$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft File: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft (raw, json) Hash identifier: l6yAKBso+InpJ6SFHsflphwBq1b66KRtFWoXA8B0E3g= Subject key identifier: CB:FE:C2:30:4B:21:F8:FE:6B:AC:9B:20:D0:EE:29:5D:50:23:3E:51 Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 Certificate issuer: /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Certificate serial: 78BC1EF0F89F81009EAE0B6AB2E60D18FAE7A39E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft Manifest number: 01A0 Signing time: Fri 22 Nov 2024 05:10:54 +0000 Manifest this update: Fri 22 Nov 2024 05:05:54 +0000 Manifest next update: Mon 25 Nov 2024 16:30:54 +0000 Files and hashes: 1: 6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl (hash: GqtTPDHD4EJC7/eIu4CfBN7F3mi2F1TYWgo4V+L9Yvc=) 2: 3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (hash: DZAhx842V2Xb8kqG+VDaatk7tq6SyHiJGKjEwD1sKhc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 05:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:bc:1e:f0:f8:9f:81:00:9e:ae:0b:6a:b2:e6:0d:18:fa:e7:a3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11 Validity Not Before: Nov 22 05:05:54 2024 GMT Not After : Nov 25 16:30:54 2024 GMT Subject: CN=CBFEC2304B21F8FE6BAC9B20D0EE295D50233E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:73:15:04:50:f0:90:32:51:a5:80:9e:b5: 4a:5e:5b:b3:8d:1a:7a:f5:cf:87:e7:6d:8a:3b:1e: 39:ca:9c:c2:b9:97:2d:90:25:b3:a2:0f:f4:ee:cf: 7a:df:55:4a:f1:b2:61:10:45:cf:5b:34:1e:a0:7b: 91:b0:b5:05:6c:04:f8:23:23:36:ee:b4:d1:8b:70: 15:8a:2c:2e:3a:f2:09:79:5d:fd:df:42:b0:73:10: 3e:6b:23:e5:b0:b5:98:7a:ae:2b:96:17:72:fd:98: 5d:69:71:36:f8:56:49:0a:1f:b9:31:f4:24:e9:52: 9b:3b:41:99:fe:14:2d:16:34:76:68:ac:47:b4:9d: a8:db:77:88:6c:8c:ce:69:90:20:75:dd:68:db:4e: 4a:ee:9d:ec:bf:ae:e6:be:1b:de:13:65:b5:2c:6a: 17:9d:7b:bd:f0:f1:d7:75:24:a0:47:88:ec:66:98: 94:e4:81:ee:45:fe:cb:e4:d1:02:b0:c6:64:27:4c: 50:cb:7c:82:d2:2f:b2:4c:62:f4:74:44:9a:ac:9d: 3a:a3:26:0e:85:3c:0e:b5:02:ce:fd:60:37:0e:05: 93:b2:39:88:f5:83:4e:16:cb:38:0d:dd:cf:0a:54: 18:c5:da:55:31:74:62:d1:70:b2:6c:c4:50:0f:30: 67:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FE:C2:30:4B:21:F8:FE:6B:AC:9B:20:D0:EE:29:5D:50:23:3E:51 X509v3 Authority Key Identifier: keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:93:37:fe:eb:08:c9:1a:99:2d:ed:8e:30:9b:5d:11:20:94: 3c:60:3e:e1:83:0a:3e:1d:5a:76:d1:b1:2c:df:71:e0:f0:53: f7:97:90:31:ef:e3:12:c1:6f:f3:0c:0b:2e:10:84:fb:44:48: 03:00:9e:a3:f7:76:b5:db:65:4a:37:08:75:8b:e3:a4:97:ac: 99:eb:43:70:57:8b:47:75:bc:77:b5:b3:ff:a2:0b:a7:ab:9b: 4a:48:fa:04:21:c0:e0:f8:99:0c:4a:30:37:68:8e:bd:08:2d: 48:ae:eb:87:29:f9:34:09:18:d3:02:9c:ce:ea:1b:bf:60:a0: ae:b3:2b:c9:76:90:3e:b3:a9:52:4b:65:c8:2d:75:50:d0:39: ab:7b:05:e4:6a:55:25:8e:f6:c6:e5:a8:00:c8:b3:76:e7:b2: 8c:9c:dd:90:74:05:38:d0:85:46:2c:ee:2c:7d:c9:4a:18:9f: 41:88:0a:5f:88:45:a5:54:ed:8b:82:af:bb:2c:91:bc:a4:de: 6f:de:2a:7f:10:f7:b4:3b:4d:90:c7:0c:51:db:78:e1:77:76: 91:51:ad:c7:de:76:f6:bf:61:bf:70:37:5a:c7:df:25:5a:25: f9:77:e1:b2:2c:b7:5a:b9:24:09:c4:21:52:12:6a:51:f7:01: 15:0e:79:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLwe8PifgQCergtqsuYNGPrno54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1 RkUwQkUxMTAeFw0yNDExMjIwNTA1NTRaFw0yNDExMjUxNjMwNTRaMDMxMTAvBgNV BAMTKENCRkVDMjMwNEIyMUY4RkU2QkFDOUIyMEQwRUUyOTVENTAyMzNFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuHMVBFDwkDJRpYCetUpeW7ON Gnr1z4fnbYo7HjnKnMK5ly2QJbOiD/Tuz3rfVUrxsmEQRc9bNB6ge5GwtQVsBPgj IzbutNGLcBWKLC468gl5Xf3fQrBzED5rI+WwtZh6riuWF3L9mF1pcTb4VkkKH7kx 9CTpUps7QZn+FC0WNHZorEe0najbd4hsjM5pkCB13WjbTkruney/rua+G94TZbUs ahede73w8dd1JKBHiOxmmJTkge5F/svk0QKwxmQnTFDLfILSL7JMYvR0RJqsnTqj Jg6FPA61As79YDcOBZOyOYj1g04WyzgN3c8KVBjF2lUxdGLRcLJsxFAPMGfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy/7CMEsh+P5rrJsg0O4pXVAjPlEwHwYDVR0j BBgwFoAUb8hX33/lNQpsBaHxE/PcLl/gvhEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTIzOGE2Mi02YTk2LTQzYmMtODdhZi0wMmRiNjQxZjcxMDkvMC82RkM4NTdERjdG RTUzNTBBNkMwNUExRjExM0YzREMyRTVGRTBCRTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RDMkU1RkUw QkUxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGEyMzhhNjItNmE5Ni00M2JjLTg3 YWYtMDJkYjY0MWY3MTA5LzAvNkZDODU3REY3RkU1MzUwQTZDMDVBMUYxMTNGM0RD MkU1RkUwQkUxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGTN/7rCMkamS3tjjCbXREglDxgPuGDCj4d WnbRsSzfceDwU/eXkDHv4xLBb/MMCy4QhPtESAMAnqP3drXbZUo3CHWL46SXrJnr Q3BXi0d1vHe1s/+iC6erm0pI+gQhwOD4mQxKMDdojr0ILUiu64cp+TQJGNMCnM7q G79goK6zK8l2kD6zqVJLZcgtdVDQOat7BeRqVSWO9sblqADIs3bnsoyc3ZB0BTjQ hUYs7ix9yUoYn0GICl+IRaVU7YuCr7sskbyk3m/eKn8Q97Q7TZDHDFHbeOF3dpFR rcfedva/Yb9wN1rH3yVaJfl34bIst1q5JAnEIVISalH3ARUOeWU= -----END CERTIFICATE-----Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org