$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft File: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft (raw, json) Hash identifier: FX8w5JTmb7nDA148PArGrM5GuxQzuzv/oZrbbfPYOWE= Subject key identifier: DB:3E:A4:45:81:7F:2B:4B:C9:56:47:93:68:EC:01:87:93:AE:7D:57 Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 Certificate issuer: /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Certificate serial: 72344981344A15D060B764661BDBAD5EB37C0589 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft Manifest number: 0486 Signing time: Fri 22 Nov 2024 19:00:55 +0000 Manifest this update: Fri 22 Nov 2024 18:55:55 +0000 Manifest next update: Mon 25 Nov 2024 20:28:55 +0000 Files and hashes: 1: 3130332e35302e32372e302f32342d3234203d3e203633383639.roa (hash: QY5VNUdbjtsk3ISnlEX+JP066nbftYimXDP6/ZFfdUY=) 2: 6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl (hash: ep9xexHq9xPwJFK+OtJDEOMAfAObBm9Km5wmsiZ48SY=) 3: 3130332e35302e32342e302f32342d3234203d3e203633383639.roa (hash: jbbKcT+NH1vrUGVF5FG0fF8tGj0qvis+CEXhy1ZbNcY=) 4: 3130332e35302e32362e302f32342d3234203d3e203633383639.roa (hash: 3QM5Ix3e9tj5OY5stD7sNCXK5GMRSydvXTBA4V6sWjA=) 5: 3130332e35302e32352e302f32342d3234203d3e203633383639.roa (hash: 7Lr0MYTgaOLTpDIaen7u7TB21udzsMgpsSoH7AHdUyg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:34:49:81:34:4a:15:d0:60:b7:64:66:1b:db:ad:5e:b3:7c:05:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121 Validity Not Before: Nov 22 18:55:55 2024 GMT Not After : Nov 25 20:28:55 2024 GMT Subject: CN=DB3EA445817F2B4BC956479368EC018793AE7D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:86:30:67:21:aa:c3:3b:0e:90:d7:f2:61: 55:db:2d:8a:60:9b:09:0e:e1:38:d0:72:c3:fc:c2: cc:f3:ff:d9:b9:de:5d:71:78:b8:1e:08:61:05:f3: 1a:b9:30:13:aa:93:84:63:ff:df:5c:d9:33:dd:08: fa:77:52:65:43:db:29:d8:72:3a:d5:0f:58:76:60: a2:30:e8:bb:ce:db:91:c6:48:01:53:5a:2c:bb:7e: 8a:a2:a0:d4:d0:0d:8d:58:6b:42:71:87:ac:75:73: 67:0f:51:88:a5:5e:d1:f8:76:02:bc:79:58:5c:d0: 2c:55:bd:d9:0d:89:17:0f:ef:3b:d9:d8:0b:e3:ae: 74:5e:1d:fd:f0:d8:4c:b0:9a:38:a5:aa:07:0f:10: 2e:59:03:aa:d1:74:59:94:93:e8:a9:33:8e:fa:0c: c6:56:f7:91:2f:c2:08:e0:77:fc:af:d1:be:75:90: 13:ff:8c:81:4f:f8:96:3d:36:35:e1:44:57:4f:18: e6:9e:25:37:44:b7:c0:3b:1e:03:aa:a8:40:8a:9d: 09:7e:53:6c:91:46:30:5a:89:22:21:99:df:d6:c1: a0:9d:5f:4d:79:4b:78:dc:a0:db:bc:8a:ae:5c:db: fd:3a:36:5a:61:af:99:2f:35:90:ed:bb:02:aa:64: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:3E:A4:45:81:7F:2B:4B:C9:56:47:93:68:EC:01:87:93:AE:7D:57 X509v3 Authority Key Identifier: keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:63:e8:3c:78:14:56:6d:dd:b2:b7:ca:e2:06:00:ed:fc:ee: 9f:df:a5:46:fe:7f:67:e6:94:23:ec:24:99:36:86:56:fd:1f: 7a:9a:1d:e5:ac:55:ec:70:7a:bc:49:56:f4:0a:ea:05:5e:ee: 77:c6:11:b6:d8:94:f1:cc:41:f0:b7:8e:fa:63:96:fe:ea:dc: 70:3d:1a:c6:d3:03:99:b4:5a:c4:96:6a:61:7a:5f:5a:c4:a7: 1e:df:50:c8:d6:9c:ff:fa:d1:3d:e4:01:1c:10:da:f2:3f:27: 1c:3c:1b:31:48:0d:eb:28:b2:03:70:9f:31:5d:0e:1f:e7:66: a4:7e:d5:93:9c:39:28:d9:9c:47:41:1e:aa:93:77:fb:8c:29: 26:59:b0:71:47:df:36:f8:5f:6f:40:78:40:dc:3e:e5:46:f6: b9:6a:9f:81:04:a8:a8:f7:f3:69:d5:81:6c:4b:09:9e:40:2a: d5:97:69:90:a7:a9:9f:bf:7f:41:8a:75:17:40:f2:93:1d:36: e0:54:a2:51:25:92:3a:fa:16:b8:3f:c1:0b:95:b9:7d:aa:a5: e9:6a:49:89:35:65:65:62:d3:a8:03:2c:41:1f:46:ff:27:85: ee:0c:18:51:80:42:91:ba:c2:2f:3a:cc:c8:1d:5e:66:42:6d: d5:6b:21:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjRJgTRKFdBgt2RmG9utXrN8BYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3 MUQyRDEyMTAeFw0yNDExMjIxODU1NTVaFw0yNDExMjUyMDI4NTVaMDMxMTAvBgNV BAMTKERCM0VBNDQ1ODE3RjJCNEJDOTU2NDc5MzY4RUMwMTg3OTNBRTdENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDIYwZyGqwzsOkNfyYVXbLYpg mwkO4TjQcsP8wszz/9m53l1xeLgeCGEF8xq5MBOqk4Rj/99c2TPdCPp3UmVD2ynY cjrVD1h2YKIw6LvO25HGSAFTWiy7foqioNTQDY1Ya0Jxh6x1c2cPUYilXtH4dgK8 eVhc0CxVvdkNiRcP7zvZ2AvjrnReHf3w2EywmjilqgcPEC5ZA6rRdFmUk+ipM476 DMZW95Evwgjgd/yv0b51kBP/jIFP+JY9NjXhRFdPGOaeJTdEt8A7HgOqqECKnQl+ U2yRRjBaiSIhmd/WwaCdX015S3jcoNu8iq5c2/06Nlphr5kvNZDtuwKqZONpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2z6kRYF/K0vJVkeTaOwBh5OufVcwHwYDVR0j BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy RDEyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc2Njg1NDEtZDZjNi00MDllLThh ZDEtNWU4OWE0YjI4NTBlLzAvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJB RkQ3MUQyRDEyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFj6Dx4FFZt3bK3yuIGAO387p/fpUb+f2fm lCPsJJk2hlb9H3qaHeWsVexwerxJVvQK6gVe7nfGEbbYlPHMQfC3jvpjlv7q3HA9 GsbTA5m0WsSWamF6X1rEpx7fUMjWnP/60T3kARwQ2vI/Jxw8GzFIDesosgNwnzFd Dh/nZqR+1ZOcOSjZnEdBHqqTd/uMKSZZsHFH3zb4X29AeEDcPuVG9rlqn4EEqKj3 82nVgWxLCZ5AKtWXaZCnqZ+/f0GKdRdA8pMdNuBUolElkjr6Frg/wQuVuX2qpelq SYk1ZWVi06gDLEEfRv8nhe4MGFGAQpG6wi86zMgdXmZCbdVrIcs= -----END CERTIFICATE-----Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org