$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: Qjne1bQvBR75uKOjMqxBWtyo6uCddmAnm/+GWQYPID0= Subject key identifier: 87:A3:CC:12:02:38:AE:53:85:EE:14:16:ED:67:84:7D:55:23:3A:F4 Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 6D29A2A7498DB8629D7C6A37BFDA39C32A0D6B8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: 54 Signing time: Mon 25 Nov 2024 01:40:04 +0000 Manifest this update: Mon 25 Nov 2024 01:35:04 +0000 Manifest next update: Thu 28 Nov 2024 08:27:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: K7RSB0fSUn/pY6tAI4pvWvW29imREn32KDvFM9Q5WZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:29:a2:a7:49:8d:b8:62:9d:7c:6a:37:bf:da:39:c3:2a:0d:6b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Nov 25 01:35:04 2024 GMT Not After : Nov 28 08:27:04 2024 GMT Subject: CN=87A3CC120238AE5385EE1416ED67847D55233AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:20:70:b1:39:4d:3b:ef:1f:8b:96:70:e0: aa:74:60:f4:47:8d:fd:fe:76:47:a0:7f:b9:13:7e: 55:9c:c8:51:ee:aa:69:05:bd:98:94:6e:5d:ac:d0: c9:3d:4f:36:11:c3:3a:db:2c:ef:f8:ac:75:68:40: 67:b7:8e:e5:58:46:36:43:cd:d1:71:95:c3:15:43: 10:e9:07:1a:55:04:5e:88:ce:27:52:79:7e:57:7c: 4a:6d:93:81:0d:df:a0:f0:ac:1b:6c:19:f1:1c:fb: 2d:68:ff:8a:96:1c:16:a3:ac:26:82:44:65:fe:ba: 45:47:7b:e5:3e:0a:a2:ab:c0:7e:08:27:aa:95:41: 8b:c8:51:7e:e4:bc:26:dd:6a:1d:3c:3e:3a:e0:76: 29:ce:57:9a:3c:ab:0a:89:cd:bc:0a:55:52:b7:38: 7e:07:0f:78:bd:99:2e:f7:02:bf:56:be:cd:cc:ae: 42:5d:10:f0:75:f8:f1:d6:96:0c:4f:a3:ca:ef:06: 12:79:32:4d:7d:65:c2:19:a9:14:0d:65:bd:f2:85: 2f:bd:7e:81:48:c1:a4:32:ed:7c:7d:02:e1:d4:1a: 60:da:78:3f:e7:3d:ae:d4:cd:04:a3:3e:6f:1b:30: 81:a0:2f:6c:43:39:cf:c4:24:d4:ec:e5:55:ac:ed: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A3:CC:12:02:38:AE:53:85:EE:14:16:ED:67:84:7D:55:23:3A:F4 X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:3b:39:8e:0b:f9:2a:39:6a:6f:6b:32:01:de:d1:72:12:52: 61:3b:f9:4e:c7:31:e5:01:1b:07:9f:e1:5c:ac:2f:16:a8:73: cd:f9:62:aa:68:c0:af:c3:1c:3b:dd:9d:f0:f5:70:7a:b0:37: cd:01:27:07:e7:fc:ee:6d:e0:fb:0d:d7:ac:fa:20:b3:7b:b8: a5:26:91:c4:73:06:c8:72:1b:b7:78:07:b0:b0:68:32:a2:37: 94:ce:9b:aa:28:c7:3c:00:88:e0:40:d7:a9:de:46:c6:15:5e: ec:3a:ce:70:65:17:c5:aa:97:1e:7b:7a:31:7f:3f:f8:f4:8f: dd:89:6e:9b:89:ea:3a:df:24:1f:5c:05:f7:8a:60:46:cd:68: e8:03:53:57:34:ac:b1:86:8c:60:29:8c:7f:33:83:dd:fd:9c: e6:35:03:39:db:9c:64:c7:83:58:12:40:24:f3:19:6e:82:c2: d4:71:76:45:a0:e0:ce:b2:e5:a6:28:23:de:51:d4:ba:9e:18: 2b:75:6f:fc:69:a4:82:f6:a4:59:c4:8b:4d:2e:66:28:09:15: 6d:ac:e7:9c:e6:3a:11:67:92:57:02:d9:62:f1:c6:7c:b3:fb: fa:57:d3:0d:bd:99:bb:5a:8c:3a:75:d0:69:56:fd:9a:39:1c: 0d:5b:ba:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSmip0mNuGKdfGo3v9o5wyoNa4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNDExMjUwMTM1MDRaFw0yNDExMjgwODI3MDRaMDMxMTAvBgNV BAMTKDg3QTNDQzEyMDIzOEFFNTM4NUVFMTQxNkVENjc4NDdENTUyMzNBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3CBwsTlNO+8fi5Zw4Kp0YPRH jf3+dkegf7kTflWcyFHuqmkFvZiUbl2s0Mk9TzYRwzrbLO/4rHVoQGe3juVYRjZD zdFxlcMVQxDpBxpVBF6IzidSeX5XfEptk4EN36DwrBtsGfEc+y1o/4qWHBajrCaC RGX+ukVHe+U+CqKrwH4IJ6qVQYvIUX7kvCbdah08PjrgdinOV5o8qwqJzbwKVVK3 OH4HD3i9mS73Ar9Wvs3MrkJdEPB1+PHWlgxPo8rvBhJ5Mk19ZcIZqRQNZb3yhS+9 foFIwaQy7Xx9AuHUGmDaeD/nPa7UzQSjPm8bMIGgL2xDOc/EJNTs5VWs7UvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6PMEgI4rlOF7hQW7WeEfVUjOvQwHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABc7OY4L+So5am9rMgHe0XISUmE7+U7HMeUB Gwef4VysLxaoc835YqpowK/DHDvdnfD1cHqwN80BJwfn/O5t4PsN16z6ILN7uKUm kcRzBshyG7d4B7CwaDKiN5TOm6ooxzwAiOBA16neRsYVXuw6znBlF8Wqlx57ejF/ P/j0j92JbpuJ6jrfJB9cBfeKYEbNaOgDU1c0rLGGjGApjH8zg939nOY1AznbnGTH g1gSQCTzGW6CwtRxdkWg4M6y5aYoI95R1LqeGCt1b/xppIL2pFnEi00uZigJFW2s 55zmOhFnklcC2WLxxnyz+/pX0w29mbtajDp10GlW/Zo5HA1bulY= -----END CERTIFICATE-----Generated at Mon Nov 25 02:56:52 2024 by rpki-client on console-fra.rpki-client.org