$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: jO8ZmKf96M1iohveRC7as13oZfNXPiY8ZwsiLbMa5Nk= Subject key identifier: C2:D4:D2:5E:77:EA:96:0D:9B:0A:D4:7F:EF:37:64:8A:3D:1F:32:A5 Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 5B7F462344CD2551D3E93749B826CEF9C8BEB2F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: 3A Signing time: Thu 26 Sep 2024 16:01:23 +0000 Manifest this update: Thu 26 Sep 2024 15:56:23 +0000 Manifest next update: Mon 30 Sep 2024 01:08:23 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: FYJ1uLciyRkWSeOcFAgW479EiOG6i1TDD9AjxmMEcig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Sep 2024 20:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:7f:46:23:44:cd:25:51:d3:e9:37:49:b8:26:ce:f9:c8:be:b2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Sep 26 15:56:23 2024 GMT Not After : Sep 30 01:08:23 2024 GMT Subject: CN=C2D4D25E77EA960D9B0AD47FEF37648A3D1F32A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:48:f3:e1:b6:32:fb:4b:2f:52:a6:9a:ec:80: 37:37:81:b6:6d:46:2f:39:55:a1:83:7f:e5:6b:cf: ea:bd:fb:a7:07:c1:e5:f9:69:d9:5f:07:1b:5e:b2: 27:a1:00:48:c4:b3:ac:2e:8b:0c:61:07:dc:48:bd: f2:58:15:f1:b4:19:ee:77:fa:cf:47:65:8f:b7:a5: da:12:00:6e:59:32:11:dc:1a:f9:cb:7e:94:09:2c: 1d:d8:98:e4:8d:b8:2f:52:83:55:8b:eb:40:cf:e2: 00:dc:c9:c3:93:23:f2:5f:cc:ed:e8:ac:9e:e1:6a: 21:dc:dc:3a:e3:a8:53:97:f3:f2:75:be:fc:2e:19: 51:33:54:a7:fd:5e:30:15:97:24:39:7b:33:ad:4d: 16:4f:6b:2a:39:ae:47:c9:b7:58:4d:78:fb:db:3e: 4d:f1:70:54:a0:e7:c2:a2:10:ca:b1:61:7d:b1:b9: 6b:74:40:c1:07:3a:10:74:2f:53:8a:3f:57:ec:62: 1b:b5:ec:02:23:3f:c8:a1:3d:0c:59:40:95:3a:ce: a9:b7:8f:ae:1a:85:48:c0:5c:b9:ba:08:8c:e6:f0: c9:e3:3f:9f:4b:bf:39:ae:27:4d:32:39:8c:c5:a6: fe:00:2d:24:9f:e5:c9:29:59:27:96:cf:c0:4c:92: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D4:D2:5E:77:EA:96:0D:9B:0A:D4:7F:EF:37:64:8A:3D:1F:32:A5 X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:6f:34:e8:70:9b:27:b6:a8:5f:2b:f5:35:a3:06:f3:fc:5d: e5:b6:22:7a:40:4e:1c:01:de:41:e9:8f:98:28:bf:1c:11:4b: d2:c4:1e:59:96:ab:0e:66:d6:84:92:f2:23:71:31:4d:5e:95: d8:c9:d7:e7:47:97:19:3c:5e:b9:db:57:a9:23:8a:da:2a:c4: 23:44:9e:25:8b:b3:c8:70:0a:77:9f:6b:4d:f4:d9:84:49:9f: 88:f7:f4:d0:0e:c1:0f:67:5c:37:fd:7f:09:a5:b6:03:cd:9c: 15:c6:ea:2c:99:1e:7c:15:1d:1d:09:28:d1:0b:89:2d:52:ac: 05:c5:16:0f:8f:c7:ec:e4:7c:f8:cf:cd:56:3f:99:ef:28:ed: e8:52:c6:7a:64:a1:dd:cd:f8:76:e9:14:58:b0:9a:8e:41:06: 66:89:e8:e7:2a:8e:b1:3e:af:0b:e5:75:13:b2:2b:ea:97:8b: 26:e3:2e:7b:71:72:a3:6e:39:d1:fc:91:33:6d:5b:33:f3:98: 6c:34:c1:27:6a:da:03:4c:71:82:75:60:0d:0e:2b:ea:18:c0: f0:0b:55:07:23:ba:4b:90:43:a9:b3:f4:4a:70:b2:46:1b:6e: 7a:35:f4:91:57:90:11:57:b7:94:e3:9d:07:94:f1:aa:8f:1a: d5:00:db:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW39GI0TNJVHT6TdJuCbO+ci+svYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNDA5MjYxNTU2MjNaFw0yNDA5MzAwMTA4MjNaMDMxMTAvBgNV BAMTKEMyRDREMjVFNzdFQTk2MEQ5QjBBRDQ3RkVGMzc2NDhBM0QxRjMyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhSPPhtjL7Sy9SpprsgDc3gbZt Ri85VaGDf+Vrz+q9+6cHweX5adlfBxtesiehAEjEs6wuiwxhB9xIvfJYFfG0Ge53 +s9HZY+3pdoSAG5ZMhHcGvnLfpQJLB3YmOSNuC9Sg1WL60DP4gDcycOTI/JfzO3o rJ7haiHc3DrjqFOX8/J1vvwuGVEzVKf9XjAVlyQ5ezOtTRZPayo5rkfJt1hNePvb Pk3xcFSg58KiEMqxYX2xuWt0QMEHOhB0L1OKP1fsYhu17AIjP8ihPQxZQJU6zqm3 j64ahUjAXLm6CIzm8MnjP59LvzmuJ00yOYzFpv4ALSSf5ckpWSeWz8BMkn4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwtTSXnfqlg2bCtR/7zdkij0fMqUwHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFvNOhwmye2qF8r9TWjBvP8XeW2InpAThwB 3kHpj5govxwRS9LEHlmWqw5m1oSS8iNxMU1eldjJ1+dHlxk8XrnbV6kjitoqxCNE niWLs8hwCnefa0302YRJn4j39NAOwQ9nXDf9fwmltgPNnBXG6iyZHnwVHR0JKNEL iS1SrAXFFg+Px+zkfPjPzVY/me8o7ehSxnpkod3N+HbpFFiwmo5BBmaJ6OcqjrE+ rwvldROyK+qXiybjLntxcqNuOdH8kTNtWzPzmGw0wSdq2gNMcYJ1YA0OK+oYwPAL VQcjukuQQ6mz9EpwskYbbno19JFXkBFXt5TjnQeU8aqPGtUA2+I= -----END CERTIFICATE-----Generated at Thu Sep 26 17:16:26 2024 by rpki-client on console-fra.rpki-client.org