$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft File: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft (raw, json) Hash identifier: MJV/gceQb60trfV9UDqzxqgFU0m/nlfWJnkheIaC9Js= Subject key identifier: 64:F7:99:9E:05:FD:47:ED:DD:97:4A:E5:66:79:8D:BF:72:8A:C5:21 Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A Certificate issuer: /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Certificate serial: 7293E69AE0ABD05A72A9E0D686B03BFE560F0DBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft Manifest number: 01CE Signing time: Mon 25 Nov 2024 04:30:59 +0000 Manifest this update: Mon 25 Nov 2024 04:25:59 +0000 Manifest next update: Thu 28 Nov 2024 05:42:59 +0000 Files and hashes: 1: 3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (hash: 5ONTU3XNmPd+Jia2SjSoFLaYUUSHPHyRmEYmOL+oYM8=) 2: 3130332e3136322e3231382e302f32332d3233203d3e20313331373433.roa (hash: uar2KWHhA09iuCkv6r0L7oyWWvVO/yeR/R//2EimVbM=) 3: 6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl (hash: qYwEgNMGZkbLxk6KdrXDXetGuEUlZe4iLOtsiU86BNo=) 4: 3130332e3136322e3231382e302f32342d3234203d3e20313331373433.roa (hash: tesJapkk92fcUF7oKlX0I5+NuJdYzkLjtGFVdsAb+dI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:93:e6:9a:e0:ab:d0:5a:72:a9:e0:d6:86:b0:3b:fe:56:0f:0d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A Validity Not Before: Nov 25 04:25:59 2024 GMT Not After : Nov 28 05:42:59 2024 GMT Subject: CN=64F7999E05FD47EDDD974AE566798DBF728AC521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:96:80:19:3c:59:19:43:9c:0f:c3:a6:c8: f2:b2:a5:7d:d6:e9:1b:f6:4c:ef:0d:fe:e3:c7:70: 63:34:8b:ea:ab:bb:fa:ec:f3:88:11:19:c1:a0:fe: 9e:f2:40:3e:5c:9a:bf:2d:01:29:06:76:be:fb:e0: 97:c2:9c:be:69:fc:71:1c:91:ae:07:44:ba:fd:7d: de:4b:0b:28:70:fb:40:8b:ce:41:65:26:46:c6:ea: ad:18:59:c0:41:4a:33:ce:f3:5a:4f:8d:5b:ea:e5: 06:8d:c4:1d:81:9f:e4:7d:be:32:b6:65:cc:fd:78: 2c:13:7d:79:7a:65:c0:40:cd:a2:ce:7a:f3:63:cf: bd:91:b9:b9:d3:4f:73:71:3a:7b:57:cf:ba:e3:2f: 08:0a:c8:d2:7c:dc:c5:27:3f:30:63:7b:6d:75:18: 12:7a:0f:39:51:c9:32:3b:40:5e:50:6a:d7:a4:2d: 97:1d:fd:57:18:5a:a8:0a:2f:02:d9:bb:b6:af:27: 48:e6:59:67:8c:81:91:33:49:ab:a4:d8:e1:bf:e2: 9a:ff:73:8a:13:d8:37:e0:35:43:fa:33:39:ff:e9: 08:cf:4c:46:a2:af:23:f8:93:e8:4f:2e:26:93:11: 2e:b0:d1:d7:05:d7:e1:17:bc:cc:6b:02:2c:73:4c: 5c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F7:99:9E:05:FD:47:ED:DD:97:4A:E5:66:79:8D:BF:72:8A:C5:21 X509v3 Authority Key Identifier: keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3a:d5:c0:95:8e:2c:4e:b4:bd:ac:42:d2:dd:d2:80:78:98: 51:4b:90:8c:23:95:8a:fe:e1:3d:98:5c:23:27:f8:a5:30:7f: 57:dc:59:57:e4:ab:db:91:a7:e4:76:69:6e:37:74:e0:04:b8: 45:52:f9:4c:e1:7c:c5:1c:3c:00:22:4b:e8:ba:32:1a:dd:32: c6:bb:d4:b9:2a:35:79:c4:1d:72:a3:ed:73:66:17:be:38:11: 6f:b1:fc:7f:dc:8c:1a:a3:de:ab:c9:cf:e3:d9:20:3d:28:ad: f0:6e:ac:64:04:5c:9d:48:42:cf:d4:3a:16:b0:42:a8:75:52: c9:9f:3e:aa:5c:e5:ec:95:3b:93:61:b5:1d:50:50:68:3c:6d: 66:3b:18:ac:34:08:62:75:f6:84:65:10:eb:fa:b7:da:99:91: b9:1a:27:c3:ea:9e:6e:25:06:94:03:e5:bc:27:1c:1a:cd:42: c3:fd:be:74:b6:1c:2c:6b:fc:bf:85:54:92:58:6c:1f:1a:62: dc:0f:4b:9d:5c:5d:e7:f5:bf:8e:13:c6:d7:36:39:df:d3:19: 18:53:6e:02:50:0c:13:c5:85:63:37:bf:dc:ee:1c:11:9f:27: fc:ee:9f:5f:88:30:a0:5c:d3:ee:60:51:53:c2:1c:bc:fe:2e: 2b:cc:8f:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcpPmmuCr0FpyqeDWhrA7/lYPDbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1 MUY5NTg3QTAeFw0yNDExMjUwNDI1NTlaFw0yNDExMjgwNTQyNTlaMDMxMTAvBgNV BAMTKDY0Rjc5OTlFMDVGRDQ3RURERDk3NEFFNTY2Nzk4REJGNzI4QUM1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwpaAGTxZGUOcD8OmyPKypX3W 6Rv2TO8N/uPHcGM0i+qru/rs84gRGcGg/p7yQD5cmr8tASkGdr774JfCnL5p/HEc ka4HRLr9fd5LCyhw+0CLzkFlJkbG6q0YWcBBSjPO81pPjVvq5QaNxB2Bn+R9vjK2 Zcz9eCwTfXl6ZcBAzaLOevNjz72RubnTT3NxOntXz7rjLwgKyNJ83MUnPzBje211 GBJ6DzlRyTI7QF5QatekLZcd/VcYWqgKLwLZu7avJ0jmWWeMgZEzSauk2OG/4pr/ c4oT2DfgNUP6Mzn/6QjPTEairyP4k+hPLiaTES6w0dcF1+EXvMxrAixzTFzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZPeZngX9R+3dl0rlZnmNv3KKxSEwHwYDVR0j BBgwFoAUbN9c0f3f8sAkwTopJk1w+lH5WHowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDI2NjUxMS02MzllLTRjMmItOTYzNC05Y2MxZTIyZmE3MDgvMC82Q0RGNUNEMUZE REZGMkMwMjRDMTNBMjkyNjRENzBGQTUxRjk1ODdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcwRkE1MUY5 NTg3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QyNjY1MTEtNjM5ZS00YzJiLTk2 MzQtOWNjMWUyMmZhNzA4LzAvNkNERjVDRDFGRERGRjJDMDI0QzEzQTI5MjY0RDcw RkE1MUY5NTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM61cCVjixOtL2sQtLd0oB4mFFLkIwjlYr+ 4T2YXCMn+KUwf1fcWVfkq9uRp+R2aW43dOAEuEVS+UzhfMUcPAAiS+i6MhrdMsa7 1LkqNXnEHXKj7XNmF744EW+x/H/cjBqj3qvJz+PZID0orfBurGQEXJ1IQs/UOhaw Qqh1UsmfPqpc5eyVO5NhtR1QUGg8bWY7GKw0CGJ19oRlEOv6t9qZkbkaJ8Pqnm4l BpQD5bwnHBrNQsP9vnS2HCxr/L+FVJJYbB8aYtwPS51cXef1v44Txtc2Od/TGRhT bgJQDBPFhWM3v9zuHBGfJ/zun1+IMKBc0+5gUVPCHLz+LivMjzk= -----END CERTIFICATE-----Generated at Mon Nov 25 06:02:39 2024 by rpki-client on console-ams.rpki-client.org