$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: RH3jcChvTaGc4zjp4KXAr6gKv6AonaRQ3QzkgUaHyJo= Subject key identifier: 5B:EB:E7:63:E5:30:87:20:54:5E:E3:06:32:05:5A:20:60:66:85:50 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: 481FC74C76A4D16B5B8DBA0CDC23647BC41E46FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: B2 Signing time: Mon 25 Nov 2024 16:22:06 +0000 Manifest this update: Mon 25 Nov 2024 16:17:06 +0000 Manifest next update: Fri 29 Nov 2024 03:46:06 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: 4DJrREp6NxohdtUiSpO9tp2STl+O4G6AmLiDCCh3GJo=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: InZb4Svv3A2DHv8YSHBBCPvqo5sWpcXYdxwGVe0a300=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:1f:c7:4c:76:a4:d1:6b:5b:8d:ba:0c:dc:23:64:7b:c4:1e:46:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Nov 25 16:17:06 2024 GMT Not After : Nov 29 03:46:06 2024 GMT Subject: CN=5BEBE763E5308720545EE30632055A2060668550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9f:85:83:be:b8:d6:02:29:42:2b:41:95:0d: 1c:98:10:43:46:ca:80:11:5b:c8:ee:bd:51:6b:03: 92:0f:53:cc:2a:ad:03:97:bb:39:c5:16:06:e0:11: dc:40:e2:a4:55:9a:2b:a7:e1:b2:5a:97:48:56:6a: 3c:33:fb:c3:73:9d:72:5d:af:be:8b:4e:94:71:02: 93:4a:82:43:4f:87:01:22:4e:3c:73:9f:1b:39:ac: fe:b4:d8:a7:4b:02:bc:fc:a0:af:19:5d:b9:c7:ab: f4:d7:a8:c7:16:fa:44:6d:9e:d3:a1:20:4c:29:f0: ed:d8:6b:58:a4:5d:f5:8e:c8:f7:09:ac:a7:d7:6f: a8:87:9e:66:c0:e9:d4:7e:66:3d:40:ae:e3:15:88: 54:39:ef:7c:45:a7:94:32:88:c7:1c:4f:f3:3e:4a: 55:53:d5:24:f3:a9:c6:d0:3d:35:38:5f:c4:1b:7b: d9:83:1f:f8:32:be:02:01:a0:a3:91:71:97:81:7e: c9:ac:db:a4:b2:ef:14:35:7c:3f:c8:c8:55:be:85: 9b:64:02:10:af:c8:4b:ce:f1:b2:3b:3b:8d:60:d5: c7:cd:64:05:0a:f9:6f:60:fb:60:36:0d:79:63:20: 66:4c:d5:e4:04:d1:6e:3a:88:be:c7:c0:46:0e:c5: 11:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EB:E7:63:E5:30:87:20:54:5E:E3:06:32:05:5A:20:60:66:85:50 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c2:04:09:b8:3a:ac:68:97:f1:6f:cd:9f:41:e0:1f:fa:5d: 04:db:6c:4e:31:b7:9d:75:63:f5:b6:0a:19:29:a3:96:6f:b6: f4:27:8a:e4:8c:fe:b0:d7:83:85:c6:43:81:f1:99:b7:49:cb: d0:11:42:3c:1f:23:4c:42:bf:8d:df:8d:c9:5c:35:71:bb:02: 7c:25:e4:e2:c8:c4:45:8f:6b:aa:10:e9:99:a9:09:1c:44:27: bc:a8:91:f6:32:79:53:ae:47:b6:32:27:0f:56:72:56:b8:76: 7e:e5:26:f5:5d:d4:39:6d:ba:14:9d:76:1d:48:64:f2:48:74: 2e:41:4d:8a:47:34:96:c8:20:23:5b:de:b8:db:e4:b5:38:4c: d4:bf:db:e1:96:df:b0:19:75:c6:e1:35:60:6e:34:13:14:dc: 53:36:bb:87:a4:6c:da:6a:12:c3:5a:d7:77:57:4d:38:20:5c: 63:22:e2:09:65:c8:cc:ca:4d:77:fb:11:82:84:a7:69:01:4e: c9:9d:97:6b:7a:7c:9a:5f:cf:2a:ba:08:2d:d1:dd:5b:36:2d: f0:0e:5b:f7:47:d6:8d:52:bc:8a:a3:d9:cf:a7:76:ca:76:53: a5:94:8d:78:fe:7c:1d:e7:74:68:9f:f8:a1:89:46:5d:5c:99: f9:fa:2c:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSB/HTHak0WtbjboM3CNke8QeRv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNDExMjUxNjE3MDZaFw0yNDExMjkwMzQ2MDZaMDMxMTAvBgNV BAMTKDVCRUJFNzYzRTUzMDg3MjA1NDVFRTMwNjMyMDU1QTIwNjA2Njg1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOn4WDvrjWAilCK0GVDRyYEENG yoARW8juvVFrA5IPU8wqrQOXuznFFgbgEdxA4qRVmiun4bJal0hWajwz+8NznXJd r76LTpRxApNKgkNPhwEiTjxznxs5rP602KdLArz8oK8ZXbnHq/TXqMcW+kRtntOh IEwp8O3Ya1ikXfWOyPcJrKfXb6iHnmbA6dR+Zj1AruMViFQ573xFp5QyiMccT/M+ SlVT1STzqcbQPTU4X8Qbe9mDH/gyvgIBoKORcZeBfsms26Sy7xQ1fD/IyFW+hZtk AhCvyEvO8bI7O41g1cfNZAUK+W9g+2A2DXljIGZM1eQE0W46iL7HwEYOxRHpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW+vnY+UwhyBUXuMGMgVaIGBmhVAwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjCBAm4Oqxol/FvzZ9B4B/6XQTbbE4xt511 Y/W2Chkpo5ZvtvQniuSM/rDXg4XGQ4HxmbdJy9ARQjwfI0xCv43fjclcNXG7Anwl 5OLIxEWPa6oQ6ZmpCRxEJ7yokfYyeVOuR7YyJw9Wcla4dn7lJvVd1DltuhSddh1I ZPJIdC5BTYpHNJbIICNb3rjb5LU4TNS/2+GW37AZdcbhNWBuNBMU3FM2u4ekbNpq EsNa13dXTTggXGMi4gllyMzKTXf7EYKEp2kBTsmdl2t6fJpfzyq6CC3R3Vs2LfAO W/dH1o1SvIqj2c+ndsp2U6WUjXj+fB3ndGif+KGJRl1cmfn6LKs= -----END CERTIFICATE-----Generated at Mon Nov 25 18:43:01 2024 by rpki-client on console-ams.rpki-client.org