$ rpki-client -vvf repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft (raw, json) Hash identifier: ru4W8nnKIgm2kQaDkbucuylhWqnK/3+HeUk3kvcb6As= Subject key identifier: 42:4D:B2:B3:ED:6C:CA:05:9E:9F:B4:D9:0F:5A:92:A4:8E:BC:D5:D0 Authority key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Certificate issuer: /CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Certificate serial: 10A13D4250D9E4F493DBAF6FC00DFC5626C19EE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft Manifest number: 4B Signing time: Fri 22 Nov 2024 13:51:29 +0000 Manifest this update: Fri 22 Nov 2024 13:46:29 +0000 Manifest next update: Mon 25 Nov 2024 20:51:29 +0000 Files and hashes: 1: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl (hash: aNhhEJ51ZDirgTS277lf//SQ6Kp6oamd3ETb0G3VWpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a1:3d:42:50:d9:e4:f4:93:db:af:6f:c0:0d:fc:56:26:c1:9e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Validity Not Before: Nov 22 13:46:29 2024 GMT Not After : Nov 25 20:51:29 2024 GMT Subject: CN=424DB2B3ED6CCA059E9FB4D90F5A92A48EBCD5D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:62:b5:d9:ce:9d:ba:88:57:98:ac:a6:b0: ef:fc:aa:c6:eb:0d:de:23:77:a5:07:c9:ea:79:88: b9:ce:f0:30:fb:c5:73:94:20:61:6b:a2:ad:3e:37: 8c:f4:fd:9b:c4:3e:6e:02:c0:02:12:df:de:cd:1c: a0:de:55:ea:5b:83:aa:2e:dd:4f:46:3b:ab:9b:4a: bb:dc:4f:5a:8a:03:30:60:71:78:44:83:b9:2d:02: 07:b9:17:44:1c:17:c5:d0:a0:4f:56:2a:40:cb:bd: 27:84:18:dd:56:52:b7:f9:52:5c:c1:a3:6e:c5:40: 02:d0:fa:1a:b8:79:f5:6e:3d:86:02:c1:dd:c1:ae: 84:2f:fb:e3:11:35:6a:e1:b2:fd:69:81:9c:4c:16: 42:03:dd:ce:8f:b0:5e:ca:e1:22:59:46:e4:7c:e8: cd:96:73:e9:24:43:ce:6a:87:b0:11:d0:76:04:e9: 12:db:73:66:e9:6f:48:1b:2a:7f:07:ec:a7:36:0f: 29:16:ea:09:9c:94:c4:e8:b4:38:06:a5:14:c9:22: 6c:fb:b4:5a:54:64:65:93:43:cc:5d:aa:e8:64:8c: 38:b4:b4:de:2d:fa:e7:6f:b8:88:df:ab:a7:ff:7a: f1:c9:a8:3b:df:c9:b6:59:4a:b6:38:4c:76:f5:da: ed:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4D:B2:B3:ED:6C:CA:05:9E:9F:B4:D9:0F:5A:92:A4:8E:BC:D5:D0 X509v3 Authority Key Identifier: keyid:88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:85:4f:de:0d:e2:4f:7d:e2:30:3e:2d:18:73:d0:95:12:41: 43:e1:75:cf:15:76:c6:0f:08:37:1b:42:3f:7b:a3:1e:30:3b: 86:22:f5:08:be:40:56:32:77:26:84:d0:77:92:eb:fa:88:87: 8c:54:f5:8b:eb:97:d8:07:cc:ed:3d:19:5c:09:50:53:e5:76: 06:1f:f3:4d:67:86:a2:57:5a:33:5e:2e:ff:1c:42:7d:2f:68: d6:dd:72:5c:f7:4b:d0:43:50:33:0c:b6:23:89:06:80:d3:17: f9:60:87:93:c6:6d:34:0a:a8:19:25:92:fa:1a:db:bc:c1:d3: c5:1c:ff:99:e3:9a:a9:11:f9:0b:ae:d8:a4:fc:45:b8:9e:e7: 1c:18:b9:b3:72:55:35:5e:78:6b:c2:e4:53:33:62:a3:38:21: cb:41:54:64:54:4b:9c:23:a7:d2:75:4e:77:f0:7e:65:b0:f5: e5:2c:7e:4e:ed:c2:68:e8:a3:83:55:b9:e6:52:00:d0:c5:ef: 42:80:2e:6c:ce:06:d2:71:45:5f:36:a3:8a:45:42:46:94:44: 9d:68:de:65:fd:c2:85:de:3e:be:4a:7c:88:db:9d:d3:a4:8e: 13:5b:24:fc:93:11:c9:44:89:e6:70:6c:70:50:62:55:48:ec: 85:0a:ce:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKE9QlDZ5PST269vwA38VibBnuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkx RjQ2NUFBOTAeFw0yNDExMjIxMzQ2MjlaFw0yNDExMjUyMDUxMjlaMDMxMTAvBgNV BAMTKDQyNERCMkIzRUQ2Q0NBMDU5RTlGQjREOTBGNUE5MkE0OEVCQ0Q1RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKmK12c6duohXmKymsO/8qsbr Dd4jd6UHyep5iLnO8DD7xXOUIGFroq0+N4z0/ZvEPm4CwAIS397NHKDeVepbg6ou 3U9GO6ubSrvcT1qKAzBgcXhEg7ktAge5F0QcF8XQoE9WKkDLvSeEGN1WUrf5UlzB o27FQALQ+hq4efVuPYYCwd3BroQv++MRNWrhsv1pgZxMFkID3c6PsF7K4SJZRuR8 6M2Wc+kkQ85qh7AR0HYE6RLbc2bpb0gbKn8H7Kc2DykW6gmclMTotDgGpRTJImz7 tFpUZGWTQ8xdquhkjDi0tN4t+udvuIjfq6f/evHJqDvfybZZSrY4THb12u1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQk2ys+1sygWen7TZD1qSpI681dAwHwYDVR0j BBgwFoAUiOEoh/9MG90xtqGyKik8uR9GWqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMS84OEUxMjg4N0ZG NEMxQkREMzFCNkExQjIyQTI5M0NCOTFGNDY1QUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTNDQjkxRjQ2 NUFBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODRkYTQxNWItNWYxNy00NjAyLTli ZDktZmQ4NGFjMmNhZTg2LzEvODhFMTI4ODdGRjRDMUJERDMxQjZBMUIyMkEyOTND QjkxRjQ2NUFBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuFT94N4k994jA+LRhz0JUSQUPhdc8VdsYP CDcbQj97ox4wO4Yi9Qi+QFYydyaE0HeS6/qIh4xU9Yvrl9gHzO09GVwJUFPldgYf 801nhqJXWjNeLv8cQn0vaNbdclz3S9BDUDMMtiOJBoDTF/lgh5PGbTQKqBklkvoa 27zB08Uc/5njmqkR+Quu2KT8Rbie5xwYubNyVTVeeGvC5FMzYqM4IctBVGRUS5wj p9J1TnfwfmWw9eUsfk7twmjoo4NVueZSANDF70KALmzOBtJxRV82o4pFQkaURJ1o 3mX9woXePr5KfIjbndOkjhNbJPyTEclEieZwbHBQYlVI7IUKzkM= -----END CERTIFICATE-----Generated at Fri Nov 22 15:22:19 2024 by rpki-client on console-fra.rpki-client.org