$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: l2ijoxPpgegEfi6i7fwByMhEL0cqIkfVGXIC7vAqWt8= Subject key identifier: 07:98:AF:6A:56:26:0E:BB:B0:51:E1:00:4B:7D:E9:83:9B:A2:19:B2 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 490EADFBD217A07D4A2CF749322F39CB30F888A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 0126 Signing time: Sat 23 Nov 2024 21:40:49 +0000 Manifest this update: Sat 23 Nov 2024 21:35:49 +0000 Manifest next update: Wed 27 Nov 2024 09:04:49 +0000 Files and hashes: 1: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: ikkAxQpidl/zqC8SRQ8rRd3bIgbpYfYcesVtoVUeG9w=) 2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 2kAwuTxDjWCw6sX6vuX7ESl/s76ZlSIQ2pRBpS6CjuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 21:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0e:ad:fb:d2:17:a0:7d:4a:2c:f7:49:32:2f:39:cb:30:f8:88:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Nov 23 21:35:49 2024 GMT Not After : Nov 27 09:04:49 2024 GMT Subject: CN=0798AF6A56260EBBB051E1004B7DE9839BA219B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:59:3a:56:ca:40:ed:d1:8b:b4:6d:ca:a3: a1:9b:50:85:ee:83:a4:a7:11:36:f4:7b:39:c6:b5: 8e:31:01:9e:6e:f4:02:66:3c:52:79:de:67:a9:de: 43:7b:cb:d2:9b:5e:ff:66:34:11:41:fd:a5:75:b7: 8b:87:34:4b:b1:3a:09:df:d7:76:fa:95:8e:87:c0: 38:7e:d1:1f:9a:a7:b2:13:56:28:c8:31:37:7c:4b: 16:18:f9:78:45:46:11:e0:8d:2f:1c:55:93:f5:f9: ec:c1:f3:1e:98:8a:e8:ef:4f:e4:ad:aa:6c:98:1d: 3a:ae:80:2f:1a:55:ec:f4:d8:aa:c2:a5:f5:ce:4f: a5:bc:46:30:1f:52:81:d6:35:31:55:0f:3f:8b:2a: ce:f0:dd:16:f6:2e:44:0c:19:d3:12:bc:33:94:78: e5:b5:54:3d:19:8a:f5:83:06:11:b1:01:8d:37:2c: 7c:f3:cf:ed:f7:f0:62:0a:cc:e2:c4:8b:e3:8f:86: 94:87:b9:72:47:e1:e2:cf:c7:10:c7:d0:72:c9:40: 88:24:91:0c:92:8f:f0:ad:38:4c:15:9c:a9:a1:6b: 39:df:0d:b3:d7:4e:42:c1:60:a0:a9:f0:12:a7:45: 3a:06:7e:1a:de:c1:7f:5e:9f:1e:73:23:00:3b:3a: 80:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:98:AF:6A:56:26:0E:BB:B0:51:E1:00:4B:7D:E9:83:9B:A2:19:B2 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:4d:38:a2:22:4f:57:c2:87:64:51:ec:62:4e:e2:fe:e1:16: 70:f2:7c:8a:0d:7e:d6:0d:83:1b:1d:0e:1b:39:42:b0:c8:c8: 90:af:22:53:ed:f1:78:14:dd:fc:cc:df:06:73:23:10:79:1f: 35:34:14:70:cd:4c:dd:50:0f:bd:6e:97:6b:92:81:a3:18:c4: 23:c6:a8:8c:05:75:d4:c5:dd:5b:42:0c:b4:6b:fe:e6:9b:19: 3f:fb:ae:16:e1:c6:7b:02:14:31:11:54:3c:c7:17:5a:ae:81: 02:cb:31:78:d8:0c:06:9f:bc:86:37:94:44:9b:b0:10:dc:d3: 48:ff:a8:be:64:10:37:3a:1d:fe:a2:49:f5:71:2d:0a:f7:71: 01:11:58:f8:ac:5d:81:31:b7:c8:a5:7d:82:27:ce:df:55:f4: 2f:a3:fa:b3:ce:16:eb:a4:54:2f:c9:26:66:ba:19:77:84:ad: f2:34:90:80:b9:10:f7:d1:1c:dc:ca:f0:dc:94:7b:32:2f:a1: e7:ea:58:6e:f5:9c:1f:34:67:23:b6:ad:1a:0e:b3:f3:a7:7b: 30:29:65:c4:4d:b0:9a:c5:83:31:44:d0:46:38:e0:8d:4f:17: 8d:51:8f:79:cc:c2:af:25:c9:dc:ad:65:13:6d:4b:10:1a:4e: 40:18:93:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQ6t+9IXoH1KLPdJMi85yzD4iKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNDExMjMyMTM1NDlaFw0yNDExMjcwOTA0NDlaMDMxMTAvBgNV BAMTKDA3OThBRjZBNTYyNjBFQkJCMDUxRTEwMDRCN0RFOTgzOUJBMjE5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDVk6VspA7dGLtG3Ko6GbUIXu g6SnETb0eznGtY4xAZ5u9AJmPFJ53mep3kN7y9KbXv9mNBFB/aV1t4uHNEuxOgnf 13b6lY6HwDh+0R+ap7ITVijIMTd8SxYY+XhFRhHgjS8cVZP1+ezB8x6YiujvT+St qmyYHTqugC8aVez02KrCpfXOT6W8RjAfUoHWNTFVDz+LKs7w3Rb2LkQMGdMSvDOU eOW1VD0ZivWDBhGxAY03LHzzz+338GIKzOLEi+OPhpSHuXJH4eLPxxDH0HLJQIgk kQySj/CtOEwVnKmhaznfDbPXTkLBYKCp8BKnRToGfhrewX9enx5zIwA7OoANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB5ivalYmDruwUeEAS33pg5uiGbIwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL1NOKIiT1fCh2RR7GJO4v7hFnDyfIoNftYN gxsdDhs5QrDIyJCvIlPt8XgU3fzM3wZzIxB5HzU0FHDNTN1QD71ul2uSgaMYxCPG qIwFddTF3VtCDLRr/uabGT/7rhbhxnsCFDERVDzHF1qugQLLMXjYDAafvIY3lESb sBDc00j/qL5kEDc6Hf6iSfVxLQr3cQERWPisXYExt8ilfYInzt9V9C+j+rPOFuuk VC/JJma6GXeErfI0kIC5EPfRHNzK8NyUezIvoefqWG71nB80ZyO2rRoOs/OnezAp ZcRNsJrFgzFE0EY44I1PF41Rj3nMwq8lydytZRNtSxAaTkAYk80= -----END CERTIFICATE-----Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org