$ rpki-client -vvf repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft File: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft (raw, json) Hash identifier: VXjH40OMdQQOOZtNQfrHW+GHpSm9UpaBTbAURoWek3U= Subject key identifier: 22:F1:ED:7F:42:81:B3:50:6C:D2:89:54:B5:04:70:9C:9D:75:4D:DA Authority key identifier: 65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC Certificate issuer: /CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Certificate serial: 664CDD775A4F8E146A8E78DF2CBB00BCD5DCE74C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft Manifest number: 03C4 Signing time: Thu 21 Nov 2024 21:11:58 +0000 Manifest this update: Thu 21 Nov 2024 21:06:58 +0000 Manifest next update: Mon 25 Nov 2024 07:20:58 +0000 Files and hashes: 1: 6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl (hash: nAUEgFq9DEZtZGjipMJXcZvuP0kv4zCiPSIxSrz2ldg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 01:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4c:dd:77:5a:4f:8e:14:6a:8e:78:df:2c:bb:00:bc:d5:dc:e7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC Validity Not Before: Nov 21 21:06:58 2024 GMT Not After : Nov 25 07:20:58 2024 GMT Subject: CN=22F1ED7F4281B3506CD28954B504709C9D754DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:15:54:4e:eb:e5:bc:59:65:f8:97:07:66:32: 32:d0:32:e9:72:da:0e:bf:6b:08:f6:f9:38:4c:2c: eb:8b:65:45:f3:86:62:96:9a:11:7b:0e:76:39:67: ca:07:4a:0e:9c:3b:1b:35:47:53:51:44:a4:3b:f5: f3:60:26:40:48:87:78:20:8c:b3:52:03:5e:76:ed: 05:8b:c2:ba:86:85:21:60:ee:dd:03:ff:d6:c6:08: 16:5b:11:74:8e:d8:f6:8f:69:7e:bc:65:ca:66:a0: de:bc:bc:31:66:c8:61:77:75:c1:f7:19:94:2c:83: 7b:60:d4:5f:66:4a:e9:2d:62:4e:96:84:34:82:be: c8:27:a1:11:82:38:e4:20:2f:a3:c7:28:81:e7:f5: 73:f8:c5:75:81:ac:4c:9c:cc:d0:dd:e1:e7:84:56: 03:51:00:b3:f7:37:00:8d:16:09:6f:a8:fa:a2:4f: d7:a7:6f:0a:33:65:b4:61:01:71:c6:77:72:d6:6b: a6:81:d4:97:a3:d2:be:52:f0:9b:c8:24:dd:c6:f5: 43:47:83:fc:a3:cf:3c:9d:b0:5a:c1:5c:56:23:5b: be:22:c1:4f:22:f1:d1:38:b5:4c:10:5b:46:a3:5c: 56:c1:86:5a:80:14:a5:5a:85:cb:29:e4:44:91:f3: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F1:ED:7F:42:81:B3:50:6C:D2:89:54:B5:04:70:9C:9D:75:4D:DA X509v3 Authority Key Identifier: keyid:65:87:B3:25:4A:07:46:EA:6E:FF:AD:1D:C2:F2:9D:5D:CA:6F:98:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/6587B3254A0746EA6EFFAD1DC2F29D5DCA6F98BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:67:50:6f:8d:94:d6:c0:74:4e:c7:e1:23:14:19:b1:97:b4: 6a:bd:45:4a:64:50:2d:17:98:aa:ef:27:11:b7:5c:60:33:db: cd:f5:b7:bb:24:d8:05:ba:77:0b:79:46:41:d4:bf:42:6d:d2: 07:1e:41:79:07:92:85:c5:0c:8a:1e:a9:69:4d:36:c3:f5:1e: 85:0e:42:f3:21:77:e1:9b:fe:54:f2:84:dc:b5:49:bf:5d:bd: c2:a0:65:f2:b9:2b:9a:0d:6e:5c:0b:b5:06:a7:40:66:30:ab: 46:32:01:98:e7:c2:77:9c:3f:0e:ee:89:e8:76:34:b6:2e:03: e8:3f:e0:8c:1d:20:e8:37:fd:ff:e1:74:4f:b4:77:7e:73:3a: a9:5c:71:81:1a:71:07:56:1f:3b:63:25:b3:18:65:82:d9:b2: 22:78:23:6f:bd:f3:02:4c:6d:f3:36:f8:cc:8b:69:4a:18:0c: 01:ab:14:66:e3:4a:0d:8b:a7:91:d5:db:0d:98:33:2f:f8:a8: 66:96:42:6c:06:a3:b1:82:df:17:4d:06:5d:ac:32:31:35:9b: 4f:c1:f6:d4:39:68:27:6c:2c:2e:e5:38:19:ab:0a:4a:15:a3: 61:db:d4:36:0b:7d:7e:ef:85:88:dc:f9:4a:13:c0:3e:d6:f6: bb:3a:55:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZkzdd1pPjhRqjnjfLLsAvNXc50wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURD QTZGOThCQzAeFw0yNDExMjEyMTA2NThaFw0yNDExMjUwNzIwNThaMDMxMTAvBgNV BAMTKDIyRjFFRDdGNDI4MUIzNTA2Q0QyODk1NEI1MDQ3MDlDOUQ3NTREREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4FVRO6+W8WWX4lwdmMjLQMuly 2g6/awj2+ThMLOuLZUXzhmKWmhF7DnY5Z8oHSg6cOxs1R1NRRKQ79fNgJkBIh3gg jLNSA1527QWLwrqGhSFg7t0D/9bGCBZbEXSO2PaPaX68ZcpmoN68vDFmyGF3dcH3 GZQsg3tg1F9mSuktYk6WhDSCvsgnoRGCOOQgL6PHKIHn9XP4xXWBrEyczNDd4eeE VgNRALP3NwCNFglvqPqiT9enbwozZbRhAXHGd3LWa6aB1Jej0r5S8JvIJN3G9UNH g/yjzzydsFrBXFYjW74iwU8i8dE4tUwQW0ajXFbBhlqAFKVahcsp5ESR8/y7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIvHtf0KBs1Bs0olUtQRwnJ11TdowHwYDVR0j BBgwFoAUZYezJUoHRupu/60dwvKdXcpvmLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjcxNjBkZC1mZjgwLTRlZmEtYmNmMS1iYjc1ZDZkNGYwOGEvMC82NTg3QjMyNTRB MDc0NkVBNkVGRkFEMURDMkYyOUQ1RENBNkY5OEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlENURDQTZG OThCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvNjU4N0IzMjU0QTA3NDZFQTZFRkZBRDFEQzJGMjlE NURDQTZGOThCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVnUG+NlNbAdE7H4SMUGbGXtGq9RUpkUC0X mKrvJxG3XGAz2831t7sk2AW6dwt5RkHUv0Jt0gceQXkHkoXFDIoeqWlNNsP1HoUO QvMhd+Gb/lTyhNy1Sb9dvcKgZfK5K5oNblwLtQanQGYwq0YyAZjnwnecPw7uieh2 NLYuA+g/4IwdIOg3/f/hdE+0d35zOqlccYEacQdWHztjJbMYZYLZsiJ4I2+98wJM bfM2+MyLaUoYDAGrFGbjSg2Lp5HV2w2YMy/4qGaWQmwGo7GC3xdNBl2sMjE1m0/B 9tQ5aCdsLC7lOBmrCkoVo2Hb1DYLfX7vhYjc+UoTwD7W9rs6Vc8= -----END CERTIFICATE-----Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org