$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: f9HWaLC5nmUb4wvFHsHHn8J0w7GP1xR9of0nxHADt7g= Subject key identifier: C8:8B:D5:C0:2E:7B:C9:25:9A:2A:8D:7C:86:3D:25:88:02:05:13:3A Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 7A4C219A2943F657C2A139595F2158996E2CC8FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 0189 Signing time: Mon 25 Nov 2024 21:21:09 +0000 Manifest this update: Mon 25 Nov 2024 21:16:09 +0000 Manifest next update: Fri 29 Nov 2024 03:21:09 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: 6Yl1RtxmslUC6LGk/tQnIWCChyqCWRMS3F8NTb6tKkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4c:21:9a:29:43:f6:57:c2:a1:39:59:5f:21:58:99:6e:2c:c8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Nov 25 21:16:09 2024 GMT Not After : Nov 29 03:21:09 2024 GMT Subject: CN=C88BD5C02E7BC9259A2A8D7C863D25880205133A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e2:3b:dd:96:44:b1:cf:67:14:52:34:f9:37: 42:18:f1:58:d0:99:bb:b1:26:28:43:b9:85:fd:ab: 21:14:50:b9:26:e1:da:3a:48:34:bb:f6:fe:1b:f9: 49:f2:f1:b3:4a:28:d5:00:16:52:3e:6e:73:20:6d: 6a:89:a8:18:0e:a1:68:2f:fe:3b:b4:13:dd:f6:52: 49:f8:5f:63:dc:74:1e:35:7c:ee:8d:96:40:18:da: 81:47:79:7d:39:bc:6e:3a:4d:15:14:75:ef:de:1d: 14:8c:c4:35:06:4b:87:28:1b:f4:bf:b1:15:3f:4b: 0c:9a:75:fc:66:a7:a0:d4:53:0a:e3:f8:b7:7a:84: 96:28:e3:71:cf:a2:0c:1a:74:83:65:c4:4d:ef:c1: 1b:f3:dc:91:96:b9:d0:63:6d:a9:2a:18:90:bf:0d: a0:b7:4a:c3:6c:9c:f5:18:9d:3b:be:27:c8:62:d4: 39:f3:54:0c:24:74:72:78:30:fb:48:3e:ba:ca:41: 07:21:42:5b:ba:5d:11:cc:4b:b8:f6:76:61:c4:78: 01:47:7f:d4:77:76:81:84:8f:44:ef:f9:e5:7f:c8: 48:01:49:7f:66:2e:ab:37:85:24:c0:22:fe:c8:c2: 0b:18:b0:86:6c:d0:9f:d0:a5:15:99:11:e6:b6:54: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8B:D5:C0:2E:7B:C9:25:9A:2A:8D:7C:86:3D:25:88:02:05:13:3A X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:45:ce:d7:a5:48:11:69:35:1d:0c:f5:42:ce:d9:a6:bd:3b: 65:b0:21:3a:69:fa:d5:a9:5f:62:53:82:d3:99:35:b4:75:30: d6:f7:65:5c:c2:a8:90:45:f8:41:ea:c9:ef:2b:cf:48:0c:bd: 99:de:4f:a8:42:2a:55:3f:bf:79:c8:94:8d:a4:48:5d:ff:14: f1:a8:d9:e9:d2:36:96:a4:22:0a:b3:50:a5:5c:6a:ff:a5:83: 9b:2d:59:be:c1:47:a1:10:68:d5:68:cb:b8:f7:15:bd:cf:de: 2f:41:b1:bc:0e:1d:bb:f5:b2:50:06:b3:a7:ac:ba:65:65:6f: 31:cc:3c:28:42:4d:45:03:39:e4:8d:09:13:3d:5d:f5:1f:b4: e3:db:49:e3:67:82:ef:be:2f:77:10:11:df:49:4b:ed:61:99: da:db:ff:6e:b8:92:d1:88:90:5c:68:d7:f6:62:1d:27:91:06: aa:73:6a:40:af:62:ea:e0:f6:2b:d9:58:b8:06:dd:15:37:4e: 00:a9:6c:e7:ed:8c:a6:ff:34:e9:c3:a5:b9:94:48:97:16:c9: 88:01:73:a5:a7:c0:ef:a6:e3:e8:e5:7b:04:7b:83:62:6a:f0: ed:63:c7:c0:01:0e:81:fc:69:b3:91:a7:4b:b5:58:65:9e:08: a1:90:ab:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekwhmilD9lfCoTlZXyFYmW4syP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNDExMjUyMTE2MDlaFw0yNDExMjkwMzIxMDlaMDMxMTAvBgNV BAMTKEM4OEJENUMwMkU3QkM5MjU5QTJBOEQ3Qzg2M0QyNTg4MDIwNTEzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4jvdlkSxz2cUUjT5N0IY8VjQ mbuxJihDuYX9qyEUULkm4do6SDS79v4b+Uny8bNKKNUAFlI+bnMgbWqJqBgOoWgv /ju0E932Ukn4X2PcdB41fO6NlkAY2oFHeX05vG46TRUUde/eHRSMxDUGS4coG/S/ sRU/Swyadfxmp6DUUwrj+Ld6hJYo43HPogwadINlxE3vwRvz3JGWudBjbakqGJC/ DaC3SsNsnPUYnTu+J8hi1DnzVAwkdHJ4MPtIPrrKQQchQlu6XRHMS7j2dmHEeAFH f9R3doGEj0Tv+eV/yEgBSX9mLqs3hSTAIv7IwgsYsIZs0J/QpRWZEea2VIoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyIvVwC57ySWaKo18hj0liAIFEzowHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtFztelSBFpNR0M9ULO2aa9O2WwITpp+tWp X2JTgtOZNbR1MNb3ZVzCqJBF+EHqye8rz0gMvZneT6hCKlU/v3nIlI2kSF3/FPGo 2enSNpakIgqzUKVcav+lg5stWb7BR6EQaNVoy7j3Fb3P3i9BsbwOHbv1slAGs6es umVlbzHMPChCTUUDOeSNCRM9XfUftOPbSeNngu++L3cQEd9JS+1hmdrb/264ktGI kFxo1/ZiHSeRBqpzakCvYurg9ivZWLgG3RU3TgCpbOftjKb/NOnDpbmUSJcWyYgB c6WnwO+m4+jlewR7g2Jq8O1jx8ABDoH8abORp0u1WGWeCKGQq1k= -----END CERTIFICATE-----Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org