$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: BissaiADgiPFPBgBpeYQ8AhV38+8xhUU2MAV+NTy3ts= Subject key identifier: F2:CB:EF:A7:37:2F:08:5F:68:79:04:D7:FD:64:6B:C4:47:8C:DD:9C Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 3D2250679DAF5E0F1187E96D70B003E37708B645 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 0167 Signing time: Mon 25 Nov 2024 01:20:58 +0000 Manifest this update: Mon 25 Nov 2024 01:15:58 +0000 Manifest next update: Thu 28 Nov 2024 09:09:58 +0000 Files and hashes: 1: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: 2Vdu2MWYo3OwMz4g8uGZOXFnM8X1Z4ETt9GbdMMRo+8=) 2: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: /8mYHgle5dUiKhXaPe+2ns5YLbV8B1lv41K5lG5XS44=) 3: 3130332e3133382e31302e302f32342d3234203d3e20313339393436.roa (hash: x0FyH+54tGVIHMkduN+M1I4U/hMtfVuXH222Qje9UQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:22:50:67:9d:af:5e:0f:11:87:e9:6d:70:b0:03:e3:77:08:b6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Nov 25 01:15:58 2024 GMT Not After : Nov 28 09:09:58 2024 GMT Subject: CN=F2CBEFA7372F085F687904D7FD646BC4478CDD9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c0:1c:20:2f:58:ad:9f:fc:a3:16:3e:34:2e: 28:9d:de:01:67:15:9a:33:40:b7:33:9e:43:cf:58: d7:ac:ea:d8:e9:99:d4:e2:7e:f0:16:02:ad:c7:5f: 24:e0:ff:39:7f:d7:5a:32:52:c7:56:f5:8e:6e:96: 96:03:d8:fe:b0:d3:04:78:cc:1f:f5:29:a2:89:f6: 22:df:08:59:ba:9f:50:69:af:77:c5:d2:5b:52:03: 6c:23:bb:ba:02:a0:ae:44:24:ac:cb:9a:9f:61:4f: a4:b2:58:99:f1:95:7c:85:c1:a6:90:c4:f0:f1:e5: 6f:40:8e:4d:65:61:b2:29:7e:e7:f8:0f:5b:77:38: e2:09:75:da:06:47:8d:07:d8:e2:1f:73:af:04:59: be:35:31:37:6b:73:cb:05:6c:79:ef:20:1f:9f:35: 9b:db:64:b0:0c:76:1d:d0:da:b4:41:d4:d8:d6:0d: 72:8d:f1:07:1d:88:81:56:d9:2e:e1:80:4b:fe:c0: 3a:0b:7f:4a:0a:8f:8f:cb:8e:41:35:2f:20:8e:16: f7:1b:1e:56:9b:95:01:a0:cf:52:5f:a2:e4:2a:f8: d8:cd:4b:d5:aa:97:79:84:b7:fe:2e:a8:b8:42:19: cf:3d:33:a0:a3:f0:15:e2:97:fe:dd:2d:1d:fa:39: 5c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CB:EF:A7:37:2F:08:5F:68:79:04:D7:FD:64:6B:C4:47:8C:DD:9C X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e8:39:21:6e:be:10:9c:1a:fc:48:4d:17:72:06:d2:2e:93: 6a:50:c4:fb:a7:a3:cd:b7:12:35:34:46:2a:c6:cf:70:5a:1b: b7:7f:a5:b5:da:2e:6f:f7:c1:86:1f:4f:63:ed:2d:7a:3e:c0: 94:ed:63:e0:ad:38:4a:56:d6:8b:90:81:c1:ff:0f:bf:1a:56: b9:3c:8b:02:95:f4:1d:5a:4c:be:bd:78:56:d0:cb:f4:52:6a: 81:13:26:c4:50:84:1b:5c:8e:a4:87:ac:c2:1f:78:ad:d5:09: 6d:ae:75:e8:ec:50:b8:65:c2:64:6b:dd:4b:19:c4:fe:0d:b2: bf:01:6f:b0:c3:e3:f5:a5:e0:b6:cf:d9:02:80:16:d3:d6:56: a2:13:70:57:b1:14:b1:21:0d:5f:93:37:8a:f3:8b:3c:33:7d: 2c:86:17:e3:e2:d3:b5:3e:b6:d7:3d:ff:62:7c:6a:dd:31:5d: a3:2a:33:a4:25:ba:4f:9b:0e:e1:32:36:8c:b1:6d:35:89:0a: 26:78:04:3f:3b:ff:b7:29:a8:77:44:f4:57:eb:70:16:f0:54: d2:46:f6:75:96:4d:d0:c4:f9:fd:a5:77:fd:49:76:3e:b9:ea: f1:15:17:bc:b9:e2:4b:a3:f1:ab:39:f4:c8:98:ca:2f:8b:36: 1e:ce:75:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSJQZ52vXg8Rh+ltcLAD43cItkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNDExMjUwMTE1NThaFw0yNDExMjgwOTA5NThaMDMxMTAvBgNV BAMTKEYyQ0JFRkE3MzcyRjA4NUY2ODc5MDREN0ZENjQ2QkM0NDc4Q0REOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkwBwgL1itn/yjFj40Liid3gFn FZozQLcznkPPWNes6tjpmdTifvAWAq3HXyTg/zl/11oyUsdW9Y5ulpYD2P6w0wR4 zB/1KaKJ9iLfCFm6n1Bpr3fF0ltSA2wju7oCoK5EJKzLmp9hT6SyWJnxlXyFwaaQ xPDx5W9Ajk1lYbIpfuf4D1t3OOIJddoGR40H2OIfc68EWb41MTdrc8sFbHnvIB+f NZvbZLAMdh3Q2rRB1NjWDXKN8QcdiIFW2S7hgEv+wDoLf0oKj4/LjkE1LyCOFvcb HlablQGgz1JfouQq+NjNS9Wql3mEt/4uqLhCGc89M6Cj8BXil/7dLR36OVwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8svvpzcvCF9oeQTX/WRrxEeM3ZwwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnoOSFuvhCcGvxITRdyBtIuk2pQxPuno823 EjU0RirGz3BaG7d/pbXaLm/3wYYfT2PtLXo+wJTtY+CtOEpW1ouQgcH/D78aVrk8 iwKV9B1aTL69eFbQy/RSaoETJsRQhBtcjqSHrMIfeK3VCW2udejsULhlwmRr3UsZ xP4Nsr8Bb7DD4/Wl4LbP2QKAFtPWVqITcFexFLEhDV+TN4rzizwzfSyGF+Pi07U+ ttc9/2J8at0xXaMqM6Qluk+bDuEyNoyxbTWJCiZ4BD87/7cpqHdE9FfrcBbwVNJG 9nWWTdDE+f2ld/1Jdj656vEVF7y54kuj8as59MiYyi+LNh7OdQ0= -----END CERTIFICATE-----Generated at Mon Nov 25 02:45:37 2024 by rpki-client on console-ams.rpki-client.org