$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft File: D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json) Hash identifier: +hPOSzqf+1o4Jrp3DoLcP3TyPNid6UR66XRBC1FpyJc= Subject key identifier: B7:41:F0:E8:4E:6E:17:1C:E1:51:95:CC:67:44:1A:F5:34:BD:9F:4C Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 11DFF0789187BCD620B7F15ACCE445B1D7E7F72D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft Manifest number: 0481 Signing time: Thu 21 Nov 2024 02:01:15 +0000 Manifest this update: Thu 21 Nov 2024 01:56:15 +0000 Manifest next update: Sun 24 Nov 2024 04:00:15 +0000 Files and hashes: 1: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: 5DrcuSL2kj2578vfxL+VIIRLyXGA+oCNPnvjmoU21cs=) 2: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: hQDC9v2yWbYZiHxog5fWu9s3/ZtDVdDk75QTAxXB7es=) 3: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: M8G7fg26FDnNwWV4HPrq23C/br3Zk2rCpobcnxBUCyY=) 4: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: D3QpbLwBuqBnzghQzR94brnrZBQs5SslJENq3gZzkrM=) 5: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: CHZ128npCwVQ4M8Cvb+jJIbKllgS1SECsoYv/6D/sF0=) 6: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iNjcB0kWnopXWaRjUuHXoGmYpnB3R6bix+q7nd5LKus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 04:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:df:f0:78:91:87:bc:d6:20:b7:f1:5a:cc:e4:45:b1:d7:e7:f7:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Nov 21 01:56:15 2024 GMT Not After : Nov 24 04:00:15 2024 GMT Subject: CN=B741F0E84E6E171CE15195CC67441AF534BD9F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a3:cf:76:c9:12:0e:89:7d:e1:0d:2c:59:75: fe:85:71:a6:a4:72:9e:b8:10:a0:98:c2:ae:be:b0: 72:8f:89:e4:a5:74:c3:71:ab:f3:86:f1:db:70:ea: 98:e3:65:1b:ae:de:2e:b4:3b:eb:66:66:fa:b9:0f: 26:2d:3d:f0:0d:a8:9c:c9:1e:32:46:df:5d:01:44: 9f:ac:87:75:4b:46:db:be:7f:6d:d7:32:c7:d2:ca: 24:dc:5a:43:e8:68:ec:8e:39:fe:63:51:b9:46:de: 2f:28:5d:3e:9c:67:60:e6:8f:fe:bb:94:f0:02:f6: d2:6b:8e:be:c7:6f:58:f4:5b:0b:72:99:8f:ac:82: 9e:24:9f:ac:b4:31:10:31:de:a4:72:01:18:16:f8: fd:9c:a1:d6:c3:d9:c5:b0:4c:c8:c7:03:b0:25:1a: 51:c7:0b:36:7c:20:23:c7:1e:d4:86:2b:d4:a4:c5: 56:d4:ed:91:03:61:18:77:6f:a4:92:4f:2f:80:f1: c3:95:92:00:24:58:f9:07:f7:f8:2d:4d:ab:c6:39: dc:d5:5c:96:fa:ae:eb:25:83:7c:b4:be:78:40:d0: af:29:d6:28:0d:cc:29:2c:eb:62:22:72:8d:c9:95: f3:d3:9c:87:f6:c8:29:12:61:19:3d:49:95:fa:3b: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:41:F0:E8:4E:6E:17:1C:E1:51:95:CC:67:44:1A:F5:34:BD:9F:4C X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:25:73:a6:3e:9c:0c:0f:ad:25:73:ce:bf:26:cd:5f:63:38: 8d:6f:fe:37:2c:31:0a:58:90:09:8f:cf:54:f9:fa:2c:66:b3: 1e:1e:78:05:31:b0:04:bb:5b:2b:49:04:52:16:56:2b:8c:eb: 28:ec:a2:8b:b4:b1:8f:04:a8:ff:1d:9e:40:b5:0c:e2:c1:28: 95:e6:e5:a3:e5:19:c5:3b:aa:21:42:40:bb:d4:b8:d8:8a:e1: 64:db:3d:97:bc:26:fb:10:80:2f:e7:f9:3b:a0:d5:1c:3a:c5: 66:35:0f:02:e5:a1:df:f7:72:df:e4:af:04:69:e0:6f:4e:f7: 56:a6:a6:e1:cc:c4:9f:76:7d:fc:70:45:b2:13:19:61:d9:31: b3:76:a2:eb:4f:32:25:8c:58:b5:de:e7:71:59:41:02:cb:47: b8:a2:ed:13:0e:85:11:c2:46:46:b1:1a:aa:b0:66:9c:e8:4e: 9c:bd:d0:72:47:72:74:18:71:40:ab:77:78:c3:e3:ec:b9:de: be:71:54:58:f0:a9:91:50:31:76:86:d6:49:41:64:33:47:ec: 59:92:ba:94:89:25:1b:13:38:76:9c:3b:33:4a:9d:ae:6c:4f: ec:92:f0:a2:c9:06:10:10:f7:59:91:61:5c:d6:68:d8:b2:2c: 15:63:86:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEd/weJGHvNYgt/FazORFsdfn9y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yNDExMjEwMTU2MTVaFw0yNDExMjQwNDAwMTVaMDMxMTAvBgNV BAMTKEI3NDFGMEU4NEU2RTE3MUNFMTUxOTVDQzY3NDQxQUY1MzRCRDlGNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdo892yRIOiX3hDSxZdf6Fcaak cp64EKCYwq6+sHKPieSldMNxq/OG8dtw6pjjZRuu3i60O+tmZvq5DyYtPfANqJzJ HjJG310BRJ+sh3VLRtu+f23XMsfSyiTcWkPoaOyOOf5jUblG3i8oXT6cZ2Dmj/67 lPAC9tJrjr7Hb1j0WwtymY+sgp4kn6y0MRAx3qRyARgW+P2codbD2cWwTMjHA7Al GlHHCzZ8ICPHHtSGK9SkxVbU7ZEDYRh3b6SSTy+A8cOVkgAkWPkH9/gtTavGOdzV XJb6ruslg3y0vnhA0K8p1igNzCks62Iico3JlfPTnIf2yCkSYRk9SZX6OxFrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0Hw6E5uFxzhUZXMZ0Qa9TS9n0wwHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0Yy MDRBM0UxMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0lc6Y+nAwPrSVzzr8mzV9jOI1v/jcsMQpY kAmPz1T5+ixmsx4eeAUxsAS7WytJBFIWViuM6yjsoou0sY8EqP8dnkC1DOLBKJXm 5aPlGcU7qiFCQLvUuNiK4WTbPZe8JvsQgC/n+Tug1Rw6xWY1DwLlod/3ct/krwRp 4G9O91ampuHMxJ92ffxwRbITGWHZMbN2outPMiWMWLXe53FZQQLLR7ii7RMOhRHC RkaxGqqwZpzoTpy90HJHcnQYcUCrd3jD4+y53r5xVFjwqZFQMXaG1klBZDNH7FmS upSJJRsTOHacOzNKna5sT+yS8KLJBhAQ91mRYVzWaNiyLBVjhm0= -----END CERTIFICATE-----Generated at Thu Nov 21 03:17:49 2024 by rpki-client on console-ams.rpki-client.org