$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: b2b7lFwVDXmFdakafGn3MtJq5bCcRiq5z+O/vONggyw= Subject key identifier: 01:A6:42:AC:66:96:FD:86:12:64:1C:B0:40:AF:C5:AA:EE:30:C7:34 Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 7596D7457977F37FFE1D4E389712234BD731DA18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: 4B Signing time: Mon 25 Nov 2024 14:30:56 +0000 Manifest this update: Mon 25 Nov 2024 14:25:56 +0000 Manifest next update: Fri 29 Nov 2024 02:05:56 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: KUL1DJOmzCcH0QNPw2e9I5sl6Jvpi2kL75LlvDCHwbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:96:d7:45:79:77:f3:7f:fe:1d:4e:38:97:12:23:4b:d7:31:da:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: Nov 25 14:25:56 2024 GMT Not After : Nov 29 02:05:56 2024 GMT Subject: CN=01A642AC6696FD8612641CB040AFC5AAEE30C734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:37:e3:42:df:a3:6f:61:b0:01:5a:51:c1: 6d:93:b7:8d:9f:a2:1a:0c:1e:90:a9:20:76:7a:43: db:58:8f:60:5b:4f:60:82:56:7e:7f:7b:0e:55:d1: 55:1e:1e:75:6c:32:51:d1:6b:ba:a1:be:3d:ac:a9: cd:9e:dd:0d:22:ea:9a:b7:af:17:c1:2c:5f:af:07: f9:55:ff:ec:75:78:64:89:74:9d:00:a0:2a:92:53: c5:61:26:c8:49:f9:fb:99:9e:a6:7d:ae:cf:ea:94: 21:ff:93:06:9e:5a:ab:77:de:24:93:74:5b:c0:94: 64:97:0e:34:18:b2:05:2b:06:9c:a6:1a:89:8b:e5: 92:24:74:63:8d:26:46:95:71:82:bd:14:6c:d2:1b: bb:32:c5:ea:0c:3b:c9:b0:00:4b:9f:fe:4b:7b:56: b6:f2:80:a3:4f:be:ba:04:79:41:31:b7:20:75:d5: bf:08:7f:9a:41:41:51:3e:e6:29:a1:cb:2e:f2:4a: 6c:ec:2d:ef:20:15:9b:ad:72:94:02:1a:a9:ad:51: 8e:40:73:a4:3f:f5:7e:1e:24:e2:37:73:11:05:48: 94:4a:29:ff:02:bf:dd:84:00:87:45:04:02:3b:36: d1:79:86:db:a9:25:9d:1b:fe:bf:a0:61:8a:94:3d: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A6:42:AC:66:96:FD:86:12:64:1C:B0:40:AF:C5:AA:EE:30:C7:34 X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:7c:dd:45:54:ef:0a:b0:55:3a:a7:a7:61:21:96:8e:1d:95: 44:a4:19:4b:52:e6:f4:3e:51:99:7d:89:17:45:08:46:25:2f: 03:45:da:3a:5a:69:36:7a:11:05:dd:38:14:66:b3:31:a6:3d: 76:65:5d:e3:30:68:4c:8f:7f:5c:ea:af:07:b9:5e:d5:43:85: 27:33:7b:61:d8:18:92:44:0b:78:e8:2c:7a:9e:b9:1b:06:7c: b1:4a:b3:31:cd:ea:60:a9:b5:32:0d:5d:a4:6f:fb:85:82:3e: 69:f3:f4:46:3b:09:81:98:1d:76:b7:a5:8b:c3:b5:9a:83:82: 94:0c:32:cb:82:14:cc:e7:7f:3b:d3:20:0c:07:7a:2b:73:5a: fc:35:58:f2:28:ec:15:e2:4b:cf:f3:97:32:f1:02:9b:35:8b: cb:84:66:74:c7:9f:60:06:ff:06:86:d7:8a:f1:10:3c:82:24: a9:22:91:eb:13:be:33:5c:a5:4f:80:66:56:d4:5b:17:b7:42: 5a:18:95:3f:5b:15:24:b7:0d:00:37:1f:eb:46:d2:20:08:6c: 02:43:6d:ec:c6:f9:5b:4c:89:be:36:9d:d4:8f:4e:4e:c0:d3: 3b:e9:12:c2:74:fd:8b:8c:6b:45:21:07:36:1f:da:94:91:ff: 01:15:6f:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZbXRXl383/+HU44lxIjS9cx2hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNDExMjUxNDI1NTZaFw0yNDExMjkwMjA1NTZaMDMxMTAvBgNV BAMTKDAxQTY0MkFDNjY5NkZEODYxMjY0MUNCMDQwQUZDNUFBRUUzMEM3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jzfjQt+jb2GwAVpRwW2Tt42f ohoMHpCpIHZ6Q9tYj2BbT2CCVn5/ew5V0VUeHnVsMlHRa7qhvj2sqc2e3Q0i6pq3 rxfBLF+vB/lV/+x1eGSJdJ0AoCqSU8VhJshJ+fuZnqZ9rs/qlCH/kwaeWqt33iST dFvAlGSXDjQYsgUrBpymGomL5ZIkdGONJkaVcYK9FGzSG7syxeoMO8mwAEuf/kt7 VrbygKNPvroEeUExtyB11b8If5pBQVE+5imhyy7ySmzsLe8gFZutcpQCGqmtUY5A c6Q/9X4eJOI3cxEFSJRKKf8Cv92EAIdFBAI7NtF5htupJZ0b/r+gYYqUPclDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAaZCrGaW/YYSZBywQK/Fqu4wxzQwHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANB83UVU7wqwVTqnp2Ehlo4dlUSkGUtS5vQ+ UZl9iRdFCEYlLwNF2jpaaTZ6EQXdOBRmszGmPXZlXeMwaEyPf1zqrwe5XtVDhScz e2HYGJJEC3joLHqeuRsGfLFKszHN6mCptTINXaRv+4WCPmnz9EY7CYGYHXa3pYvD tZqDgpQMMsuCFMznfzvTIAwHeitzWvw1WPIo7BXiS8/zlzLxAps1i8uEZnTHn2AG /waG14rxEDyCJKkikesTvjNcpU+AZlbUWxe3QloYlT9bFSS3DQA3H+tG0iAIbAJD bezG+VtMib42ndSPTk7A0zvpEsJ0/YuMa0UhBzYf2pSR/wEVbwo= -----END CERTIFICATE-----Generated at Mon Nov 25 15:26:44 2024 by rpki-client on console-fra.rpki-client.org