$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: vS6jjUlgvBoW0Cvr0ifmOlfjUkgk+4bEAQ31PPYkUcs= Subject key identifier: 44:FF:46:FC:F3:E1:40:7D:42:04:E4:E1:C9:20:CE:13:14:E4:C5:78 Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 36E24DCE56417D76FC2BA55DDECC9EB6EA2A3F4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 026E Signing time: Thu 21 Nov 2024 10:31:14 +0000 Manifest this update: Thu 21 Nov 2024 10:26:14 +0000 Manifest next update: Sun 24 Nov 2024 17:38:14 +0000 Files and hashes: 1: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: ik3JwPueGh0lC4/wMe1++inmZhlbllGr5PVZbJzidbY=) 2: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: gol70BpWgizS6WYGLw5qU2dCNgPJLq0bqwQkrWKeTiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e2:4d:ce:56:41:7d:76:fc:2b:a5:5d:de:cc:9e:b6:ea:2a:3f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: Nov 21 10:26:14 2024 GMT Not After : Nov 24 17:38:14 2024 GMT Subject: CN=44FF46FCF3E1407D4204E4E1C920CE1314E4C578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b8:02:1c:39:5e:87:6a:73:7a:9a:c0:26:c5: 3a:00:c3:4c:2c:64:50:d9:ad:96:a5:b4:4b:65:f0: cb:03:ee:95:9d:3d:82:74:0c:65:f4:05:c1:3d:1d: e0:00:b8:60:ad:1c:a3:7e:55:27:e8:ea:b5:d5:22: 2e:f6:88:de:84:73:38:1a:04:c9:92:68:8f:9d:07: c0:52:ed:01:98:fa:92:72:fd:94:0b:fa:bb:6e:e0: a2:cf:36:11:11:f6:21:32:2d:98:ff:06:9c:b2:52: 35:23:e5:32:9c:6c:5b:4b:b9:fc:2e:a4:04:84:ab: 97:04:38:b0:96:cf:79:d9:5c:8d:33:d2:b2:59:43: c2:44:1e:93:ea:ec:b3:82:78:ea:1e:ee:7b:34:1b: af:83:4a:23:a6:86:13:8b:16:c8:41:2a:e0:c3:4c: 81:e8:0b:bc:91:b0:5c:1c:22:95:29:80:c0:b5:d9: f3:52:8b:f5:d6:63:d9:e7:a4:9a:4f:33:9b:79:77: 36:9f:5f:5a:04:cc:b0:cb:3c:f6:8a:87:d4:f6:1f: dc:73:09:22:bf:cb:5e:0f:b1:ba:85:fa:c5:c5:3c: 15:ef:96:10:47:25:5b:c6:2b:48:a9:26:ae:59:1b: 51:a4:c5:04:c4:e6:4c:32:cb:1a:35:f2:56:6b:25: 61:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FF:46:FC:F3:E1:40:7D:42:04:E4:E1:C9:20:CE:13:14:E4:C5:78 X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b2:74:95:fb:be:94:65:74:f0:4d:57:11:cf:b9:97:88:74: 96:4a:fc:20:8b:ea:28:53:0d:63:8d:24:41:71:f1:44:ea:2a: ea:e4:ec:8a:42:c9:30:65:11:83:c1:81:24:e0:aa:bb:a6:67: 59:23:97:a6:c1:e5:b0:3b:1f:18:78:9b:7e:6a:94:37:4d:4b: 96:5f:e5:a7:c0:3c:97:f2:b1:bf:2f:c7:3b:56:78:a3:f4:01: db:18:1d:bc:ad:62:ab:6d:58:5a:e8:6b:70:48:8c:43:2b:d7: 49:ad:d1:ba:65:e0:0d:38:30:da:37:a4:6e:f9:78:61:38:82: 45:ef:43:d7:e9:5b:99:42:b8:2f:e6:45:34:f5:36:73:da:78: ea:4a:83:34:7c:9a:6f:42:b0:2a:d4:fe:4e:43:8d:84:06:62: 1d:2f:5c:30:69:be:cf:40:bc:7f:98:69:46:00:67:03:18:95: 2e:74:5f:74:dd:4c:ab:40:0f:a6:5b:97:ae:ee:4f:c7:93:d1: 88:6c:87:ec:e3:f5:70:ea:41:bc:bb:cf:13:7d:8e:a0:68:2e: f1:75:72:a1:8c:f9:b5:81:f2:a7:fa:47:c7:b1:5e:af:6d:09: 63:df:81:ba:60:0b:17:69:3c:a4:ed:1b:67:78:e3:b4:a3:fd: 75:2c:15:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNuJNzlZBfXb8K6Vd3syetuoqP00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQy QUQ2RTU5MjAeFw0yNDExMjExMDI2MTRaFw0yNDExMjQxNzM4MTRaMDMxMTAvBgNV BAMTKDQ0RkY0NkZDRjNFMTQwN0Q0MjA0RTRFMUM5MjBDRTEzMTRFNEM1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDouAIcOV6HanN6msAmxToAw0ws ZFDZrZaltEtl8MsD7pWdPYJ0DGX0BcE9HeAAuGCtHKN+VSfo6rXVIi72iN6Eczga BMmSaI+dB8BS7QGY+pJy/ZQL+rtu4KLPNhER9iEyLZj/BpyyUjUj5TKcbFtLufwu pASEq5cEOLCWz3nZXI0z0rJZQ8JEHpPq7LOCeOoe7ns0G6+DSiOmhhOLFshBKuDD TIHoC7yRsFwcIpUpgMC12fNSi/XWY9nnpJpPM5t5dzafX1oEzLDLPPaKh9T2H9xz CSK/y14PsbqF+sXFPBXvlhBHJVvGK0ipJq5ZG1GkxQTE5kwyyxo18lZrJWHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURP9G/PPhQH1CBOThySDOExTkxXgwHwYDVR0j BBgwFoAUyhOpusKTFeXF2s8LxziMNCrW5ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Mzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMy OTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZFNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQyQUQ2 RTU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhD MzQyQUQ2RTU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeydJX7vpRldPBNVxHPuZeIdJZK/CCL6ihT DWONJEFx8UTqKurk7IpCyTBlEYPBgSTgqrumZ1kjl6bB5bA7Hxh4m35qlDdNS5Zf 5afAPJfysb8vxztWeKP0AdsYHbytYqttWFroa3BIjEMr10mt0bpl4A04MNo3pG75 eGE4gkXvQ9fpW5lCuC/mRTT1NnPaeOpKgzR8mm9CsCrU/k5DjYQGYh0vXDBpvs9A vH+YaUYAZwMYlS50X3TdTKtAD6Zbl67uT8eT0Yhsh+zj9XDqQby7zxN9jqBoLvF1 cqGM+bWB8qf6R8exXq9tCWPfgbpgCxdpPKTtG2d447Sj/XUsFe4= -----END CERTIFICATE-----Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org