$ rpki-client -vvf repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft File: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft (raw, json) Hash identifier: P7ttLXvr6AEJ7xwq+zbtk9arsHHG8617MIxnzMB3xAI= Subject key identifier: 3C:AD:0A:39:7C:7E:B7:3D:8F:BB:FA:E5:5A:91:3E:65:11:F8:71:BE Authority key identifier: 6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 Certificate issuer: /CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Certificate serial: 04756BF154842EE2E3D911C78F78C5D6BA73D07B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft Manifest number: 37 Signing time: Wed 20 Nov 2024 14:50:56 +0000 Manifest this update: Wed 20 Nov 2024 14:45:56 +0000 Manifest next update: Sat 23 Nov 2024 22:24:56 +0000 Files and hashes: 1: 6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl (hash: 49zR/UaY+WddPw9xqSU9JmJediEA/FUyl4VLlPqwssc=) 2: 323030313a6466303a39613a3a2f34382d3438203d3e203435363937.roa (hash: 95yRGGu+tyd0MJC5bHwlKcV+5CY03B5myrPMI3qwfTE=) 3: 3230332e3131342e3232342e302f32332d3234203d3e203435363937.roa (hash: 6Fb/FcqckRp/U3JzummBB+qT3/Jhfx/82wKgluThdM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:75:6b:f1:54:84:2e:e2:e3:d9:11:c7:8f:78:c5:d6:ba:73:d0:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6BA087A8C1BF46BBD4748D23F9E34B92774FCC66 Validity Not Before: Nov 20 14:45:56 2024 GMT Not After : Nov 23 22:24:56 2024 GMT Subject: CN=3CAD0A397C7EB73D8FBBFAE55A913E6511F871BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:92:1e:18:4d:aa:0b:60:a5:9d:44:84:41:19: 3f:a1:34:4c:64:a8:30:28:be:1a:10:a0:db:d0:7f: 3d:c3:26:25:9b:87:45:14:9e:91:67:38:a3:26:a5: b7:07:57:ac:36:25:a6:15:36:ad:79:5b:04:5d:66: 66:4f:88:80:5e:97:95:80:61:b7:c8:f6:82:c0:fa: 8a:bc:b7:51:6a:aa:f6:74:41:55:4d:e4:a3:85:82: 6e:a3:01:fe:9c:fa:6b:b0:07:84:ac:2d:15:61:49: 88:84:2b:84:f6:66:e7:93:29:60:e2:a6:2a:91:a6: 38:0c:ba:71:34:1d:22:88:98:99:4c:9b:a3:5c:20: 13:18:92:51:2c:09:93:e6:25:d4:d1:d4:55:eb:91: 33:41:86:7a:b6:90:f9:e5:29:4f:78:e2:96:d9:64: fd:63:a6:4d:17:2e:48:d5:d8:7c:b5:cd:91:e1:e6: c6:98:59:98:76:27:c7:b4:04:75:96:57:ce:1a:53: 21:a8:a8:f0:04:32:bc:a3:76:c7:61:b4:d6:b9:74: 0d:cd:62:95:d7:c7:ab:4f:36:ab:cd:ee:dd:a1:7c: 61:a0:db:e5:2c:2f:e9:b6:32:3f:54:07:a7:dd:bf: f8:b6:1c:5e:96:eb:3e:bb:70:a8:cd:61:b7:ed:9b: 85:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AD:0A:39:7C:7E:B7:3D:8F:BB:FA:E5:5A:91:3E:65:11:F8:71:BE X509v3 Authority Key Identifier: keyid:6B:A0:87:A8:C1:BF:46:BB:D4:74:8D:23:F9:E3:4B:92:77:4F:CC:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03500767-9227-43ec-a525-2e97d5a03f09/0/6BA087A8C1BF46BBD4748D23F9E34B92774FCC66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f0:95:9f:74:7e:9a:90:29:f9:f8:d7:a2:8f:16:21:61:d1: c8:6d:2e:26:02:28:11:dd:6f:8a:99:06:97:ae:90:ff:9e:61: 28:59:63:c6:9b:51:85:68:64:d3:bc:eb:c3:73:f1:77:5d:8d: 9b:dc:fb:9f:74:61:12:22:f2:c2:4e:bd:fb:93:6f:c1:53:da: f5:63:e3:e1:dd:ab:89:7f:67:b9:cd:1e:fe:b3:42:e0:2e:14: 27:0a:a5:79:a7:ea:70:ba:c3:ed:5b:37:66:fb:11:7a:72:6b: 99:40:2f:b1:8f:6d:95:a8:91:46:9c:ce:20:a6:81:34:e7:e2: 18:ad:49:30:50:e7:87:60:55:20:02:14:e7:7b:bc:67:3d:9b: 60:b1:eb:f6:36:f5:3f:4e:cb:9b:f3:d1:45:8f:01:3e:7a:42: c0:b9:05:f4:61:fb:9e:d6:b1:cb:a2:e7:73:28:48:94:82:a6: 80:55:9e:55:b6:96:ef:27:26:a4:ca:0b:f5:2c:54:b7:be:d3: 15:89:b4:a9:1d:ef:43:66:e0:ee:c2:7e:c7:6a:57:14:a8:6e: ac:e8:90:eb:1b:a9:12:3e:be:f7:09:2f:c6:2f:92:6a:9d:fb: 92:59:c7:e0:bc:6e:8e:c1:66:7b:02:ae:44:45:44:e2:45:47: 2a:1d:e2:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHVr8VSELuLj2RHHj3jF1rpz0HswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3 NzRGQ0M2NjAeFw0yNDExMjAxNDQ1NTZaFw0yNDExMjMyMjI0NTZaMDMxMTAvBgNV BAMTKDNDQUQwQTM5N0M3RUI3M0Q4RkJCRkFFNTVBOTEzRTY1MTFGODcxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNkh4YTaoLYKWdRIRBGT+hNExk qDAovhoQoNvQfz3DJiWbh0UUnpFnOKMmpbcHV6w2JaYVNq15WwRdZmZPiIBel5WA YbfI9oLA+oq8t1FqqvZ0QVVN5KOFgm6jAf6c+muwB4SsLRVhSYiEK4T2ZueTKWDi piqRpjgMunE0HSKImJlMm6NcIBMYklEsCZPmJdTR1FXrkTNBhnq2kPnlKU944pbZ ZP1jpk0XLkjV2Hy1zZHh5saYWZh2J8e0BHWWV84aUyGoqPAEMryjdsdhtNa5dA3N YpXXx6tPNqvN7t2hfGGg2+UsL+m2Mj9UB6fdv/i2HF6W6z67cKjNYbftm4WrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPK0KOXx+tz2Pu/rlWpE+ZRH4cb4wHwYDVR0j BBgwFoAUa6CHqMG/RrvUdI0j+eNLkndPzGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzUwMDc2Ny05MjI3LTQzZWMtYTUyNS0yZTk3ZDVhMDNmMDkvMC82QkEwODdBOEMx QkY0NkJCRDQ3NDhEMjNGOUUzNEI5Mjc3NEZDQzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRCOTI3NzRG Q0M2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM1MDA3NjctOTIyNy00M2VjLWE1 MjUtMmU5N2Q1YTAzZjA5LzAvNkJBMDg3QThDMUJGNDZCQkQ0NzQ4RDIzRjlFMzRC OTI3NzRGQ0M2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrwlZ90fpqQKfn416KPFiFh0chtLiYCKBHd b4qZBpeukP+eYShZY8abUYVoZNO868Nz8XddjZvc+590YRIi8sJOvfuTb8FT2vVj 4+Hdq4l/Z7nNHv6zQuAuFCcKpXmn6nC6w+1bN2b7EXpya5lAL7GPbZWokUacziCm gTTn4hitSTBQ54dgVSACFOd7vGc9m2Cx6/Y29T9Oy5vz0UWPAT56QsC5BfRh+57W scui53MoSJSCpoBVnlW2lu8nJqTKC/UsVLe+0xWJtKkd70Nm4O7CfsdqVxSobqzo kOsbqRI+vvcJL8Yvkmqd+5JZx+C8bo7BZnsCrkRFROJFRyod4oM= -----END CERTIFICATE-----Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org