$ rpki-client -vvf repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft File: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft (raw, json) Hash identifier: 3TFnLFktLViDA7IcvZMtlF10YJv6NJf6rNdFdgJaGBw= Subject key identifier: FD:8E:E7:07:03:39:BD:8E:60:EF:8C:78:89:46:42:AF:EE:4A:92:FF Authority key identifier: 58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA Certificate issuer: /CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Certificate serial: 10F6404121F2DF4EB40F54BB3EE94CB6B8D0C67D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft Manifest number: 048F Signing time: Mon 25 Nov 2024 03:01:08 +0000 Manifest this update: Mon 25 Nov 2024 02:56:08 +0000 Manifest next update: Thu 28 Nov 2024 14:18:08 +0000 Files and hashes: 1: 58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl (hash: 73zAqF9686Iq7oAppoiK+mjTCvS5Km0YeccupQAU4hQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f6:40:41:21:f2:df:4e:b4:0f:54:bb:3e:e9:4c:b6:b8:d0:c6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7DC530F3BA4ACD0488062170E1581B67D61EA Validity Not Before: Nov 25 02:56:08 2024 GMT Not After : Nov 28 14:18:08 2024 GMT Subject: CN=FD8EE7070339BD8E60EF8C78894642AFEE4A92FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:d9:00:25:f9:5d:77:bf:8d:e4:c6:d5:bf: 9e:64:e5:1a:61:ae:e8:bc:d8:21:fa:6d:07:57:f5: 72:59:f2:3f:06:e5:82:64:99:2c:46:11:c2:0c:0c: 65:77:9b:87:82:23:c7:ff:a0:60:b5:dc:8e:2f:f7: 18:79:31:c1:71:8c:bc:03:5d:98:a6:0a:e5:58:5e: c1:73:f2:05:e6:27:b5:25:c2:8e:af:33:7f:b6:c3: 61:5f:17:21:95:bd:01:b9:c9:51:a2:2a:58:69:26: 7d:05:55:7a:11:e3:cb:56:f2:92:53:9a:b9:c9:7f: 8c:77:56:78:a8:1c:bc:79:7c:d7:bd:ab:5b:8d:e5: c5:ae:50:74:15:08:76:64:e4:b1:74:ae:85:2d:f1: c2:53:e5:a2:60:27:07:8d:b4:04:48:81:9b:ae:c7: 28:35:32:80:66:ba:48:ec:51:46:d8:d4:a4:d6:52: d6:28:5f:5b:a8:15:fa:25:52:f4:60:a1:ea:8f:2a: 7e:84:1d:eb:30:8e:0b:36:b9:b4:f6:e4:ca:31:c4: ca:2e:5f:80:0a:2a:99:c6:57:f5:b1:93:de:5d:51: 3a:7b:3c:90:ca:a7:b9:4c:8d:d2:79:82:c9:30:8c: 7d:8d:52:b1:c1:3f:c5:1d:55:08:22:12:c9:b4:f2: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8E:E7:07:03:39:BD:8E:60:EF:8C:78:89:46:42:AF:EE:4A:92:FF X509v3 Authority Key Identifier: keyid:58:D7:DC:53:0F:3B:A4:AC:D0:48:80:62:17:0E:15:81:B6:7D:61:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7DC530F3BA4ACD0488062170E1581B67D61EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/58D7DC530F3BA4ACD0488062170E1581B67D61EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:61:96:c4:24:ff:a1:73:36:7a:9d:53:1d:4a:2d:c6:4d:50: 5c:02:92:75:ac:8b:f7:3e:c0:69:39:1c:fd:74:2b:54:e0:f7: 76:70:d7:ae:2e:7d:7e:bd:46:2c:48:c9:e6:0e:74:13:26:9e: f9:70:ce:62:4e:6e:eb:01:0f:29:f2:27:27:a9:78:2b:89:07: ff:9e:d0:1b:22:0f:62:c9:45:ef:a0:8b:77:af:c1:cf:44:03: 8d:65:81:4e:80:f1:48:18:72:95:f5:4d:80:41:6d:f4:ca:3e: af:64:e4:92:21:d5:7a:10:4f:d7:dc:43:1a:19:aa:d2:bc:63: ce:f7:62:72:23:19:b2:d9:49:31:3a:30:0d:26:f6:28:99:af: 00:7b:80:f2:c4:4d:b0:2b:8e:15:b8:95:d0:96:d6:68:99:33: 31:4f:d9:31:8b:0e:74:c2:eb:8b:58:43:7a:b7:30:e0:4a:2e: db:ff:aa:22:de:33:4b:48:24:38:0e:83:cf:09:96:66:65:54: a7:b9:fd:14:d3:58:79:d6:e7:4d:1d:f6:6b:dd:c2:ff:22:5d: 61:af:42:10:f8:62:4d:cf:ba:25:3d:c2:e1:26:c7:8c:fc:7c: 01:fb:31:a7:18:84:61:f6:5a:ea:ab:36:7e:1f:aa:2f:7e:85: 0c:b1:df:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPZAQSHy3060D1S7PulMtrjQxn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFC NjdENjFFQTAeFw0yNDExMjUwMjU2MDhaFw0yNDExMjgxNDE4MDhaMDMxMTAvBgNV BAMTKEZEOEVFNzA3MDMzOUJEOEU2MEVGOEM3ODg5NDY0MkFGRUU0QTkyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/LtkAJfldd7+N5MbVv55k5Rph rui82CH6bQdX9XJZ8j8G5YJkmSxGEcIMDGV3m4eCI8f/oGC13I4v9xh5McFxjLwD XZimCuVYXsFz8gXmJ7Ulwo6vM3+2w2FfFyGVvQG5yVGiKlhpJn0FVXoR48tW8pJT mrnJf4x3VnioHLx5fNe9q1uN5cWuUHQVCHZk5LF0roUt8cJT5aJgJweNtARIgZuu xyg1MoBmukjsUUbY1KTWUtYoX1uoFfolUvRgoeqPKn6EHeswjgs2ubT25MoxxMou X4AKKpnGV/Wxk95dUTp7PJDKp7lMjdJ5gskwjH2NUrHBP8UdVQgiEsm08rWJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Y7nBwM5vY5g74x4iUZCr+5Kkv8wHwYDVR0j BBgwFoAUWNfcUw87pKzQSIBiFw4VgbZ9YeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhM2EzOS1lMGVjLTRmYzEtOWI1NC0zNTNlMDdmMDA1ZGQvMC81OEQ3REM1MzBG M0JBNEFDRDA0ODgwNjIxNzBFMTU4MUI2N0Q2MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1ODFCNjdE NjFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYTNhMzktZTBlYy00ZmMxLTli NTQtMzUzZTA3ZjAwNWRkLzAvNThEN0RDNTMwRjNCQTRBQ0QwNDg4MDYyMTcwRTE1 ODFCNjdENjFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBhlsQk/6FzNnqdUx1KLcZNUFwCknWsi/c+ wGk5HP10K1Tg93Zw164ufX69RixIyeYOdBMmnvlwzmJObusBDynyJyepeCuJB/+e 0BsiD2LJRe+gi3evwc9EA41lgU6A8UgYcpX1TYBBbfTKPq9k5JIh1XoQT9fcQxoZ qtK8Y873YnIjGbLZSTE6MA0m9iiZrwB7gPLETbArjhW4ldCW1miZMzFP2TGLDnTC 64tYQ3q3MOBKLtv/qiLeM0tIJDgOg88JlmZlVKe5/RTTWHnW500d9mvdwv8iXWGv QhD4Yk3PuiU9wuEmx4z8fAH7MacYhGH2WuqrNn4fqi9+hQyx3wI= -----END CERTIFICATE-----Generated at Mon Nov 25 04:42:07 2024 by rpki-client on console-ams.rpki-client.org