$ rpki-client -vvf repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft File: 08632F1EBF41728D3E177234FCD8C0B9A988898B.mft (raw, json) Hash identifier: g2GSJmp0bwrLDmwVHiVAbBvzpO+GuiCQ8YdL2AVQbvI= Subject key identifier: CF:3D:C4:9D:C3:5C:B9:05:E5:37:8D:D7:A2:E2:C7:46:E0:96:10:E5 Authority key identifier: 08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B Certificate issuer: /CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Certificate serial: 1A2B0CE597C7B810AB67AA25DFC5B9EFFA185D1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft Manifest number: FC Signing time: Mon 25 Nov 2024 06:00:47 +0000 Manifest this update: Mon 25 Nov 2024 05:55:47 +0000 Manifest next update: Thu 28 Nov 2024 15:05:47 +0000 Files and hashes: 1: 08632F1EBF41728D3E177234FCD8C0B9A988898B.crl (hash: Aao+V70hHQ1ELPABJkCg4L8xzMWBygahSsSdwAIN2OM=) 2: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: bVHywHWYUUDcUzaHk0mve4L7zaKPpK+j/bF1K1wLTD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 14:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2b:0c:e5:97:c7:b8:10:ab:67:aa:25:df:c5:b9:ef:fa:18:5d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Validity Not Before: Nov 25 05:55:47 2024 GMT Not After : Nov 28 15:05:47 2024 GMT Subject: CN=CF3DC49DC35CB905E5378DD7A2E2C746E09610E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:d3:88:d4:0e:cc:f5:cc:2f:d4:ce:7c:35: 83:05:52:1a:53:ed:9e:91:f8:36:6a:92:5a:07:0d: 4c:87:3b:62:2f:b4:0e:50:63:b1:ba:c8:df:a4:2f: 3c:62:98:a7:e3:54:a3:c2:18:0a:3e:24:5f:b9:fe: 51:39:af:d6:a7:ea:87:9d:af:dc:b2:cc:25:ce:38: 03:88:48:9e:45:91:ba:93:f9:ff:97:99:d3:80:56: a3:5b:0e:38:74:22:94:fe:b0:47:b2:c2:48:6b:f4: 29:8c:f1:78:34:1d:f2:4f:b3:41:6e:52:22:f9:74: 17:54:c2:ee:4d:fd:fd:2c:9a:21:56:b6:ea:09:5d: e6:81:d4:48:ca:41:b5:ba:8e:4f:f7:e6:5d:5a:5f: 46:23:0b:ea:1b:df:66:11:9a:8f:16:53:87:bc:b5: 6c:7a:c4:28:e2:81:23:c9:f0:57:d0:fc:9c:86:a1: aa:f3:67:81:ff:b9:b3:9c:e1:be:64:e4:5a:ba:52: 7d:31:c5:81:94:ca:8c:ef:6a:e4:9e:1c:9d:55:af: a8:68:18:76:22:5b:4e:aa:dc:0a:5f:ea:e4:d3:cb: 56:3b:c1:fc:ea:1c:3e:45:89:41:1f:88:95:e0:5e: 2a:d5:68:ba:ce:32:bc:3c:9c:e7:92:d5:d9:72:8d: 45:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3D:C4:9D:C3:5C:B9:05:E5:37:8D:D7:A2:E2:C7:46:E0:96:10:E5 X509v3 Authority Key Identifier: keyid:08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:62:3e:ff:63:2a:83:3e:ec:c3:1f:57:fd:b8:22:3a:00:ca: ce:e9:26:7e:7c:f8:2f:6f:2c:7d:29:1f:b3:92:f8:0a:fc:c7: cf:c7:53:94:99:7c:07:8a:f3:ef:0d:6a:24:87:2b:c8:7e:6e: 43:46:f3:eb:33:ae:f6:1a:9c:92:ab:68:24:83:a3:83:0c:73: 70:34:be:cb:fc:34:3e:f2:8a:94:d4:b9:bb:7b:dc:ff:17:58: 95:c1:2b:05:1a:98:08:c1:08:54:46:56:84:cb:b6:d2:aa:7e: 26:43:4c:99:fc:d1:68:58:17:71:5d:4a:1d:f2:0f:a7:b5:18: 25:e4:12:a3:24:34:ec:41:36:d0:a7:6a:9c:2f:3b:de:41:51: 03:e3:ed:1d:ef:f8:48:73:b8:37:a1:ba:b0:d7:75:18:6f:55: a2:a8:63:65:b9:a2:39:52:af:45:44:11:ca:7e:b8:0f:80:74: ee:cd:bd:6f:f2:36:3f:da:67:90:95:6a:99:23:89:1f:3a:5f: a2:bd:df:ac:9d:06:9f:1d:c5:85:ab:9e:b7:91:6f:f5:bd:70: 56:d6:8c:c7:f7:91:cc:5b:27:17:e7:56:32:70:50:05:6b:79: 79:de:0d:95:61:1e:e0:85:94:52:2c:7b:e7:7b:e5:68:1b:0c: 2e:6b:b9:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGisM5ZfHuBCrZ6ol38W57/oYXR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlB OTg4ODk4QjAeFw0yNDExMjUwNTU1NDdaFw0yNDExMjgxNTA1NDdaMDMxMTAvBgNV BAMTKENGM0RDNDlEQzM1Q0I5MDVFNTM3OEREN0EyRTJDNzQ2RTA5NjEwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3tOI1A7M9cwv1M58NYMFUhpT 7Z6R+DZqkloHDUyHO2IvtA5QY7G6yN+kLzximKfjVKPCGAo+JF+5/lE5r9an6oed r9yyzCXOOAOISJ5FkbqT+f+XmdOAVqNbDjh0IpT+sEeywkhr9CmM8Xg0HfJPs0Fu UiL5dBdUwu5N/f0smiFWtuoJXeaB1EjKQbW6jk/35l1aX0YjC+ob32YRmo8WU4e8 tWx6xCjigSPJ8FfQ/JyGoarzZ4H/ubOc4b5k5Fq6Un0xxYGUyozvauSeHJ1Vr6ho GHYiW06q3Apf6uTTy1Y7wfzqHD5FiUEfiJXgXirVaLrOMrw8nOeS1dlyjUUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzz3EncNcuQXlN43XouLHRuCWEOUwHwYDVR0j BBgwFoAUCGMvHr9Bco0+F3I0/NjAuamIiYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjZiZjM3Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC8wODYzMkYxRUJG NDE3MjhEM0UxNzcyMzRGQ0Q4QzBCOUE5ODg4OThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlBOTg4 ODk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMw QjlBOTg4ODk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1iPv9jKoM+7MMfV/24IjoAys7pJn58+C9v LH0pH7OS+Ar8x8/HU5SZfAeK8+8NaiSHK8h+bkNG8+szrvYanJKraCSDo4MMc3A0 vsv8ND7yipTUubt73P8XWJXBKwUamAjBCFRGVoTLttKqfiZDTJn80WhYF3FdSh3y D6e1GCXkEqMkNOxBNtCnapwvO95BUQPj7R3v+EhzuDehurDXdRhvVaKoY2W5ojlS r0VEEcp+uA+AdO7NvW/yNj/aZ5CVapkjiR86X6K936ydBp8dxYWrnreRb/W9cFbW jMf3kcxbJxfnVjJwUAVreXneDZVhHuCFlFIse+d75WgbDC5ruck= -----END CERTIFICATE-----Generated at Mon Nov 25 07:13:31 2024 by rpki-client on console-fra.rpki-client.org