$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft File: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft (raw, json) Hash identifier: dTu+/xY5WKb+zJxYP/XFwygEFBKi96KSxvGOh1ftmpM= Subject key identifier: 13:E2:BC:C0:3D:C1:72:A0:5E:BF:45:D6:C5:56:98:DF:08:97:2D:D3 Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 Certificate issuer: /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Certificate serial: 232021F4A1B457D4F348191C83762D445FA3E2A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft Manifest number: 014F Signing time: Mon 25 Nov 2024 02:31:51 +0000 Manifest this update: Mon 25 Nov 2024 02:26:51 +0000 Manifest next update: Thu 28 Nov 2024 09:42:51 +0000 Files and hashes: 1: 3130332e33302e3139322e302f32332d3234203d3e20313530323537.roa (hash: NcX+WY03GcamnAjiYWsvkUsu3rYUAuUBqwJZYTrEuHg=) 2: 3130332e33302e3139332e302f32342d3234203d3e20313530323537.roa (hash: FkjuZkviekb7VaMyMmuCMchrVU1yZ527lgE1cprIhiU=) 3: 3130332e33302e3139322e302f32342d3234203d3e20313530323537.roa (hash: ZsYKQLKtHkVTslRdGYlW0kXwJ9gapNRm2k1uNrTnTX0=) 4: 3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (hash: lUZF/QzFHugeiEEl0D5koXzJlhQqH/0dDMKXvae9nbE=) 5: 3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl (hash: mnOccBdhoFkhlFhJijfmJYpABRL8akB94lUyfluswAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:20:21:f4:a1:b4:57:d4:f3:48:19:1c:83:76:2d:44:5f:a3:e2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77 Validity Not Before: Nov 25 02:26:51 2024 GMT Not After : Nov 28 09:42:51 2024 GMT Subject: CN=13E2BCC03DC172A05EBF45D6C55698DF08972DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:fd:df:4d:9a:53:7b:98:34:65:18:36:3d: da:39:e4:35:97:05:d6:96:d8:cc:1a:98:9a:8a:e0: 3d:a9:b4:5f:b3:59:51:97:d5:39:09:84:d2:d1:eb: da:67:68:27:d6:da:55:8d:1a:ad:60:e6:a4:23:7b: 31:76:c2:20:d1:e0:36:54:2c:78:0a:67:06:7a:f7: 17:ff:6b:54:54:91:cd:27:c5:bb:59:2b:08:32:aa: 8f:a7:7b:d8:cf:20:da:33:99:7a:35:22:a6:01:ec: 18:80:ef:ec:34:70:e3:40:0a:d8:61:34:20:20:ef: 69:79:26:43:c8:69:64:0f:b3:17:a5:c3:21:f6:d4: 6a:ee:13:4c:23:c4:29:22:c1:8f:b5:81:c4:5b:18: 9c:02:cd:ee:e9:47:75:97:30:ae:f4:f9:41:09:a6: 57:54:46:a7:a6:8e:f2:7c:72:4c:d6:9e:91:a3:98: cf:a1:7f:a9:0b:de:d9:20:fc:7b:e0:10:76:5d:2d: af:54:52:3b:7b:7b:a9:48:b2:05:ef:e6:33:cb:7e: db:81:ef:70:24:30:01:09:4f:92:1e:3f:3e:b1:99: 4f:9c:a5:88:49:b5:70:13:d1:e9:49:74:93:8c:61: 62:4b:1b:dc:08:71:f6:03:2a:aa:9d:de:5f:00:35: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E2:BC:C0:3D:C1:72:A0:5E:BF:45:D6:C5:56:98:DF:08:97:2D:D3 X509v3 Authority Key Identifier: keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cf:97:dd:18:c5:73:ae:88:82:ed:0f:34:ad:ba:bd:fe:bd: 33:ba:a6:bf:6f:ae:4c:ec:68:c1:0c:f5:9a:0d:17:cd:ee:b6: 5b:59:af:e2:5a:f9:c5:3d:2d:05:38:15:1d:73:80:ed:42:1c: 70:76:d9:3d:42:e4:74:27:ba:63:40:1a:8e:05:b7:b0:d9:99: 3a:92:c0:b8:41:98:43:6d:af:5f:99:b6:fc:64:8b:51:87:dd: e2:ac:5f:90:46:05:67:23:5f:22:70:da:84:e0:fb:8a:41:63: bb:1d:28:eb:6f:89:bf:25:c3:03:dd:64:ff:a3:6a:3c:85:d5: db:0c:65:f1:85:b9:b0:f3:80:d1:6b:c7:ab:bd:10:10:ec:c5: e0:e8:1d:b8:1c:03:09:be:4b:3e:5e:c1:e0:7d:02:47:fd:9e: e0:0e:97:36:71:e4:cc:59:7e:b9:bb:13:7e:c0:5a:cc:83:81: 71:cd:87:45:9c:53:f1:b1:4f:96:9b:0a:76:3c:91:a7:03:3f: 80:0b:cc:9d:60:26:48:94:30:39:df:d5:06:0b:e9:c8:be:49: 8d:95:35:df:52:fe:9d:ae:df:f7:2f:fa:34:a2:eb:57:6c:f2: 89:45:1a:1c:50:58:fd:52:a0:25:03:ff:84:35:50:44:63:c9: 9c:6f:95:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyAh9KG0V9TzSBkcg3YtRF+j4qkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVC NkMyMUM3NzAeFw0yNDExMjUwMjI2NTFaFw0yNDExMjgwOTQyNTFaMDMxMTAvBgNV BAMTKDEzRTJCQ0MwM0RDMTcyQTA1RUJGNDVENkM1NTY5OERGMDg5NzJERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rf3fTZpTe5g0ZRg2Pdo55DWX BdaW2MwamJqK4D2ptF+zWVGX1TkJhNLR69pnaCfW2lWNGq1g5qQjezF2wiDR4DZU LHgKZwZ69xf/a1RUkc0nxbtZKwgyqo+ne9jPINozmXo1IqYB7BiA7+w0cONACthh NCAg72l5JkPIaWQPsxelwyH21GruE0wjxCkiwY+1gcRbGJwCze7pR3WXMK70+UEJ pldURqemjvJ8ckzWnpGjmM+hf6kL3tkg/HvgEHZdLa9UUjt7e6lIsgXv5jPLftuB 73AkMAEJT5IePz6xmU+cpYhJtXAT0elJdJOMYWJLG9wIcfYDKqqd3l8ANXZpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE+K8wD3BcqBev0XWxVaY3wiXLdMwHwYDVR0j BBgwFoAUPSBSK1GuqkH1lJDi1Vw23rbCHHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTYxZTVhZS1lNDVmLTRlZTMtOGY2Yi03Y2I1OWQ2MTc4M2IvMC8zRDIwNTIyQjUx QUVBQTQxRjU5NDkwRTJENTVDMzZERUI2QzIxQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2REVCNkMy MUM3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU2MWU1YWUtZTQ1Zi00ZWUzLThm NmItN2NiNTlkNjE3ODNiLzAvM0QyMDUyMkI1MUFFQUE0MUY1OTQ5MEUyRDU1QzM2 REVCNkMyMUM3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzPl90YxXOuiILtDzStur3+vTO6pr9vrkzs aMEM9ZoNF83utltZr+Ja+cU9LQU4FR1zgO1CHHB22T1C5HQnumNAGo4Ft7DZmTqS wLhBmENtr1+Ztvxki1GH3eKsX5BGBWcjXyJw2oTg+4pBY7sdKOtvib8lwwPdZP+j ajyF1dsMZfGFubDzgNFrx6u9EBDsxeDoHbgcAwm+Sz5eweB9Akf9nuAOlzZx5MxZ frm7E37AWsyDgXHNh0WcU/GxT5abCnY8kacDP4ALzJ1gJkiUMDnf1QYL6ci+SY2V Nd9S/p2u3/cv+jSi61ds8olFGhxQWP1SoCUD/4Q1UERjyZxvlZQ= -----END CERTIFICATE-----Generated at Mon Nov 25 04:52:36 2024 by rpki-client on console-fra.rpki-client.org