$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: 32VBJJmM0eX3a/dmb6GzuAo72kfWSLdrG+TMu0iLUX0= Subject key identifier: 28:50:41:F8:25:AE:79:15:A2:2A:11:42:E0:01:2C:01:8C:71:52:19 Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 4EF0BD589A008F8F34C38F41533A645342555451 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: 2E Signing time: Fri 22 Nov 2024 05:30:37 +0000 Manifest this update: Fri 22 Nov 2024 05:25:37 +0000 Manifest next update: Mon 25 Nov 2024 13:33:37 +0000 Files and hashes: 1: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: GVs1JadHk8CcQnnSQEkW2rIS29NefsCk7/Pmlg5WpbM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f0:bd:58:9a:00:8f:8f:34:c3:8f:41:53:3a:64:53:42:55:54:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: Nov 22 05:25:37 2024 GMT Not After : Nov 25 13:33:37 2024 GMT Subject: CN=285041F825AE7915A22A1142E0012C018C715219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:60:97:89:9a:6a:e8:77:54:5c:1e:d8:3e: a7:46:7e:a2:f5:13:34:c7:9d:e2:02:c5:14:0a:7b: 58:26:8b:07:e6:d7:5a:5a:6a:0b:a2:ee:3f:bc:a5: 7c:18:2d:ca:f6:e0:1b:d7:ba:75:3b:74:1b:0d:fa: ec:9a:56:ea:a4:76:72:46:d8:61:fc:33:f8:41:16: 70:fc:14:4b:83:ed:65:b6:e6:69:c7:0a:5d:27:0e: 1c:9b:63:fc:b2:a8:92:07:0d:de:c5:5c:31:fc:19: 39:d2:de:c9:df:59:c3:36:98:c2:20:b3:8b:d5:24: 1f:a9:e4:3e:d6:5d:01:1a:70:16:39:93:5f:eb:82: e0:97:1d:37:e6:af:cd:2c:24:61:3c:48:6c:67:1f: 3f:3b:bb:a0:9f:c8:9d:5f:1e:36:5e:57:c4:77:f5: 82:db:9b:3a:4b:0a:d7:49:d7:f5:16:ce:25:55:82: 18:e1:72:6c:ef:a6:fc:3f:26:d3:bd:ac:a1:6d:72: 38:c2:89:ef:bf:26:85:eb:51:76:81:1d:50:6b:d1: 3a:b7:c1:47:c9:59:1f:96:ae:e0:b5:01:d3:56:23: 16:27:1f:85:5d:76:5d:50:04:ec:55:b5:90:c3:8a: 8c:fb:27:a3:8c:fb:fe:79:b8:48:b3:cb:ef:45:bf: 40:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:50:41:F8:25:AE:79:15:A2:2A:11:42:E0:01:2C:01:8C:71:52:19 X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:5c:60:86:b8:9a:90:6f:66:e0:c2:f2:2d:15:42:08:8e:a7: 3d:4c:8e:2b:0c:ff:80:ea:63:a3:f1:f9:db:07:12:13:08:d2: 37:f4:76:16:62:74:21:32:93:eb:f6:c9:1c:b2:2d:74:b1:79: 5c:1b:a3:4a:5d:b7:21:8c:d2:c3:f2:13:2d:95:54:fd:9e:9a: 24:bc:7f:9c:04:fb:a3:b2:83:3d:50:37:b2:7d:e8:da:19:9b: 5f:32:19:b3:fe:8c:d7:ff:e7:3e:93:15:3e:6d:37:31:50:80: 43:6a:bf:74:d3:24:9b:5d:98:54:74:af:d5:49:51:4a:0f:90: dc:a8:c8:72:40:90:4e:0e:34:bc:24:06:bc:d0:c7:ff:8d:6a: 13:16:9c:11:8f:b3:95:68:30:be:ce:c2:bc:01:99:84:37:45: 40:d0:50:3e:6b:7b:35:a3:db:97:d1:9d:b7:91:42:7d:7b:5c: b3:48:fc:5b:42:97:37:18:e3:3e:ed:85:9c:0b:a2:bf:81:56: 04:b7:52:56:54:d7:d5:71:cf:8a:ae:04:76:4c:cd:1e:f0:5d: 3d:d9:4b:60:32:3a:47:b0:20:1a:0d:13:9c:5d:9a:f6:5c:d2: 07:b6:76:f8:d9:67:68:88:a0:c6:9a:92:69:bd:15:5d:83:29: 70:3a:ee:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvC9WJoAj480w49BUzpkU0JVVFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNDExMjIwNTI1MzdaFw0yNDExMjUxMzMzMzdaMDMxMTAvBgNV BAMTKDI4NTA0MUY4MjVBRTc5MTVBMjJBMTE0MkUwMDEyQzAxOEM3MTUyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfmCXiZpq6HdUXB7YPqdGfqL1 EzTHneICxRQKe1gmiwfm11paagui7j+8pXwYLcr24BvXunU7dBsN+uyaVuqkdnJG 2GH8M/hBFnD8FEuD7WW25mnHCl0nDhybY/yyqJIHDd7FXDH8GTnS3snfWcM2mMIg s4vVJB+p5D7WXQEacBY5k1/rguCXHTfmr80sJGE8SGxnHz87u6CfyJ1fHjZeV8R3 9YLbmzpLCtdJ1/UWziVVghjhcmzvpvw/JtO9rKFtcjjCie+/JoXrUXaBHVBr0Tq3 wUfJWR+WruC1AdNWIxYnH4Vddl1QBOxVtZDDioz7J6OM+/55uEizy+9Fv0ADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKFBB+CWueRWiKhFC4AEsAYxxUhkwHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNcYIa4mpBvZuDC8i0VQgiOpz1MjisM/4Dq Y6Px+dsHEhMI0jf0dhZidCEyk+v2yRyyLXSxeVwbo0pdtyGM0sPyEy2VVP2emiS8 f5wE+6Oygz1QN7J96NoZm18yGbP+jNf/5z6TFT5tNzFQgENqv3TTJJtdmFR0r9VJ UUoPkNyoyHJAkE4ONLwkBrzQx/+NahMWnBGPs5VoML7OwrwBmYQ3RUDQUD5rezWj 25fRnbeRQn17XLNI/FtClzcY4z7thZwLor+BVgS3UlZU19Vxz4quBHZMzR7wXT3Z S2AyOkewIBoNE5xdmvZc0ge2dvjZZ2iIoMaakmm9FV2DKXA67nI= -----END CERTIFICATE-----Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org