$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: BdDS3O1LLOSVVMAoi6Sy8NAO6vTyMH4xTz9CAcaxpGE= Subject key identifier: 56:B2:48:69:A9:4B:A4:72:61:71:34:34:4F:07:89:27:6A:2C:9A:69 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 044261EB62723C817ADCC02CBF3476E4398202B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 0167 Signing time: Thu 21 Nov 2024 06:51:58 +0000 Manifest this update: Thu 21 Nov 2024 06:46:58 +0000 Manifest next update: Sun 24 Nov 2024 18:32:58 +0000 Files and hashes: 1: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: hbMNbQIpQNzBaqnoG+Kd/kQULDHhxDOM8qYyY0Cq0hk=) 2: 3130332e3136302e36392e302f32342d3234203d3e203438343635.roa (hash: auLcgmSGCQAKQQp7IS/UW/PKknCFg/ObGvfBAC+PkNE=) 3: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: xfIhG1WqC8mycFYz+vcqQY0Ov8VUQ3o8w6al6PEEFwc=) 4: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: a7mgV41OX87LjUgmR9JI4fbD1k92EJK28gdqBsIBQfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:42:61:eb:62:72:3c:81:7a:dc:c0:2c:bf:34:76:e4:39:82:02:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Nov 21 06:46:58 2024 GMT Not After : Nov 24 18:32:58 2024 GMT Subject: CN=56B24869A94BA472617134344F0789276A2C9A69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ff:0c:93:cb:0d:1f:94:fa:b4:13:24:c9:d4: fc:0c:27:0a:bd:db:aa:8e:d8:b5:99:2f:33:c9:2d: 29:38:d9:a7:b4:a2:f7:b8:3d:7d:b2:bf:86:ec:3d: 00:22:83:22:7c:e4:ca:ec:18:7e:f1:eb:65:17:dc: 27:83:e9:3c:ff:8c:80:76:6d:90:31:70:0e:0f:06: a3:20:38:d5:3f:df:bf:0c:8b:7c:fb:b0:f4:7e:25: e2:8e:66:d4:d2:c8:34:a8:91:d7:9d:83:bf:24:da: f0:d9:87:b0:e7:37:1f:1b:76:dc:b3:9f:72:92:54: f3:5a:97:01:cd:31:24:9e:39:7f:3d:66:d3:62:5a: ae:f2:94:c2:36:67:3c:41:9b:07:dd:d7:85:80:ea: 23:a9:90:2a:c3:f5:a0:f0:d3:9e:7d:b1:09:45:1a: fe:ec:5d:c2:4c:3c:8f:ce:ea:7c:f3:a2:66:09:65: 41:dd:5b:13:c6:73:68:cf:2a:01:e9:d9:af:a1:3d: 20:b6:80:e6:bc:fd:33:4e:24:04:67:38:95:a7:e0: a7:bf:ea:d8:e2:8a:43:33:7e:10:5c:6d:b1:b4:8a: c0:31:ae:33:e0:a5:50:63:03:ae:ca:b9:94:0b:cd: 8a:d3:37:0c:2b:d6:6b:10:e8:bc:d7:cb:7b:b6:2a: ad:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B2:48:69:A9:4B:A4:72:61:71:34:34:4F:07:89:27:6A:2C:9A:69 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:48:4e:4d:b5:6d:ed:1f:7f:77:26:ef:37:84:a8:e6:9a:c6: 81:3c:30:11:d1:f7:2b:b6:ee:73:bb:45:b1:26:a0:99:b3:39: 74:cf:48:57:2b:d0:d1:30:7f:0b:40:37:53:b7:a6:72:d6:58: 05:67:a7:95:32:85:dc:99:9a:cc:00:0f:f4:38:b9:70:d2:a6: 54:9e:60:bf:e2:37:88:8d:95:6c:07:a6:3f:34:06:63:8b:b5: 0f:14:c3:40:81:a5:4c:59:a2:ee:58:72:2d:74:e7:e9:ca:1f: ea:99:b2:bf:2f:23:c7:e1:1c:48:c5:61:00:d5:88:d8:fc:b1: 6b:03:b6:70:32:cd:c4:b8:c8:66:97:e1:0a:6d:ab:a7:10:71: ad:03:2f:5e:75:7b:ed:91:f2:e6:b1:f9:24:ed:81:a4:14:72: fe:f5:d8:fc:14:96:af:0b:ba:47:98:a2:f2:28:cf:3a:ac:03: 1a:fc:45:7e:d8:00:77:ab:ac:03:00:c7:43:12:5e:3e:f6:5a: 11:ff:b7:16:78:96:75:e2:00:cb:60:d1:42:88:b1:ff:bd:b7: 31:06:c7:c1:9d:1f:78:72:8d:89:cc:28:f9:8c:18:1c:72:1a: 74:a6:5d:2d:7a:cd:44:54:9e:3e:96:b2:99:2d:fb:44:7b:d8: b7:f2:a5:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBEJh62JyPIF63MAsvzR25DmCArgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNDExMjEwNjQ2NThaFw0yNDExMjQxODMyNThaMDMxMTAvBgNV BAMTKDU2QjI0ODY5QTk0QkE0NzI2MTcxMzQzNDRGMDc4OTI3NkEyQzlBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/wyTyw0flPq0EyTJ1PwMJwq9 26qO2LWZLzPJLSk42ae0ove4PX2yv4bsPQAigyJ85MrsGH7x62UX3CeD6Tz/jIB2 bZAxcA4PBqMgONU/378Mi3z7sPR+JeKOZtTSyDSokdedg78k2vDZh7DnNx8bdtyz n3KSVPNalwHNMSSeOX89ZtNiWq7ylMI2ZzxBmwfd14WA6iOpkCrD9aDw0559sQlF Gv7sXcJMPI/O6nzzomYJZUHdWxPGc2jPKgHp2a+hPSC2gOa8/TNOJARnOJWn4Ke/ 6tjiikMzfhBcbbG0isAxrjPgpVBjA67KuZQLzYrTNwwr1msQ6LzXy3u2Kq1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVrJIaalLpHJhcTQ0TweJJ2osmmkwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1ITk21be0ff3cm7zeEqOaaxoE8MBHR9yu2 7nO7RbEmoJmzOXTPSFcr0NEwfwtAN1O3pnLWWAVnp5UyhdyZmswAD/Q4uXDSplSe YL/iN4iNlWwHpj80BmOLtQ8Uw0CBpUxZou5Yci105+nKH+qZsr8vI8fhHEjFYQDV iNj8sWsDtnAyzcS4yGaX4Qptq6cQca0DL151e+2R8uax+STtgaQUcv712PwUlq8L ukeYovIozzqsAxr8RX7YAHerrAMAx0MSXj72WhH/txZ4lnXiAMtg0UKIsf+9tzEG x8GdH3hyjYnMKPmMGBxyGnSmXS16zURUnj6Wspkt+0R72LfypWg= -----END CERTIFICATE-----Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org