$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: pTAa2FJIY2k2x2BmLG9UL8RlTr4Bweya9KjbBsQVoRs= Subject key identifier: DB:98:08:B2:E3:C6:38:6F:E9:D5:BF:E8:42:24:C1:26:E3:FB:A8:E7 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 7C342C96A225E0154C3C56D67DA64123BC81E848 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: 3B Signing time: Thu 21 Nov 2024 21:41:50 +0000 Manifest this update: Thu 21 Nov 2024 21:36:50 +0000 Manifest next update: Mon 25 Nov 2024 03:46:50 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: UnUyJ6rMwP2Mbmz4SkWcW5EmVExYuzDn5/Inqyzanbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:34:2c:96:a2:25:e0:15:4c:3c:56:d6:7d:a6:41:23:bc:81:e8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Nov 21 21:36:50 2024 GMT Not After : Nov 25 03:46:50 2024 GMT Subject: CN=DB9808B2E3C6386FE9D5BFE84224C126E3FBA8E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0c:26:3f:ea:6a:11:b7:8b:93:d0:00:55:64: 77:1a:48:45:ad:b2:14:7d:fe:56:a7:93:ce:2f:92: de:f9:37:6c:5c:f9:1d:03:e2:a3:ca:13:4f:7e:9f: 4d:3a:b7:84:95:b3:fb:3b:ba:7f:1b:37:ee:ab:43: 40:bd:04:10:a1:31:84:ea:7c:45:4c:91:4a:03:fa: 19:b1:b5:c6:af:72:6d:b8:95:19:cb:a6:4c:92:5a: 87:fd:04:96:4f:41:0e:c0:2d:85:34:4c:10:ce:47: a3:68:28:26:9a:04:fe:ec:94:21:25:63:32:77:60: 4c:b9:bf:f7:c5:ee:b7:fe:cf:39:a9:14:4f:b0:90: 9f:f4:ce:14:26:bd:32:ef:48:b3:59:5c:79:a3:48: 07:ad:db:1d:a4:17:87:9c:98:df:9e:85:40:01:a6: 55:68:f7:c1:ed:ad:ef:f9:0a:57:b0:75:ab:10:72: f8:3b:8f:9a:cb:5c:d7:d9:c5:03:72:2d:1a:5b:bf: 80:35:3d:bc:9d:59:9f:65:b3:71:a6:6f:6a:e6:63: 0d:b5:ef:5c:68:51:35:09:cd:80:ff:70:21:54:eb: 55:6a:64:10:f3:ed:66:31:cc:75:c8:34:ef:00:3f: c1:40:7d:e0:d6:c7:9c:aa:b8:58:b2:fe:5f:6d:e4: 41:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:98:08:B2:E3:C6:38:6F:E9:D5:BF:E8:42:24:C1:26:E3:FB:A8:E7 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d3:5f:80:50:06:52:a4:ca:e6:1f:86:b0:90:bf:38:a7:fe: 58:20:eb:21:64:d2:f4:7e:47:36:ad:9a:fb:fb:8e:53:00:9d: 91:63:6a:46:b9:1c:17:b9:9f:9f:4d:4e:64:91:a8:e3:01:d7: 81:5b:fc:7e:23:ba:d1:fa:31:47:1d:b3:21:bb:bf:28:fd:cb: 6a:f2:bd:3e:63:39:c1:48:d2:89:4c:1e:5d:81:60:d2:22:6b: 5a:da:08:d9:fc:39:3a:8d:eb:b1:84:ab:c0:81:08:94:4b:05: 43:61:59:f2:5c:db:8c:4b:3d:a9:84:54:5c:8d:ee:23:e5:44: dd:c4:af:f7:65:0c:34:ef:a5:5d:c1:ba:58:04:59:74:44:9d: 28:5a:a9:42:9e:1d:3b:34:8d:81:76:a5:24:fa:92:56:25:6f: 30:36:b5:70:3b:fb:45:8d:17:e4:75:1a:e2:96:a6:a9:9f:ba: da:4f:ad:42:a2:dc:73:97:fb:5f:45:bc:be:c7:f8:6e:7b:e4: 2f:76:2a:da:a1:ff:ba:82:30:e1:30:d6:6d:da:33:5b:56:9c: 22:4c:29:8e:b6:9c:81:f2:0c:b1:ec:48:b6:57:ba:47:3a:a2: 2a:bd:9d:8d:98:3b:c3:35:c0:1e:ff:13:03:5b:5c:3d:f8:65: aa:86:37:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDQslqIl4BVMPFbWfaZBI7yB6EgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNDExMjEyMTM2NTBaFw0yNDExMjUwMzQ2NTBaMDMxMTAvBgNV BAMTKERCOTgwOEIyRTNDNjM4NkZFOUQ1QkZFODQyMjRDMTI2RTNGQkE4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DCY/6moRt4uT0ABVZHcaSEWt shR9/lank84vkt75N2xc+R0D4qPKE09+n006t4SVs/s7un8bN+6rQ0C9BBChMYTq fEVMkUoD+hmxtcavcm24lRnLpkySWof9BJZPQQ7ALYU0TBDOR6NoKCaaBP7slCEl YzJ3YEy5v/fF7rf+zzmpFE+wkJ/0zhQmvTLvSLNZXHmjSAet2x2kF4ecmN+ehUAB plVo98Htre/5ClewdasQcvg7j5rLXNfZxQNyLRpbv4A1PbydWZ9ls3Gmb2rmYw21 71xoUTUJzYD/cCFU61VqZBDz7WYxzHXINO8AP8FAfeDWx5yquFiy/l9t5EHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU25gIsuPGOG/p1b/oQiTBJuP7qOcwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnTX4BQBlKkyuYfhrCQvzin/lgg6yFk0vR+ Rzatmvv7jlMAnZFjaka5HBe5n59NTmSRqOMB14Fb/H4jutH6MUcdsyG7vyj9y2ry vT5jOcFI0olMHl2BYNIia1raCNn8OTqN67GEq8CBCJRLBUNhWfJc24xLPamEVFyN 7iPlRN3Er/dlDDTvpV3BulgEWXREnShaqUKeHTs0jYF2pST6klYlbzA2tXA7+0WN F+R1GuKWpqmfutpPrUKi3HOX+19FvL7H+G575C92Ktqh/7qCMOEw1m3aM1tWnCJM KY62nIHyDLHsSLZXukc6oiq9nY2YO8M1wB7/EwNbXD34ZaqGN0Q= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org