$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: MXOr+j6JTRoGf27qg7P7MJ8zqpCG7778uXp6aEbTbDA= Subject key identifier: B0:1A:BE:79:EB:CF:33:7A:11:73:33:43:84:87:DD:2E:4D:39:00:1C Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 277247EC04716E7C730FBBFB9A8DE715B20CD450 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 0137 Signing time: Thu 21 Nov 2024 15:42:23 +0000 Manifest this update: Thu 21 Nov 2024 15:37:23 +0000 Manifest next update: Mon 25 Nov 2024 00:48:23 +0000 Files and hashes: 1: 6886844AB176920850E0984917E9713667D0A025.crl (hash: t/axNe3773uE4N/7cC7M+tAOMC0d5Oe3UUX+g0Wb/OE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:72:47:ec:04:71:6e:7c:73:0f:bb:fb:9a:8d:e7:15:b2:0c:d4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Nov 21 15:37:23 2024 GMT Not After : Nov 25 00:48:23 2024 GMT Subject: CN=B01ABE79EBCF337A117333438487DD2E4D39001C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:08:60:f7:e1:9d:1d:b1:0a:a3:18:29:f7: ef:56:f2:b3:bf:30:99:22:d9:d8:cc:1f:17:9d:d1: 75:65:e1:8f:b9:02:98:b5:7b:fb:17:95:98:ac:e2: 09:6d:e9:12:1b:47:e5:53:3d:6e:32:8c:e1:7b:43: 7b:e9:6a:bf:3e:2d:a4:87:d6:53:85:4c:ce:59:8c: 77:dd:1f:d4:e7:1a:79:4d:96:fe:ec:0a:93:39:30: cb:79:19:e7:20:8c:99:ef:5d:a5:30:0d:d2:44:39: 9f:7f:d8:3e:61:26:a7:ca:30:9b:d7:7d:d2:43:c3: 82:82:22:9e:e1:f9:f5:27:6a:6e:0f:0e:5a:db:13: d2:0b:3d:9c:06:14:83:95:1b:fe:66:cf:78:8c:df: a5:14:22:9e:79:25:6a:8a:c0:7c:25:a4:68:1a:1c: 27:cf:cb:66:25:2a:3f:42:24:4c:5c:89:a9:df:7d: 02:cc:7f:27:d8:f3:65:b1:17:79:8d:d4:9f:07:e3: 3b:e9:5c:b6:91:ba:6a:c1:72:54:1e:fc:81:40:67: 46:a2:95:99:92:b6:7c:52:3f:05:ea:73:ed:17:a8: 20:c3:78:ea:0b:79:5d:e4:9d:89:7e:19:2f:90:e8: e7:0e:22:e9:2a:11:d6:d1:69:ff:59:65:3e:7e:04: 6e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1A:BE:79:EB:CF:33:7A:11:73:33:43:84:87:DD:2E:4D:39:00:1C X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ee:5c:a0:97:d7:49:50:01:a7:21:5f:07:53:44:f7:34:8d: c1:b4:04:cd:5e:82:b6:2a:09:b9:8e:51:fe:43:e9:06:db:eb: dd:d6:ee:3d:93:1e:e5:34:13:f5:f4:16:1d:6b:14:0f:12:97: a3:91:35:0e:dd:d7:1e:5a:05:a5:37:91:73:d1:1f:f2:d1:53: 31:b6:62:d7:9b:14:9b:cb:e8:7a:ae:b2:38:c1:a4:5a:33:46: 2e:77:26:99:b4:e5:06:25:36:b7:65:0f:22:e5:01:21:c2:3c: 0a:86:53:45:37:33:21:45:d8:9a:be:4e:27:17:13:c7:5e:b6: dc:59:66:fc:f1:38:ac:c4:36:de:64:f4:ee:ed:56:d0:d8:a6: a8:8c:b1:7b:b6:92:cb:87:5c:8e:65:a7:41:f4:1f:fd:dd:6c: 90:00:6e:f7:e9:f9:91:ef:09:ad:ea:a2:fa:24:94:d4:6e:bd: 8c:02:58:67:fe:9d:c9:88:2f:f0:53:5d:f3:42:46:cc:e5:18: 97:46:d1:8d:89:ce:a3:3e:f8:be:db:fb:51:7b:c9:13:14:6e: 33:7f:15:f5:1b:9e:b4:62:72:0e:97:1d:5e:0f:af:03:29:d1: ca:0c:c8:ec:c1:64:75:59:1f:9d:d8:65:2d:f2:52:2a:3c:84: 4a:85:11:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ3JH7ARxbnxzD7v7mo3nFbIM1FAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNDExMjExNTM3MjNaFw0yNDExMjUwMDQ4MjNaMDMxMTAvBgNV BAMTKEIwMUFCRTc5RUJDRjMzN0ExMTczMzM0Mzg0ODdERDJFNEQzOTAwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Pghg9+GdHbEKoxgp9+9W8rO/ MJki2djMHxed0XVl4Y+5Api1e/sXlZis4glt6RIbR+VTPW4yjOF7Q3vpar8+LaSH 1lOFTM5ZjHfdH9TnGnlNlv7sCpM5MMt5GecgjJnvXaUwDdJEOZ9/2D5hJqfKMJvX fdJDw4KCIp7h+fUnam4PDlrbE9ILPZwGFIOVG/5mz3iM36UUIp55JWqKwHwlpGga HCfPy2YlKj9CJExcianffQLMfyfY82WxF3mN1J8H4zvpXLaRumrBclQe/IFAZ0ai lZmStnxSPwXqc+0XqCDDeOoLeV3knYl+GS+Q6OcOIukqEdbRaf9ZZT5+BG4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsBq+eevPM3oRczNDhIfdLk05ABwwHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7uXKCX10lQAachXwdTRPc0jcG0BM1egrYq CbmOUf5D6Qbb693W7j2THuU0E/X0Fh1rFA8Sl6ORNQ7d1x5aBaU3kXPRH/LRUzG2 YtebFJvL6HqusjjBpFozRi53Jpm05QYlNrdlDyLlASHCPAqGU0U3MyFF2Jq+TicX E8dettxZZvzxOKzENt5k9O7tVtDYpqiMsXu2ksuHXI5lp0H0H/3dbJAAbvfp+ZHv Ca3qovoklNRuvYwCWGf+ncmIL/BTXfNCRszlGJdG0Y2JzqM++L7b+1F7yRMUbjN/ FfUbnrRicg6XHV4PrwMp0coMyOzBZHVZH53YZS3yUio8hEqFEaM= -----END CERTIFICATE-----Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org