$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: ELZktUDsbg3fZdHkF9g7wZzHIl2EtrDeSegjJ7DjGcY= Subject key identifier: 73:5A:71:2C:E9:BB:0B:4E:7E:D6:8F:D1:84:E8:AB:DC:D4:53:39:7C Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 25DE58DC60B0CE535FAD8F36C47C051302FBE8E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 02EB Signing time: Mon 25 Nov 2024 20:11:56 +0000 Manifest this update: Mon 25 Nov 2024 20:06:56 +0000 Manifest next update: Fri 29 Nov 2024 01:38:56 +0000 Files and hashes: 1: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: XrO+qd1BLoaQBLZxMj2i0RtL9NTY4yJgufeeYQXCG4g=) 2: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: l5hTcz5x9/MbEX9D2ql2KMJvqTSrRdRo695jTzd5hLA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:de:58:dc:60:b0:ce:53:5f:ad:8f:36:c4:7c:05:13:02:fb:e8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Nov 25 20:06:56 2024 GMT Not After : Nov 29 01:38:56 2024 GMT Subject: CN=735A712CE9BB0B4E7ED68FD184E8ABDCD453397C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:50:af:96:40:25:61:b8:e3:f0:05:2a:21: 30:3b:7a:6d:a9:2b:cf:2c:7f:60:a6:f6:f5:6a:a2: 03:a5:44:32:d3:3b:e0:92:1c:9f:2b:1d:e9:69:03: 94:a4:13:54:5c:71:e5:e9:ea:45:65:a4:9c:9f:c3: f1:e5:5b:1d:e2:c5:92:b6:9e:71:78:52:44:22:90: e1:8c:1b:4e:ec:73:ac:19:97:69:c9:51:10:8e:2f: bd:58:4e:ac:69:3f:d7:57:e3:d6:2d:e5:0f:27:87: dc:90:0c:a2:65:16:2e:82:e4:75:86:27:36:6e:8b: d1:80:0a:8b:0c:52:45:e9:8c:0f:75:d5:d7:82:9d: 3b:51:21:8e:7a:e7:37:5e:b0:a3:a5:83:c2:70:9c: 64:5f:85:d7:72:0c:ea:2d:5b:dd:79:dc:42:0a:87: a9:e2:84:92:16:0b:ef:97:f8:8e:91:56:ea:f9:c6: a5:b6:f4:7e:72:34:9d:a5:ed:57:a8:d8:ce:15:18: a5:ab:9f:10:3b:37:47:32:44:30:5b:f4:a5:32:29: 68:7f:b6:32:b9:b6:8e:86:db:de:54:f9:88:ec:81: 87:c2:25:20:4b:e5:3e:60:c2:fd:41:41:8a:e3:e0: b7:a6:d5:9e:cf:2d:1c:25:a9:0b:f0:38:ca:47:20: d5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5A:71:2C:E9:BB:0B:4E:7E:D6:8F:D1:84:E8:AB:DC:D4:53:39:7C X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1b:b4:12:ad:b1:d5:a5:ed:33:6a:6f:aa:c2:cd:e9:ef:21: b1:5d:ee:13:77:8d:96:81:45:3d:50:ad:09:e0:38:51:17:4b: 0c:94:0c:e4:e5:9d:77:f1:a3:2a:44:85:fb:ce:a1:00:f2:86: a8:7e:be:c8:09:7b:2c:2a:de:93:47:b3:43:5d:bc:29:33:25: 35:15:b4:7b:4c:ee:9f:f4:f0:f1:d8:10:db:ca:4c:b9:bf:b4: c4:92:2a:79:71:53:27:bf:d5:9b:32:16:8d:9f:fd:f8:04:ac: 82:06:7e:36:00:a4:6f:a8:9d:3d:17:4e:76:b0:00:fa:01:29: f2:98:83:a6:00:0c:7a:37:db:42:c0:3e:99:9b:df:75:11:01: 50:d7:5b:41:82:78:b8:27:7a:25:88:50:cf:39:50:29:ea:10: 76:c4:56:16:a1:7e:fb:79:2d:54:a4:59:e2:8a:f1:96:b3:ed: e1:d5:db:f3:9c:7d:e1:47:58:14:65:8a:83:c2:5f:66:29:2b: d7:dc:bb:2a:9a:bb:45:21:ca:92:f7:7e:4f:40:7e:b3:9e:54: cc:8a:8b:e8:1b:ff:e1:98:81:76:8c:c5:08:35:e5:3b:d3:5f: ef:4d:42:aa:60:00:06:8e:c5:9a:5a:5c:89:50:43:61:3e:12: c9:32:e0:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJd5Y3GCwzlNfrY82xHwFEwL76OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNDExMjUyMDA2NTZaFw0yNDExMjkwMTM4NTZaMDMxMTAvBgNV BAMTKDczNUE3MTJDRTlCQjBCNEU3RUQ2OEZEMTg0RThBQkRDRDQ1MzM5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvz1CvlkAlYbjj8AUqITA7em2p K88sf2Cm9vVqogOlRDLTO+CSHJ8rHelpA5SkE1RcceXp6kVlpJyfw/HlWx3ixZK2 nnF4UkQikOGMG07sc6wZl2nJURCOL71YTqxpP9dX49Yt5Q8nh9yQDKJlFi6C5HWG JzZui9GACosMUkXpjA911deCnTtRIY565zdesKOlg8JwnGRfhddyDOotW9153EIK h6nihJIWC++X+I6RVur5xqW29H5yNJ2l7Veo2M4VGKWrnxA7N0cyRDBb9KUyKWh/ tjK5to6G295U+YjsgYfCJSBL5T5gwv1BQYrj4Lem1Z7PLRwlqQvwOMpHINVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc1pxLOm7C05+1o/RhOir3NRTOXwwHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIbtBKtsdWl7TNqb6rCzenvIbFd7hN3jZaB RT1QrQngOFEXSwyUDOTlnXfxoypEhfvOoQDyhqh+vsgJeywq3pNHs0NdvCkzJTUV tHtM7p/08PHYENvKTLm/tMSSKnlxUye/1ZsyFo2f/fgErIIGfjYApG+onT0XTnaw APoBKfKYg6YADHo320LAPpmb33URAVDXW0GCeLgneiWIUM85UCnqEHbEVhahfvt5 LVSkWeKK8Zaz7eHV2/OcfeFHWBRlioPCX2YpK9fcuyqau0UhypL3fk9AfrOeVMyK i+gb/+GYgXaMxQg15TvTX+9NQqpgAAaOxZpaXIlQQ2E+Esky4Gs= -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:29 2024 by rpki-client on console-fra.rpki-client.org