$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft File: B563D708A094B24FC361EDD11C91EE7979AB0471.mft (raw, json) Hash identifier: d11l8EuBAmwUcK5mXuZ4AzdHdUi4Kr8lj9qNzBf/viY= Subject key identifier: 88:4E:7A:D0:F0:8C:50:15:A4:72:D3:04:2D:AA:E6:09:6B:D6:17:83 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 6AE548EF239D6CC38D5607C6609CD188C33236F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft Manifest number: 0406 Signing time: Thu 21 Nov 2024 10:00:51 +0000 Manifest this update: Thu 21 Nov 2024 09:55:51 +0000 Manifest next update: Sun 24 Nov 2024 16:11:51 +0000 Files and hashes: 1: B563D708A094B24FC361EDD11C91EE7979AB0471.crl (hash: 5O+PISJOO6yx20JE5ZevogVo9B7zTPxZlvtvE2cA06E=) 2: 3130332e3135382e3233342e302f32332d3233203d3e20313431313332.roa (hash: bWoeXxpcULQJI+FL8P7bige1XkZqPOoPbJG66/nkyFc=) 3: 3130332e3135382e3233352e302f32342d3234203d3e20313431383938.roa (hash: RkBfllGvEefotMCbBX+M6tjX7qjYPoT7phVfnxdgKbU=) 4: 3130332e3135382e3233342e302f32332d3233203d3e20313431383938.roa (hash: ubs3KFRcbUrpRgNw8QOw+os2JdUl6qStS3zNmN6w2iE=) 5: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (hash: D2U2OhiX4JpcmakIWdkjvlLoKPGy8UFmuSAMLEyoyEQ=) 6: 3130332e3135382e3233342e302f32342d3234203d3e20313431313332.roa (hash: DGfAo05fKoOwOYpCuhv9fRDHV+AUZgV1sVLKuj31JYc=) 7: 3130332e3135382e3233352e302f32342d3234203d3e20313431313332.roa (hash: wu1R31TtfIFRPzZm0Pb0tIerh4jIibnO+i3KDJeQHqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e5:48:ef:23:9d:6c:c3:8d:56:07:c6:60:9c:d1:88:c3:32:36:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Nov 21 09:55:51 2024 GMT Not After : Nov 24 16:11:51 2024 GMT Subject: CN=884E7AD0F08C5015A472D3042DAAE6096BD61783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:31:77:50:18:34:3b:ef:9f:bc:9a:88:5e: 2e:ef:9b:b3:3a:12:ec:56:0f:ef:24:cf:40:e8:50: df:a3:06:1b:c0:4c:c4:06:ce:97:69:20:a9:1d:69: b0:6c:3a:b8:8d:0d:76:87:36:a6:2c:fa:b7:02:9c: 28:19:6f:41:6e:44:33:40:e9:ab:d5:1e:92:48:f4: 31:ce:87:fb:fd:54:b3:b6:d1:cb:1d:cc:cd:fe:c4: b4:fb:76:c0:13:4b:85:f5:1b:90:d6:df:0b:82:83: e2:51:5e:8e:93:48:e4:05:32:7b:f6:55:ba:ba:77: f5:4c:dd:b3:d1:b3:bb:8b:9a:c4:34:f9:9a:c1:4b: 2a:19:13:d6:10:a0:6b:dd:b6:d9:25:44:75:2e:0f: 80:b0:5d:62:81:fa:ea:3a:a0:7b:8d:da:3e:ed:59: 3f:8c:e1:a4:9d:ce:e9:e6:1f:37:e5:70:14:e2:36: 73:67:bf:67:48:d9:70:fa:9d:bb:a1:a7:75:f3:38: cb:58:14:4a:54:c5:0e:67:cd:ec:61:dd:c3:17:59: 95:32:2a:b3:67:e3:d6:5c:4b:61:c3:ba:63:a0:c3: b8:fb:29:73:3b:b9:24:60:a6:d6:61:31:5f:15:55: 39:f2:25:53:7f:50:50:8e:dd:a5:e0:23:e9:8f:9b: 15:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4E:7A:D0:F0:8C:50:15:A4:72:D3:04:2D:AA:E6:09:6B:D6:17:83 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fc:b6:ee:6a:b4:02:5f:89:8a:85:b0:dd:fb:3c:45:6f:26: ec:20:7e:25:66:a8:ef:e1:6c:9a:55:ec:20:1f:44:26:98:1c: d0:46:fc:eb:43:4d:5d:70:cf:94:c6:df:b8:85:2f:25:06:5a: 69:6f:1e:9d:0e:20:92:77:f6:da:a0:43:fc:86:b5:97:e9:32: cd:da:6d:97:0c:06:b4:f2:52:20:ae:79:8d:8e:e6:9c:0e:41: be:57:06:15:e8:9d:9e:f7:0e:96:f8:bd:c3:cf:fd:e1:7e:dc: ea:cb:72:52:64:b4:53:0b:07:5a:19:6b:79:b2:60:d4:6c:01: eb:88:77:3b:e0:5c:92:66:7b:72:f8:e0:96:85:f7:86:14:5b: 78:ef:95:49:10:5e:e0:44:7f:98:14:84:f3:ff:e0:a0:01:48: b8:1b:72:20:ba:7d:e0:ca:91:b6:ac:24:f3:1f:5e:02:c1:ea: 1f:77:2f:69:79:73:13:8c:d0:8a:cd:f2:af:ec:b0:39:cd:c1: 45:81:25:23:4d:63:0e:c3:ee:7f:de:e4:82:94:32:d3:fa:d1: 37:54:1d:19:5d:30:ae:93:97:e4:9d:18:15:30:b7:bf:f7:b0: 42:ed:f8:56:e0:be:93:fe:4e:ba:ec:3b:3a:2c:87:a9:74:17: dc:d1:cc:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUauVI7yOdbMONVgfGYJzRiMMyNvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNDExMjEwOTU1NTFaFw0yNDExMjQxNjExNTFaMDMxMTAvBgNV BAMTKDg4NEU3QUQwRjA4QzUwMTVBNDcyRDMwNDJEQUFFNjA5NkJENjE3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKBjF3UBg0O++fvJqIXi7vm7M6 EuxWD+8kz0DoUN+jBhvATMQGzpdpIKkdabBsOriNDXaHNqYs+rcCnCgZb0FuRDNA 6avVHpJI9DHOh/v9VLO20csdzM3+xLT7dsATS4X1G5DW3wuCg+JRXo6TSOQFMnv2 Vbq6d/VM3bPRs7uLmsQ0+ZrBSyoZE9YQoGvdttklRHUuD4CwXWKB+uo6oHuN2j7t WT+M4aSdzunmHzflcBTiNnNnv2dI2XD6nbuhp3XzOMtYFEpUxQ5nzexh3cMXWZUy KrNn49ZcS2HDumOgw7j7KXM7uSRgptZhMV8VVTnyJVN/UFCO3aXgI+mPmxWVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiE560PCMUBWkctMELarmCWvWF4MwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAzNmUwN2MtODI4My00M2QzLTkx NjQtM2UwZTZjYWNmNDk5LzAvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVF Nzk3OUFCMDQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJz8tu5qtAJfiYqFsN37PEVvJuwgfiVmqO/h bJpV7CAfRCaYHNBG/OtDTV1wz5TG37iFLyUGWmlvHp0OIJJ39tqgQ/yGtZfpMs3a bZcMBrTyUiCueY2O5pwOQb5XBhXonZ73Dpb4vcPP/eF+3OrLclJktFMLB1oZa3my YNRsAeuIdzvgXJJme3L44JaF94YUW3jvlUkQXuBEf5gUhPP/4KABSLgbciC6feDK kbasJPMfXgLB6h93L2l5cxOM0IrN8q/ssDnNwUWBJSNNYw7D7n/e5IKUMtP60TdU HRldMK6Tl+SdGBUwt7/3sELt+FbgvpP+TrrsOzosh6l0F9zRzMQ= -----END CERTIFICATE-----Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org