$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: kNmUKAXmiDaXcXZETaq8A5OqFG50wnCnx6Wpv1+vVtQ= Subject key identifier: 2C:67:66:D6:D5:28:CF:B9:88:F6:F0:17:0A:73:16:C1:94:E6:1E:78 Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 2814A815644926EB7ED559EE1C7F2814E84B55C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 03FF Signing time: Sun 24 Nov 2024 11:22:26 +0000 Manifest this update: Sun 24 Nov 2024 11:17:26 +0000 Manifest next update: Wed 27 Nov 2024 13:58:26 +0000 Files and hashes: 1: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: CttdvZuHvAVU832WRol48WHTthkUh8fEvNvE7ITn3S0=) 2: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: OTd8RtkXs2m+VF5BpzyjcTZytiPZTBuAWTpwxqI9xFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:14:a8:15:64:49:26:eb:7e:d5:59:ee:1c:7f:28:14:e8:4b:55:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Nov 24 11:17:26 2024 GMT Not After : Nov 27 13:58:26 2024 GMT Subject: CN=2C6766D6D528CFB988F6F0170A7316C194E61E78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:d6:60:25:66:15:8e:a3:3c:db:09:9c:53: 2a:be:a4:9a:d8:cd:58:cb:4f:db:e6:61:f2:b6:04: 65:74:5c:44:33:58:e2:21:83:c6:66:a8:74:72:73: ec:59:09:5a:57:54:38:53:ef:e5:58:25:75:c8:dd: 80:98:7c:9a:8e:41:8e:4f:d1:23:f3:a9:80:71:88: 2d:69:6c:58:7c:5b:67:0d:6a:52:a8:44:d1:c7:9a: f5:b3:49:f5:82:09:0e:52:ea:8b:63:42:bd:98:3b: f1:2d:fd:56:ef:34:7a:e2:a5:85:2a:5c:43:67:d5: 3f:4f:67:fd:7e:be:5e:7f:bd:e9:af:9d:db:96:f5: 20:43:76:bf:43:90:8f:99:31:4e:40:41:41:65:35: 83:2c:f2:4f:25:67:3f:cb:25:f9:74:5e:de:d3:20: 14:db:77:8e:73:67:66:f6:3d:75:0d:1f:d5:d3:55: 70:5f:33:a4:45:d3:92:47:79:ac:b3:95:63:a3:f6: eb:93:fb:0d:69:53:be:87:a5:5c:8f:40:37:c3:03: 8b:42:d2:f5:f1:c7:27:39:1f:13:b5:66:01:9e:e6: ce:61:b6:50:7e:79:d5:75:0b:68:4c:46:ac:96:ba: c7:9f:45:89:15:8f:a5:fb:80:8c:1f:ec:65:7b:be: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:67:66:D6:D5:28:CF:B9:88:F6:F0:17:0A:73:16:C1:94:E6:1E:78 X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:bd:57:58:e3:83:37:f0:7f:99:a1:9c:d0:cf:d4:5e:ae:3f: f1:58:a8:4a:0b:ef:26:b7:c3:85:d7:5c:4b:9b:a6:45:b1:ff: 49:d4:02:40:4a:5b:62:38:7e:08:62:8b:5c:93:8f:24:d4:1f: 31:94:60:69:9b:2c:92:1f:e4:a1:f1:44:7e:a4:1d:5a:a4:8c: ab:1b:f1:71:3e:c6:ae:e0:ac:22:f7:f3:62:59:af:16:05:e7: 69:7f:a0:09:dd:c3:d9:73:4d:ad:4a:cd:03:f1:4e:71:f9:17: 55:3e:30:b3:2b:2d:91:db:56:8f:da:d7:81:38:e1:94:2e:37: 5f:41:af:84:91:ac:e2:c2:a0:f9:66:cd:d4:73:bd:4f:08:5b: c2:bd:97:e2:62:d5:47:cb:82:dd:d7:8d:4e:45:d4:46:c4:69: 0c:ba:42:2c:a9:28:32:02:04:0f:4e:3d:02:3c:81:dd:23:66: 78:32:bb:95:eb:4c:60:51:22:66:da:b8:c3:04:fb:c9:25:c7: 6f:06:23:dd:26:aa:8a:be:bc:cc:df:74:4b:05:0f:80:cf:14: c0:73:cf:b6:7b:2b:34:dc:7c:f0:83:0f:11:3d:e2:da:db:97: 8a:9c:65:9c:24:6a:22:30:fa:d7:2f:6e:81:62:de:4a:6a:ca: 58:4b:3b:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBSoFWRJJut+1VnuHH8oFOhLVckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNDExMjQxMTE3MjZaFw0yNDExMjcxMzU4MjZaMDMxMTAvBgNV BAMTKDJDNjc2NkQ2RDUyOENGQjk4OEY2RjAxNzBBNzMxNkMxOTRFNjFFNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtNZgJWYVjqM82wmcUyq+pJrY zVjLT9vmYfK2BGV0XEQzWOIhg8ZmqHRyc+xZCVpXVDhT7+VYJXXI3YCYfJqOQY5P 0SPzqYBxiC1pbFh8W2cNalKoRNHHmvWzSfWCCQ5S6otjQr2YO/Et/VbvNHripYUq XENn1T9PZ/1+vl5/vemvnduW9SBDdr9DkI+ZMU5AQUFlNYMs8k8lZz/LJfl0Xt7T IBTbd45zZ2b2PXUNH9XTVXBfM6RF05JHeayzlWOj9uuT+w1pU76HpVyPQDfDA4tC 0vXxxyc5HxO1ZgGe5s5htlB+edV1C2hMRqyWusefRYkVj6X7gIwf7GV7vqC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULGdm1tUoz7mI9vAXCnMWwZTmHngwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGu9V1jjgzfwf5mhnNDP1F6uP/FYqEoL7ya3 w4XXXEubpkWx/0nUAkBKW2I4fghii1yTjyTUHzGUYGmbLJIf5KHxRH6kHVqkjKsb 8XE+xq7grCL382JZrxYF52l/oAndw9lzTa1KzQPxTnH5F1U+MLMrLZHbVo/a14E4 4ZQuN19Br4SRrOLCoPlmzdRzvU8IW8K9l+Ji1UfLgt3XjU5F1EbEaQy6QiypKDIC BA9OPQI8gd0jZngyu5XrTGBRImbauMME+8klx28GI90mqoq+vMzfdEsFD4DPFMBz z7Z7KzTcfPCDDxE94trbl4qcZZwkaiIw+tcvboFi3kpqylhLOxI= -----END CERTIFICATE-----Generated at Sun Nov 24 13:26:10 2024 by rpki-client on console-ams.rpki-client.org