$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: HCjA+/K3Uw6dsP94vsIifpk0yC2qPfD5MfbfojALg1I= Subject key identifier: 4B:E3:44:6A:60:7D:CD:EE:54:0C:B8:38:91:C4:AD:2B:9C:5A:38:31 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 4CAD78C10E4E679E3475DAA8FA46B13C93A40EC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 03FB Signing time: Wed 20 Nov 2024 20:52:09 +0000 Manifest this update: Wed 20 Nov 2024 20:47:09 +0000 Manifest next update: Sun 24 Nov 2024 06:12:09 +0000 Files and hashes: 1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: ZvLqRM7ljEGC4qdQAe2LfM742SXIbU0UNM/cVjquszU=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: /7z2+JC7qoPzUqAK7WiZ8hM8Bf1dEmgOqji6pvEw+hI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 03:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ad:78:c1:0e:4e:67:9e:34:75:da:a8:fa:46:b1:3c:93:a4:0e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Nov 20 20:47:09 2024 GMT Not After : Nov 24 06:12:09 2024 GMT Subject: CN=4BE3446A607DCDEE540CB83891C4AD2B9C5A3831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:82:64:8e:7e:06:82:65:02:66:2f:9c:8b:1c: a8:6b:fc:d1:b2:d6:47:08:a6:67:02:28:66:16:a4: a4:db:af:e7:c2:10:3a:09:19:6a:d5:09:a1:5f:ef: 9c:0d:4a:b8:65:9d:fd:1f:f9:50:95:99:d9:df:fc: 17:c0:b4:7a:3b:ef:d4:a0:5b:ea:b8:e6:46:9c:1a: d7:8d:70:4a:b1:af:51:c5:45:2f:9b:82:b5:cf:a6: 58:ff:67:8b:db:de:5f:0e:01:b7:22:d3:bd:de:30: b9:d0:ad:11:6d:fa:0a:b9:23:a7:94:f8:e5:99:87: d0:d4:85:f0:fd:53:d3:bc:bb:29:81:e1:4d:f2:ea: a3:a6:6d:1b:6a:19:e6:6c:ec:20:a4:de:f1:d3:de: b3:40:7e:08:2e:c6:24:6a:88:0d:ca:3b:c0:4c:e6: ff:66:0f:c8:d5:aa:e5:2c:7c:98:27:53:68:19:26: 63:6d:62:74:ab:e4:54:8e:a9:a4:57:07:48:4e:18: 78:a9:96:a2:94:c8:66:f0:a8:ef:eb:36:c5:d5:b3: 21:fc:ed:9a:59:d8:bf:17:e2:02:a6:47:e1:28:1e: e8:b7:7a:d0:93:f4:58:5e:1d:72:20:34:71:4e:8c: 6d:a9:4f:21:20:c6:1e:83:9c:6e:07:4d:19:1b:d8: 5b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E3:44:6A:60:7D:CD:EE:54:0C:B8:38:91:C4:AD:2B:9C:5A:38:31 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:74:9b:d6:52:bf:23:c4:ff:f5:ce:95:b2:23:1e:1f:50:99: f2:93:6b:48:a2:15:fd:96:40:30:49:9c:64:ab:1c:03:8c:ac: aa:87:76:a8:dc:e4:ee:f9:f4:fb:bf:c9:d1:be:f0:1b:44:47: 52:a9:23:51:ad:a9:c5:95:2e:ce:43:ac:37:1e:24:b8:76:5f: c6:57:b6:94:ae:57:74:de:76:93:9b:11:56:0b:82:05:8c:f8: 0c:87:8e:f0:ed:a3:81:53:d7:1e:76:c6:fa:94:3f:a7:41:1b: 6f:2b:71:8c:e4:93:ed:a6:45:dc:c7:35:0c:6c:0a:31:22:1b: 0b:7d:79:d0:ed:c4:64:32:49:8b:05:dd:30:b6:81:40:bd:e4: dc:05:ec:7d:4e:2b:cd:1e:0b:b6:2e:bd:1f:8c:b1:cc:d8:8a: 49:8a:b9:9c:48:e7:41:47:71:5c:fc:15:06:d4:50:3d:bd:99: 77:20:0b:56:a4:49:80:9b:99:f9:a4:30:e7:16:4a:34:5a:be: ff:37:70:e5:80:cc:59:90:16:b3:c0:4f:d5:36:b2:ad:e0:06: e3:29:7b:32:52:ce:b7:b8:be:5d:a3:67:fd:a8:9a:cf:fd:58: ed:6c:cb:d2:a2:59:f6:ae:00:6d:b3:40:16:13:3c:af:31:33: 38:0f:13:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTK14wQ5OZ540ddqo+kaxPJOkDsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNDExMjAyMDQ3MDlaFw0yNDExMjQwNjEyMDlaMDMxMTAvBgNV BAMTKDRCRTM0NDZBNjA3RENERUU1NDBDQjgzODkxQzRBRDJCOUM1QTM4MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgmSOfgaCZQJmL5yLHKhr/NGy 1kcIpmcCKGYWpKTbr+fCEDoJGWrVCaFf75wNSrhlnf0f+VCVmdnf/BfAtHo779Sg W+q45kacGteNcEqxr1HFRS+bgrXPplj/Z4vb3l8OAbci073eMLnQrRFt+gq5I6eU +OWZh9DUhfD9U9O8uymB4U3y6qOmbRtqGeZs7CCk3vHT3rNAfgguxiRqiA3KO8BM 5v9mD8jVquUsfJgnU2gZJmNtYnSr5FSOqaRXB0hOGHiplqKUyGbwqO/rNsXVsyH8 7ZpZ2L8X4gKmR+EoHui3etCT9FheHXIgNHFOjG2pTyEgxh6DnG4HTRkb2FsHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS+NEamB9ze5UDLg4kcStK5xaODEwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADd0m9ZSvyPE//XOlbIjHh9QmfKTa0iiFf2W QDBJnGSrHAOMrKqHdqjc5O759Pu/ydG+8BtER1KpI1GtqcWVLs5DrDceJLh2X8ZX tpSuV3TedpObEVYLggWM+AyHjvDto4FT1x52xvqUP6dBG28rcYzkk+2mRdzHNQxs CjEiGwt9edDtxGQySYsF3TC2gUC95NwF7H1OK80eC7YuvR+MsczYikmKuZxI50FH cVz8FQbUUD29mXcgC1akSYCbmfmkMOcWSjRavv83cOWAzFmQFrPAT9U2sq3gBuMp ezJSzre4vl2jZ/2oms/9WO1sy9KiWfauAG2zQBYTPK8xMzgPE5s= -----END CERTIFICATE-----Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org