$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: 0cJnWtFkk6Edwj0XjbRp7miLDeFonBdfrrHUdkHidoY= Subject key identifier: 94:C7:C9:6B:21:66:A7:3C:E4:07:9D:9B:B1:EF:4F:B6:5B:DD:77:8A Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 727AA5B2A009ECF5E14BD35B847F26E2A7BF5973 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: 3F Signing time: Wed 20 Nov 2024 13:11:22 +0000 Manifest this update: Wed 20 Nov 2024 13:06:22 +0000 Manifest next update: Sat 23 Nov 2024 18:21:22 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: 9+kCQm5XDryJT+y3bog7KHgl/A+9NNcZYkgsafMmvZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7a:a5:b2:a0:09:ec:f5:e1:4b:d3:5b:84:7f:26:e2:a7:bf:59:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Nov 20 13:06:22 2024 GMT Not After : Nov 23 18:21:22 2024 GMT Subject: CN=94C7C96B2166A73CE4079D9BB1EF4FB65BDD778A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:48:13:29:62:b4:8b:55:69:99:87:2c:85:b5: 2e:fc:f2:c2:f0:53:7d:c0:91:27:f9:f9:c5:cc:83: 53:2f:19:d0:d3:e4:85:2b:b4:9a:9b:a0:bc:b5:25: 0e:ef:66:03:85:51:5a:d5:d9:f2:2a:06:eb:42:0a: f6:90:cd:ce:8e:f0:79:43:96:fe:c9:46:ea:cb:85: a1:17:d5:dd:6a:a4:57:72:b9:56:42:b6:b1:fa:88: 78:35:c4:6b:fa:8b:a4:02:f1:f9:18:68:05:6c:e3: 3d:ed:fd:75:6b:6d:c3:44:37:32:37:2f:bf:a2:cd: 98:0a:51:7e:ea:c2:c3:f8:31:7c:1f:18:53:93:f5: b4:2a:8d:3d:4e:8d:e7:82:5f:77:29:8e:9b:91:d0: ea:8e:37:1e:dd:4c:cf:83:5c:00:4a:19:5a:fa:90: 9a:40:c7:fd:6f:0d:eb:d3:f0:d0:44:60:75:e2:fc: d8:46:c0:40:3c:e0:e7:b0:15:b6:e8:aa:a7:93:38: 2d:ac:b0:c6:86:48:5d:5a:8d:9e:52:9d:08:ad:7e: 72:2e:33:8a:b4:c3:17:12:32:7b:7e:3c:04:a1:ef: db:9e:89:20:86:63:91:77:6a:a2:a0:ec:b4:58:16: 43:be:dd:1d:d5:ff:e1:83:f2:c8:8c:67:bd:f7:08: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C7:C9:6B:21:66:A7:3C:E4:07:9D:9B:B1:EF:4F:B6:5B:DD:77:8A X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:2d:84:89:d1:23:99:58:93:85:c1:7d:64:87:1b:7b:3e:10: 12:04:e4:2d:0e:da:01:94:40:1d:70:65:6d:fc:fb:4e:e8:d6: 82:6b:6f:6e:f3:a3:06:e6:bd:03:7e:3e:5c:72:4b:b3:bf:4f: 9a:43:34:92:6e:f1:16:3a:91:d9:18:fc:7c:ce:3f:f4:36:70: a7:85:3b:9d:a7:66:f3:d5:cf:ac:69:36:61:99:04:86:8b:db: 1b:4b:4a:a6:2a:64:ba:b4:0e:4b:8c:0b:b9:cb:a8:f1:b7:35: 99:1d:2b:e4:e7:e2:e4:8e:0f:60:22:b4:6a:4d:17:77:ae:d2: 54:55:32:60:e1:82:39:1f:4b:08:9d:15:c2:8b:74:cc:f2:1a: 21:5b:cd:49:01:28:fb:c5:3a:63:34:10:5c:8c:a5:3e:9b:83: f9:e9:23:a5:d0:93:f4:db:29:47:6d:48:37:45:96:b3:d5:65: b5:20:46:36:55:2b:de:5e:fe:4b:7b:e6:bc:9b:72:bd:5b:ed: d1:d2:2a:fe:44:e5:f8:4e:9a:d6:80:0a:8c:9a:20:62:f1:c0: 8b:62:97:74:f7:60:3a:10:f5:1f:a1:27:cf:fa:92:a4:3e:30: 1c:4b:d0:cf:94:26:7b:5b:71:15:8e:9c:95:89:64:9a:51:17: 0a:0d:06:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnqlsqAJ7PXhS9NbhH8m4qe/WXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNDExMjAxMzA2MjJaFw0yNDExMjMxODIxMjJaMDMxMTAvBgNV BAMTKDk0QzdDOTZCMjE2NkE3M0NFNDA3OUQ5QkIxRUY0RkI2NUJERDc3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSBMpYrSLVWmZhyyFtS788sLw U33AkSf5+cXMg1MvGdDT5IUrtJqboLy1JQ7vZgOFUVrV2fIqButCCvaQzc6O8HlD lv7JRurLhaEX1d1qpFdyuVZCtrH6iHg1xGv6i6QC8fkYaAVs4z3t/XVrbcNENzI3 L7+izZgKUX7qwsP4MXwfGFOT9bQqjT1OjeeCX3cpjpuR0OqONx7dTM+DXABKGVr6 kJpAx/1vDevT8NBEYHXi/NhGwEA84OewFbboqqeTOC2ssMaGSF1ajZ5SnQitfnIu M4q0wxcSMnt+PASh79ueiSCGY5F3aqKg7LRYFkO+3R3V/+GD8siMZ733CMVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlMfJayFmpzzkB52bse9Ptlvdd4owHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOIthInRI5lYk4XBfWSHG3s+EBIE5C0O2gGU QB1wZW38+07o1oJrb27zowbmvQN+PlxyS7O/T5pDNJJu8RY6kdkY/HzOP/Q2cKeF O52nZvPVz6xpNmGZBIaL2xtLSqYqZLq0DkuMC7nLqPG3NZkdK+Tn4uSOD2AitGpN F3eu0lRVMmDhgjkfSwidFcKLdMzyGiFbzUkBKPvFOmM0EFyMpT6bg/npI6XQk/Tb KUdtSDdFlrPVZbUgRjZVK95e/kt75rybcr1b7dHSKv5E5fhOmtaACoyaIGLxwIti l3T3YDoQ9R+hJ8/6kqQ+MBxL0M+UJntbcRWOnJWJZJpRFwoNBpY= -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:07 2024 by rpki-client on console-ams.rpki-client.org