$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft File: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft (raw, json) Hash identifier: Qm0zVuII0octFmzVMk79VbA+TGSNwZehBWjrKxdZJPE= Subject key identifier: C2:9A:5C:ED:99:5C:9A:2C:B1:B4:30:3F:15:77:34:39:63:99:BD:E6 Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 Certificate issuer: /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Certificate serial: 2BE6B2D120FBD9AAFD56AB4F946F3C88377DC73B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft Manifest number: 021B Signing time: Fri 22 Nov 2024 08:03:14 +0000 Manifest this update: Fri 22 Nov 2024 07:58:14 +0000 Manifest next update: Mon 25 Nov 2024 13:46:14 +0000 Files and hashes: 1: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl (hash: 8obLuCGf27ELefUepEvfOkf7DKpMF+LePRzWe1Zq2b0=) 2: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: K+UHygo4qrap0HRp21an4Bv2wYIc+LITQ2V+cthKQG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 13:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e6:b2:d1:20:fb:d9:aa:fd:56:ab:4f:94:6f:3c:88:37:7d:c7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Validity Not Before: Nov 22 07:58:14 2024 GMT Not After : Nov 25 13:46:14 2024 GMT Subject: CN=C29A5CED995C9A2CB1B4303F157734396399BDE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:9d:00:70:03:ff:2d:8c:cc:7b:2f:97:69: 15:05:a0:45:a7:44:c2:0e:4c:dc:1e:1a:06:3d:48: bd:21:d5:97:f1:76:49:42:13:de:a7:b8:9d:f3:38: d2:0b:82:b8:a3:5c:e5:b0:3e:1a:3b:c2:e8:fb:25: 99:15:b4:7d:20:a0:64:86:c6:a9:1f:62:3d:eb:7c: 4c:4f:c0:2e:c7:64:26:e4:a4:7b:16:2a:9d:7b:7b: 81:b3:62:57:c5:0e:ad:20:e2:c3:45:3f:29:d0:2e: f0:74:78:7e:82:a9:c6:20:d8:09:49:36:b5:a0:44: 16:50:26:34:ed:99:86:49:da:8b:f4:6d:8f:36:a9: 2e:1d:01:5f:9e:16:81:f2:ce:8d:9a:83:c0:79:24: f1:4a:b9:b6:06:45:9f:5a:ee:12:ac:bb:c8:96:4e: c4:cb:16:36:2d:af:2e:4b:0d:43:8b:9e:ef:de:ff: a5:59:b0:0a:5e:a7:c2:e1:4c:fe:3b:4c:14:29:d8: 02:1b:67:e6:bf:48:40:40:f9:83:43:00:01:98:c9: 1c:57:b3:91:f3:b5:f3:5f:04:bf:9b:a1:16:5d:fb: 50:3b:42:18:af:b3:5a:7e:93:a8:79:f3:7d:c2:ce: 2c:a6:4d:92:54:5c:ce:9b:78:c2:49:ee:89:41:3a: c4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9A:5C:ED:99:5C:9A:2C:B1:B4:30:3F:15:77:34:39:63:99:BD:E6 X509v3 Authority Key Identifier: keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b4:33:f5:28:b4:37:95:92:80:20:81:10:2f:a6:ad:eb:d7: c5:22:66:06:81:ac:9b:29:b5:6b:d5:18:2b:ab:32:ec:50:7b: a7:91:7f:75:a1:93:ab:3a:aa:a0:b1:0c:24:f7:b9:f2:06:58: a0:ac:5e:84:db:7e:68:f4:a8:af:ec:8b:d3:0f:56:dc:84:c9: 7f:1d:fb:1b:e9:2c:06:b1:86:10:b2:d6:9a:68:09:ed:30:a0: d8:d3:2f:06:5d:59:74:58:1b:5e:26:c7:f9:05:ec:56:66:75: 2e:03:e4:65:91:18:16:7c:48:54:4c:2e:bf:dd:9b:65:e7:be: 53:9a:06:d6:c1:df:21:25:45:f4:aa:59:dc:76:b5:03:ca:89: 23:78:98:c9:b9:d6:d1:70:e0:ba:5f:f5:e9:2d:09:91:cb:7a: 0c:37:b5:f1:e2:98:d5:5a:01:a1:cb:a8:df:5e:10:c8:57:fd: 00:1e:a5:e1:f9:58:b0:19:ef:a9:07:16:dc:96:90:d1:47:9f: 25:a0:27:bc:42:75:15:02:b4:2b:3d:17:fd:85:0f:dd:6e:7c: 31:fb:d1:15:87:23:7b:01:b4:6c:88:a7:bb:b5:02:9b:c2:5b: 13:4d:bc:1a:4b:22:fe:01:1f:bb:04:9e:37:10:f1:00:88:d4: 09:47:89:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK+ay0SD72ar9VqtPlG88iDd9xzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMx RDMzN0FDMzAeFw0yNDExMjIwNzU4MTRaFw0yNDExMjUxMzQ2MTRaMDMxMTAvBgNV BAMTKEMyOUE1Q0VEOTk1QzlBMkNCMUI0MzAzRjE1NzczNDM5NjM5OUJERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYMZ0AcAP/LYzMey+XaRUFoEWn RMIOTNweGgY9SL0h1ZfxdklCE96nuJ3zONILgrijXOWwPho7wuj7JZkVtH0goGSG xqkfYj3rfExPwC7HZCbkpHsWKp17e4GzYlfFDq0g4sNFPynQLvB0eH6CqcYg2AlJ NrWgRBZQJjTtmYZJ2ov0bY82qS4dAV+eFoHyzo2ag8B5JPFKubYGRZ9a7hKsu8iW TsTLFjYtry5LDUOLnu/e/6VZsApep8LhTP47TBQp2AIbZ+a/SEBA+YNDAAGYyRxX s5HztfNfBL+boRZd+1A7Qhivs1p+k6h5833CziymTZJUXM6beMJJ7olBOsR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwppc7ZlcmiyxtDA/FXc0OWOZveYwHwYDVR0j BBgwFoAUhejes4dC45DHv7NLHkq6wx0zesMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDdmOWVmNC1mOTlmLTQ0ZmYtYjk2OC03MGQ0NTI0ZDcyMDcvMC84NUU4REVCMzg3 NDJFMzkwQzdCRkIzNEIxRTRBQkFDMzFEMzM3QUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMxRDMz N0FDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJB QzMxRDMzN0FDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+0M/UotDeVkoAggRAvpq3r18UiZgaBrJsp tWvVGCurMuxQe6eRf3Whk6s6qqCxDCT3ufIGWKCsXoTbfmj0qK/si9MPVtyEyX8d +xvpLAaxhhCy1ppoCe0woNjTLwZdWXRYG14mx/kF7FZmdS4D5GWRGBZ8SFRMLr/d m2XnvlOaBtbB3yElRfSqWdx2tQPKiSN4mMm51tFw4Lpf9ektCZHLegw3tfHimNVa AaHLqN9eEMhX/QAepeH5WLAZ76kHFtyWkNFHnyWgJ7xCdRUCtCs9F/2FD91ufDH7 0RWHI3sBtGyIp7u1ApvCWxNNvBpLIv4BH7sEnjcQ8QCI1AlHiR8= -----END CERTIFICATE-----Generated at Fri Nov 22 09:38:56 2024 by rpki-client on console-ams.rpki-client.org