$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: iANSl8Iz82ECd4vXf+wrFUX5dt4fYiCSPzuPrvgVkMg= Subject key identifier: 9E:AE:5E:49:F3:E5:07:FA:CB:AB:CD:F0:18:28:85:08:8F:70:4C:2B Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 43B7FA101ABA153B9F5D7BCCD76A00DDC06A454B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 020D Signing time: Fri 22 Nov 2024 00:00:03 +0000 Manifest this update: Thu 21 Nov 2024 23:55:03 +0000 Manifest next update: Mon 25 Nov 2024 09:17:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: SwZ0zR6Dh8wU7ScCkZ9a+wkREO+/jwMxNVydY7kbzV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b7:fa:10:1a:ba:15:3b:9f:5d:7b:cc:d7:6a:00:dd:c0:6a:45:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Nov 21 23:55:03 2024 GMT Not After : Nov 25 09:17:03 2024 GMT Subject: CN=9EAE5E49F3E507FACBABCDF0182885088F704C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:e1:ba:a3:f2:df:49:98:e1:60:c4:3c:25: f5:ea:58:39:27:e6:2d:b5:86:2d:8a:96:d9:88:93: 53:01:e4:06:b0:35:5e:80:17:bc:83:da:bc:95:18: bf:15:19:a7:3d:0a:c2:b5:9b:40:14:46:33:37:c1: c6:b8:0b:f7:43:8b:e0:b4:b9:40:ac:4a:27:6c:40: c0:f2:1a:c9:85:e1:35:b9:a1:bb:c5:51:49:3a:14: e6:11:4e:ef:5e:e9:b7:a3:e5:da:68:03:cc:fa:df: af:fb:56:98:63:8e:42:c1:a8:61:79:34:6a:c0:a3: 12:9e:2a:ee:17:10:79:5d:b7:19:d7:71:df:8b:c4: a2:11:ea:3f:a9:8e:d7:ed:5d:72:25:13:3d:2b:bb: ff:f3:99:c8:0d:9f:86:8b:92:5f:78:3f:ba:1e:74: 0c:0e:14:e0:7f:c9:cd:8c:53:c3:62:07:bc:0e:93: 25:61:19:c2:43:c1:63:0d:c7:ab:8a:8f:4e:d7:a6: ac:a1:32:c0:66:1d:a0:74:8f:4c:53:92:99:05:8a: b7:44:70:0c:f5:1b:c5:a8:cc:c8:83:b4:65:ca:eb: d8:63:96:82:67:45:03:c2:55:48:8c:67:a7:d0:82: c6:25:6d:16:32:15:bc:86:2b:ec:b8:fa:2d:a1:a6: 48:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AE:5E:49:F3:E5:07:FA:CB:AB:CD:F0:18:28:85:08:8F:70:4C:2B X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:29:ce:b9:1b:87:0e:fe:4a:d8:9f:64:c1:f1:86:09:7c:a2: a6:5a:68:19:b5:10:73:df:af:7f:8f:b3:05:3d:cb:02:24:90: 08:c6:17:13:e1:42:b4:a7:13:49:75:3e:48:35:77:2a:0f:d2: 43:4c:6b:6f:91:af:db:65:6c:8d:d3:2a:d2:ee:b0:f0:33:dc: e4:75:99:43:50:10:f6:7e:64:22:b6:ab:71:13:2c:81:9e:65: 4e:50:6d:91:64:4c:8c:99:a3:9f:4e:b0:51:7d:bf:84:28:e9: 6a:41:18:a6:75:54:d5:da:0e:b1:53:93:c3:44:5d:08:a7:39: 5c:7b:1c:17:11:e4:3b:7a:9f:5a:6d:ae:a4:eb:d8:f2:a4:bf: 66:ec:29:b7:55:33:ce:fa:a6:cd:b4:03:03:e1:55:5a:5a:95: 91:85:e6:0c:ab:ba:98:81:69:2e:10:8c:20:ee:b8:b7:f8:bd: 7a:83:d2:23:16:7a:0d:af:85:4a:0d:eb:4c:a9:1a:df:7c:fa: 26:b5:1e:66:95:40:23:ff:df:8a:83:32:58:b1:06:33:ba:48: f7:71:ae:5a:2d:2b:36:d3:08:3e:a2:32:f6:b1:fb:2b:03:e1: 57:49:e6:6a:91:90:87:a1:b0:b2:4f:ba:80:6b:34:9b:43:4b: 35:f8:91:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7f6EBq6FTufXXvM12oA3cBqRUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNDExMjEyMzU1MDNaFw0yNDExMjUwOTE3MDNaMDMxMTAvBgNV BAMTKDlFQUU1RTQ5RjNFNTA3RkFDQkFCQ0RGMDE4Mjg4NTA4OEY3MDRDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNReG6o/LfSZjhYMQ8JfXqWDkn 5i21hi2KltmIk1MB5AawNV6AF7yD2ryVGL8VGac9CsK1m0AURjM3wca4C/dDi+C0 uUCsSidsQMDyGsmF4TW5obvFUUk6FOYRTu9e6bej5dpoA8z636/7VphjjkLBqGF5 NGrAoxKeKu4XEHldtxnXcd+LxKIR6j+pjtftXXIlEz0ru//zmcgNn4aLkl94P7oe dAwOFOB/yc2MU8NiB7wOkyVhGcJDwWMNx6uKj07XpqyhMsBmHaB0j0xTkpkFirdE cAz1G8WozMiDtGXK69hjloJnRQPCVUiMZ6fQgsYlbRYyFbyGK+y4+i2hpkhzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnq5eSfPlB/rLq83wGCiFCI9wTCswHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUpzrkbhw7+StifZMHxhgl8oqZaaBm1EHPf r3+PswU9ywIkkAjGFxPhQrSnE0l1Pkg1dyoP0kNMa2+Rr9tlbI3TKtLusPAz3OR1 mUNQEPZ+ZCK2q3ETLIGeZU5QbZFkTIyZo59OsFF9v4Qo6WpBGKZ1VNXaDrFTk8NE XQinOVx7HBcR5Dt6n1ptrqTr2PKkv2bsKbdVM876ps20AwPhVVpalZGF5gyrupiB aS4QjCDuuLf4vXqD0iMWeg2vhUoN60ypGt98+ia1HmaVQCP/34qDMlixBjO6SPdx rlotKzbTCD6iMvax+ysD4VdJ5mqRkIehsLJPuoBrNJtDSzX4kdE= -----END CERTIFICATE-----Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org