$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft File: DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json) Hash identifier: XckSuU1C5y2LbtdEXN6cX8HhKwlVRfd08ZUO7PdboEU= Subject key identifier: FB:A7:84:26:4F:49:9F:4E:B5:45:10:4D:F1:45:40:13:DF:89:BB:15 Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE Certificate issuer: /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Certificate serial: 6B18C418A15DF62D2E845180BD7CA8D44A18EF70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft Manifest number: 0481 Signing time: Wed 20 Nov 2024 19:00:58 +0000 Manifest this update: Wed 20 Nov 2024 18:55:58 +0000 Manifest next update: Sat 23 Nov 2024 19:18:58 +0000 Files and hashes: 1: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: 8WsT2HB3dkGC5GBXvz+PmEaSdFjE1pz4gD/dR6UJCbA=) 2: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: KIBNFpdbg6BRQCIPOHqspYOBoezcUYWgmcH91SlD2KY=) 3: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: Y4VWHmgW9HZwKxSE/waNnU6ZuSrPKeVjHYVcm5B2tUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 18:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:18:c4:18:a1:5d:f6:2d:2e:84:51:80:bd:7c:a8:d4:4a:18:ef:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Validity Not Before: Nov 20 18:55:58 2024 GMT Not After : Nov 23 19:18:58 2024 GMT Subject: CN=FBA784264F499F4EB545104DF1454013DF89BB15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:0f:36:31:42:d0:73:b8:7f:d6:19:13:fd: dd:cd:c8:05:71:0e:84:79:e3:e0:c9:bb:ea:4a:ea: e9:2b:1a:4c:9f:6b:64:65:07:ec:33:c3:a1:1c:5d: cd:c1:70:e9:4d:85:91:61:cc:6c:24:1c:ab:ba:ed: 39:89:ff:f0:6a:51:74:27:2e:b1:ce:d0:7b:2c:5f: 41:9c:9a:c0:59:52:32:4a:de:ff:47:89:29:bd:a7: 4c:89:9f:61:3f:a8:6e:74:4d:40:e3:57:10:ed:37: ca:70:68:21:88:bc:7c:46:f0:3e:45:50:20:79:6b: b2:d3:f9:d9:e2:67:70:97:45:35:82:1e:dd:4e:9d: d3:81:f2:32:56:52:30:58:27:b9:b6:7e:c2:8f:b0: 58:fe:39:cf:80:b2:f5:7c:b8:13:36:86:06:78:a8: e8:a6:7f:40:e7:f3:88:a0:86:9d:e4:8f:20:94:ac: 49:fe:c3:17:b9:36:0c:04:17:3c:06:de:92:5a:94: a0:66:b6:f4:88:48:6b:42:15:16:02:ec:35:2c:26: d8:e6:8c:ae:ad:f9:e3:80:5e:bb:12:bb:84:16:82: 89:3f:f1:2f:be:52:76:10:a4:96:4c:3c:dc:30:96: 1b:13:ed:82:e3:32:89:b0:80:02:bd:ed:c0:7c:58: 48:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A7:84:26:4F:49:9F:4E:B5:45:10:4D:F1:45:40:13:DF:89:BB:15 X509v3 Authority Key Identifier: keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5f:0a:0d:04:e9:05:0c:98:a0:10:a3:5e:06:7f:f3:df:8d: 1f:4f:aa:73:69:4c:06:25:49:6f:47:68:71:9f:59:9f:a3:cd: 46:89:a8:5a:db:f1:bc:c4:09:8b:dc:28:a5:f6:76:e2:0b:18: 69:25:58:b9:9f:59:5c:a8:66:ea:c5:12:62:d0:d1:4b:49:bc: da:a5:30:d5:a1:59:21:1b:34:8c:65:68:12:c9:67:b6:c3:71: 04:e9:6b:5b:39:7d:5b:28:f5:d7:5d:1e:fd:ce:b2:3d:b5:d6: 2e:1e:14:e7:28:f7:7b:c4:63:c5:50:8b:e1:00:d9:80:bb:78: d2:c7:13:75:10:97:a4:92:04:f4:3e:bd:5e:6a:2e:07:9c:1d: c1:68:e3:57:cf:7f:05:a2:4a:ab:45:7e:1a:3c:72:2a:c9:1c: bc:9b:d4:f6:cb:43:0d:21:3b:f7:22:3c:96:75:6f:1b:b2:27: b0:10:81:25:59:aa:03:dc:49:1a:d2:55:f0:37:b1:38:49:d6: 37:b8:d3:64:f7:7f:1f:b8:30:e9:d5:94:8b:98:79:96:f5:73: 7c:7c:8b:47:f9:86:60:e8:9d:5d:39:65:5c:af:bd:06:d0:9b: cb:87:9c:7f:57:a6:c8:17:12:89:a1:9f:bc:8e:1a:32:f8:53: ff:b2:04:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxjEGKFd9i0uhFGAvXyo1EoY73AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NE Q0VFRkFDRTAeFw0yNDExMjAxODU1NThaFw0yNDExMjMxOTE4NThaMDMxMTAvBgNV BAMTKEZCQTc4NDI2NEY0OTlGNEVCNTQ1MTA0REYxNDU0MDEzREY4OUJCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61A82MULQc7h/1hkT/d3NyAVx DoR54+DJu+pK6ukrGkyfa2RlB+wzw6EcXc3BcOlNhZFhzGwkHKu67TmJ//BqUXQn LrHO0HssX0GcmsBZUjJK3v9HiSm9p0yJn2E/qG50TUDjVxDtN8pwaCGIvHxG8D5F UCB5a7LT+dniZ3CXRTWCHt1OndOB8jJWUjBYJ7m2fsKPsFj+Oc+AsvV8uBM2hgZ4 qOimf0Dn84ighp3kjyCUrEn+wxe5NgwEFzwG3pJalKBmtvSISGtCFRYC7DUsJtjm jK6t+eOAXrsSu4QWgok/8S++UnYQpJZMPNwwlhsT7YLjMomwgAK97cB8WEgRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+6eEJk9Jn061RRBN8UVAE9+JuxUwHwYDVR0j BBgwFoAU3vRDMecklk8oaX3quvIxPNzu+s4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkwYzM3ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC9ERUY0NDMzMUU3 MjQ5NjRGMjg2OTdERUFCQUYyMzEzQ0RDRUVGQUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NEQ0VF RkFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMx M0NEQ0VFRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpfCg0E6QUMmKAQo14Gf/PfjR9PqnNpTAYl SW9HaHGfWZ+jzUaJqFrb8bzECYvcKKX2duILGGklWLmfWVyoZurFEmLQ0UtJvNql MNWhWSEbNIxlaBLJZ7bDcQTpa1s5fVso9dddHv3Osj211i4eFOco93vEY8VQi+EA 2YC7eNLHE3UQl6SSBPQ+vV5qLgecHcFo41fPfwWiSqtFfho8cirJHLyb1PbLQw0h O/ciPJZ1bxuyJ7AQgSVZqgPcSRrSVfA3sThJ1je402T3fx+4MOnVlIuYeZb1c3x8 i0f5hmDonV05ZVyvvQbQm8uHnH9XpsgXEomhn7yOGjL4U/+yBFg= -----END CERTIFICATE-----Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org