$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: ok9eZ92CwI5Dj4sOt6+pOCjcAnJkAYdEP1QXW01fY2Q= Subject key identifier: 38:B3:F7:00:D9:BB:6F:F6:D7:9F:27:48:2F:E9:51:D0:D5:DE:FF:9C Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 503C1A3A0CD50AA06DD63362DDB9A44EFC53AF9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 0487 Signing time: Thu 21 Nov 2024 12:42:11 +0000 Manifest this update: Thu 21 Nov 2024 12:37:11 +0000 Manifest next update: Sun 24 Nov 2024 18:10:11 +0000 Files and hashes: 1: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: XJ3L27t5NYAAohdp9kf4GQRLHqXi8kPzOSMXDtEPRWg=) 2: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: wpqAylZ/2JLIsixzqjZbQUW1PLTzI+fqS0UU/awB9+g=) 3: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: bfDh6ZRJDvBPymHjC3pLTltfVhpAl5f2lYkL9hZt1pY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3c:1a:3a:0c:d5:0a:a0:6d:d6:33:62:dd:b9:a4:4e:fc:53:af:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Nov 21 12:37:11 2024 GMT Not After : Nov 24 18:10:11 2024 GMT Subject: CN=38B3F700D9BB6FF6D79F27482FE951D0D5DEFF9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:02:5d:0b:09:fc:cc:c0:46:49:ae:85:80: 94:2a:75:91:17:06:fd:3d:f1:61:e9:be:99:bb:0b: 05:5d:ff:1b:8d:8f:e1:cd:59:05:62:e6:ea:7b:61: f1:09:22:61:d2:a5:12:3c:93:4f:f9:7c:24:b8:46: a4:23:35:d3:75:e8:b8:94:57:4c:c8:c0:f0:74:cb: ce:a8:e6:58:cf:f1:74:ab:fd:a3:c7:3f:73:70:9d: 46:2a:40:a7:10:83:28:4c:c9:01:db:c3:cf:f1:e1: 5d:8d:f6:97:d4:c0:15:91:41:94:c9:f8:4d:7f:87: e2:09:3d:71:36:5e:ab:99:27:58:2c:72:3a:39:82: 34:93:e3:fb:dc:2d:ff:f3:14:21:54:1b:1e:b0:09: 05:63:1c:c0:8c:0f:46:cf:76:aa:b2:48:76:75:95: 46:16:d4:2f:6a:02:49:9d:54:f1:1f:bc:04:bc:6b: ee:0c:3d:a1:3f:2f:6b:19:96:d0:86:5e:5e:b4:41: 96:ef:f2:51:cc:ba:c1:92:27:3c:5f:8b:7d:a3:18: e2:8a:b2:31:55:40:bb:49:a8:32:33:a6:6f:37:0f: 91:eb:76:99:2e:d9:71:f4:d6:33:6d:24:8a:cd:c0: fc:17:43:84:e8:76:b3:e2:58:b6:b9:bd:7c:b6:68: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B3:F7:00:D9:BB:6F:F6:D7:9F:27:48:2F:E9:51:D0:D5:DE:FF:9C X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:12:03:a0:12:d7:b1:aa:e3:5a:7f:bc:3c:09:d6:ad:19:41: f7:43:0d:43:3f:ad:cd:25:1d:0a:db:1c:c7:64:61:d3:c0:d1: d7:8f:c5:3d:cf:97:fc:be:93:09:57:33:82:22:b1:8d:dc:f9: b2:f0:b8:6d:e6:30:85:e4:f7:8e:6a:b0:01:7a:fc:a1:ad:9b: 64:ca:c9:10:f6:e7:1c:ce:45:9d:b0:ee:4b:db:25:3a:53:2c: c6:84:37:61:2d:fc:e4:49:49:ca:87:83:49:64:9b:67:dc:72: b8:0e:55:17:4f:f2:da:86:78:e6:e4:f9:11:c7:1a:07:a6:6f: 4d:9b:4b:df:27:44:e7:81:c4:d7:4a:94:a3:30:a9:09:ac:36: 2b:56:4b:9c:90:91:6a:da:ff:3b:12:a1:ef:75:3a:ba:99:e2: c9:97:3b:c7:1d:73:76:f1:a6:a7:50:00:75:20:dd:50:6b:f0: 8a:bb:d3:2b:1b:37:49:a2:ff:ea:41:dd:56:f0:09:bf:ec:b4: 44:2a:1a:e3:ae:32:65:c8:d3:11:8e:7f:e5:fa:bb:88:d1:c0: 2f:26:92:ae:39:da:53:8c:58:43:0e:38:64:6c:27:54:09:60: 0b:12:ac:1c:e2:38:ab:d9:db:b7:7a:98:cb:c7:ac:af:79:59: a7:ac:e6:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUDwaOgzVCqBt1jNi3bmkTvxTr50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNDExMjExMjM3MTFaFw0yNDExMjQxODEwMTFaMDMxMTAvBgNV BAMTKDM4QjNGNzAwRDlCQjZGRjZENzlGMjc0ODJGRTk1MUQwRDVERUZGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFgJdCwn8zMBGSa6FgJQqdZEX Bv098WHpvpm7CwVd/xuNj+HNWQVi5up7YfEJImHSpRI8k0/5fCS4RqQjNdN16LiU V0zIwPB0y86o5ljP8XSr/aPHP3NwnUYqQKcQgyhMyQHbw8/x4V2N9pfUwBWRQZTJ +E1/h+IJPXE2XquZJ1gscjo5gjST4/vcLf/zFCFUGx6wCQVjHMCMD0bPdqqySHZ1 lUYW1C9qAkmdVPEfvAS8a+4MPaE/L2sZltCGXl60QZbv8lHMusGSJzxfi32jGOKK sjFVQLtJqDIzpm83D5Hrdpku2XH01jNtJIrNwPwXQ4TodrPiWLa5vXy2aHEJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOLP3ANm7b/bXnydIL+lR0NXe/5wwHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOYSA6AS17Gq41p/vDwJ1q0ZQfdDDUM/rc0l HQrbHMdkYdPA0dePxT3Pl/y+kwlXM4IisY3c+bLwuG3mMIXk945qsAF6/KGtm2TK yRD25xzORZ2w7kvbJTpTLMaEN2Et/ORJScqHg0lkm2fccrgOVRdP8tqGeObk+RHH Ggemb02bS98nROeBxNdKlKMwqQmsNitWS5yQkWra/zsSoe91OrqZ4smXO8cdc3bx pqdQAHUg3VBr8Iq70ysbN0mi/+pB3VbwCb/stEQqGuOuMmXI0xGOf+X6u4jRwC8m kq452lOMWEMOOGRsJ1QJYAsSrBziOKvZ27d6mMvHrK95Waes5nc= -----END CERTIFICATE-----Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org