$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: 2Xdi+etS/Ny0RguY6NUj0iM7Yr9AsYfVqmPzvU53Vjk= Subject key identifier: 33:DA:41:AC:3C:A3:D4:3E:43:B4:C5:81:CE:C8:A3:F9:6C:16:E5:75 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 52966418FCB603FA82E9DB26AD2BA507BB6F1DD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 0175 Signing time: Fri 22 Nov 2024 17:40:51 +0000 Manifest this update: Fri 22 Nov 2024 17:35:51 +0000 Manifest next update: Tue 26 Nov 2024 04:33:51 +0000 Files and hashes: 1: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: tCzwyvICMLiBKanmgVK9DJ30/81QAPZJgJLRCOJomHk=) 2: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: ER09/d673Zei97k2o4R+YDy6neQAyCBVuW6CuWOZSDM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:96:64:18:fc:b6:03:fa:82:e9:db:26:ad:2b:a5:07:bb:6f:1d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Nov 22 17:35:51 2024 GMT Not After : Nov 26 04:33:51 2024 GMT Subject: CN=33DA41AC3CA3D43E43B4C581CEC8A3F96C16E575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:d8:bf:31:55:84:75:e0:e0:d2:d5:90:e7: 02:29:1c:eb:e2:a0:56:79:94:d2:60:6c:22:bf:98: 93:8d:a7:b7:44:45:d2:9a:f6:76:9b:c8:e2:ae:d5: 85:94:3e:14:bc:4e:be:2f:73:ab:6f:d3:23:17:7d: 72:db:6e:94:56:cf:80:c3:18:72:20:c7:dd:74:f9: 03:64:98:77:d6:0d:a0:8e:4f:49:25:db:31:56:b3: 8e:0e:a4:88:1d:b8:fb:4e:89:3a:69:97:ae:08:db: 02:0e:01:c6:bf:ee:27:67:19:48:50:96:c2:72:db: b5:04:af:7a:b9:70:bb:a5:bb:0d:2b:f5:93:2b:30: 6f:4a:f1:a5:28:bc:87:8f:ee:89:3e:30:ae:15:29: a0:32:09:aa:10:e1:54:57:d6:9f:be:66:d5:e2:9f: f2:4b:3a:d0:4b:57:59:c2:f1:8b:ed:6f:91:f5:ca: a9:eb:ba:13:14:6f:49:44:79:6d:81:71:9a:41:93: f6:ba:e4:74:44:0c:4a:75:9d:9b:c6:68:dc:d5:8c: 90:45:32:63:13:91:e4:7c:cc:9a:30:f5:44:de:55: e6:e6:e1:98:e3:31:3c:e6:31:b7:da:0f:b6:7b:80: 16:c5:72:66:bf:61:b4:4b:57:ce:33:64:aa:79:97: 7b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DA:41:AC:3C:A3:D4:3E:43:B4:C5:81:CE:C8:A3:F9:6C:16:E5:75 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0e:d3:46:50:aa:78:bc:12:82:1e:91:16:c0:80:ae:63:61: 99:50:83:f0:b0:e5:c8:4b:99:5d:07:b9:e6:0c:e6:d4:10:02: 72:e2:fe:61:e7:23:33:97:a7:29:93:f3:c6:36:72:8a:9e:b5: 9b:cb:4a:9f:1e:e0:08:db:de:91:a5:74:81:62:6f:4e:d9:4a: 55:32:d4:fe:50:43:23:74:ba:f6:97:15:ac:18:23:89:a2:d3: 4b:04:38:84:e4:f8:4c:2a:5d:9d:fd:a7:89:ce:b3:95:54:5e: f8:f7:d8:f4:1c:65:5e:df:0a:9c:4a:9d:cb:09:12:e5:e3:59: 38:3a:c3:4f:9a:bc:9f:a7:9a:05:81:e8:c0:a6:ce:14:50:05: 69:02:0f:7c:7b:24:ea:13:70:cf:97:9e:27:1c:42:3e:3d:4f: cd:2c:1a:aa:34:b5:11:c6:62:40:c1:9d:d8:2e:b6:53:07:cb: 5e:01:24:1b:e8:0a:1f:5d:80:b0:5a:62:18:e2:93:f0:c3:eb: 8f:1d:d0:2a:f4:13:41:6a:cc:65:42:10:63:d2:45:d2:22:d7: bc:49:ec:62:89:c3:a4:c5:03:0d:de:b4:28:61:71:21:f5:57: 1d:04:83:01:ce:c3:81:38:9d:9b:86:5e:2f:99:61:22:79:38: dd:d4:19:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpZkGPy2A/qC6dsmrSulB7tvHdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNDExMjIxNzM1NTFaFw0yNDExMjYwNDMzNTFaMDMxMTAvBgNV BAMTKDMzREE0MUFDM0NBM0Q0M0U0M0I0QzU4MUNFQzhBM0Y5NkMxNkU1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0Ni/MVWEdeDg0tWQ5wIpHOvi oFZ5lNJgbCK/mJONp7dERdKa9nabyOKu1YWUPhS8Tr4vc6tv0yMXfXLbbpRWz4DD GHIgx910+QNkmHfWDaCOT0kl2zFWs44OpIgduPtOiTppl64I2wIOAca/7idnGUhQ lsJy27UEr3q5cLuluw0r9ZMrMG9K8aUovIeP7ok+MK4VKaAyCaoQ4VRX1p++ZtXi n/JLOtBLV1nC8Yvtb5H1yqnruhMUb0lEeW2BcZpBk/a65HREDEp1nZvGaNzVjJBF MmMTkeR8zJow9UTeVebm4ZjjMTzmMbfaD7Z7gBbFcma/YbRLV84zZKp5l3tDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM9pBrDyj1D5DtMWBzsij+WwW5XUwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4O00ZQqni8EoIekRbAgK5jYZlQg/Cw5chL mV0HueYM5tQQAnLi/mHnIzOXpymT88Y2coqetZvLSp8e4Ajb3pGldIFib07ZSlUy 1P5QQyN0uvaXFawYI4mi00sEOITk+EwqXZ39p4nOs5VUXvj32PQcZV7fCpxKncsJ EuXjWTg6w0+avJ+nmgWB6MCmzhRQBWkCD3x7JOoTcM+XniccQj49T80sGqo0tRHG YkDBndgutlMHy14BJBvoCh9dgLBaYhjik/DD648d0Cr0E0FqzGVCEGPSRdIi17xJ 7GKJw6TFAw3etChhcSH1Vx0EgwHOw4E4nZuGXi+ZYSJ5ON3UGSk= -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org