$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: Kv3Et5io9cf9EigFTeds7dmmC08ATYtwwKhkUKvfZlo= Subject key identifier: FE:4A:26:37:B8:BA:BF:FD:9C:FA:EA:D1:6F:D4:65:F6:91:94:24:59 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 5F467526CB06536739B52F1BADB31FFE7B0C676D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: 0A Signing time: Mon 25 Nov 2024 18:01:59 +0000 Manifest this update: Mon 25 Nov 2024 17:56:59 +0000 Manifest next update: Thu 28 Nov 2024 23:09:59 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: GKadex4N61MVMs5oEtC3nVbnMDiLBatdP+HPiJf7iAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:46:75:26:cb:06:53:67:39:b5:2f:1b:ad:b3:1f:fe:7b:0c:67:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Nov 25 17:56:59 2024 GMT Not After : Nov 28 23:09:59 2024 GMT Subject: CN=FE4A2637B8BABFFD9CFAEAD16FD465F691942459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9c:47:89:df:a8:4f:8d:b9:cd:93:67:7e:47: ec:30:88:24:b8:d9:36:73:ba:2d:da:47:a8:dc:f8: 0e:37:c5:a2:4b:e8:2e:35:74:8f:48:25:89:cb:03: e6:e2:dc:40:ec:29:61:11:23:cb:1f:b4:f7:8d:26: d0:05:26:50:4c:04:2f:b1:1a:ed:de:ac:db:3e:c4: 68:01:1d:51:ca:57:eb:65:98:c1:7e:98:00:17:28: 6a:3a:05:d2:1f:aa:32:55:06:34:49:d6:d0:e4:a2: 08:9c:78:c0:9c:c4:2f:c0:a3:79:86:25:a3:b2:30: 0a:87:ea:a5:4f:82:a3:67:2e:03:e5:9a:16:90:69: f1:20:fb:8c:91:1d:90:81:4d:95:a1:cd:1e:10:19: cf:51:b3:26:d9:cb:58:4e:16:a8:b4:9f:8a:70:a8: 02:85:b6:8f:4c:9b:1c:8a:7a:95:5c:90:19:47:df: 5c:fb:ad:cc:f2:d6:1d:8d:b3:00:b6:a6:b6:24:67: 76:d7:e3:c5:16:81:39:41:d6:bb:51:a7:fa:26:f1: aa:9b:78:b0:42:1f:35:e5:7b:ce:bf:bd:bd:54:e3: b2:fb:30:6a:3e:94:83:6b:a2:a8:09:66:e7:7c:3a: 93:b8:d3:fe:9d:4d:64:b0:ce:e8:69:de:22:6b:4d: 98:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4A:26:37:B8:BA:BF:FD:9C:FA:EA:D1:6F:D4:65:F6:91:94:24:59 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:7d:02:f7:96:0d:96:d7:73:71:df:43:10:d8:e7:2f:22:63: 1f:6f:7e:ae:91:21:72:e2:91:45:75:0a:5a:2d:9e:57:2c:d8: a5:d5:fa:38:62:74:96:c4:5a:e8:3d:26:9f:5d:37:e9:04:03: 9e:72:5c:1b:63:f0:72:cd:a2:21:2f:7b:e6:2d:cc:ed:d8:18: 4a:93:5c:7f:b8:39:84:16:81:c8:df:a1:10:5c:98:b7:a6:b5: 6c:ae:b4:90:02:0d:c2:bb:1b:47:10:1c:d5:fa:82:02:15:57: 68:b1:10:71:6c:e3:d2:c8:48:4f:c4:7e:2e:32:2b:59:a3:c5: c1:5e:88:4d:fe:e9:a5:4b:28:9a:09:9d:af:d8:f0:7f:95:95: 57:ff:24:82:90:e7:87:06:d2:d7:23:4d:47:a6:0d:a0:72:07: 7f:d2:43:22:09:d9:7e:fa:47:6d:c1:3a:91:e0:da:1e:f2:03: ee:9a:27:a1:c5:35:21:65:3f:11:27:8b:a5:cd:3c:13:53:3c: 91:d4:be:30:ca:f5:40:66:b4:78:29:7f:23:37:c5:78:73:a4: cd:4e:11:41:65:f4:e3:a7:dc:04:30:30:fa:af:e6:29:30:c1: 06:43:e7:5b:4b:e3:e3:41:f1:09:47:91:78:02:1a:d2:69:d7: 2c:7a:95:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX0Z1JssGU2c5tS8brbMf/nsMZ20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNDExMjUxNzU2NTlaFw0yNDExMjgyMzA5NTlaMDMxMTAvBgNV BAMTKEZFNEEyNjM3QjhCQUJGRkQ5Q0ZBRUFEMTZGRDQ2NUY2OTE5NDI0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwnEeJ36hPjbnNk2d+R+wwiCS4 2TZzui3aR6jc+A43xaJL6C41dI9IJYnLA+bi3EDsKWERI8sftPeNJtAFJlBMBC+x Gu3erNs+xGgBHVHKV+tlmMF+mAAXKGo6BdIfqjJVBjRJ1tDkogiceMCcxC/Ao3mG JaOyMAqH6qVPgqNnLgPlmhaQafEg+4yRHZCBTZWhzR4QGc9RsybZy1hOFqi0n4pw qAKFto9MmxyKepVckBlH31z7rczy1h2NswC2prYkZ3bX48UWgTlB1rtRp/om8aqb eLBCHzXle86/vb1U47L7MGo+lINroqgJZud8OpO40/6dTWSwzuhp3iJrTZg3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/komN7i6v/2c+urRb9Rl9pGUJFkwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANt9AveWDZbXc3HfQxDY5y8iYx9vfq6RIXLi kUV1Clotnlcs2KXV+jhidJbEWug9Jp9dN+kEA55yXBtj8HLNoiEve+YtzO3YGEqT XH+4OYQWgcjfoRBcmLemtWyutJACDcK7G0cQHNX6ggIVV2ixEHFs49LISE/Efi4y K1mjxcFeiE3+6aVLKJoJna/Y8H+VlVf/JIKQ54cG0tcjTUemDaByB3/SQyIJ2X76 R23BOpHg2h7yA+6aJ6HFNSFlPxEni6XNPBNTPJHUvjDK9UBmtHgpfyM3xXhzpM1O EUFl9OOn3AQwMPqv5ikwwQZD51tL4+NB8QlHkXgCGtJp1yx6lTA= -----END CERTIFICATE-----Generated at Mon Nov 25 21:31:14 2024 by rpki-client on console-ams.rpki-client.org