$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: Gf8+58nT/2xRC1OZRyvOo5wSkF0FPNQrMhHtF6UL9yU= Subject key identifier: BC:25:DE:90:F1:3C:F4:37:5A:0D:5C:CA:F1:E4:09:6D:39:19:38:AC Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 740514436844BBDE5E166432FA6229DA57FEB3E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 012B Signing time: Wed 27 Nov 2024 07:50:43 +0000 Manifest this update: Wed 27 Nov 2024 07:45:43 +0000 Manifest next update: Sat 30 Nov 2024 16:28:43 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: NgT9VPEqsHMQ7qNDiw2ntxPheUbFyiExUTwmX3JXos4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 15:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:05:14:43:68:44:bb:de:5e:16:64:32:fa:62:29:da:57:fe:b3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Nov 27 07:45:43 2024 GMT Not After : Nov 30 16:28:43 2024 GMT Subject: CN=BC25DE90F13CF4375A0D5CCAF1E4096D391938AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:c0:c2:fe:2f:12:9b:94:83:a5:33:59:3a: c6:1b:ed:28:af:84:8e:87:2f:59:f9:58:03:e2:b9: e8:64:ed:52:a5:67:cc:36:e5:2b:10:c4:cc:e7:04: 87:d2:c0:27:11:68:05:6e:61:9a:15:b6:9c:8b:40: 7c:9e:9e:88:25:fc:5b:81:46:5c:4b:56:ce:40:0a: 7a:05:64:ce:cf:d9:91:3e:51:10:88:b7:cd:d6:30: 35:f8:6b:e5:59:e6:69:2d:a8:5e:83:87:6f:48:90: e0:3b:56:87:7b:19:a8:75:ea:01:53:ae:91:bc:47: 27:f6:9e:64:84:bf:04:8c:95:5a:7e:e9:44:4d:58: dd:43:d5:e2:62:c6:5f:c2:cb:52:00:0f:bb:5e:1a: b2:6d:5e:81:34:4d:0d:41:0f:59:a5:3a:2f:cf:3a: 6c:e8:03:25:60:65:1a:e3:a1:32:56:36:3e:c4:1d: fb:bb:69:6a:3b:c9:42:e6:c1:3a:7e:52:f9:b2:de: 42:b2:4d:11:4f:92:43:3f:50:dc:00:67:a2:4c:31: c1:b6:1c:98:c8:f1:9f:7a:34:b1:82:d0:32:6f:fd: 58:d8:1d:16:9b:ea:d1:7e:87:e7:6b:b8:b3:5f:d5: 0c:5c:95:18:62:7e:3e:96:53:25:a6:0a:51:15:7a: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:25:DE:90:F1:3C:F4:37:5A:0D:5C:CA:F1:E4:09:6D:39:19:38:AC X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fd:66:ab:3a:af:fe:0f:57:3b:62:8a:46:99:4b:8c:6e:9a: 1b:4b:8f:ee:d7:58:27:21:df:83:ab:b9:80:49:44:ac:6f:99: 7f:92:c8:af:49:2a:45:cc:bc:66:c3:95:22:48:8d:22:db:bb: 8e:c7:cd:86:0c:9b:e8:4e:28:63:06:ad:75:20:83:ab:37:cb: 7d:f2:49:b7:a4:b7:07:98:86:a3:c5:f3:d9:03:c4:04:64:f6: b0:ff:03:a1:78:df:c3:08:1f:0e:44:b7:0b:01:aa:ce:b8:53: 4d:61:3b:6a:c4:e1:e9:24:73:ca:83:ca:e2:56:24:66:df:f4: 61:fc:6e:f5:bd:f3:8b:9f:b1:1b:e9:3b:f4:34:dc:e8:8b:09: 0c:2f:09:4c:19:20:57:57:02:03:20:85:ab:e0:00:c3:3d:e7: ef:55:d8:df:e8:23:0d:b6:74:3d:24:fb:40:25:a0:f2:36:34: ea:cf:49:1b:a2:0d:47:45:3b:79:dc:8f:73:db:16:21:bd:84: 34:7f:38:32:f7:10:43:00:6c:c8:fc:fb:97:5c:28:af:13:77: 94:aa:39:0e:10:0e:31:e6:1e:74:c5:c5:78:0c:a9:3a:6a:ea: 69:c8:d0:56:d3:25:f9:af:bd:db:92:40:44:f4:45:3c:26:42: 7c:3c:65:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdAUUQ2hEu95eFmQy+mIp2lf+s+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNDExMjcwNzQ1NDNaFw0yNDExMzAxNjI4NDNaMDMxMTAvBgNV BAMTKEJDMjVERTkwRjEzQ0Y0Mzc1QTBENUNDQUYxRTQwOTZEMzkxOTM4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkMDC/i8Sm5SDpTNZOsYb7Siv hI6HL1n5WAPiuehk7VKlZ8w25SsQxMznBIfSwCcRaAVuYZoVtpyLQHyenogl/FuB RlxLVs5ACnoFZM7P2ZE+URCIt83WMDX4a+VZ5mktqF6Dh29IkOA7Vod7Gah16gFT rpG8Ryf2nmSEvwSMlVp+6URNWN1D1eJixl/Cy1IAD7teGrJtXoE0TQ1BD1mlOi/P OmzoAyVgZRrjoTJWNj7EHfu7aWo7yULmwTp+Uvmy3kKyTRFPkkM/UNwAZ6JMMcG2 HJjI8Z96NLGC0DJv/VjYHRab6tF+h+druLNf1QxclRhifj6WUyWmClEVetMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvCXekPE89DdaDVzK8eQJbTkZOKwwHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD9Zqs6r/4PVztiikaZS4xumhtLj+7XWCch 34OruYBJRKxvmX+SyK9JKkXMvGbDlSJIjSLbu47HzYYMm+hOKGMGrXUgg6s3y33y SbektweYhqPF89kDxARk9rD/A6F438MIHw5EtwsBqs64U01hO2rE4ekkc8qDyuJW JGbf9GH8bvW984ufsRvpO/Q03OiLCQwvCUwZIFdXAgMghavgAMM95+9V2N/oIw22 dD0k+0AloPI2NOrPSRuiDUdFO3ncj3PbFiG9hDR/ODL3EEMAbMj8+5dcKK8Td5Sq OQ4QDjHmHnTFxXgMqTpq6mnI0FbTJfmvvduSQET0RTwmQnw8ZVg= -----END CERTIFICATE-----Generated at Wed Nov 27 09:01:35 2024 by rpki-client on console-ams.rpki-client.org