$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: A51jbdh4wORar6bhbloGWhOSTvk0HsWyYyqKgslxeZ8= Subject key identifier: D2:49:12:FA:A4:86:BA:9E:A3:F3:FB:1C:E8:14:97:A9:1E:FE:AB:D6 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 2A3435A39D2961D12F34EBF2A6F1C9424F9B4606 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: 85 Signing time: Mon 25 Nov 2024 12:00:36 +0000 Manifest this update: Mon 25 Nov 2024 11:55:36 +0000 Manifest next update: Thu 28 Nov 2024 21:08:36 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: mPRhyDjyhjsurGi8vtAJ5q44nTqQ5strtRpvUZeDZqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 21:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:34:35:a3:9d:29:61:d1:2f:34:eb:f2:a6:f1:c9:42:4f:9b:46:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Nov 25 11:55:36 2024 GMT Not After : Nov 28 21:08:36 2024 GMT Subject: CN=D24912FAA486BA9EA3F3FB1CE81497A91EFEABD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f2:bf:a6:52:b3:46:52:16:03:01:b0:cb:da: 98:c9:c5:d7:d4:c0:6d:21:1e:3c:c0:76:ac:77:d9: 78:0a:f1:58:41:53:d2:c4:32:2d:57:48:57:e1:98: 10:2d:ab:54:40:1d:69:dd:2b:34:0e:c1:42:27:1f: 53:c9:a9:6c:7d:04:04:25:de:c9:e0:ae:ea:45:57: c0:4e:f2:d2:b7:ea:0c:77:12:ac:2c:65:c2:75:3b: 96:87:29:a0:5a:a7:46:ac:ab:0b:ab:41:ed:39:fa: 53:e6:4d:17:a5:90:7a:65:d1:ac:76:ad:ce:e4:f6: df:51:34:81:54:3f:83:04:83:65:35:99:5c:55:55: 40:29:73:09:50:cc:f1:72:bf:93:f3:b2:2c:6d:1a: cc:56:34:6f:be:b0:7e:44:af:d6:31:b7:05:23:c0: ab:27:24:ad:7d:ce:62:8c:77:74:f8:5a:c5:df:4e: 10:38:9d:da:92:31:75:ae:63:fd:97:5e:b5:b2:8b: 6b:69:56:dc:d4:e3:b7:19:5d:02:9f:53:af:71:61: cb:9a:bf:1f:1f:5b:e3:51:ae:e0:ad:f7:fd:4f:53: c4:fb:7b:51:53:fa:b7:8c:12:ba:4e:23:04:99:86: 26:33:35:4f:71:a6:ff:ef:06:b7:4f:bf:6a:5f:cc: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:49:12:FA:A4:86:BA:9E:A3:F3:FB:1C:E8:14:97:A9:1E:FE:AB:D6 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:92:5d:aa:e5:94:92:b6:79:c0:01:7a:70:3a:22:f9:87:76: 50:97:14:59:29:3a:5d:1a:bd:6b:85:e9:48:1e:2a:30:12:59: a7:15:40:3f:07:c5:9e:d4:6f:5f:16:35:09:41:e7:fb:48:dc: 29:22:a3:9b:81:1c:75:c6:48:02:fe:4e:c6:2d:f7:81:98:a5: 04:de:1b:e9:16:d9:ac:3c:81:cd:4d:92:34:39:b1:6b:ca:70: 84:d1:c8:18:b7:6a:ed:1b:c0:41:69:da:8f:f5:f1:33:bc:a3: 02:b3:6a:13:cc:b5:a2:a4:70:82:99:87:2e:37:6b:c7:cf:67: 6c:5c:86:f1:b7:83:f2:1a:28:84:d0:bf:97:47:9c:d4:88:95: af:2b:2c:91:85:45:07:d7:80:08:9a:74:ca:21:33:df:2f:d2: 83:36:5c:1b:a5:a8:a7:08:06:2b:05:0e:bd:e0:50:b0:9c:85: 69:de:f4:79:9c:da:ef:60:04:ea:34:68:50:e7:8f:13:9f:b2: 34:ad:7c:d8:b4:a2:d2:33:0e:17:f9:a1:3b:cf:35:5e:64:8f: 8c:b0:17:07:71:84:81:a8:32:b0:8e:be:e7:10:ff:d2:87:76: 36:44:b1:72:84:9c:9f:9d:f3:2b:aa:d9:aa:38:65:83:d4:04: f3:e7:01:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjQ1o50pYdEvNOvypvHJQk+bRgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNDExMjUxMTU1MzZaFw0yNDExMjgyMTA4MzZaMDMxMTAvBgNV BAMTKEQyNDkxMkZBQTQ4NkJBOUVBM0YzRkIxQ0U4MTQ5N0E5MUVGRUFCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp8r+mUrNGUhYDAbDL2pjJxdfU wG0hHjzAdqx32XgK8VhBU9LEMi1XSFfhmBAtq1RAHWndKzQOwUInH1PJqWx9BAQl 3sngrupFV8BO8tK36gx3EqwsZcJ1O5aHKaBap0asqwurQe05+lPmTRelkHpl0ax2 rc7k9t9RNIFUP4MEg2U1mVxVVUApcwlQzPFyv5PzsixtGsxWNG++sH5Er9YxtwUj wKsnJK19zmKMd3T4WsXfThA4ndqSMXWuY/2XXrWyi2tpVtzU47cZXQKfU69xYcua vx8fW+NRruCt9/1PU8T7e1FT+reMErpOIwSZhiYzNU9xpv/vBrdPv2pfzD0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0kkS+qSGup6j8/sc6BSXqR7+q9YwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaSXarllJK2ecABenA6IvmHdlCXFFkpOl0a vWuF6UgeKjASWacVQD8HxZ7Ub18WNQlB5/tI3Ckio5uBHHXGSAL+TsYt94GYpQTe G+kW2aw8gc1NkjQ5sWvKcITRyBi3au0bwEFp2o/18TO8owKzahPMtaKkcIKZhy43 a8fPZ2xchvG3g/IaKITQv5dHnNSIla8rLJGFRQfXgAiadMohM98v0oM2XBulqKcI BisFDr3gULCchWne9Hmc2u9gBOo0aFDnjxOfsjStfNi0otIzDhf5oTvPNV5kj4yw FwdxhIGoMrCOvucQ/9KHdjZEsXKEnJ+d8yuq2ao4ZYPUBPPnASQ= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:44 2024 by rpki-client on console-fra.rpki-client.org