$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json) Hash identifier: 1Cbf5rVA8bLu/S5rR8JUDjAN52QbBqEX2xbgzhwfqGA= Subject key identifier: 38:C8:29:ED:0E:AB:58:CD:16:30:C9:6B:9D:53:B6:73:6E:7A:4A:D2 Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Certificate serial: 23A19B453C84E2B6E06A7FA5A07752030868CACA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft Manifest number: 043E Signing time: Sun 24 Nov 2024 21:11:39 +0000 Manifest this update: Sun 24 Nov 2024 21:06:39 +0000 Manifest next update: Thu 28 Nov 2024 04:20:39 +0000 Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: kpxq/Tm3pmZ6D62VrPbTZ76n7D8WWJ5jLv7PcMlMukM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a1:9b:45:3c:84:e2:b6:e0:6a:7f:a5:a0:77:52:03:08:68:ca:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Validity Not Before: Nov 24 21:06:39 2024 GMT Not After : Nov 28 04:20:39 2024 GMT Subject: CN=38C829ED0EAB58CD1630C96B9D53B6736E7A4AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:69:ad:f7:c7:e3:ed:43:cd:61:f7:33:0b: d0:70:b1:53:4e:aa:15:40:f8:5d:17:79:a9:21:0f: 2c:54:69:92:07:d1:a1:d2:72:8f:78:5a:81:ea:7b: 04:22:de:0d:24:d2:18:08:c1:b3:06:ba:e6:76:9a: 7c:cd:e1:74:84:18:a6:16:7b:89:27:e3:46:16:ab: 80:bf:1f:31:33:c1:9b:e4:fe:b8:e7:61:f3:6f:db: 89:7d:95:66:72:c7:f7:ae:cf:48:b1:42:04:fd:c6: e6:27:f0:67:f4:ec:86:c4:db:8e:d0:4b:37:e9:fe: ee:fc:68:6e:63:87:8f:d5:f6:01:e5:81:87:53:eb: 74:d7:56:73:a2:4e:45:f5:c5:a1:af:9a:a1:3e:5d: 3a:1b:ac:eb:52:09:49:c2:78:4f:61:13:39:ed:93: 93:58:88:73:84:ae:ef:ea:28:d0:24:9a:0f:c4:38: 21:1f:76:2b:a1:aa:68:17:b0:03:79:cb:54:9e:fe: 0e:dc:49:e9:e2:b3:a7:59:28:14:62:9a:08:f6:27: a9:da:44:0c:81:ba:17:ba:09:97:91:32:cd:99:6b: 55:44:17:88:c9:56:42:17:f5:2f:4c:ee:93:16:67: 19:0b:7b:70:5d:3a:6f:99:f8:23:5a:42:e8:80:b7: 01:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C8:29:ED:0E:AB:58:CD:16:30:C9:6B:9D:53:B6:73:6E:7A:4A:D2 X509v3 Authority Key Identifier: keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:34:60:ad:12:00:39:9a:3a:e1:3d:b6:f2:ab:0a:1a:35:f9: dc:f1:53:d3:50:72:c0:05:e6:8f:b9:b2:f6:cc:4b:7e:f8:b9: d8:b7:25:8b:3d:21:44:f3:06:c5:32:13:58:26:2f:c5:ba:8e: a1:7e:37:5f:b0:67:f3:26:56:e7:80:20:f4:28:4e:0c:2d:30: 16:8e:dd:14:e2:47:af:5b:65:e9:37:79:37:2c:e9:ca:fb:01: f8:df:9d:30:47:73:70:25:88:8f:4f:28:d0:3c:a0:05:05:ac: 65:3c:6e:c5:38:f4:f5:87:86:f4:d9:b4:e3:cb:4a:83:08:b6: 34:6f:dc:cc:ae:5d:e7:16:2f:3d:4f:2b:c8:b8:2c:46:b8:2e: eb:15:41:26:e1:29:88:7c:68:98:22:7f:ef:ec:af:b2:ed:4e: ca:9a:3d:1b:9e:4e:1c:9e:1f:7e:3f:33:8b:8b:8e:f9:c2:88: bf:24:d0:03:c9:b1:8d:fd:9f:87:b2:2f:34:e6:06:fc:12:a5: 87:14:ec:34:9a:03:03:c5:a5:b8:d9:64:1b:18:d4:98:7a:ac: ad:af:6b:84:39:06:64:9c:37:99:ee:27:2e:ef:9d:71:a3:9b: 06:c1:7b:a8:c6:2d:ba:f6:df:a1:1e:93:e0:c7:8d:1e:1b:23: c2:ac:77:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI6GbRTyE4rbgan+loHdSAwhoysowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx QjQzQjVDQTAeFw0yNDExMjQyMTA2MzlaFw0yNDExMjgwNDIwMzlaMDMxMTAvBgNV BAMTKDM4QzgyOUVEMEVBQjU4Q0QxNjMwQzk2QjlENTNCNjczNkU3QTRBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV3Wmt98fj7UPNYfczC9BwsVNO qhVA+F0XeakhDyxUaZIH0aHSco94WoHqewQi3g0k0hgIwbMGuuZ2mnzN4XSEGKYW e4kn40YWq4C/HzEzwZvk/rjnYfNv24l9lWZyx/euz0ixQgT9xuYn8Gf07IbE247Q Szfp/u78aG5jh4/V9gHlgYdT63TXVnOiTkX1xaGvmqE+XTobrOtSCUnCeE9hEznt k5NYiHOEru/qKNAkmg/EOCEfdiuhqmgXsAN5y1Se/g7cSenis6dZKBRimgj2J6na RAyBuhe6CZeRMs2Za1VEF4jJVkIX9S9M7pMWZxkLe3BdOm+Z+CNaQuiAtwE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOMgp7Q6rWM0WMMlrnVO2c256StIwHwYDVR0j BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0 NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAME0YK0SADmaOuE9tvKrCho1+dzxU9NQcsAF 5o+5svbMS374udi3JYs9IUTzBsUyE1gmL8W6jqF+N1+wZ/MmVueAIPQoTgwtMBaO 3RTiR69bZek3eTcs6cr7AfjfnTBHc3AliI9PKNA8oAUFrGU8bsU49PWHhvTZtOPL SoMItjRv3MyuXecWLz1PK8i4LEa4LusVQSbhKYh8aJgif+/sr7LtTsqaPRueThye H34/M4uLjvnCiL8k0APJsY39n4eyLzTmBvwSpYcU7DSaAwPFpbjZZBsY1Jh6rK2v a4Q5BmScN5nuJy7vnXGjmwbBe6jGLbr236Eek+DHjR4bI8Ksdw8= -----END CERTIFICATE-----Generated at Sun Nov 24 23:06:10 2024 by rpki-client on console-ams.rpki-client.org