$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: NpledX/hBMyFbxzrY4UD+9QKItwdVG5G+JYSRd6Obm0= Subject key identifier: FA:BD:8A:65:FA:1E:CA:26:00:F5:60:FD:6F:E1:91:1D:6D:E4:80:B4 Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 51D79552532AE79DB14534F51A54FAF9EA9C91A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 0198 Signing time: Wed 20 Nov 2024 22:41:09 +0000 Manifest this update: Wed 20 Nov 2024 22:36:09 +0000 Manifest next update: Sun 24 Nov 2024 02:13:09 +0000 Files and hashes: 1: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: sHk+rDUoslxbs9K22CTWWu0QvVnGh2bRGYJh/prhaF0=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: AhFAj1aPo5BUsoGjkx7Cb5Y0giIELHz57C7lp0SERes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 02:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d7:95:52:53:2a:e7:9d:b1:45:34:f5:1a:54:fa:f9:ea:9c:91:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Nov 20 22:36:09 2024 GMT Not After : Nov 24 02:13:09 2024 GMT Subject: CN=FABD8A65FA1ECA2600F560FD6FE1911D6DE480B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1d:f9:0f:a6:4c:89:16:e8:da:3b:e9:c9:1f: 78:7e:a2:a3:d8:88:2b:a7:2d:9a:f0:29:67:0c:47: 93:b3:d5:40:1f:48:a2:fa:fa:e4:77:3c:2b:eb:e9: 93:1d:a1:75:84:97:f7:d9:d3:5f:ba:84:d2:2d:1e: 25:38:aa:04:c9:d1:35:a5:59:31:cf:3d:e5:3e:b9: 87:af:67:28:f6:ff:76:f9:ac:b9:02:ab:d2:25:55: 84:37:9c:8d:0f:69:2d:11:f0:7f:10:32:e0:4f:03: 51:67:ad:59:7f:7c:3b:42:1d:4a:38:f1:86:91:c9: d5:7d:52:37:ed:5b:4b:72:a9:3d:4e:66:bf:a7:b9: a2:00:fe:c0:56:f5:ba:14:1f:b0:91:1d:23:22:4c: b1:c5:20:64:aa:dd:b6:ba:cb:e3:5b:a8:99:c2:2b: 16:c9:62:18:ef:fc:09:bf:16:bd:69:5f:2d:67:29: a5:31:9b:00:5f:98:14:90:7f:08:2d:2d:38:25:1e: 9c:ae:b9:e9:01:2e:e2:62:20:51:a5:16:a2:ad:2e: 35:a6:3f:ff:67:51:5f:b3:33:4d:52:85:0b:60:6a: 28:00:f7:0d:1b:ca:de:a1:16:11:5f:da:61:d3:8e: f1:93:e4:6d:e3:32:07:10:29:52:c1:50:ac:bd:4a: a1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BD:8A:65:FA:1E:CA:26:00:F5:60:FD:6F:E1:91:1D:6D:E4:80:B4 X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8b:05:dd:32:43:d6:42:88:22:74:d2:a0:58:40:35:83:db: 0f:fc:14:93:dd:e5:ef:41:98:03:15:83:d5:f3:ae:8a:8c:74: be:91:ad:b2:5f:59:9f:60:35:d5:ff:77:84:8b:c6:4d:3e:5f: dc:e4:19:df:92:75:d9:f8:96:68:c8:61:2a:a6:92:d6:76:3a: 1c:8c:5c:f9:74:69:2f:2c:61:86:16:f7:58:47:02:7d:2e:c6: 90:97:65:57:83:f7:e4:6d:32:28:4b:70:b8:b6:c5:33:ee:e3: 7f:04:28:5d:dd:d0:2d:f9:ae:c4:bc:0e:7a:99:9b:1d:55:bf: af:59:18:6d:7e:9b:b6:72:98:0a:b5:13:bf:65:93:c7:ab:df: f4:5c:70:80:83:8b:69:77:6d:c0:df:76:87:f4:9f:29:67:aa: 7d:73:20:25:f6:7e:be:3b:21:73:62:de:7b:d6:88:18:c1:47: d3:73:19:29:d0:d6:10:a3:8a:34:4a:0a:13:6b:3e:a4:89:f5: 21:8c:c8:b7:9d:0b:de:72:65:16:a3:06:32:41:99:65:1d:6f: 81:23:d3:fd:32:70:11:72:35:13:f1:98:2d:ce:b0:f6:3e:ce: 02:6c:3c:31:b5:8a:84:32:dc:27:75:6f:b3:36:32:45:e2:43: 75:3d:8c:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUdeVUlMq552xRTT1GlT6+eqckaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNDExMjAyMjM2MDlaFw0yNDExMjQwMjEzMDlaMDMxMTAvBgNV BAMTKEZBQkQ4QTY1RkExRUNBMjYwMEY1NjBGRDZGRTE5MTFENkRFNDgwQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcHfkPpkyJFujaO+nJH3h+oqPY iCunLZrwKWcMR5Oz1UAfSKL6+uR3PCvr6ZMdoXWEl/fZ01+6hNItHiU4qgTJ0TWl WTHPPeU+uYevZyj2/3b5rLkCq9IlVYQ3nI0PaS0R8H8QMuBPA1FnrVl/fDtCHUo4 8YaRydV9UjftW0tyqT1OZr+nuaIA/sBW9boUH7CRHSMiTLHFIGSq3ba6y+NbqJnC KxbJYhjv/Am/Fr1pXy1nKaUxmwBfmBSQfwgtLTglHpyuuekBLuJiIFGlFqKtLjWm P/9nUV+zM01ShQtgaigA9w0byt6hFhFf2mHTjvGT5G3jMgcQKVLBUKy9SqEzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+r2KZfoeyiYA9WD9b+GRHW3kgLQwHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqLBd0yQ9ZCiCJ00qBYQDWD2w/8FJPd5e9B mAMVg9XzroqMdL6RrbJfWZ9gNdX/d4SLxk0+X9zkGd+Sddn4lmjIYSqmktZ2OhyM XPl0aS8sYYYW91hHAn0uxpCXZVeD9+RtMihLcLi2xTPu438EKF3d0C35rsS8DnqZ mx1Vv69ZGG1+m7ZymAq1E79lk8er3/RccICDi2l3bcDfdof0nylnqn1zICX2fr47 IXNi3nvWiBjBR9NzGSnQ1hCjijRKChNrPqSJ9SGMyLedC95yZRajBjJBmWUdb4Ej 0/0ycBFyNRPxmC3OsPY+zgJsPDG1ioQy3Cd1b7M2MkXiQ3U9jKY= -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org