$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: p3QvIGL5blzRqGqFbTD+cMgqtkhz96vLl+St3o+zaAA= Subject key identifier: ED:BC:A6:A7:46:C4:29:3D:89:4B:3A:F5:B6:86:2B:3B:A2:C2:08:4E Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 4C0197287271A1032C0A3ADE6030FCD9634A9105 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 0258 Signing time: Mon 25 Nov 2024 15:32:24 +0000 Manifest this update: Mon 25 Nov 2024 15:27:24 +0000 Manifest next update: Thu 28 Nov 2024 21:30:24 +0000 Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: Eiq4ls1Czs4CwD5WLYCAj8TxS8Jo+DN12eRdXu1zyF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 21:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:01:97:28:72:71:a1:03:2c:0a:3a:de:60:30:fc:d9:63:4a:91:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: Nov 25 15:27:24 2024 GMT Not After : Nov 28 21:30:24 2024 GMT Subject: CN=EDBCA6A746C4293D894B3AF5B6862B3BA2C2084E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:bd:b7:07:ce:12:95:c6:41:03:92:c3:1d: 38:e6:db:9c:1b:29:89:8e:b5:56:ac:b5:a3:39:63: 6a:23:39:85:1f:ce:f8:53:51:e3:aa:c8:67:d4:48: 0b:b1:f8:bc:6e:3f:8a:b5:e5:cb:bf:c5:cb:f7:37: 4d:7a:37:f6:60:ee:77:4d:bb:21:b1:8f:8f:70:39: 41:c7:81:64:c1:26:dc:3b:af:74:2e:8c:3e:39:81: 54:db:51:e8:55:14:52:95:8f:a0:cd:02:18:f3:1b: fb:34:24:90:5a:7b:8e:55:dc:39:e8:10:11:0f:0d: f6:60:21:c6:a6:5c:07:b0:9a:aa:42:7c:6b:4d:ff: d1:ee:9e:2a:4c:6a:cc:6e:58:ed:17:0b:34:2d:1f: 3a:72:92:a5:70:b8:36:31:f0:7f:75:da:fc:41:e0: ef:27:64:f0:25:06:a9:07:13:c6:2e:f8:9e:e7:b5: 36:d9:9d:ac:a8:65:85:dc:c3:3a:0d:ea:39:db:90: 12:82:2a:54:3a:9c:30:08:1e:69:6f:65:21:56:cd: 0e:d1:a0:e8:d0:31:42:ea:3b:07:f9:12:ef:2f:60: 90:64:26:46:c1:c1:3d:45:d2:80:e5:f8:71:b8:48: 62:c0:b3:7f:ee:e1:a6:49:68:8d:91:79:94:50:9e: be:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BC:A6:A7:46:C4:29:3D:89:4B:3A:F5:B6:86:2B:3B:A2:C2:08:4E X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:32:49:1b:3c:2d:12:e4:95:13:62:ff:c7:2e:43:7e:c0:cd: 40:ae:f7:a9:33:f3:9d:27:b2:a1:7c:ec:08:37:9b:f1:54:d1: 94:91:9f:c5:b6:d2:1c:74:eb:41:d3:78:cc:4b:42:10:5c:a5: 36:c8:5e:d8:81:1a:67:6a:99:cd:c5:a0:ab:ed:72:50:0f:20: d8:d0:64:f7:8d:49:07:b9:e0:fc:13:09:8b:9f:26:66:c7:01: cb:0e:d3:56:03:db:4b:69:1c:da:00:25:fb:c0:8b:b0:c8:d8: b8:3e:a5:b6:c0:8e:b8:47:0b:af:6f:aa:b7:59:4f:bc:e9:90: d0:f5:08:9f:ba:2d:31:b2:52:e7:f6:dc:89:4f:e0:fe:f0:4b: 1c:82:18:a0:7a:61:c5:7a:4a:cf:3c:12:73:f4:9a:d3:e7:ff: ba:af:5b:6a:0d:51:3a:af:36:46:09:59:04:ce:f4:6b:38:5c: 92:a0:76:7c:ba:d5:f5:7e:1e:34:f5:da:84:bb:61:4e:b6:76: 2b:51:da:05:0b:a1:41:cc:88:6e:6b:6d:51:11:e5:18:3f:64: b1:96:77:11:27:c3:2c:b1:ad:7c:b1:ed:57:e6:ea:c7:60:16: 7c:f6:9f:a4:f9:ca:ab:12:be:89:51:d0:5a:44:f8:b2:0e:da: 47:70:8b:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTAGXKHJxoQMsCjreYDD82WNKkQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNDExMjUxNTI3MjRaFw0yNDExMjgyMTMwMjRaMDMxMTAvBgNV BAMTKEVEQkNBNkE3NDZDNDI5M0Q4OTRCM0FGNUI2ODYyQjNCQTJDMjA4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Br23B84SlcZBA5LDHTjm25wb KYmOtVastaM5Y2ojOYUfzvhTUeOqyGfUSAux+LxuP4q15cu/xcv3N016N/Zg7ndN uyGxj49wOUHHgWTBJtw7r3QujD45gVTbUehVFFKVj6DNAhjzG/s0JJBae45V3Dno EBEPDfZgIcamXAewmqpCfGtN/9HunipMasxuWO0XCzQtHzpykqVwuDYx8H912vxB 4O8nZPAlBqkHE8Yu+J7ntTbZnayoZYXcwzoN6jnbkBKCKlQ6nDAIHmlvZSFWzQ7R oOjQMULqOwf5Eu8vYJBkJkbBwT1F0oDl+HG4SGLAs3/u4aZJaI2ReZRQnr5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7bymp0bEKT2JSzr1toYrO6LCCE4wHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0ySRs8LRLklRNi/8cuQ37AzUCu96kz850n sqF87Ag3m/FU0ZSRn8W20hx060HTeMxLQhBcpTbIXtiBGmdqmc3FoKvtclAPINjQ ZPeNSQe54PwTCYufJmbHAcsO01YD20tpHNoAJfvAi7DI2Lg+pbbAjrhHC69vqrdZ T7zpkND1CJ+6LTGyUuf23IlP4P7wSxyCGKB6YcV6Ss88EnP0mtPn/7qvW2oNUTqv NkYJWQTO9Gs4XJKgdny61fV+HjT12oS7YU62ditR2gULoUHMiG5rbVER5Rg/ZLGW dxEnwyyxrXyx7Vfm6sdgFnz2n6T5yqsSvolR0FpE+LIO2kdwi2c= -----END CERTIFICATE-----Generated at Mon Nov 25 18:43:02 2024 by rpki-client on console-ams.rpki-client.org