$ rpki-client -vvf repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft File: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft (raw, json) Hash identifier: YWjcGUBc9PcqeQvpDxyEhDCCO13NUPuVhhrpP/wkJRY= Subject key identifier: 24:45:07:31:ED:1F:8A:A1:2F:0F:E3:89:28:03:C5:D9:2A:50:62:C3 Authority key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 Certificate issuer: /CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Certificate serial: 038528001BA1AE587E86A02FE802E6420C86A54E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft Manifest number: 0485 Signing time: Thu 21 Nov 2024 14:22:12 +0000 Manifest this update: Thu 21 Nov 2024 14:17:12 +0000 Manifest next update: Sun 24 Nov 2024 18:47:12 +0000 Files and hashes: 1: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl (hash: JoDg1e3NJUuOKGb+SpXvhgkJ2PZ2E0/qulIgBX20io0=) 2: 3130332e3130352e3235322e302f32322d3234203d3e20313336383835.roa (hash: 44kAzWzg26sS3Mv5o43gM/z9HrJgig9BSM86UooMv/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:85:28:00:1b:a1:ae:58:7e:86:a0:2f:e8:02:e6:42:0c:86:a5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Validity Not Before: Nov 21 14:17:12 2024 GMT Not After : Nov 24 18:47:12 2024 GMT Subject: CN=24450731ED1F8AA12F0FE3892803C5D92A5062C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:0e:87:ff:d7:04:ee:98:68:6f:f2:9a:97: b9:32:b0:52:08:30:1f:3e:ce:98:5f:e7:2b:37:b2: b4:36:54:c7:8c:b1:a1:7d:13:9f:8f:cb:e9:71:9d: 3e:8a:e0:2d:4f:89:d4:eb:56:83:70:db:06:13:56: d8:47:e2:ef:a5:1b:5d:fe:b0:ce:59:a6:bc:c8:1b: 05:e3:57:dd:a1:75:0b:4c:db:23:41:50:47:b2:2c: a7:7e:14:e7:cb:16:8a:9c:9d:be:59:3d:62:f5:24: 49:57:4f:01:85:7a:32:f6:10:79:0b:61:55:03:9d: 78:07:0a:69:8e:81:e4:c5:8e:ae:bc:3c:af:1b:b6: 22:3a:aa:f9:25:69:44:2e:61:09:4e:0b:c9:67:a7: a7:5a:b3:ae:d8:40:45:61:9e:e7:61:ac:6f:44:b2: b5:d3:83:70:97:6c:cf:35:64:42:8e:43:30:17:07: 15:53:c6:64:36:e2:a8:d1:5b:e7:a7:a2:8f:29:3b: e2:5d:65:73:6c:e5:9e:48:ea:6d:6f:db:e8:09:7b: 58:93:61:9c:c1:cd:95:9f:50:1d:cd:23:25:2b:21: 3f:63:44:8f:f4:b8:33:c2:74:c9:af:1b:86:fa:32: dc:d8:cc:08:79:65:9f:1d:1f:61:5f:15:06:2c:87: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:45:07:31:ED:1F:8A:A1:2F:0F:E3:89:28:03:C5:D9:2A:50:62:C3 X509v3 Authority Key Identifier: keyid:6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:c1:d5:32:e4:bd:1d:cb:75:e0:f5:c1:15:0c:d6:d9:1f:f9: 11:91:08:b3:51:c8:f3:43:fc:00:d6:ea:b5:07:fb:77:60:57: 00:14:89:3a:9c:95:8a:20:b1:8d:c5:8d:fc:a8:b3:ef:ef:f8: 9d:d0:b7:ca:6b:57:80:6c:44:16:65:5c:d9:ca:d2:37:05:b2: 9f:1f:de:54:86:41:76:5a:8e:03:e9:d3:2a:c3:b8:56:03:8f: e8:5e:ee:29:e5:89:94:f2:9d:f1:3e:34:17:55:d0:c3:56:74: 71:9f:cf:3a:2d:e7:40:d8:43:dc:af:3f:bf:d8:a3:0b:db:5c: 2e:c5:e9:33:78:72:88:aa:d9:72:03:d7:4e:ee:eb:c8:51:59: 7d:b5:c0:02:d3:8f:e6:c1:17:7c:60:81:8e:23:7e:d8:f6:5f: c8:ba:45:67:0f:e0:9f:38:21:eb:02:21:7b:63:00:a5:7d:57: d7:e4:f1:db:72:57:76:4c:0b:05:46:5a:9a:14:4f:3c:46:4f: ca:39:ed:31:47:be:27:5c:c7:e0:fd:46:84:b6:cb:83:90:ad: e9:d2:de:ff:76:ac:8d:98:fe:0b:cb:ae:87:21:4f:13:2d:5f: cb:d2:4a:27:58:f7:65:21:17:e4:7c:5b:7f:fe:52:9e:6d:63: d5:77:e6:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4UoABuhrlh+hqAv6ALmQgyGpU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgy RTVDMEE5NTAeFw0yNDExMjExNDE3MTJaFw0yNDExMjQxODQ3MTJaMDMxMTAvBgNV BAMTKDI0NDUwNzMxRUQxRjhBQTEyRjBGRTM4OTI4MDNDNUQ5MkE1MDYyQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15Q6H/9cE7phob/Kal7kysFII MB8+zphf5ys3srQ2VMeMsaF9E5+Py+lxnT6K4C1PidTrVoNw2wYTVthH4u+lG13+ sM5ZprzIGwXjV92hdQtM2yNBUEeyLKd+FOfLFoqcnb5ZPWL1JElXTwGFejL2EHkL YVUDnXgHCmmOgeTFjq68PK8btiI6qvklaUQuYQlOC8lnp6das67YQEVhnudhrG9E srXTg3CXbM81ZEKOQzAXBxVTxmQ24qjRW+enoo8pO+JdZXNs5Z5I6m1v2+gJe1iT YZzBzZWfUB3NIyUrIT9jRI/0uDPCdMmvG4b6MtzYzAh5ZZ8dH2FfFQYsh7z1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJEUHMe0fiqEvD+OJKAPF2SpQYsMwHwYDVR0j BBgwFoAUap3FZsjL8dfOsX/JkXrNWC5cCpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTZhYTU0Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMC82QTlEQzU2NkM4 Q0JGMUQ3Q0VCMTdGQzk5MTdBQ0Q1ODJFNUMwQTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNENTgyRTVD MEE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2YWE1NGYtNzE1OC00M2FmLWIz MzYtYmU0NzE0ODE2ZmFkLzAvNkE5REM1NjZDOENCRjFEN0NFQjE3RkM5OTE3QUNE NTgyRTVDMEE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/B1TLkvR3LdeD1wRUM1tkf+RGRCLNRyPND /ADW6rUH+3dgVwAUiTqclYogsY3Fjfyos+/v+J3Qt8prV4BsRBZlXNnK0jcFsp8f 3lSGQXZajgPp0yrDuFYDj+he7inliZTynfE+NBdV0MNWdHGfzzot50DYQ9yvP7/Y owvbXC7F6TN4coiq2XID107u68hRWX21wALTj+bBF3xggY4jftj2X8i6RWcP4J84 IesCIXtjAKV9V9fk8dtyV3ZMCwVGWpoUTzxGT8o57TFHvidcx+D9RoS2y4OQrenS 3v92rI2Y/gvLrochTxMtX8vSSidY92UhF+R8W3/+Up5tY9V35uk= -----END CERTIFICATE-----Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org