$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: rFYNKVdbzLCSztnntKHFfbTIdP8dhV2ywgBT+66r+yQ= Subject key identifier: 76:8D:B4:5D:98:87:8E:FF:4C:C8:F1:6C:25:1B:9A:BC:30:89:2E:CB Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 561119340C8C278751C851C70174E52B4CA9E0AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 0440 Signing time: Sat 23 Nov 2024 17:10:45 +0000 Manifest this update: Sat 23 Nov 2024 17:05:45 +0000 Manifest next update: Tue 26 Nov 2024 21:42:45 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: 12Raj36F+d01ynHaW2O2kY/Z9EtVrU4y2baWBsj/ptQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:11:19:34:0c:8c:27:87:51:c8:51:c7:01:74:e5:2b:4c:a9:e0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Nov 23 17:05:45 2024 GMT Not After : Nov 26 21:42:45 2024 GMT Subject: CN=768DB45D98878EFF4CC8F16C251B9ABC30892ECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:59:a6:b6:b6:04:13:c6:16:83:77:ec:7d:76: 7f:75:28:19:74:51:63:ec:18:00:a5:af:04:e7:03: eb:d3:2e:a2:4f:8f:f3:0c:c4:f4:f9:44:f5:33:45: 44:31:42:4c:54:d8:0e:58:c0:ff:32:59:ec:89:e2: 34:ca:43:4d:0b:f9:55:4e:19:e2:c6:04:50:2a:94: ac:f2:e5:f4:85:0b:d8:a8:e2:92:34:08:13:ac:21: 9d:91:de:3c:b4:e4:fc:79:cb:86:0b:09:8a:7b:cf: bf:a0:b8:9e:ac:29:91:3d:97:66:a2:52:1d:53:5a: 0c:c0:c9:3e:e7:d7:a3:98:d3:f8:b6:bf:e7:d6:62: 84:54:48:1f:44:e6:be:69:1b:28:d3:e7:41:9f:ca: 9e:ec:a2:55:33:50:c3:52:9f:d8:96:59:23:6a:a0: 3f:79:3a:8c:97:2b:f6:94:24:93:13:e2:fb:8f:e0: 18:70:ea:63:65:dc:7c:41:45:7d:ac:cb:4e:c0:69: 29:e7:d4:79:4e:f7:aa:2f:20:29:ed:65:53:6d:24: 7a:4f:8d:bd:24:1b:bb:cb:93:74:76:c9:08:de:5e: cd:b3:9c:a8:d0:10:f7:b8:f7:39:4b:c6:db:3f:3b: 3b:0a:83:9f:be:b9:93:1e:39:40:ab:10:b9:d9:1c: a7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8D:B4:5D:98:87:8E:FF:4C:C8:F1:6C:25:1B:9A:BC:30:89:2E:CB X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:30:34:ba:fb:ad:f2:fd:9b:98:9e:31:de:89:07:18:24:26: ec:55:c7:6e:0c:13:70:ce:46:33:3f:f0:b7:60:ec:62:da:26: 77:2e:1f:12:7a:4c:1d:e3:47:a0:4d:f7:8a:22:5d:92:e2:07: c4:d1:45:28:2c:08:0f:1c:e0:2b:b1:d4:0c:b4:80:73:12:71: 59:2a:9c:6b:3c:06:6f:90:a4:7f:fa:02:07:66:9a:c5:47:a0: 46:a6:2c:eb:c1:ee:79:61:19:f2:20:f6:58:60:b9:c1:74:25: 79:c8:35:95:4d:8d:35:10:6f:3f:6c:57:a3:e7:f4:b2:bf:41: 05:b9:f4:c7:28:2c:53:d0:30:d2:01:7d:0a:bb:60:35:36:ad: ab:58:44:02:f2:c9:cd:a5:4d:15:75:e1:49:9e:5f:0b:4e:c9: 02:88:ae:ff:e9:e5:68:01:92:7a:0b:fb:79:25:91:92:1b:c7: 59:0b:41:3b:90:78:47:07:9f:e3:c7:77:56:da:75:54:f0:38: 31:42:73:94:90:f3:a2:94:dc:27:cf:c0:fb:78:04:a0:72:2f: ad:a8:11:85:e4:94:ac:a6:79:2d:41:f5:fb:bb:13:40:15:7c: 7c:b8:29:2b:ad:59:99:b0:d5:44:7c:d8:8c:1a:5c:7b:9c:ea: 28:b1:c9:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhEZNAyMJ4dRyFHHAXTlK0yp4KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNDExMjMxNzA1NDVaFw0yNDExMjYyMTQyNDVaMDMxMTAvBgNV BAMTKDc2OERCNDVEOTg4NzhFRkY0Q0M4RjE2QzI1MUI5QUJDMzA4OTJFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqWaa2tgQTxhaDd+x9dn91KBl0 UWPsGAClrwTnA+vTLqJPj/MMxPT5RPUzRUQxQkxU2A5YwP8yWeyJ4jTKQ00L+VVO GeLGBFAqlKzy5fSFC9io4pI0CBOsIZ2R3jy05Px5y4YLCYp7z7+guJ6sKZE9l2ai Uh1TWgzAyT7n16OY0/i2v+fWYoRUSB9E5r5pGyjT50Gfyp7solUzUMNSn9iWWSNq oD95OoyXK/aUJJMT4vuP4Bhw6mNl3HxBRX2sy07AaSnn1HlO96ovICntZVNtJHpP jb0kG7vLk3R2yQjeXs2znKjQEPe49zlLxts/OzsKg5++uZMeOUCrELnZHKfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdo20XZiHjv9MyPFsJRuavDCJLsswHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIwNLr7rfL9m5ieMd6JBxgkJuxVx24ME3DO RjM/8Ldg7GLaJncuHxJ6TB3jR6BN94oiXZLiB8TRRSgsCA8c4Cux1Ay0gHMScVkq nGs8Bm+QpH/6AgdmmsVHoEamLOvB7nlhGfIg9lhgucF0JXnINZVNjTUQbz9sV6Pn 9LK/QQW59McoLFPQMNIBfQq7YDU2ratYRALyyc2lTRV14UmeXwtOyQKIrv/p5WgB knoL+3klkZIbx1kLQTuQeEcHn+PHd1badVTwODFCc5SQ86KU3CfPwPt4BKByL62o EYXklKymeS1B9fu7E0AVfHy4KSutWZmw1UR82IwaXHuc6iixyZE= -----END CERTIFICATE-----Generated at Sat Nov 23 18:47:51 2024 by rpki-client on console-fra.rpki-client.org