$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: VEXRBclbwyb88KXeYdNGZMEkOswHUK+KLK2YrC7GpZ4= Subject key identifier: 3D:A9:4E:30:31:B2:1A:8C:4F:45:8A:49:51:31:30:30:36:14:24:C9 Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 39DB95EE7A6944C7067D712E3A1BDE48E629BC44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 0145 Signing time: Fri 22 Nov 2024 04:31:36 +0000 Manifest this update: Fri 22 Nov 2024 04:26:36 +0000 Manifest next update: Mon 25 Nov 2024 07:07:36 +0000 Files and hashes: 1: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: Z7vPFfwIQdn1UhQrVUmft3o3TssCB+hnjgHnHXTtyhQ=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: k4bVgZQwwhwXyEq21/fgsjgZLJvFrNFPkmTEg/UKHTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:db:95:ee:7a:69:44:c7:06:7d:71:2e:3a:1b:de:48:e6:29:bc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Nov 22 04:26:36 2024 GMT Not After : Nov 25 07:07:36 2024 GMT Subject: CN=3DA94E3031B21A8C4F458A4951313030361424C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:1f:e8:a4:62:8a:83:b5:bc:09:0c:08:26: 2c:0f:87:e6:ae:5c:5d:86:09:d5:8b:21:a2:05:6e: 31:82:27:32:04:d8:4e:dd:ec:3d:ad:f1:6a:60:35: 24:79:89:b7:9b:71:51:c2:bb:a6:f7:57:75:0a:c4: a5:3b:d8:24:e0:fc:4a:24:e9:8c:f5:8b:0e:ce:7b: 03:df:13:93:9c:ba:0d:1f:fc:50:f2:4f:b3:bb:21: 93:4b:c9:58:91:4b:f5:bf:17:99:fc:68:41:96:c3: e9:ed:ea:0f:27:3e:01:12:2f:52:f4:6d:56:2d:9d: 6e:a0:f7:b4:76:b4:c3:93:49:db:f9:ff:75:1a:8c: 0e:ec:85:61:38:b4:fb:bc:1f:5c:e8:ca:69:04:28: e0:b0:36:15:8e:2d:de:d6:0c:10:a8:c6:35:c5:35: 22:b4:12:14:6a:91:de:d8:3b:74:05:20:0e:6d:f6: 3f:70:8b:aa:06:cf:5a:ab:de:f2:90:44:88:8c:5d: 25:0c:5e:8b:de:af:a1:9e:60:7e:3e:c3:51:3c:fe: a0:72:18:97:60:d7:6d:50:5a:2b:12:f4:92:94:8e: 8c:16:5f:ca:b0:6a:9b:9c:c7:80:33:b5:bd:86:c4: 75:0c:e9:b9:1c:04:18:f9:97:0c:6e:95:f6:1b:03: 72:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A9:4E:30:31:B2:1A:8C:4F:45:8A:49:51:31:30:30:36:14:24:C9 X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ae:07:df:eb:71:f9:3b:ef:f3:2e:8b:56:5f:0b:93:c3:f6: c1:aa:47:d5:4c:31:75:78:19:4b:86:e1:8a:b1:1e:17:4e:d4: 08:8e:26:5e:d4:85:4e:65:15:a4:3e:20:5f:d4:b8:2c:ce:4c: da:c7:49:61:87:7c:da:f8:a4:f2:cf:28:cb:5d:a3:9c:1c:c4: 01:a0:f5:d1:d4:7b:8d:6d:7e:6f:20:c4:8b:b9:0f:8a:9e:bb: f6:b6:67:0a:a7:93:69:ab:c1:ad:d0:e4:c6:f4:a3:90:db:f1: 9f:ad:2e:25:7c:ac:f9:16:14:e7:38:70:2e:81:cf:a1:57:f9: 88:81:89:3a:42:93:bc:99:58:a8:e0:b9:90:43:e0:2e:f9:f3: 9f:c6:33:05:6c:9a:8c:a9:12:d9:81:b6:29:7b:64:76:4c:7d: 81:d1:43:4e:0c:89:e0:1c:1f:ae:4e:7d:e0:46:40:6c:df:59: 97:91:be:3f:32:7e:66:f9:ca:a6:57:44:60:75:ec:dc:44:c3: 60:98:ff:15:62:57:18:68:39:9a:ec:7b:e4:1f:1b:fc:bb:90: da:72:36:8b:23:51:f5:88:15:ed:6e:80:fb:5d:26:aa:13:8f: 6c:63:de:94:61:22:85:82:15:87:8f:ae:ad:e1:74:03:51:ae: d6:e7:a5:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOduV7nppRMcGfXEuOhveSOYpvEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNDExMjIwNDI2MzZaFw0yNDExMjUwNzA3MzZaMDMxMTAvBgNV BAMTKDNEQTk0RTMwMzFCMjFBOEM0RjQ1OEE0OTUxMzEzMDMwMzYxNDI0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56B/opGKKg7W8CQwIJiwPh+au XF2GCdWLIaIFbjGCJzIE2E7d7D2t8WpgNSR5ibebcVHCu6b3V3UKxKU72CTg/Eok 6Yz1iw7OewPfE5Ocug0f/FDyT7O7IZNLyViRS/W/F5n8aEGWw+nt6g8nPgESL1L0 bVYtnW6g97R2tMOTSdv5/3UajA7shWE4tPu8H1zoymkEKOCwNhWOLd7WDBCoxjXF NSK0EhRqkd7YO3QFIA5t9j9wi6oGz1qr3vKQRIiMXSUMXover6GeYH4+w1E8/qBy GJdg121QWisS9JKUjowWX8qwapucx4Aztb2GxHUM6bkcBBj5lwxulfYbA3J7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPalOMDGyGoxPRYpJUTEwMDYUJMkwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2uB9/rcfk77/Mui1ZfC5PD9sGqR9VMMXV4 GUuG4YqxHhdO1AiOJl7UhU5lFaQ+IF/UuCzOTNrHSWGHfNr4pPLPKMtdo5wcxAGg 9dHUe41tfm8gxIu5D4qeu/a2Zwqnk2mrwa3Q5Mb0o5Db8Z+tLiV8rPkWFOc4cC6B z6FX+YiBiTpCk7yZWKjguZBD4C7585/GMwVsmoypEtmBtil7ZHZMfYHRQ04MieAc H65OfeBGQGzfWZeRvj8yfmb5yqZXRGB17NxEw2CY/xViVxhoOZrse+QfG/y7kNpy NosjUfWIFe1ugPtdJqoTj2xj3pRhIoWCFYePrq3hdANRrtbnpUc= -----END CERTIFICATE-----Generated at Fri Nov 22 05:48:21 2024 by rpki-client on console-fra.rpki-client.org