO8VvBAr96icM7Xj255 KACrDFWiwMuuY5/3cEidzTdxeaLYKiYqXtYBTrykTOScDIIpi7W342KkFQHsxn8D /EDW43m4GdfEoUCNjzyJXQBXAyZC0N2pg4k0HHpG1teCVu7txyEK/D5l6PqfvcHa 6s3N1djpGpf0hUmeXbOHmsxXCm5UQ57mXx7pZyX/oM8hBKRLKG77rOaqUTasCK3h MIuGFqUyyfSBQv5r/KDKfxBDsKUqKMQKSbDjjavDYdAyHpNOgfxNQ9YxGPFckK3V heEEYQj1HazxvQtkqa04kaeLN9Pw766c/LroyxyyyaVlAc0AbEAxNOtOBiEXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQqp70u0CUL36d0KnysQJfOSloDEwHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJi+FSux0jEiDu79GJSMy7Z/CJGalD47McEp hr87BI94AJzubzvqvN0KburxiDSTr56aEEJ6uXSFRjww8GbjE9tNM+5Lxn8HbAgv xBlspSINenmD4HGa8CKem+9idQ7/BB6NsXp3IqLD/dMKADB1FGYGWOGvi4MKxcND i1iTa4FKra+TtDtrjfKo6QXYsa88fNf8AIxN1wIWJN4sWUmpUpvF4q9anj1b6oZB DZCUxhfrBx4PVmYyUPohbPgqZkBlE40dsYBzhLRbjEyrrDjHkWTsxIw4kWmUclcj lIhOZqTYkJEuMhd2Wgd4HfwaXWcEnM++ifSGICFzp9hP1XOcIvQ= -----END CERTIFICATE-----Generated at Mon Nov 25 06:02:39 2024 by rpki-client on console-ams.rpki-client.org