$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: oN5uiY59XRUOkEcKJ8notbx/o8/rm4jibNCe7xQ78VE= Subject key identifier: 73:C8:30:A8:89:CA:53:BE:C5:92:ED:90:F7:36:43:7A:1E:F2:BE:B4 Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 6EB0D8A95CDE33F353CD827618CCA62547660A04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 01C1 Signing time: Fri 22 Nov 2024 15:30:04 +0000 Manifest this update: Fri 22 Nov 2024 15:25:04 +0000 Manifest next update: Mon 25 Nov 2024 21:24:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: 2u81Pdc9RNByLygb9WixA+PgfjwUh4VyicmSJtgcMTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b0:d8:a9:5c:de:33:f3:53:cd:82:76:18:cc:a6:25:47:66:0a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: Nov 22 15:25:04 2024 GMT Not After : Nov 25 21:24:04 2024 GMT Subject: CN=73C830A889CA53BEC592ED90F736437A1EF2BEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:4a:2d:60:1c:dd:cd:d7:84:b8:35:03:11: 7a:3c:af:bb:eb:69:22:1b:62:48:b0:98:90:c1:db: e7:ab:e7:d7:8d:ab:4c:19:ed:31:3f:a6:1e:9a:28: 3e:56:60:1a:d6:c5:5d:a1:6a:bc:56:54:a6:94:79: b2:62:2a:4a:df:04:5c:7f:a5:1a:35:9b:9a:d4:4b: ae:c5:b4:65:ca:12:da:e5:eb:3f:2e:6c:ec:da:46: aa:86:76:85:ad:46:1d:cb:b8:75:ad:a5:32:99:e8: 38:b4:29:90:0f:7d:2d:87:99:77:a5:e9:76:a7:12: 34:e7:08:ba:2f:34:0e:a9:4f:7b:90:59:98:7e:d9: 1d:ce:d0:a6:85:16:cf:9f:5c:b8:68:08:f5:10:f3: 04:a2:a0:9b:a5:94:5c:fe:c3:e6:18:1f:08:87:fc: bc:0f:9b:44:8e:8c:d9:48:16:2b:c4:a4:3b:b6:f6: 54:81:78:85:8a:c0:80:55:ff:e0:cb:01:9e:9a:6d: 31:ec:75:fa:6f:75:13:7b:17:5b:be:5a:8e:14:d7: 98:53:ff:f2:db:31:c0:8c:a6:b0:54:89:05:8d:92: c9:f6:1e:55:17:b9:eb:0a:f7:d4:28:88:b9:32:76: 5f:8d:f1:fb:fd:76:95:1c:71:45:a5:8d:fc:a2:54: 3e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C8:30:A8:89:CA:53:BE:C5:92:ED:90:F7:36:43:7A:1E:F2:BE:B4 X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2b:21:f9:37:7a:33:eb:cb:32:43:89:58:5f:14:79:b4:74: a0:82:25:cb:a2:5d:8a:23:44:62:3f:2b:31:a4:af:75:03:c8: d7:73:cf:35:12:fc:f1:26:f4:69:88:0d:ed:58:86:a1:83:f4: 76:70:1d:53:e0:3d:94:ff:45:c3:28:8b:8f:17:c0:08:44:25: 85:6f:d0:d8:0d:cc:53:98:06:b2:a3:12:2e:1c:b0:52:30:f1: a4:ce:7f:68:f2:10:be:1e:a1:ba:e9:ba:4e:a1:75:6b:36:58: 3c:fd:5c:ed:21:ef:f1:5a:07:31:ee:8d:8e:6a:cc:81:00:8e: 22:ab:b0:fc:59:70:18:ef:b2:be:30:60:d3:e0:23:7e:8c:9a: 1f:71:77:fa:34:b5:8b:b6:82:70:2c:20:cc:57:d2:af:c8:5a: dc:3a:12:32:98:be:13:11:8d:4f:93:93:cd:03:e5:8c:99:9a: 92:47:a7:3b:cc:2c:0d:f5:2b:72:e8:c9:fd:73:18:1f:9f:fd: 4a:35:b4:68:35:fd:f2:3f:4e:73:c2:73:e4:d6:fe:80:27:df: b1:5d:1a:c4:af:78:a7:66:9c:d1:96:39:31:e2:e1:96:b5:b2: 33:99:c4:ce:0d:3f:6b:c6:d8:ed:fc:35:6c:5f:de:b6:f8:d9: af:f0:ac:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrDYqVzeM/NTzYJ2GMymJUdmCgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNDExMjIxNTI1MDRaFw0yNDExMjUyMTI0MDRaMDMxMTAvBgNV BAMTKDczQzgzMEE4ODlDQTUzQkVDNTkyRUQ5MEY3MzY0MzdBMUVGMkJFQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvGkotYBzdzdeEuDUDEXo8r7vr aSIbYkiwmJDB2+er59eNq0wZ7TE/ph6aKD5WYBrWxV2harxWVKaUebJiKkrfBFx/ pRo1m5rUS67FtGXKEtrl6z8ubOzaRqqGdoWtRh3LuHWtpTKZ6Di0KZAPfS2HmXel 6XanEjTnCLovNA6pT3uQWZh+2R3O0KaFFs+fXLhoCPUQ8wSioJullFz+w+YYHwiH /LwPm0SOjNlIFivEpDu29lSBeIWKwIBV/+DLAZ6abTHsdfpvdRN7F1u+Wo4U15hT //LbMcCMprBUiQWNksn2HlUXuesK99QoiLkydl+N8fv9dpUccUWljfyiVD4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc8gwqInKU77Fku2Q9zZDeh7yvrQwHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgrIfk3ejPryzJDiVhfFHm0dKCCJcuiXYoj RGI/KzGkr3UDyNdzzzUS/PEm9GmIDe1YhqGD9HZwHVPgPZT/RcMoi48XwAhEJYVv 0NgNzFOYBrKjEi4csFIw8aTOf2jyEL4eobrpuk6hdWs2WDz9XO0h7/FaBzHujY5q zIEAjiKrsPxZcBjvsr4wYNPgI36Mmh9xd/o0tYu2gnAsIMxX0q/IWtw6EjKYvhMR jU+Tk80D5YyZmpJHpzvMLA31K3Loyf1zGB+f/Uo1tGg1/fI/TnPCc+TW/oAn37Fd GsSveKdmnNGWOTHi4Za1sjOZxM4NP2vG2O38NWxf3rb42a/wrE0= -----END CERTIFICATE-----Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org