$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: S0DqyImFwFnjzx+YtfBAOtao6QPuQpT8y41GMVzmoWU= Subject key identifier: 6A:61:46:F1:0B:BC:21:6D:61:B9:A4:AF:76:D6:84:EE:9E:02:21:2F Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 6482AF14C72AA757F43632E65FCE95E22C43BCE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 8B Signing time: Mon 25 Nov 2024 02:30:46 +0000 Manifest this update: Mon 25 Nov 2024 02:25:46 +0000 Manifest next update: Thu 28 Nov 2024 12:02:46 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: oL3aem3YbNvJJMZPhs/NWej5K/EgHfVMNuUyjMFHTBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:82:af:14:c7:2a:a7:57:f4:36:32:e6:5f:ce:95:e2:2c:43:bc:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Nov 25 02:25:46 2024 GMT Not After : Nov 28 12:02:46 2024 GMT Subject: CN=6A6146F10BBC216D61B9A4AF76D684EE9E02212F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:d0:fa:a8:9f:51:38:1a:4f:6c:19:e7:d6: c4:8b:3e:59:d9:59:93:fc:64:93:92:f5:7d:d5:4d: 37:2e:8e:c2:4b:cb:46:2b:9f:90:60:5a:f7:2e:a8: 2c:1b:5e:a5:05:71:b2:40:28:26:2d:cf:7c:4b:4c: 14:d4:dd:00:1e:51:7a:a7:17:be:fe:28:d1:f7:c1: 65:98:a0:87:36:d9:39:07:5f:26:3b:46:ba:3c:19: 8b:b3:4e:f6:da:2b:4b:00:d2:37:15:cd:87:d1:f2: a0:8f:83:04:28:28:ec:be:2f:d6:bc:c6:e4:79:65: 31:08:48:3d:b3:0b:c9:4d:7b:c2:63:d1:71:5e:b8: 33:0d:43:0a:b0:b7:1e:07:86:e8:58:d9:fb:c6:db: 4c:e2:d2:6e:3d:90:6c:fb:07:98:57:86:d5:a8:6d: e6:d7:1f:f5:17:54:c7:0e:7b:93:da:11:90:da:6d: 95:db:8a:b0:e3:e2:07:13:0f:5f:22:94:92:8b:3f: 7d:87:40:69:fb:4f:3e:d8:39:fc:9f:18:6b:1a:50: c6:0d:3c:40:2e:d0:95:67:08:c7:82:2a:7b:de:73: 66:a9:f8:c0:e2:d2:7a:6c:ec:c3:b1:9e:5b:70:44: 94:26:b9:17:f0:4a:28:f8:d0:fc:f7:bd:ae:57:6a: 1e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:61:46:F1:0B:BC:21:6D:61:B9:A4:AF:76:D6:84:EE:9E:02:21:2F X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:82:e4:29:24:2c:0d:c6:9d:50:89:d8:22:59:31:80:50:a2: 6d:7c:cc:15:50:e2:fe:d3:aa:26:09:66:f3:e3:0a:fa:ed:77: d5:6b:35:fc:75:94:d6:36:bb:03:63:ef:67:83:05:28:0a:37: 5b:96:bc:40:1e:c0:65:4f:36:a8:3f:67:9d:dc:54:d2:f8:46: 98:95:67:a0:cc:0f:eb:6f:85:42:fb:50:73:b3:32:51:ad:ea: e9:a2:e9:30:df:2c:5a:ce:df:7b:77:c2:5a:3b:00:b5:af:c8: 4a:fc:08:fd:7d:7b:36:cb:b5:03:62:9f:21:9c:9f:f1:ea:bb: 8a:12:34:25:05:3f:fd:ab:27:a5:07:59:1c:6a:15:84:06:4d: b4:d5:68:6d:db:28:62:87:3b:56:3c:18:8c:3c:ea:e4:ce:90: 9b:f5:72:d0:ca:f6:1f:70:21:86:8e:ac:b5:af:49:63:3d:74: d0:a0:ea:2f:59:5d:bb:48:bf:55:3e:53:88:bf:d8:e6:6d:b7: 09:1c:d4:f0:34:ca:f7:66:83:50:5d:18:76:4c:c9:bf:0a:9f: d3:fb:5d:cb:0f:a0:8f:42:7d:e7:c0:1e:c2:90:1d:e0:62:7b: 38:52:f4:54:89:01:30:10:c4:c0:f9:de:54:e1:6d:e7:83:cd: dc:d8:34:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIKvFMcqp1f0NjLmX86V4ixDvOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNDExMjUwMjI1NDZaFw0yNDExMjgxMjAyNDZaMDMxMTAvBgNV BAMTKDZBNjE0NkYxMEJCQzIxNkQ2MUI5QTRBRjc2RDY4NEVFOUUwMjIxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8tdD6qJ9ROBpPbBnn1sSLPlnZ WZP8ZJOS9X3VTTcujsJLy0Yrn5BgWvcuqCwbXqUFcbJAKCYtz3xLTBTU3QAeUXqn F77+KNH3wWWYoIc22TkHXyY7Rro8GYuzTvbaK0sA0jcVzYfR8qCPgwQoKOy+L9a8 xuR5ZTEISD2zC8lNe8Jj0XFeuDMNQwqwtx4HhuhY2fvG20zi0m49kGz7B5hXhtWo bebXH/UXVMcOe5PaEZDabZXbirDj4gcTD18ilJKLP32HQGn7Tz7YOfyfGGsaUMYN PEAu0JVnCMeCKnvec2ap+MDi0nps7MOxnltwRJQmuRfwSij40Pz3va5Xah5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUamFG8Qu8IW1huaSvdtaE7p4CIS8wHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaC5CkkLA3GnVCJ2CJZMYBQom18zBVQ4v7T qiYJZvPjCvrtd9VrNfx1lNY2uwNj72eDBSgKN1uWvEAewGVPNqg/Z53cVNL4RpiV Z6DMD+tvhUL7UHOzMlGt6umi6TDfLFrO33t3wlo7ALWvyEr8CP19ezbLtQNinyGc n/Hqu4oSNCUFP/2rJ6UHWRxqFYQGTbTVaG3bKGKHO1Y8GIw86uTOkJv1ctDK9h9w IYaOrLWvSWM9dNCg6i9ZXbtIv1U+U4i/2OZttwkc1PA0yvdmg1BdGHZMyb8Kn9P7 XcsPoI9CfefAHsKQHeBiezhS9FSJATAQxMD53lThbeeDzdzYNAg= -----END CERTIFICATE-----Generated at Mon Nov 25 04:42:06 2024 by rpki-client on console-ams.rpki-client.org