$ rpki-client -vvf repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft File: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft (raw, json) Hash identifier: DgzTwtSVkJmyJm3oBjELjh7Y+yyRZG55U1FwyRX++TI= Subject key identifier: AA:86:9E:EF:37:5F:88:79:2E:D8:14:D7:DA:71:9B:3F:B4:6D:03:AC Authority key identifier: 00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 Certificate issuer: /CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Certificate serial: 02708AF0FE409E87E6D460807241A9BEC92EF0F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft Manifest number: 3C Signing time: Thu 21 Nov 2024 18:51:43 +0000 Manifest this update: Thu 21 Nov 2024 18:46:43 +0000 Manifest next update: Mon 25 Nov 2024 05:45:43 +0000 Files and hashes: 1: 3130332e3136392e33322e302f32332d3234203d3e20313432333333.roa (hash: 3Hm40iWjQ2mGL/ioKg4PmFkyFgospmr9E6G7OvRGuhQ=) 2: 00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl (hash: 7foJElUOi47wYkjpDXIrtjy5/OPjON4qL6y1E5H+Jsc=) 3: 323030313a6466323a663334303a3a2f34382d3438203d3e20313432333333.roa (hash: iwWTX/EFBujyZQDKZ9Hg7h0CZYdGO5vfAJe8qoIVz88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:70:8a:f0:fe:40:9e:87:e6:d4:60:80:72:41:a9:be:c9:2e:f0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4 Validity Not Before: Nov 21 18:46:43 2024 GMT Not After : Nov 25 05:45:43 2024 GMT Subject: CN=AA869EEF375F88792ED814D7DA719B3FB46D03AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cb:33:94:83:3f:b2:8d:15:e0:08:78:5b:74: b6:7a:46:20:1a:51:2c:97:e5:42:da:21:8f:ed:2a: 43:94:b2:c3:7d:94:a0:88:aa:ee:b2:75:9b:d4:74: 6a:8e:a5:5b:98:09:39:2e:d6:ee:38:24:bd:14:a7: d1:a0:3f:70:ad:b8:47:d3:ce:7d:b6:44:6d:88:d2: df:50:96:ee:ae:e3:d5:8b:b3:8a:bc:c5:d0:1a:71: a2:11:8d:4a:74:a8:07:e8:5a:2f:ed:f6:49:28:ed: 86:76:49:71:ea:8c:14:8b:16:c0:9b:67:e4:9f:ab: db:27:41:57:42:31:55:bf:ab:0d:77:81:37:83:b6: 47:e0:98:09:90:59:8f:9b:dd:f1:d4:4b:f8:e8:77: 83:64:db:11:d6:46:d6:33:f2:9f:53:c2:36:e9:03: 2d:9d:a4:f3:8f:9e:e3:a2:89:72:e9:c5:d6:3e:41: 08:02:c2:13:3d:6a:d3:8d:d7:47:3a:5c:1a:20:81: 33:77:e0:6f:82:0e:f1:08:62:61:2a:bb:79:2e:ef: ef:b6:bd:c1:bc:0a:a7:bb:69:8d:51:28:29:b7:9c: 41:ce:09:b3:ba:c2:58:2c:87:56:95:ac:13:59:01: 15:f4:36:17:8a:73:92:ec:5f:42:51:87:58:ce:d4: c0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:86:9E:EF:37:5F:88:79:2E:D8:14:D7:DA:71:9B:3F:B4:6D:03:AC X509v3 Authority Key Identifier: keyid:00:B4:EC:FC:CA:E9:0A:94:63:FD:71:82:2A:3C:EE:4C:8C:14:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/570c1bab-13f4-4ce6-85f7-c388737f6d19/0/00B4ECFCCAE90A9463FD71822A3CEE4C8C145AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c9:39:64:96:2d:3d:4d:ec:58:46:30:98:94:ca:89:50:8a: 19:d4:a8:30:b6:76:c6:d9:df:55:11:63:53:a2:bb:61:5d:1a: 09:0e:0d:a9:af:a9:63:7d:b7:44:03:ff:1f:a4:2a:dd:1c:65: 00:b4:77:f1:f8:e1:2f:51:00:65:ad:7a:c5:0c:99:f9:53:f2: ee:12:76:64:4d:13:5b:68:a6:5c:dd:e5:3e:bd:86:25:5b:bd: ee:d8:95:54:65:0c:a5:47:06:47:7f:3b:f8:df:36:c3:a2:ef: db:b6:41:98:f1:51:6f:b5:49:48:95:13:26:d9:b1:79:12:a2: b7:d4:46:53:4b:3b:8a:70:4d:77:79:63:ef:be:3a:bb:71:82: 7f:68:63:40:08:2a:74:fa:56:13:6c:72:7f:b7:b2:39:ff:24: 35:1f:b6:a5:cf:57:76:ed:11:c0:ab:0a:4d:50:8d:ba:d8:11: 80:4f:16:28:14:fc:c2:1a:fa:f6:be:01:09:9e:2a:6f:e0:96: cd:9f:39:aa:03:33:11:b4:ff:ab:80:e1:26:95:d6:e2:95:2a: 2a:c1:00:76:9c:e9:b8:7d:a1:45:a7:db:c9:35:e5:eb:e5:aa: 80:11:74:fa:ee:b2:94:4a:4f:56:17:1b:6e:04:b5:d5:4d:5a: 02:e7:8f:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnCK8P5Anofm1GCAckGpvsku8PIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4 QzE0NUFENDAeFw0yNDExMjExODQ2NDNaFw0yNDExMjUwNTQ1NDNaMDMxMTAvBgNV BAMTKEFBODY5RUVGMzc1Rjg4NzkyRUQ4MTREN0RBNzE5QjNGQjQ2RDAzQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtyzOUgz+yjRXgCHhbdLZ6RiAa USyX5ULaIY/tKkOUssN9lKCIqu6ydZvUdGqOpVuYCTku1u44JL0Up9GgP3CtuEfT zn22RG2I0t9Qlu6u49WLs4q8xdAacaIRjUp0qAfoWi/t9kko7YZ2SXHqjBSLFsCb Z+Sfq9snQVdCMVW/qw13gTeDtkfgmAmQWY+b3fHUS/jod4Nk2xHWRtYz8p9Twjbp Ay2dpPOPnuOiiXLpxdY+QQgCwhM9atON10c6XBoggTN34G+CDvEIYmEqu3ku7++2 vcG8Cqe7aY1RKCm3nEHOCbO6wlgsh1aVrBNZARX0NheKc5LsX0JRh1jO1MD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqoae7zdfiHku2BTX2nGbP7RtA6wwHwYDVR0j BBgwFoAUALTs/MrpCpRj/XGCKjzuTIwUWtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzBjMWJhYi0xM2Y0LTRjZTYtODVmNy1jMzg4NzM3ZjZkMTkvMC8wMEI0RUNGQ0NB RTkwQTk0NjNGRDcxODIyQTNDRUU0QzhDMTQ1QUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VFNEM4QzE0 NUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTcwYzFiYWItMTNmNC00Y2U2LTg1 ZjctYzM4ODczN2Y2ZDE5LzAvMDBCNEVDRkNDQUU5MEE5NDYzRkQ3MTgyMkEzQ0VF NEM4QzE0NUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHJOWSWLT1N7FhGMJiUyolQihnUqDC2dsbZ 31URY1Oiu2FdGgkODamvqWN9t0QD/x+kKt0cZQC0d/H44S9RAGWtesUMmflT8u4S dmRNE1toplzd5T69hiVbve7YlVRlDKVHBkd/O/jfNsOi79u2QZjxUW+1SUiVEybZ sXkSorfURlNLO4pwTXd5Y+++Ortxgn9oY0AIKnT6VhNscn+3sjn/JDUftqXPV3bt EcCrCk1QjbrYEYBPFigU/MIa+va+AQmeKm/gls2fOaoDMxG0/6uA4SaV1uKVKirB AHac6bh9oUWn28k15evlqoARdPruspRKT1YXG24EtdVNWgLnj9Y= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org