$ rpki-client -vvf repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft File: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft (raw, json) Hash identifier: fLXaZxmAOdJM93Hc1BCpKqqFhrUS7hIZxYS61rQxGYA= Subject key identifier: 39:21:BC:85:DA:1F:D8:C3:E4:EC:9F:4B:29:C4:D6:62:56:38:46:E9 Authority key identifier: 6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB Certificate issuer: /CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Certificate serial: 2559BB7E1F1AFD260CC9AA9B575A54F2B7D7D338 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft Manifest number: 010B Signing time: Sat 23 Nov 2024 13:51:40 +0000 Manifest this update: Sat 23 Nov 2024 13:46:40 +0000 Manifest next update: Wed 27 Nov 2024 01:01:40 +0000 Files and hashes: 1: 6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl (hash: Tkwvp3xRZomcj1gnZzyMKZhiWCwDfhIY+usuhGpRIyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:59:bb:7e:1f:1a:fd:26:0c:c9:aa:9b:57:5a:54:f2:b7:d7:d3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E8749982F80EA7EAC3A4C80016FACEC049A89FB Validity Not Before: Nov 23 13:46:40 2024 GMT Not After : Nov 27 01:01:40 2024 GMT Subject: CN=3921BC85DA1FD8C3E4EC9F4B29C4D662563846E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:2f:ed:8c:82:a1:10:56:e5:00:a2:ae:b2: 47:2f:7c:12:14:8d:c8:9f:39:68:35:f3:40:66:f5: 4b:27:c4:71:61:48:3b:3a:a2:9e:2d:6e:f1:01:6f: 26:61:23:a3:20:6d:62:c6:33:f4:27:26:62:27:1e: 11:fc:a7:65:9b:07:8a:61:8c:09:5b:a1:00:64:62: b0:be:fe:e8:66:71:fc:19:27:ea:2f:ed:89:c7:b8: f4:43:13:26:ff:3e:0e:5d:11:a2:d3:2d:6e:7a:c3: 60:82:aa:40:ce:b6:2e:99:27:ad:a5:fa:6c:c1:fb: 93:2b:9d:dc:7b:1e:d7:1d:1b:c7:6b:40:44:5b:e4: fe:6f:bf:e3:9b:d9:76:14:b7:9e:2e:02:63:6f:e2: 06:92:f3:9f:91:e3:1b:e0:fd:b8:16:25:a8:bd:0c: e7:69:f8:bb:e7:69:e2:93:99:05:a9:d8:ce:41:0b: 90:ad:e8:96:f7:1f:90:1a:c4:2f:62:cb:62:5b:30: 7b:4e:ab:88:da:b1:69:88:f2:44:02:2a:30:eb:c6: 1f:ab:fc:97:bf:92:99:98:9c:d7:1f:c2:99:b4:bd: e4:fe:e1:04:31:24:d8:e0:43:c3:80:78:44:07:1a: 31:9a:8a:10:8e:7d:9c:c3:36:5f:0c:9e:ac:8e:48: 5f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:21:BC:85:DA:1F:D8:C3:E4:EC:9F:4B:29:C4:D6:62:56:38:46:E9 X509v3 Authority Key Identifier: keyid:6E:87:49:98:2F:80:EA:7E:AC:3A:4C:80:01:6F:AC:EC:04:9A:89:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be7de9f-bfd2-485c-8ba2-924eed52a305/0/6E8749982F80EA7EAC3A4C80016FACEC049A89FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7f:15:9b:c6:ea:9e:72:b2:5b:e6:5b:d8:db:fd:4c:54:23: 30:23:f6:25:b3:3f:3c:21:9c:2e:55:71:8a:d2:72:20:0b:6f: ac:7e:31:b0:40:ba:b7:27:a6:ad:5c:69:2a:b8:a8:fa:9d:04: 77:6d:23:4e:c4:29:d7:bc:82:0e:32:49:23:a3:c4:7c:f2:b2: 88:cb:8c:6d:67:5b:d7:d4:96:b7:4a:db:c2:e8:f6:bc:35:1a: e7:4c:2d:83:53:0f:78:c3:8b:70:54:65:e6:31:6c:1c:6b:bb: d6:14:d2:2a:1d:6b:b2:64:d3:ec:a1:b4:3a:a1:1b:26:73:18: 36:ad:46:46:9b:26:75:f0:39:81:46:d8:a3:22:e3:bc:25:b6: a4:28:02:c0:be:1d:e3:9f:5a:21:ac:c6:7a:97:12:5b:c2:64: 5f:1e:cd:b6:33:59:bd:cc:dd:e4:16:e3:98:ad:5d:16:31:fe: c0:c9:2a:01:c9:08:0f:dc:ab:43:cb:54:d6:82:49:ac:4f:3b: ba:1d:b1:8a:9a:a2:6b:bf:53:02:64:61:70:86:c2:50:48:25: 50:8e:31:ec:54:91:ae:53:ca:5f:3a:4f:fa:b0:6d:a6:bc:df: 25:88:33:14:d6:6e:3d:d2:8e:5f:28:ab:11:42:57:de:8b:15: d4:f0:b7:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVm7fh8a/SYMyaqbV1pU8rfX0zgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMw NDlBODlGQjAeFw0yNDExMjMxMzQ2NDBaFw0yNDExMjcwMTAxNDBaMDMxMTAvBgNV BAMTKDM5MjFCQzg1REExRkQ4QzNFNEVDOUY0QjI5QzRENjYyNTYzODQ2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUi/tjIKhEFblAKKuskcvfBIU jcifOWg180Bm9UsnxHFhSDs6op4tbvEBbyZhI6MgbWLGM/QnJmInHhH8p2WbB4ph jAlboQBkYrC+/uhmcfwZJ+ov7YnHuPRDEyb/Pg5dEaLTLW56w2CCqkDOti6ZJ62l +mzB+5Mrndx7HtcdG8drQERb5P5vv+Ob2XYUt54uAmNv4gaS85+R4xvg/bgWJai9 DOdp+LvnaeKTmQWp2M5BC5Ct6Jb3H5AaxC9iy2JbMHtOq4jasWmI8kQCKjDrxh+r /Je/kpmYnNcfwpm0veT+4QQxJNjgQ8OAeEQHGjGaihCOfZzDNl8MnqyOSF9tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOSG8hdof2MPk7J9LKcTWYlY4RukwHwYDVR0j BBgwFoAUbodJmC+A6n6sOkyAAW+s7ASaifswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU3ZGU5Zi1iZmQyLTQ4NWMtOGJhMi05MjRlZWQ1MmEzMDUvMC82RTg3NDk5ODJG ODBFQTdFQUMzQTRDODAwMTZGQUNFQzA0OUE4OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFDRUMwNDlB ODlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlN2RlOWYtYmZkMi00ODVjLThi YTItOTI0ZWVkNTJhMzA1LzAvNkU4NzQ5OTgyRjgwRUE3RUFDM0E0QzgwMDE2RkFD RUMwNDlBODlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGx/FZvG6p5yslvmW9jb/UxUIzAj9iWzPzwh nC5VcYrSciALb6x+MbBAurcnpq1caSq4qPqdBHdtI07EKde8gg4ySSOjxHzysojL jG1nW9fUlrdK28Lo9rw1GudMLYNTD3jDi3BUZeYxbBxru9YU0ioda7Jk0+yhtDqh GyZzGDatRkabJnXwOYFG2KMi47wltqQoAsC+HeOfWiGsxnqXElvCZF8ezbYzWb3M 3eQW45itXRYx/sDJKgHJCA/cq0PLVNaCSaxPO7odsYqaomu/UwJkYXCGwlBIJVCO MexUka5Tyl86T/qwbaa83yWIMxTWbj3Sjl8oqxFCV96LFdTwtwo= -----END CERTIFICATE-----Generated at Sat Nov 23 14:44:46 2024 by rpki-client on console-ams.rpki-client.org