$ rpki-client -vvf repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft File: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft (raw, json) Hash identifier: 0EBUEai6L4U2N0XaSBrLYpu7LA/xMk+Vg2Vy6iygmrs= Subject key identifier: 4C:E0:95:6F:2C:F9:B1:E1:40:84:73:D6:37:EB:0D:E7:EC:78:16:A3 Authority key identifier: 61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 Certificate issuer: /CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Certificate serial: 0F2BEC4BB2C44D6B77B926CCE142D638CECF75BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft Manifest number: 45 Signing time: Sun 24 Nov 2024 11:21:58 +0000 Manifest this update: Sun 24 Nov 2024 11:16:58 +0000 Manifest next update: Wed 27 Nov 2024 18:49:58 +0000 Files and hashes: 1: 61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl (hash: YRHzt2AXKlT7tRpw4dt+JEqH61XdSHPiyj/4dw8fbPw=) 2: 3136302e32322e3132362e302f32332d3234203d3e20313532383230.roa (hash: gC4KxUANFsMrdBu7MfFut/AO90Ufo3+gZIW4ZqyH1XY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2b:ec:4b:b2:c4:4d:6b:77:b9:26:cc:e1:42:d6:38:ce:cf:75:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063 Validity Not Before: Nov 24 11:16:58 2024 GMT Not After : Nov 27 18:49:58 2024 GMT Subject: CN=4CE0956F2CF9B1E1408473D637EB0DE7EC7816A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:42:f6:55:ab:26:09:5e:4a:12:a8:90:17: 8a:5b:fd:85:e1:3e:8f:eb:dc:a6:df:c5:8b:42:bb: a9:66:10:49:2f:37:45:49:dd:d4:2d:de:ec:42:d9: ff:23:01:b7:be:8f:51:0c:27:b0:a6:6c:85:87:a2: f3:1b:1d:9e:fe:4b:97:68:9a:c5:04:04:7c:53:95: d8:a9:2b:8d:79:b2:4d:1f:d0:2a:91:73:b2:8e:25: 41:73:9b:37:89:d4:ed:ff:12:8d:01:93:a3:f4:97: 13:36:8a:fb:4e:22:84:6c:39:19:60:c0:fd:1a:50: 1e:a6:26:fe:a0:2f:f9:f2:98:e7:9d:23:b8:a8:bb: 58:32:7c:f9:c3:f4:ba:11:ac:7a:d0:f1:19:0f:d8: bd:83:5d:7a:97:84:21:6a:30:ec:88:af:b6:fc:fd: c8:16:3b:75:1d:85:71:92:dd:b6:7b:20:9c:83:16: 8d:e0:c4:5b:77:53:44:da:c0:fd:14:50:4f:eb:44: 28:57:ef:fc:88:53:44:98:88:9f:41:6b:27:53:af: 72:31:2e:6b:19:7b:d7:f3:82:c7:37:15:08:c2:07: 97:e9:31:ef:a3:49:ba:d8:ad:89:56:d2:1a:e4:f5: 38:98:3e:a2:21:63:53:44:a3:9a:68:1d:49:68:a6: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E0:95:6F:2C:F9:B1:E1:40:84:73:D6:37:EB:0D:E7:EC:78:16:A3 X509v3 Authority Key Identifier: keyid:61:E9:B6:78:CD:42:DA:2A:1B:3E:F3:D8:87:9E:DF:7E:CD:2A:00:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546e09a-c007-4b0c-9460-7c40341ca2f7/0/61E9B678CD42DA2A1B3EF3D8879EDF7ECD2A0063.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4e:7c:1b:9a:19:2b:b8:11:31:7f:b8:99:e1:3d:d2:19:ec: 88:09:d5:d9:73:ac:77:3c:2b:e9:cb:9b:6f:99:ec:24:b1:3c: 5e:79:7e:80:ce:12:63:3e:1a:63:2c:de:83:c1:aa:3a:17:c0: a1:83:ea:1c:99:c3:ef:97:8c:17:63:81:23:fa:94:01:cb:64: 53:c7:dd:99:db:5a:93:e9:67:1e:85:a4:84:55:d8:d6:76:64: e3:46:a9:5a:32:e7:77:8d:71:b4:f1:7a:35:d2:23:97:5d:08: 15:c2:a9:8a:ae:c1:6f:f5:0f:10:38:ae:6f:30:2e:88:97:f9: 76:32:6e:bf:19:d0:c8:a8:07:69:1f:e8:b4:5c:80:88:93:c6: dd:39:40:db:7f:20:1b:7f:a2:c0:85:e8:19:c3:91:e2:5f:af: 8f:31:31:1f:84:a9:5d:12:63:8d:ce:1f:6a:c7:bc:0a:f7:dd: bf:1f:8a:6c:df:a2:6e:66:25:83:3c:5a:57:2d:14:88:73:0d: 55:c7:75:cb:59:cd:35:1c:a3:89:bc:43:c5:98:97:47:e4:87: b3:12:33:ed:40:4c:98:71:8e:a4:e7:64:5b:b0:28:97:0a:0f: c5:6e:4a:6b:2e:1d:e5:8f:1d:ed:3b:8d:a0:36:04:a0:64:1f: 8a:b8:71:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDyvsS7LETWt3uSbM4ULWOM7Pdb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VD RDJBMDA2MzAeFw0yNDExMjQxMTE2NThaFw0yNDExMjcxODQ5NThaMDMxMTAvBgNV BAMTKDRDRTA5NTZGMkNGOUIxRTE0MDg0NzNENjM3RUIwREU3RUM3ODE2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTiUL2VasmCV5KEqiQF4pb/YXh Po/r3KbfxYtCu6lmEEkvN0VJ3dQt3uxC2f8jAbe+j1EMJ7CmbIWHovMbHZ7+S5do msUEBHxTldipK415sk0f0CqRc7KOJUFzmzeJ1O3/Eo0Bk6P0lxM2ivtOIoRsORlg wP0aUB6mJv6gL/nymOedI7iou1gyfPnD9LoRrHrQ8RkP2L2DXXqXhCFqMOyIr7b8 /cgWO3UdhXGS3bZ7IJyDFo3gxFt3U0TawP0UUE/rRChX7/yIU0SYiJ9BaydTr3Ix LmsZe9fzgsc3FQjCB5fpMe+jSbrYrYlW0hrk9TiYPqIhY1NEo5poHUlopsfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTOCVbyz5seFAhHPWN+sN5+x4FqMwHwYDVR0j BBgwFoAUYem2eM1C2iobPvPYh57ffs0qAGMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTQ2ZTA5YS1jMDA3LTRiMGMtOTQ2MC03YzQwMzQxY2EyZjcvMC82MUU5QjY3OENE NDJEQTJBMUIzRUYzRDg4NzlFREY3RUNEMkEwMDYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURGN0VDRDJB MDA2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU0NmUwOWEtYzAwNy00YjBjLTk0 NjAtN2M0MDM0MWNhMmY3LzAvNjFFOUI2NzhDRDQyREEyQTFCM0VGM0Q4ODc5RURG N0VDRDJBMDA2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVOfBuaGSu4ETF/uJnhPdIZ7IgJ1dlzrHc8 K+nLm2+Z7CSxPF55foDOEmM+GmMs3oPBqjoXwKGD6hyZw++XjBdjgSP6lAHLZFPH 3ZnbWpPpZx6FpIRV2NZ2ZONGqVoy53eNcbTxejXSI5ddCBXCqYquwW/1DxA4rm8w LoiX+XYybr8Z0MioB2kf6LRcgIiTxt05QNt/IBt/osCF6BnDkeJfr48xMR+EqV0S Y43OH2rHvAr33b8fimzfom5mJYM8WlctFIhzDVXHdctZzTUco4m8Q8WYl0fkh7MS M+1ATJhxjqTnZFuwKJcKD8VuSmsuHeWPHe07jaA2BKBkH4q4cUQ= -----END CERTIFICATE-----Generated at Sun Nov 24 13:26:09 2024 by rpki-client on console-ams.rpki-client.org