$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: 1XKyt/XwGh5FYQlarMVPAXeV/7e+YotHCQ3oq5dIahU= Subject key identifier: 48:25:EA:63:BF:98:94:BB:CC:7D:4D:51:61:F5:57:15:43:F4:82:CF Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 5B3D787DBCCC2B9B606F33548D0610642F3DD160 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 01B0 Signing time: Wed 20 Nov 2024 13:42:28 +0000 Manifest this update: Wed 20 Nov 2024 13:37:28 +0000 Manifest next update: Sat 23 Nov 2024 21:38:28 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: OSmBOlGGH42GvYjJlrDdd+XaC3IRnBmEkh4eW8jctDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Nov 2024 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3d:78:7d:bc:cc:2b:9b:60:6f:33:54:8d:06:10:64:2f:3d:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: Nov 20 13:37:28 2024 GMT Not After : Nov 23 21:38:28 2024 GMT Subject: CN=4825EA63BF9894BBCC7D4D5161F5571543F482CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:60:37:3a:f0:7e:66:cd:14:ef:d2:94:f5:ac: 8b:ec:65:41:fb:a1:2b:31:c0:c2:72:0b:5e:3a:ef: fc:3e:00:e1:21:72:03:d1:6a:54:c4:8b:19:33:65: d4:e4:35:77:4b:6a:9b:65:95:5a:d9:db:65:c1:11: 4b:c9:8b:a3:25:4d:ba:42:5e:2e:bd:cb:08:e3:3c: ae:01:52:76:8e:61:b6:10:25:90:fa:6b:6a:18:55: 67:fe:6c:f2:d0:fe:7d:dd:7a:57:6e:71:72:a9:68: 90:53:ab:1b:00:6a:c2:76:76:6f:cf:6c:3a:73:a5: 81:3c:e0:ab:03:b5:cd:b5:bc:92:a5:3d:59:75:2d: ee:f8:c9:98:13:d8:ee:26:08:f3:de:5e:c4:e4:f6: 93:ae:fc:8e:34:35:b4:01:83:d7:d3:c5:7f:2a:29: 43:f5:8f:a1:1b:61:e7:45:65:c9:70:fb:85:ee:ad: 1c:27:7a:b1:63:98:6b:1b:97:d0:e2:d7:25:6c:ac: 98:5d:44:a9:fb:12:b0:fa:f4:54:75:a7:da:b4:ab: 7a:4e:8e:1c:ed:a5:3c:11:01:3e:96:5a:8a:76:d9: 48:a3:45:16:18:71:73:fc:c5:98:27:dd:67:95:73: 52:61:c9:80:82:38:b4:86:53:2f:25:8e:3d:59:38: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:25:EA:63:BF:98:94:BB:CC:7D:4D:51:61:F5:57:15:43:F4:82:CF X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ec:80:0e:e9:4a:48:f3:96:f8:fb:3c:54:4a:f2:d1:82:62: 55:9a:b2:9c:a9:f3:5b:25:e2:64:59:80:94:71:56:cb:b0:c9: e2:db:32:9b:a3:87:84:04:db:7f:34:8f:00:0b:b4:a1:d3:c2: f3:3e:d6:7e:41:f1:1e:11:27:f8:d4:dd:5b:d4:3d:21:c0:8d: 27:b7:fb:4a:89:d8:d2:38:dd:c7:1e:c3:3d:7f:f5:c0:f9:7c: 04:06:f3:4f:d4:1e:7d:22:7c:ba:5d:2a:c7:4e:0d:cf:77:fd: 23:3e:ce:c3:82:72:bb:d0:8a:eb:53:4f:83:8b:0c:61:48:50: b4:20:96:4a:7f:eb:2f:af:01:30:d7:f2:b1:94:78:cd:6e:56: c1:b8:24:7b:7e:fb:3b:11:81:fa:4f:43:e5:f0:9e:34:82:f4: 6d:64:06:02:54:c1:8f:06:c4:77:5e:b6:82:e7:0d:4d:c5:e9: b1:7d:07:35:eb:5f:e9:be:8c:fe:63:19:35:e8:55:a5:68:47: bc:dc:08:e7:3c:ea:1d:58:63:ed:79:89:c6:f8:d3:f6:c2:61: 4d:fe:33:fe:36:9a:50:4b:63:52:ab:43:64:83:ca:c9:50:47: c0:bf:41:d2:16:ff:26:6b:6f:03:2b:c2:64:9c:71:73:ae:bb: 53:dd:06:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWz14fbzMK5tgbzNUjQYQZC890WAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNDExMjAxMzM3MjhaFw0yNDExMjMyMTM4MjhaMDMxMTAvBgNV BAMTKDQ4MjVFQTYzQkY5ODk0QkJDQzdENEQ1MTYxRjU1NzE1NDNGNDgyQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPYDc68H5mzRTv0pT1rIvsZUH7 oSsxwMJyC1467/w+AOEhcgPRalTEixkzZdTkNXdLaptllVrZ22XBEUvJi6MlTbpC Xi69ywjjPK4BUnaOYbYQJZD6a2oYVWf+bPLQ/n3delducXKpaJBTqxsAasJ2dm/P bDpzpYE84KsDtc21vJKlPVl1Le74yZgT2O4mCPPeXsTk9pOu/I40NbQBg9fTxX8q KUP1j6EbYedFZclw+4XurRwnerFjmGsbl9Di1yVsrJhdRKn7ErD69FR1p9q0q3pO jhztpTwRAT6WWop22UijRRYYcXP8xZgn3WeVc1JhyYCCOLSGUy8ljj1ZOLkfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSCXqY7+YlLvMfU1RYfVXFUP0gs8wHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvsgA7pSkjzlvj7PFRK8tGCYlWaspyp81sl 4mRZgJRxVsuwyeLbMpujh4QE2380jwALtKHTwvM+1n5B8R4RJ/jU3VvUPSHAjSe3 +0qJ2NI43ccewz1/9cD5fAQG80/UHn0ifLpdKsdODc93/SM+zsOCcrvQiutTT4OL DGFIULQglkp/6y+vATDX8rGUeM1uVsG4JHt++zsRgfpPQ+XwnjSC9G1kBgJUwY8G xHdetoLnDU3F6bF9BzXrX+m+jP5jGTXoVaVoR7zcCOc86h1YY+15icb40/bCYU3+ M/42mlBLY1KrQ2SDyslQR8C/QdIW/yZrbwMrwmSccXOuu1PdBjQ= -----END CERTIFICATE-----Generated at Wed Nov 20 15:56:08 2024 by rpki-client on console-ams.rpki-client.org