$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: tdU6HYTjnZD89bO3n0Tj7zI8eA14AkOJVqiw7KFYn98= Subject key identifier: 9F:DE:74:63:8D:8B:45:7E:D0:7B:F0:26:64:25:50:DD:23:2A:59:47 Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 685896D7EC7151AFA505067E6A1A629949072845 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 017D Signing time: Sun 24 Nov 2024 16:22:17 +0000 Manifest this update: Sun 24 Nov 2024 16:17:17 +0000 Manifest next update: Thu 28 Nov 2024 02:12:17 +0000 Files and hashes: 1: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: 9ZF2Eg58CtZBkb9CJ/ttc70dTqlt4QyDCLL7yta5ufQ=) 2: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: XryYMjwftZwDC+LgOaBl7zvXHmw5st0pLH58FXRxB9M=) 3: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: 5jjNyH4IFmanP0qvJGbyyLdkj/5QXLl3Ec+MH+kAGqY=) 4: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: vrmpX58HC6+sfDi84E60kK+8X9/dav9I3PisPW5InsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:58:96:d7:ec:71:51:af:a5:05:06:7e:6a:1a:62:99:49:07:28:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Nov 24 16:17:17 2024 GMT Not After : Nov 28 02:12:17 2024 GMT Subject: CN=9FDE74638D8B457ED07BF026642550DD232A5947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:73:30:35:80:6e:1d:fc:a9:47:27:49:45: 31:ec:8c:4d:8c:bb:bc:b0:d5:f7:b0:49:f1:b9:2a: 25:98:f9:af:fa:8b:49:2c:40:1e:ef:a0:33:4b:a2: c7:11:f8:df:d5:16:6a:12:d2:64:3a:2e:38:dd:0a: 82:6f:52:a2:bf:5f:3a:64:6c:d8:1d:84:e1:6c:1e: 9f:b5:4c:74:bb:a4:04:1c:19:ec:e1:a9:fa:c6:e4: 7a:a8:da:59:5a:9b:53:13:55:9a:df:bc:71:c9:60: 31:48:86:12:4f:0a:1e:11:bf:b4:1f:be:9b:76:ee: c2:18:6f:85:9a:42:8a:d3:72:fe:71:11:cf:ac:80: f3:22:33:5b:6a:a7:0c:6a:30:02:74:42:ae:78:9a: 77:78:10:bb:dd:6d:b5:fa:40:6c:3a:34:97:55:13: 06:a8:d0:77:ab:9b:cd:50:0f:ca:04:50:4f:07:e4: 35:db:ad:ba:3a:9b:85:40:99:07:07:25:ab:ed:d1: a8:34:b2:32:98:3a:2a:b2:47:5c:fa:a5:2e:39:ef: 3a:d8:a1:35:07:9f:1c:7a:90:5b:f6:61:e4:74:0a: ea:23:43:f9:94:a8:04:f1:ae:9a:f1:16:ed:9f:fd: 79:12:f8:8d:06:7f:94:02:97:4a:10:0d:2b:7d:d2: 33:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DE:74:63:8D:8B:45:7E:D0:7B:F0:26:64:25:50:DD:23:2A:59:47 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:7c:1b:1e:b6:b4:14:93:21:b4:a8:16:aa:f6:65:b6:fd:18: 59:6a:38:2f:3c:21:60:6e:2a:07:4e:14:48:c0:b9:e8:e5:d4: b3:14:28:9a:2d:c3:6f:d5:ca:fb:64:15:24:49:7b:e8:e4:33: cf:ac:a4:f1:c4:c1:99:91:e2:cb:c6:0c:9d:d5:36:e8:cb:9d: 27:ad:fa:5f:99:29:02:71:a8:1e:0a:8d:8d:a8:71:25:a6:7a: 2a:28:d7:c3:ad:ee:ec:da:25:15:41:89:a9:a5:d2:e5:4d:a8: 95:8b:64:50:4e:49:47:f9:f7:f7:43:c7:0b:86:fb:d9:9b:0d: fc:86:de:1c:e3:3b:a5:1e:a5:91:6d:eb:3c:03:94:ba:9a:07: 80:a0:d9:c2:27:0e:2e:e6:85:a8:3f:71:4a:4d:e5:2b:74:ed: 0d:27:71:75:7e:41:a2:9e:75:58:76:bb:c9:6e:5c:0c:17:92: 4c:3d:2f:2a:5f:7a:e9:4c:ac:85:7a:6b:7a:be:45:6a:43:76: 6b:87:9b:92:ba:d5:ca:4f:b4:20:12:6a:93:b2:97:ed:eb:3c: d2:a9:f4:8d:e1:34:cc:4b:67:a9:a9:1a:c7:e3:60:49:ef:fb: 73:f1:25:8d:fe:96:e4:b1:e7:db:98:3e:4a:c4:87:43:88:14: fd:d7:21:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFiW1+xxUa+lBQZ+ahpimUkHKEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNDExMjQxNjE3MTdaFw0yNDExMjgwMjEyMTdaMDMxMTAvBgNV BAMTKDlGREU3NDYzOEQ4QjQ1N0VEMDdCRjAyNjY0MjU1MEREMjMyQTU5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9nMwNYBuHfypRydJRTHsjE2M u7yw1fewSfG5KiWY+a/6i0ksQB7voDNLoscR+N/VFmoS0mQ6LjjdCoJvUqK/Xzpk bNgdhOFsHp+1THS7pAQcGezhqfrG5Hqo2llam1MTVZrfvHHJYDFIhhJPCh4Rv7Qf vpt27sIYb4WaQorTcv5xEc+sgPMiM1tqpwxqMAJ0Qq54mnd4ELvdbbX6QGw6NJdV Ewao0Herm81QD8oEUE8H5DXbrbo6m4VAmQcHJavt0ag0sjKYOiqyR1z6pS457zrY oTUHnxx6kFv2YeR0CuojQ/mUqATxrprxFu2f/XkS+I0Gf5QCl0oQDSt90jO5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn950Y42LRX7Qe/AmZCVQ3SMqWUcwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALh8Gx62tBSTIbSoFqr2Zbb9GFlqOC88IWBu KgdOFEjAuejl1LMUKJotw2/VyvtkFSRJe+jkM8+spPHEwZmR4svGDJ3VNujLnSet +l+ZKQJxqB4KjY2ocSWmeioo18Ot7uzaJRVBiaml0uVNqJWLZFBOSUf59/dDxwuG +9mbDfyG3hzjO6UepZFt6zwDlLqaB4Cg2cInDi7mhag/cUpN5St07Q0ncXV+QaKe dVh2u8luXAwXkkw9LypfeulMrIV6a3q+RWpDdmuHm5K61cpPtCASapOyl+3rPNKp 9I3hNMxLZ6mpGsfjYEnv+3PxJY3+luSx59uYPkrEh0OIFP3XIZs= -----END CERTIFICATE-----Generated at Sun Nov 24 17:17:42 2024 by rpki-client on console-fra.rpki-client.org