$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft (raw, json) Hash identifier: chhJ75RJxJTf+tqMlILleg+wfxfCkDWzO7Au+7unm1Q= Subject key identifier: 4A:47:88:E6:28:F8:FF:8E:D6:6B:32:A3:D4:01:D2:1E:C5:C6:4E:45 Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Certificate serial: 1C3B23B28755D8A39EB142AFA004E6FF467A3DE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft Manifest number: 02F1 Signing time: Thu 21 Nov 2024 18:51:43 +0000 Manifest this update: Thu 21 Nov 2024 18:46:43 +0000 Manifest next update: Sun 24 Nov 2024 20:18:43 +0000 Files and hashes: 1: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl (hash: AikXMvOr+L5rUtSu7MB4E4wMdujCQG0ImdwlnaHFhwg=) 2: 3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (hash: D8i9SXwaGmotGiS/IAwnzbLhSHLg03OPkCLHuzllCIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 20:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3b:23:b2:87:55:d8:a3:9e:b1:42:af:a0:04:e6:ff:46:7a:3d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Validity Not Before: Nov 21 18:46:43 2024 GMT Not After : Nov 24 20:18:43 2024 GMT Subject: CN=4A4788E628F8FF8ED66B32A3D401D21EC5C64E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:10:d4:53:15:d5:9c:4e:d4:8f:d2:b6:7c: 07:3b:86:0c:82:ad:4d:4e:42:a4:f0:68:cd:dc:a1: ce:58:e9:4f:69:c9:dc:f9:ff:0d:f1:c7:67:17:c2: d2:d8:4f:1c:00:8b:88:d8:be:a1:c9:64:2a:8b:91: bb:67:fc:3a:31:b6:13:69:94:78:e8:b1:e3:91:3b: 37:69:b9:db:d4:99:c0:65:3c:0f:ae:39:72:51:a4: 6a:3b:6d:d4:f0:f6:8d:17:06:2f:c4:d8:cd:40:ce: d3:09:86:66:13:6b:3c:52:33:4f:33:77:35:6d:22: ee:94:b8:c5:d3:e1:59:b6:97:1d:9b:13:0e:89:00: 3c:98:0a:ef:e5:32:49:d7:25:ea:6e:9f:a9:d4:5e: 5b:e9:e9:f3:0d:f1:30:5d:fc:d5:62:79:95:10:02: 2a:9c:27:fa:18:53:9b:77:f9:d2:1a:54:7a:ba:99: a6:fa:38:e3:1d:92:c4:03:be:48:aa:9f:72:04:ba: 9d:42:21:90:be:39:46:6c:98:68:a6:d0:64:70:18: d7:af:c8:a7:61:b8:57:fd:7f:8a:d8:54:7d:a9:86: 6c:a1:ac:2e:2d:2a:63:1b:7e:f3:4f:64:c5:47:d2: af:fa:1e:b5:e7:7f:e0:8e:a3:62:c1:d0:a7:df:2e: 9a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:47:88:E6:28:F8:FF:8E:D6:6B:32:A3:D4:01:D2:1E:C5:C6:4E:45 X509v3 Authority Key Identifier: keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d6:39:92:7f:3c:ec:ee:10:ed:5e:e7:20:b1:e1:c7:45:5b: 97:dc:c2:d9:35:80:57:25:22:42:23:63:2f:7c:0c:c4:58:8e: dc:16:05:25:5b:34:af:34:05:54:56:70:b8:a3:a8:5f:fb:e5: 8b:bc:02:65:0b:36:12:e6:0a:e1:36:fc:9a:21:41:43:0d:c2: 0c:f2:b8:4f:53:ae:3e:59:a4:24:c7:2f:98:2a:dd:a9:ec:89: 01:ff:9e:3b:1e:b2:c0:a1:af:e3:d1:5a:3d:08:92:38:9c:a7: de:0e:8b:bc:bf:2d:8b:fa:5c:d0:90:82:e4:7c:d8:16:b9:45: b5:98:c2:ef:d0:64:48:40:c7:ed:fd:fa:04:6e:86:ff:16:d3: 1f:73:be:81:7f:a8:52:2d:2d:12:67:a1:04:f8:ff:c5:f6:31: 6a:f2:10:df:73:d0:58:bf:35:bc:f6:38:1d:e0:b1:88:aa:ab: 48:87:6c:72:10:22:14:83:ee:84:cb:f6:cf:9a:55:d5:51:a1: 1d:11:92:cd:ef:ee:fd:9a:f2:ea:b5:a2:69:df:a6:af:cd:67: da:4c:7d:b1:28:56:a9:8d:f1:79:0e:b2:c9:e8:10:93:33:05: 4e:02:9a:3c:09:4b:cc:76:85:7c:c9:b3:0d:6e:78:55:18:86: 1b:e4:9c:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDsjsodV2KOesUKvoATm/0Z6PeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUw NjU4OEEwMzAeFw0yNDExMjExODQ2NDNaFw0yNDExMjQyMDE4NDNaMDMxMTAvBgNV BAMTKDRBNDc4OEU2MjhGOEZGOEVENjZCMzJBM0Q0MDFEMjFFQzVDNjRFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5AxDUUxXVnE7Uj9K2fAc7hgyC rU1OQqTwaM3coc5Y6U9pydz5/w3xx2cXwtLYTxwAi4jYvqHJZCqLkbtn/DoxthNp lHjoseOROzdpudvUmcBlPA+uOXJRpGo7bdTw9o0XBi/E2M1AztMJhmYTazxSM08z dzVtIu6UuMXT4Vm2lx2bEw6JADyYCu/lMknXJepun6nUXlvp6fMN8TBd/NVieZUQ AiqcJ/oYU5t3+dIaVHq6mab6OOMdksQDvkiqn3IEup1CIZC+OUZsmGim0GRwGNev yKdhuFf9f4rYVH2phmyhrC4tKmMbfvNPZMVH0q/6HrXnf+COo2LB0KffLpqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSkeI5ij4/47WazKj1AHSHsXGTkUwHwYDVR0j BBgwFoAUnwKpuHzF+Boi6OWNLsEubgZYigMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMC85RjAyQTlCODdD QzVGODFBMjJFOEU1OEQyRUMxMkU2RTA2NTg4QTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJFNkUwNjU4 OEEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJmYTQyNjUtYmI1OC00NmUyLTgz MDktM2FkMzk4MWEzNTE2LzAvOUYwMkE5Qjg3Q0M1RjgxQTIyRThFNThEMkVDMTJF NkUwNjU4OEEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvWOZJ/POzuEO1e5yCx4cdFW5fcwtk1gFcl IkIjYy98DMRYjtwWBSVbNK80BVRWcLijqF/75Yu8AmULNhLmCuE2/JohQUMNwgzy uE9Trj5ZpCTHL5gq3ansiQH/njsessChr+PRWj0Ikjicp94Oi7y/LYv6XNCQguR8 2Ba5RbWYwu/QZEhAx+39+gRuhv8W0x9zvoF/qFItLRJnoQT4/8X2MWryEN9z0Fi/ Nbz2OB3gsYiqq0iHbHIQIhSD7oTL9s+aVdVRoR0Rks3v7v2a8uq1omnfpq/NZ9pM fbEoVqmN8XkOssnoEJMzBU4CmjwJS8x2hXzJsw1ueFUYhhvknFA= -----END CERTIFICATE-----Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org