$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft File: B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft (raw, json) Hash identifier: mS3ErNNUhbqtzA3NRAXDsdvGhE/aHAOlggpXUbs8GjY= Subject key identifier: 05:E9:10:7F:EB:5B:90:01:A2:BC:E0:25:A3:0D:F6:2E:F2:E1:D4:B0 Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 Certificate issuer: /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Certificate serial: 155AA432F48A4B749EF96578049C6EA08D4AE7B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft Manifest number: 0484 Signing time: Thu 21 Nov 2024 12:51:26 +0000 Manifest this update: Thu 21 Nov 2024 12:46:26 +0000 Manifest next update: Sun 24 Nov 2024 20:14:26 +0000 Files and hashes: 1: 323030313a6466363a343530303a3a2f34382d3438203d3e20313338303539.roa (hash: vTa9WiHuuMrTXw2GBDLjpniG/hjwO61GwgYQcgCJt2M=) 2: 3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (hash: l1fPLAUFtTJNdU6bqE1PdelWpd2VBBi10WlrLYglW7I=) 3: B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl (hash: +N3xatmyAFzIEo/Y0N2wUUrbBi86BWtDp9U9dR93RfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5a:a4:32:f4:8a:4b:74:9e:f9:65:78:04:9c:6e:a0:8d:4a:e7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5 Validity Not Before: Nov 21 12:46:26 2024 GMT Not After : Nov 24 20:14:26 2024 GMT Subject: CN=05E9107FEB5B9001A2BCE025A30DF62EF2E1D4B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:40:fa:0a:99:da:ab:a0:ab:01:9c:3b:c5: 98:c7:7d:3d:05:2c:50:39:fb:55:2e:7c:6d:8e:c8: 19:0a:54:d4:cc:ed:40:d9:9d:91:0b:99:28:65:00: 04:8c:54:b9:9b:8e:10:05:8b:74:05:a4:f8:59:0c: ea:4a:ac:d3:57:92:80:d0:90:1e:66:0e:1c:93:b2: 85:3f:80:6e:b3:cb:3f:14:a7:c8:df:81:af:9c:3d: 58:78:29:67:52:7f:0f:80:81:ba:17:d1:11:ec:56: 8d:04:2d:91:ea:7d:83:18:a5:9d:1d:71:99:6d:9d: 03:1d:c6:ee:a5:33:ed:ea:84:31:0a:0b:fa:bc:21: 15:06:e7:22:58:6b:2b:a9:2d:2d:22:b8:05:c1:db: fb:a7:11:b9:77:21:22:55:65:fc:89:92:9f:1e:27: 17:8d:cf:45:25:0e:c2:e1:ad:f5:b4:ce:a8:89:81: 50:97:d9:0c:78:a2:e5:4b:70:85:5d:b4:5a:2b:cd: 4e:01:db:47:c2:72:05:22:4f:e7:d4:c9:8c:ab:25: 45:86:88:d2:87:e5:8f:62:ff:e8:9b:09:a5:76:77: c9:78:c0:fc:21:78:fd:2e:b1:0c:5a:cf:f4:5d:97: f6:6b:c1:e5:83:66:0f:55:89:9e:e7:51:b5:14:ae: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E9:10:7F:EB:5B:90:01:A2:BC:E0:25:A3:0D:F6:2E:F2:E1:D4:B0 X509v3 Authority Key Identifier: keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:27:53:ff:5e:34:f8:52:67:1b:54:d7:53:08:5a:61:fe:f3: 86:6b:b7:98:1c:fa:41:4e:03:0d:91:a7:44:b2:f7:fc:32:a0: d8:7e:6c:59:2c:21:1a:79:0f:8e:53:c6:af:6d:01:76:fe:f8: a3:c3:61:47:3f:c0:d9:f5:f4:89:f7:84:2e:68:34:4a:1a:be: e1:1c:15:6e:55:d0:8a:e1:34:64:12:ad:84:b1:09:93:a5:bc: 0f:9b:6b:bd:2b:4c:57:25:0e:ba:79:e8:e9:c6:c5:d5:61:f9: ae:5f:ae:1e:2f:88:25:dc:18:0e:f6:e1:e6:8d:42:0f:e9:bc: 4d:b8:71:c2:ae:02:4c:36:76:1c:34:c2:97:80:56:b2:84:d4: 04:3a:76:f3:b9:93:03:b1:33:32:81:27:5d:19:f6:95:b7:7d: 50:e7:ce:2c:e5:de:d3:28:fd:c2:a8:95:ba:7f:d8:8e:29:51: 46:73:20:39:aa:00:ef:b8:7e:4d:c5:ce:ed:28:ce:83:6e:b7: a2:83:ad:a4:c7:48:03:fd:89:8d:56:91:66:cc:84:28:03:e7: 20:ca:59:1c:9f:71:81:0e:14:b6:3a:5e:86:38:b3:c9:97:c6: 20:e8:06:af:0a:f5:4b:3f:09:8e:4a:4e:a6:9f:44:da:ed:6c: ff:bb:c1:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVqkMvSKS3Se+WV4BJxuoI1K57MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZG NERFQzhBNTAeFw0yNDExMjExMjQ2MjZaFw0yNDExMjQyMDE0MjZaMDMxMTAvBgNV BAMTKDA1RTkxMDdGRUI1QjkwMDFBMkJDRTAyNUEzMERGNjJFRjJFMUQ0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNGED6Cpnaq6CrAZw7xZjHfT0F LFA5+1UufG2OyBkKVNTM7UDZnZELmShlAASMVLmbjhAFi3QFpPhZDOpKrNNXkoDQ kB5mDhyTsoU/gG6zyz8Up8jfga+cPVh4KWdSfw+AgboX0RHsVo0ELZHqfYMYpZ0d cZltnQMdxu6lM+3qhDEKC/q8IRUG5yJYayupLS0iuAXB2/unEbl3ISJVZfyJkp8e JxeNz0UlDsLhrfW0zqiJgVCX2Qx4ouVLcIVdtForzU4B20fCcgUiT+fUyYyrJUWG iNKH5Y9i/+ibCaV2d8l4wPwheP0usQxaz/Rdl/ZrweWDZg9ViZ7nUbUUrkFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBekQf+tbkAGivOAlow32LvLh1LAwHwYDVR0j BBgwFoAUtoR7kowwgAKC17qOM3SC3/TeyKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RlZGVkMS1kMTRlLTQxMjMtYjVjOS1jOTNhNTk5N2ZjMzAvMC9CNjg0N0I5MjhD MzA4MDAyODJEN0JBOEUzMzc0ODJERkY0REVDOEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgyREZGNERF QzhBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkZWRlZDEtZDE0ZS00MTIzLWI1 YzktYzkzYTU5OTdmYzMwLzAvQjY4NDdCOTI4QzMwODAwMjgyRDdCQThFMzM3NDgy REZGNERFQzhBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0nU/9eNPhSZxtU11MIWmH+84Zrt5gc+kFO Aw2Rp0Sy9/wyoNh+bFksIRp5D45Txq9tAXb++KPDYUc/wNn19In3hC5oNEoavuEc FW5V0IrhNGQSrYSxCZOlvA+ba70rTFclDrp56OnGxdVh+a5frh4viCXcGA724eaN Qg/pvE24ccKuAkw2dhw0wpeAVrKE1AQ6dvO5kwOxMzKBJ10Z9pW3fVDnzizl3tMo /cKolbp/2I4pUUZzIDmqAO+4fk3Fzu0ozoNut6KDraTHSAP9iY1WkWbMhCgD5yDK WRyfcYEOFLY6XoY4s8mXxiDoBq8K9Us/CY5KTqafRNrtbP+7wVI= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org