$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: Obb0q/v6hhOUq05ydcl3WG6UvyKXjsK+u5GQbnnDC8g= Subject key identifier: 02:E1:B5:E9:2B:E9:39:CB:4A:AF:BE:F4:00:39:36:5B:2E:9F:44:52 Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 59406EBEF9726C9E7CBDA4C51F8A3DC5A3E64E2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 0473 Signing time: Sat 23 Nov 2024 19:32:12 +0000 Manifest this update: Sat 23 Nov 2024 19:27:12 +0000 Manifest next update: Wed 27 Nov 2024 07:07:12 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: JLus0H2QUHEZVk+/olJoMIcrEUfqCJJrby6A6KALf0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:40:6e:be:f9:72:6c:9e:7c:bd:a4:c5:1f:8a:3d:c5:a3:e6:4e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Nov 23 19:27:12 2024 GMT Not After : Nov 27 07:07:12 2024 GMT Subject: CN=02E1B5E92BE939CB4AAFBEF40039365B2E9F4452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:42:44:1b:1a:23:ab:09:fc:ed:15:1b:87: 29:a5:49:44:b3:c7:cb:b4:3a:a9:a6:65:35:14:b8: 27:57:79:4f:84:ea:a3:cc:42:0e:e9:26:0c:cd:e9: 17:58:a6:dd:21:2f:d7:d3:7c:25:36:f3:08:f7:f3: e1:3f:4f:c5:1a:ca:14:ca:3d:53:ac:e4:e6:58:bb: e3:34:ab:21:b1:24:71:29:3d:25:92:88:24:2b:7e: 40:52:14:af:5b:4b:39:52:e0:ea:0a:1d:ff:0d:eb: aa:00:03:85:0f:08:c1:de:51:fc:ba:86:79:3f:99: 1b:72:9d:1c:32:ca:8a:e3:02:91:19:71:8a:16:e3: af:27:1c:72:8f:b0:99:57:e7:b8:90:dd:8d:ef:b1: dc:1f:95:1a:6b:9c:b1:ab:50:1a:85:66:c3:2d:9e: 21:8e:20:d6:06:7f:21:57:f1:f4:b0:2b:91:64:20: c2:2f:17:cb:18:5c:dd:fc:c8:37:65:21:e0:fd:ac: 90:34:f4:f1:eb:ac:ac:8e:73:83:7f:04:b7:b6:af: b9:0f:6e:d3:ab:ad:51:43:78:c1:42:73:fd:f8:bb: de:dc:cf:26:43:52:71:44:e3:cc:e3:eb:3c:0c:75: 9e:ae:ab:3d:b2:a1:69:86:c9:95:cd:36:6c:e4:9d: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E1:B5:E9:2B:E9:39:CB:4A:AF:BE:F4:00:39:36:5B:2E:9F:44:52 X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:61:6b:89:13:e6:05:02:4d:a1:fe:d4:31:0c:5f:69:53:87: b0:f1:97:79:dd:4c:fa:1e:43:5a:4c:c2:a5:2c:36:6c:71:01: 0d:a4:96:cb:43:17:b6:b9:09:22:4a:b8:0d:b8:6b:98:1e:8f: 0e:d4:70:6c:1d:be:8a:c1:ce:ec:ab:d2:37:d2:81:d2:26:79: 3f:3c:f4:4a:b7:de:fb:5e:f6:3d:19:59:14:4a:0f:c8:8f:31: 53:a6:5c:cb:01:10:48:97:bf:97:0c:b6:de:e6:c5:2f:b5:16: e3:2f:de:f1:6d:ad:4d:a3:aa:7c:76:d9:ff:52:fb:c8:c6:82: 27:11:3e:45:72:70:c2:cb:a3:e9:54:32:a2:86:a9:93:6e:7c: 9b:ad:6a:5a:47:43:9b:10:00:d4:9e:6e:46:60:5c:82:94:72: 8a:d5:9f:65:19:f4:18:96:20:ed:13:9b:a9:85:50:08:f0:ed: 7f:75:2f:c4:07:72:6e:66:29:8a:8d:ab:99:cd:ba:76:90:e0: e7:08:cf:de:fe:8a:45:d8:03:21:47:5b:50:99:f2:ee:c1:7a: 8c:c3:81:30:a6:b9:4a:09:39:6d:d1:54:d6:9d:76:e6:3b:0a: 55:a0:6e:67:75:a6:6d:9c:f4:ac:e2:9b:19:63:2e:2a:a5:7d: f1:00:e8:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUBuvvlybJ58vaTFH4o9xaPmTi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNDExMjMxOTI3MTJaFw0yNDExMjcwNzA3MTJaMDMxMTAvBgNV BAMTKDAyRTFCNUU5MkJFOTM5Q0I0QUFGQkVGNDAwMzkzNjVCMkU5RjQ0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPUJEGxojqwn87RUbhymlSUSz x8u0OqmmZTUUuCdXeU+E6qPMQg7pJgzN6RdYpt0hL9fTfCU28wj38+E/T8UayhTK PVOs5OZYu+M0qyGxJHEpPSWSiCQrfkBSFK9bSzlS4OoKHf8N66oAA4UPCMHeUfy6 hnk/mRtynRwyyorjApEZcYoW468nHHKPsJlX57iQ3Y3vsdwflRprnLGrUBqFZsMt niGOINYGfyFX8fSwK5FkIMIvF8sYXN38yDdlIeD9rJA09PHrrKyOc4N/BLe2r7kP btOrrVFDeMFCc/34u97czyZDUnFE48zj6zwMdZ6uqz2yoWmGyZXNNmzknTIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAuG16SvpOctKr770ADk2Wy6fRFIwHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdha4kT5gUCTaH+1DEMX2lTh7Dxl3ndTPoe Q1pMwqUsNmxxAQ2klstDF7a5CSJKuA24a5gejw7UcGwdvorBzuyr0jfSgdImeT88 9Eq33vte9j0ZWRRKD8iPMVOmXMsBEEiXv5cMtt7mxS+1FuMv3vFtrU2jqnx22f9S +8jGgicRPkVycMLLo+lUMqKGqZNufJutalpHQ5sQANSebkZgXIKUcorVn2UZ9BiW IO0Tm6mFUAjw7X91L8QHcm5mKYqNq5nNunaQ4OcIz97+ikXYAyFHW1CZ8u7BeozD gTCmuUoJOW3RVNadduY7ClWgbmd1pm2c9KzimxljLiqlffEA6M8= -----END CERTIFICATE-----Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org