$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: 9GVKSHB0Lo7Of2Vvw2ANOy/Lrb1ID1xJ2t0bUmJDZkM= Subject key identifier: 4D:9D:1D:27:2A:FB:07:7D:3D:E6:B8:A1:BD:26:97:55:B0:9F:54:EF Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 466226342D7C9B2E2EC627F2ED24840E09CCFB1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 0143 Signing time: Wed 20 Nov 2024 22:10:43 +0000 Manifest this update: Wed 20 Nov 2024 22:05:43 +0000 Manifest next update: Sun 24 Nov 2024 00:43:43 +0000 Files and hashes: 1: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: MWY/c9vSAwJJotJEvXHCohkR0uxXxXKjookP9yhtyMg=) 2: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: qsN6cCaNvPRadYvOCvh81rbUqW03/U/6OgyS9kMLbwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 00:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:62:26:34:2d:7c:9b:2e:2e:c6:27:f2:ed:24:84:0e:09:cc:fb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Nov 20 22:05:43 2024 GMT Not After : Nov 24 00:43:43 2024 GMT Subject: CN=4D9D1D272AFB077D3DE6B8A1BD269755B09F54EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:d5:f8:58:29:34:f1:83:82:90:36:a3:37: f1:de:8b:95:29:24:df:23:be:a0:f6:22:e0:6a:bd: c1:e4:89:68:db:7e:95:a6:c7:0e:8b:68:a9:38:8a: 78:9a:d9:7e:c2:41:65:4f:d4:1e:af:66:62:a7:d6: 9f:aa:a9:71:12:a4:50:80:b7:2a:48:b8:6c:83:b6: 2f:fa:1c:8b:1d:5a:7e:d0:27:00:8d:49:63:82:af: d9:fe:37:5e:9d:56:c0:6e:20:44:8b:a4:3e:3d:8c: 54:ab:1b:73:6f:af:24:39:6e:0e:19:2e:68:89:f9: 76:c9:19:c1:7b:4d:b7:04:e7:ed:b9:ec:32:f6:98: d7:a4:11:92:02:74:86:44:b9:2a:6d:1e:28:3d:09: b4:9e:e7:7e:35:36:2d:cb:81:79:d7:ce:27:fb:3d: de:0d:55:1c:fd:cf:9c:5a:f5:3d:2a:3a:70:45:09: 57:47:fa:90:a4:25:c5:c1:ec:9a:ed:45:1e:8a:7e: 8f:51:56:98:df:71:58:97:fd:2d:dc:d8:06:a6:0f: e3:ee:ee:48:ae:29:85:a4:0d:9a:73:12:91:60:37: 28:d5:67:95:62:22:bd:4e:41:a1:bf:09:01:15:c4: bd:d7:45:a0:47:bc:46:91:15:36:85:f0:e8:34:a9: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9D:1D:27:2A:FB:07:7D:3D:E6:B8:A1:BD:26:97:55:B0:9F:54:EF X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c4:8d:0a:3e:9c:66:73:e3:9e:41:bd:38:fb:35:b2:be:1b: 84:fc:a0:76:44:d7:be:4e:cf:bb:1a:85:73:23:c8:d9:40:b3: 09:15:63:67:8b:5e:2a:d4:0e:1d:b7:3e:5a:5d:7f:ba:7e:e7: 6e:f0:41:a9:58:94:7b:b3:8c:d2:30:59:dc:04:0e:f8:39:09: fe:df:88:42:5d:0f:83:41:bb:45:c2:f0:f0:cd:3e:35:05:ac: 30:62:71:79:23:5d:fc:f5:e8:d5:42:fe:dc:89:19:3e:cb:1e: ee:64:d7:33:05:93:0a:27:79:7d:44:fe:fc:7c:fc:9c:c7:90: 16:cd:57:45:b7:aa:e7:61:3b:31:43:ab:ed:0f:dc:d7:99:8a: 61:e7:ae:fb:14:3e:31:77:6e:52:49:f3:72:6f:f7:bd:11:02: 37:ab:98:34:f2:60:2d:c1:51:88:35:0b:54:2d:53:0c:e3:a4: b2:4c:b9:39:61:9a:c1:31:e8:5e:bd:d9:19:34:7f:9f:c5:a8: 5a:31:a9:d5:5d:c1:35:c2:1b:0c:54:c6:5b:21:18:cc:fc:67: bb:83:6c:d9:1a:db:7b:af:77:36:e2:19:e9:12:86:04:d4:5d: 49:fd:cb:c7:a4:cf:83:da:6a:ec:11:43:88:76:00:f8:ea:af: 19:45:0f:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmImNC18my4uxify7SSEDgnM+x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNDExMjAyMjA1NDNaFw0yNDExMjQwMDQzNDNaMDMxMTAvBgNV BAMTKDREOUQxRDI3MkFGQjA3N0QzREU2QjhBMUJEMjY5NzU1QjA5RjU0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX6tX4WCk08YOCkDajN/Hei5Up JN8jvqD2IuBqvcHkiWjbfpWmxw6LaKk4inia2X7CQWVP1B6vZmKn1p+qqXESpFCA typIuGyDti/6HIsdWn7QJwCNSWOCr9n+N16dVsBuIESLpD49jFSrG3NvryQ5bg4Z LmiJ+XbJGcF7TbcE5+257DL2mNekEZICdIZEuSptHig9CbSe5341Ni3LgXnXzif7 Pd4NVRz9z5xa9T0qOnBFCVdH+pCkJcXB7JrtRR6Kfo9RVpjfcViX/S3c2AamD+Pu 7kiuKYWkDZpzEpFgNyjVZ5ViIr1OQaG/CQEVxL3XRaBHvEaRFTaF8Og0qXDJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTZ0dJyr7B3095rihvSaXVbCfVO8wHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzEjQo+nGZz455BvTj7NbK+G4T8oHZE175O z7sahXMjyNlAswkVY2eLXirUDh23Plpdf7p+527wQalYlHuzjNIwWdwEDvg5Cf7f iEJdD4NBu0XC8PDNPjUFrDBicXkjXfz16NVC/tyJGT7LHu5k1zMFkwoneX1E/vx8 /JzHkBbNV0W3qudhOzFDq+0P3NeZimHnrvsUPjF3blJJ83Jv970RAjermDTyYC3B UYg1C1QtUwzjpLJMuTlhmsEx6F692Rk0f5/FqFoxqdVdwTXCGwxUxlshGMz8Z7uD bNka23uvdzbiGekShgTUXUn9y8ekz4PaauwRQ4h2APjqrxlFD7A= -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org