$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json) Hash identifier: trQL4m12MMmWISXYk0d0cfM9frw+tRgczhBDy12gDwo= Subject key identifier: D9:6F:68:CB:5C:C7:1C:39:7E:6A:2E:00:8A:48:CC:5B:25:5A:14:8B Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Certificate issuer: /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Certificate serial: 149B4AB3DDA40D6D0DC86D1A8F6C954B4A0C1868 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft Manifest number: 6A Signing time: Thu 21 Nov 2024 07:52:27 +0000 Manifest this update: Thu 21 Nov 2024 07:47:27 +0000 Manifest next update: Sun 24 Nov 2024 08:36:27 +0000 Files and hashes: 1: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: /BhUEmM6VR5nvwGEiwoLrVPm5n4pVvvxihTcOQu8N3c=) 2: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: JWCnrbnN26iSUpXDTPvbA5jZVTR8ZTFiUpK3shd3eUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9b:4a:b3:dd:a4:0d:6d:0d:c8:6d:1a:8f:6c:95:4b:4a:0c:18:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Validity Not Before: Nov 21 07:47:27 2024 GMT Not After : Nov 24 08:36:27 2024 GMT Subject: CN=D96F68CB5CC71C397E6A2E008A48CC5B255A148B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:e4:ba:e8:82:7d:98:a2:53:85:83:6d:46: 25:a1:8a:af:2c:0b:d8:08:74:6d:32:b5:f7:1c:2b: 52:1d:3e:f3:66:b1:7e:fb:5f:39:2e:9b:9a:ce:6d: 01:42:d9:31:05:70:76:29:02:7d:7c:80:1a:b7:29: 73:1b:bc:2f:1e:72:d8:35:4a:60:30:8d:8d:5c:f2: 81:a1:4a:44:a3:89:4a:c2:d0:c4:40:7b:6f:a1:37: 2f:20:7a:9f:8c:52:df:38:67:e3:b6:31:3a:69:d6: 65:ee:e0:11:2d:f3:f3:5c:01:90:4d:18:f9:98:7b: c0:b2:d5:e7:20:74:0c:fc:e4:e8:45:30:98:03:b1: 8c:b4:0e:10:65:4b:75:d9:ce:f5:82:fd:ba:08:76: 2e:e2:c9:84:05:6f:9d:b5:b4:5d:cb:4b:25:ce:06: 36:66:56:87:a6:a7:b4:89:aa:c7:47:4a:47:d0:34: 99:a1:bf:5a:a3:6a:eb:17:f1:1b:ee:5d:60:d3:87: f4:92:ea:da:a6:bf:45:ef:fc:b9:7a:fb:ed:85:88: fd:a7:43:b9:2b:e4:08:d4:66:b8:58:22:7e:39:b9: 10:1f:d2:40:b9:80:1f:15:7d:8c:86:3f:79:c8:ca: 0b:df:a8:22:2b:3b:6a:37:00:7e:aa:e2:91:0b:48: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6F:68:CB:5C:C7:1C:39:7E:6A:2E:00:8A:48:CC:5B:25:5A:14:8B X509v3 Authority Key Identifier: keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d5:c2:1a:61:6f:c6:04:f7:01:74:e4:2c:66:c6:6c:44:30: 61:c6:98:29:12:c9:2b:ff:16:4f:fe:97:0c:fb:bc:b8:16:d6: 73:89:66:cf:06:52:e1:6a:6c:b4:e4:16:b2:61:a1:1c:be:7c: de:71:7a:eb:4b:90:6b:5a:6b:2a:de:dc:25:aa:33:e3:e4:73: 7a:a9:4e:ea:a1:55:31:d9:f2:0a:a6:a5:f1:41:9d:39:62:12: ab:42:7e:dc:17:16:b2:c8:a4:47:ee:20:ef:41:42:ff:cb:c7: 39:c9:a9:c0:78:0d:1a:4b:cf:43:c6:62:59:d8:f3:75:6b:34: 27:d1:76:99:90:7e:b6:40:d0:91:a4:82:57:56:6f:ff:4f:88: 1d:b5:cd:20:f7:e7:28:c5:ef:9e:fe:dc:ff:a3:c7:fc:54:95: 7e:b0:ec:24:33:86:ba:0c:b8:42:17:02:6d:3f:97:66:6a:63: 42:27:79:36:74:51:74:ad:37:d6:11:ab:5b:06:d9:d2:e8:a7: 1f:6d:17:db:cd:43:45:96:c8:4a:b5:c9:fb:39:10:7c:cf:a4: a1:0e:f4:e3:e4:42:ac:a1:e6:c3:da:8c:60:11:52:a8:87:cc: e8:be:99:c0:e6:99:c4:7e:9f:91:7a:0f:35:45:03:44:4d:70: dc:60:94:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJtKs92kDW0NyG0aj2yVS0oMGGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0Ey MTBEODg2QjAeFw0yNDExMjEwNzQ3MjdaFw0yNDExMjQwODM2MjdaMDMxMTAvBgNV BAMTKEQ5NkY2OENCNUNDNzFDMzk3RTZBMkUwMDhBNDhDQzVCMjU1QTE0OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2+S66IJ9mKJThYNtRiWhiq8s C9gIdG0ytfccK1IdPvNmsX77Xzkum5rObQFC2TEFcHYpAn18gBq3KXMbvC8ectg1 SmAwjY1c8oGhSkSjiUrC0MRAe2+hNy8gep+MUt84Z+O2MTpp1mXu4BEt8/NcAZBN GPmYe8Cy1ecgdAz85OhFMJgDsYy0DhBlS3XZzvWC/boIdi7iyYQFb521tF3LSyXO BjZmVoemp7SJqsdHSkfQNJmhv1qjausX8RvuXWDTh/SS6tqmv0Xv/Ll6++2FiP2n Q7kr5AjUZrhYIn45uRAf0kC5gB8VfYyGP3nIygvfqCIrO2o3AH6q4pELSLtlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2W9oy1zHHDl+ai4AikjMWyVaFIswHwYDVR0j BBgwFoAU2QxwQrXcGDQdzHfKXPj0yiENiGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMC9EOTBDNzA0MkI1 REMxODM0MURDQzc3Q0E1Q0Y4RjRDQTIxMEQ4ODZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0EyMTBE ODg2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0 Q0EyMTBEODg2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7Vwhphb8YE9wF05CxmxmxEMGHGmCkSySv/ Fk/+lwz7vLgW1nOJZs8GUuFqbLTkFrJhoRy+fN5xeutLkGtaayre3CWqM+Pkc3qp TuqhVTHZ8gqmpfFBnTliEqtCftwXFrLIpEfuIO9BQv/LxznJqcB4DRpLz0PGYlnY 83VrNCfRdpmQfrZA0JGkgldWb/9PiB21zSD35yjF757+3P+jx/xUlX6w7CQzhroM uEIXAm0/l2ZqY0IneTZ0UXStN9YRq1sG2dLopx9tF9vNQ0WWyEq1yfs5EHzPpKEO 9OPkQqyh5sPajGARUqiHzOi+mcDmmcR+n5F6DzVFA0RNcNxglKY= -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org