$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: ZsvbSvic6+rL43dV9Jadt0d/dfEGcDK8fTijJTudq4g= Subject key identifier: 12:71:D1:22:38:A3:98:8D:E3:E2:06:F3:D8:16:8A:47:FD:56:AC:F8 Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 09C1435F25D1AB93ABAC7A7FD1F7D1EB1A6E140C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: 22 Signing time: Sun 24 Nov 2024 21:11:08 +0000 Manifest this update: Sun 24 Nov 2024 21:06:08 +0000 Manifest next update: Thu 28 Nov 2024 06:28:08 +0000 Files and hashes: 1: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 0CvOPtspHIv++OpYpPeOAtYrJalD1E7T3Av1Tkd5zHo=) 2: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: M1UfgBl+o+VtOJt76FjRKdEJWLXVwypZfHtYeDLVMfk=) 3: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: A3jdk5HePde9PRUpi99m0VUlFTAdVbE4X7ngNEPvV3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c1:43:5f:25:d1:ab:93:ab:ac:7a:7f:d1:f7:d1:eb:1a:6e:14:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Nov 24 21:06:08 2024 GMT Not After : Nov 28 06:28:08 2024 GMT Subject: CN=1271D12238A3988DE3E206F3D8168A47FD56ACF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:2c:c8:49:b9:f8:e5:f7:e4:c5:fa:69:04: 78:6d:68:40:5c:10:58:6b:ff:3b:b7:5d:c4:51:74: 19:79:df:3f:a8:10:ca:16:51:0e:d9:79:28:7f:6d: 5c:f0:4b:71:d9:33:35:b0:d7:c1:af:c9:78:41:8a: cc:99:b5:74:ab:bd:1f:fd:55:58:f2:72:c5:12:ce: 75:bf:b1:bf:82:a7:6d:09:cc:5f:8e:b0:ea:ca:d1: 3c:b2:24:6e:37:0e:c2:95:ff:59:31:22:fc:bb:0f: 34:4a:5d:54:fe:6e:e0:30:8f:99:ae:33:ea:fa:b5: 24:87:6f:4c:16:be:4f:4f:ba:8a:5e:ee:dd:c9:9e: de:e7:b1:27:57:0d:86:38:5a:40:8f:30:8d:c6:61: eb:51:df:b3:88:b8:cf:c7:7b:a4:59:68:e4:72:4f: e0:7d:24:10:4f:d3:af:fd:bf:87:7c:90:cd:9f:22: 41:dc:2d:a8:03:b1:04:17:3c:33:06:8d:6a:b4:a7: 39:c2:87:77:8c:a9:6c:c4:98:c7:04:9b:e6:41:d5: 4c:d6:7d:f3:50:3b:d6:12:96:8e:3f:f2:8f:0f:a3: 30:27:94:2a:08:68:f7:95:75:eb:83:b4:ab:47:99: ee:a7:26:91:df:cc:8a:a6:14:db:bd:27:2e:59:1b: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:71:D1:22:38:A3:98:8D:E3:E2:06:F3:D8:16:8A:47:FD:56:AC:F8 X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:95:53:fc:b3:6f:4a:ab:60:42:3e:d6:5d:dd:54:7c:4a:10: 3b:85:a6:4b:4b:0b:c7:ab:3b:d8:3f:d5:e5:97:fa:6f:48:d2: 07:90:1e:9d:8c:df:5a:36:39:02:cb:62:21:8c:a2:77:69:ad: 36:58:7c:f5:fe:06:b2:e4:4b:55:e9:df:28:6a:fe:ee:38:f6: 3d:2d:c6:6c:3b:f5:dd:ca:7b:3a:7b:ca:0e:1b:12:73:6b:08: 27:91:72:7e:5e:ce:f5:55:ce:70:81:a5:a3:ee:b0:f3:e7:85: 7c:bf:b4:ba:dd:0c:fb:e3:05:01:d4:0c:43:3b:ae:d3:26:1b: 6d:2b:90:5c:a1:da:0a:3a:38:e0:1e:0a:ec:73:06:c7:26:1d: 9a:a4:74:21:5e:bb:e7:ca:7e:1a:79:31:d0:7d:0b:4e:50:b2: 84:a4:90:00:5c:11:5c:4a:7d:4f:b9:04:e7:0b:70:3b:74:75: 09:07:94:a7:b2:96:43:2d:2d:42:7d:44:eb:6b:3c:1a:17:cf: b0:08:eb:0a:3e:3b:0b:ab:d1:25:36:e9:01:9d:d1:17:b2:1b: 8f:10:cf:97:ee:87:7f:46:fc:ba:e3:ab:12:70:a6:86:1f:58: 29:9e:6f:e7:e7:58:54:99:37:75:21:20:17:12:0d:2c:61:4b: f2:10:39:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCcFDXyXRq5OrrHp/0ffR6xpuFAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNDExMjQyMTA2MDhaFw0yNDExMjgwNjI4MDhaMDMxMTAvBgNV BAMTKDEyNzFEMTIyMzhBMzk4OERFM0UyMDZGM0Q4MTY4QTQ3RkQ1NkFDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gizISbn45ffkxfppBHhtaEBc EFhr/zu3XcRRdBl53z+oEMoWUQ7ZeSh/bVzwS3HZMzWw18GvyXhBisyZtXSrvR/9 VVjycsUSznW/sb+Cp20JzF+OsOrK0TyyJG43DsKV/1kxIvy7DzRKXVT+buAwj5mu M+r6tSSHb0wWvk9Puope7t3Jnt7nsSdXDYY4WkCPMI3GYetR37OIuM/He6RZaORy T+B9JBBP06/9v4d8kM2fIkHcLagDsQQXPDMGjWq0pznCh3eMqWzEmMcEm+ZB1UzW ffNQO9YSlo4/8o8PozAnlCoIaPeVdeuDtKtHme6nJpHfzIqmFNu9Jy5ZGzCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEnHRIjijmI3j4gbz2BaKR/1WrPgwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKVU/yzb0qrYEI+1l3dVHxKEDuFpktLC8er O9g/1eWX+m9I0geQHp2M31o2OQLLYiGMondprTZYfPX+BrLkS1Xp3yhq/u449j0t xmw79d3Kezp7yg4bEnNrCCeRcn5ezvVVznCBpaPusPPnhXy/tLrdDPvjBQHUDEM7 rtMmG20rkFyh2go6OOAeCuxzBscmHZqkdCFeu+fKfhp5MdB9C05QsoSkkABcEVxK fU+5BOcLcDt0dQkHlKeylkMtLUJ9ROtrPBoXz7AI6wo+Owur0SU26QGd0ReyG48Q z5fuh39G/LrjqxJwpoYfWCmeb+fnWFSZN3UhIBcSDSxhS/IQOUw= -----END CERTIFICATE-----Generated at Sun Nov 24 22:10:13 2024 by rpki-client on console-fra.rpki-client.org