$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft File: F389B5570A768F4811B6377427EE5A9710A3078F.mft (raw, json) Hash identifier: AQ0Rvt/SdGtupl2m3qGkSs/h4KVwM+OhXLwbrqx68dM= Subject key identifier: 3A:43:6B:AB:66:56:C8:C9:1F:6D:CF:D0:4B:08:06:B4:5A:DB:99:D2 Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F Certificate issuer: /CN=F389B5570A768F4811B6377427EE5A9710A3078F Certificate serial: 5B26B6894F9A556B09DDB7ACD4EB095CE8D22DBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft Manifest number: 02CD Signing time: Mon 25 Nov 2024 16:40:55 +0000 Manifest this update: Mon 25 Nov 2024 16:35:55 +0000 Manifest next update: Fri 29 Nov 2024 04:12:55 +0000 Files and hashes: 1: F389B5570A768F4811B6377427EE5A9710A3078F.crl (hash: 6rBtKzJOi/2kfWRB91D593pg68Y53EvvUhPvAQlL8Rk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:26:b6:89:4f:9a:55:6b:09:dd:b7:ac:d4:eb:09:5c:e8:d2:2d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F Validity Not Before: Nov 25 16:35:55 2024 GMT Not After : Nov 29 04:12:55 2024 GMT Subject: CN=3A436BAB6656C8C91F6DCFD04B0806B45ADB99D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:e0:bb:8c:c7:19:3b:2e:35:43:2c:f2:73: 92:f5:7d:9b:18:c8:f6:99:24:60:84:da:f0:93:79: e7:8b:16:42:6a:6e:62:8c:21:a7:97:67:58:e5:3a: 52:92:6f:1f:a2:ee:83:00:3e:e0:21:59:59:c1:d8: b9:a8:7d:fc:47:a6:04:45:96:8f:32:79:16:b7:c9: 93:1d:d7:a6:a5:58:ba:ff:a4:f7:bc:19:d3:a6:b0: 2d:8b:61:07:20:e3:f4:35:2e:5c:56:87:56:5e:a2: 55:1c:99:30:ef:e2:7b:28:4c:67:d0:63:05:08:e3: ce:b9:28:37:d4:47:05:bc:48:61:8c:79:1b:49:00: 6b:32:a9:84:9e:4e:62:70:dd:e9:65:63:b1:bc:6d: 6f:22:b0:d4:ec:2e:18:c8:e6:c2:82:23:f7:95:91: 93:00:25:a1:40:0a:e5:41:00:d2:ce:ed:06:bd:59: a6:7b:f7:4e:20:ad:6d:42:98:2a:d0:6b:93:a6:f0: 31:26:07:bf:ef:52:e8:21:82:26:b6:46:9d:5b:d6: 72:b5:7d:9b:78:31:6f:7c:52:d0:84:5c:4e:a6:ef: cf:76:41:00:78:81:69:37:06:25:17:d4:9f:96:ae: f5:6b:d4:f6:70:56:bd:bc:a9:dd:77:ab:96:51:07: 82:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:43:6B:AB:66:56:C8:C9:1F:6D:CF:D0:4B:08:06:B4:5A:DB:99:D2 X509v3 Authority Key Identifier: keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ad:8f:a3:3e:7f:90:eb:ba:a4:70:00:1c:ac:1f:b1:89:e4: 62:83:21:03:ee:da:75:e0:25:53:10:25:3c:87:f5:95:ad:17: 15:df:c6:09:f8:8d:b0:0b:2d:37:c9:1e:d6:fd:64:36:55:b1: 83:27:f2:e9:db:24:1d:12:14:4d:b2:6d:11:4f:c8:f0:2b:41: 15:e6:79:8b:d5:13:3e:2f:12:7f:fb:19:68:ac:5f:dc:c6:2f: 53:16:84:a2:bd:5f:6e:6a:92:9d:01:47:78:78:98:d4:ec:05: 87:ca:f8:32:65:6b:3f:44:be:1b:9a:74:c6:9a:47:7f:3d:e3: a9:f4:6a:e7:d2:d7:fb:e7:b5:bc:38:40:ab:d2:c6:a1:96:d7: 44:8b:a8:8a:c6:65:30:24:c6:b1:58:0b:f8:0c:d2:f3:d2:c4: 0a:14:8e:b5:ca:c7:40:e6:40:18:4e:e0:32:aa:ec:ac:73:a1: e6:4a:78:11:13:f6:1e:56:cf:ef:16:bb:61:5a:60:e9:4a:7b: 32:5b:4f:ee:e5:bd:5e:1f:99:7e:5b:3e:a6:f8:69:fb:3c:b0: 19:43:04:c6:b0:ab:4b:92:27:d5:f0:64:f5:55:5c:fe:f6:c5: 18:d8:f5:98:7d:a0:f8:d7:a7:dc:b8:d0:fb:d7:ce:35:eb:4d: 25:d6:89:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWya2iU+aVWsJ3bes1OsJXOjSLb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcx MEEzMDc4RjAeFw0yNDExMjUxNjM1NTVaFw0yNDExMjkwNDEyNTVaMDMxMTAvBgNV BAMTKDNBNDM2QkFCNjY1NkM4QzkxRjZEQ0ZEMDRCMDgwNkI0NUFEQjk5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAveC7jMcZOy41Qyzyc5L1fZsY yPaZJGCE2vCTeeeLFkJqbmKMIaeXZ1jlOlKSbx+i7oMAPuAhWVnB2LmoffxHpgRF lo8yeRa3yZMd16alWLr/pPe8GdOmsC2LYQcg4/Q1LlxWh1ZeolUcmTDv4nsoTGfQ YwUI4865KDfURwW8SGGMeRtJAGsyqYSeTmJw3ellY7G8bW8isNTsLhjI5sKCI/eV kZMAJaFACuVBANLO7Qa9WaZ7904grW1CmCrQa5Om8DEmB7/vUughgia2Rp1b1nK1 fZt4MW98UtCEXE6m7892QQB4gWk3BiUX1J+WrvVr1PZwVr28qd13q5ZRB4IBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOkNrq2ZWyMkfbc/QSwgGtFrbmdIwHwYDVR0j BBgwFoAU84m1Vwp2j0gRtjd0J+5alxCjB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzhhYjNlMC1jYTY4LTQyZjYtOThmNi02NTRhMjUyYTg2NDgvMC9GMzg5QjU1NzBB NzY4RjQ4MTFCNjM3NzQyN0VFNUE5NzEwQTMwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcxMEEz MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVB OTcxMEEzMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqtj6M+f5DruqRwABysH7GJ5GKDIQPu2nXg JVMQJTyH9ZWtFxXfxgn4jbALLTfJHtb9ZDZVsYMn8unbJB0SFE2ybRFPyPArQRXm eYvVEz4vEn/7GWisX9zGL1MWhKK9X25qkp0BR3h4mNTsBYfK+DJlaz9EvhuadMaa R38946n0aufS1/vntbw4QKvSxqGW10SLqIrGZTAkxrFYC/gM0vPSxAoUjrXKx0Dm QBhO4DKq7KxzoeZKeBET9h5Wz+8Wu2FaYOlKezJbT+7lvV4fmX5bPqb4afs8sBlD BMawq0uSJ9XwZPVVXP72xRjY9Zh9oPjXp9y40PvXzjXrTSXWiYI= -----END CERTIFICATE-----Generated at Mon Nov 25 18:43:01 2024 by rpki-client on console-ams.rpki-client.org