$ rpki-client -vvf repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft File: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft (raw, json) Hash identifier: BRd7dQ2iOgBLqgYyepkxJlYqrXT/udIk6hPkrvkjICo= Subject key identifier: 37:65:78:AD:C4:B4:17:A4:29:1F:10:47:4C:27:64:89:40:07:9A:59 Authority key identifier: 61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 Certificate issuer: /CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Certificate serial: 592A5943570CBD240180509AA0CFEA215D1F5F88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft Manifest number: 24 Signing time: Sat 22 Jun 2024 16:01:49 +0000 Manifest this update: Sat 22 Jun 2024 15:56:49 +0000 Manifest next update: Tue 25 Jun 2024 22:21:49 +0000 Files and hashes: 1: 611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl (hash: GMvHiFBcfBszXUijj4iP0FMW6Oc+nWnyKV5+IO1kAYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jun 2024 03:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2a:59:43:57:0c:bd:24:01:80:50:9a:a0:cf:ea:21:5d:1f:5f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611A205C7A5D6583CE5801C64DC8EAFAB57E4129 Validity Not Before: Jun 22 15:56:49 2024 GMT Not After : Jun 25 22:21:49 2024 GMT Subject: CN=376578ADC4B417A4291F10474C27648940079A59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d9:75:62:dd:5d:b7:ad:99:3a:a5:48:cc:a0: 0e:01:80:37:80:08:1c:0e:77:aa:ee:7a:f2:ec:54: c3:ad:89:6c:68:0f:42:c1:58:9e:12:a9:a8:4c:1a: 37:02:7c:2f:e0:8e:a6:92:26:d4:ce:ef:03:94:4e: ce:5c:04:78:79:fe:27:cf:11:55:4a:5c:90:5b:82: ef:cf:0c:d1:27:72:bf:43:60:1f:ea:97:f3:2b:c2: 0b:fe:29:33:2e:64:f4:9b:4a:ae:5a:88:e9:53:92: 17:c6:13:6f:3d:bf:66:3c:39:63:30:90:3a:6b:c4: d6:e7:d0:ec:9e:cf:cf:8b:6b:f6:4d:e4:b9:35:0a: 2d:e4:4f:aa:24:21:c9:b9:ec:03:75:b6:3c:bf:24: a8:05:a3:d6:5b:09:48:9b:a1:17:b3:60:25:94:c8: ea:5b:ac:62:ff:80:38:6e:c8:16:74:b2:ff:83:5b: 42:37:8c:91:73:15:6c:39:cf:96:98:64:5c:fc:91: a6:16:c2:bb:2b:ab:65:62:0b:4f:d0:a7:90:0f:4b: 74:c1:e3:e7:7a:26:c7:72:f9:e3:8d:35:8b:2f:33: 54:45:90:a6:eb:aa:6c:1e:27:2b:db:bb:a0:20:32: 56:7f:72:0f:c7:a2:1f:f7:1d:40:f3:b2:d7:78:cb: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:65:78:AD:C4:B4:17:A4:29:1F:10:47:4C:27:64:89:40:07:9A:59 X509v3 Authority Key Identifier: keyid:61:1A:20:5C:7A:5D:65:83:CE:58:01:C6:4D:C8:EA:FA:B5:7E:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7d50f27-7e88-4718-83df-6832ec80e624/0/611A205C7A5D6583CE5801C64DC8EAFAB57E4129.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e6:65:e1:d6:94:a5:fe:7f:7d:ba:cf:e2:1d:67:50:06:5d: ee:a7:d3:c1:9e:23:c0:f5:9a:84:13:33:00:90:58:3d:77:c5: 77:5c:68:43:7f:97:a5:14:61:c2:99:6f:ab:6b:72:68:8e:df: f3:2a:15:f4:11:65:8f:f0:55:80:6a:51:4c:85:a7:1d:01:af: 8a:8f:cc:ed:9b:9f:12:0b:84:50:d4:90:59:02:fe:02:c4:a0: a5:ac:67:c7:ef:23:56:1c:39:d1:ec:20:bd:61:a4:2f:72:bc: 0f:b6:db:de:68:30:51:02:dc:27:b1:7d:d0:1a:7e:f4:62:ed: 40:f6:1c:8a:70:03:0c:58:e1:ba:e3:e3:8d:ce:85:0b:7e:0f: 2e:b8:6d:7e:9b:22:ac:ac:7b:4b:2f:d7:9c:a0:10:aa:f5:bd: 4c:1e:dd:4d:a9:9b:29:c7:37:a6:65:1a:be:e0:8d:cf:7b:15: 54:86:3d:c9:cb:73:c7:b0:cf:fc:35:ec:4d:9c:a9:0b:5b:4f: 12:72:d6:25:f4:21:88:de:31:24:f4:70:d7:54:89:35:26:98: c5:0c:04:04:7f:7e:ca:17:47:04:1e:e4:c4:d7:82:f6:6e:bd: 8a:61:0d:67:25:71:ad:82:22:e8:c9:f5:0a:c3:bf:4b:91:bd: d9:f2:16:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWSpZQ1cMvSQBgFCaoM/qIV0fX4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFC NTdFNDEyOTAeFw0yNDA2MjIxNTU2NDlaFw0yNDA2MjUyMjIxNDlaMDMxMTAvBgNV BAMTKDM3NjU3OEFEQzRCNDE3QTQyOTFGMTA0NzRDMjc2NDg5NDAwNzlBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe2XVi3V23rZk6pUjMoA4BgDeA CBwOd6ruevLsVMOtiWxoD0LBWJ4SqahMGjcCfC/gjqaSJtTO7wOUTs5cBHh5/ifP EVVKXJBbgu/PDNEncr9DYB/ql/Mrwgv+KTMuZPSbSq5aiOlTkhfGE289v2Y8OWMw kDprxNbn0Oyez8+La/ZN5Lk1Ci3kT6okIcm57AN1tjy/JKgFo9ZbCUiboRezYCWU yOpbrGL/gDhuyBZ0sv+DW0I3jJFzFWw5z5aYZFz8kaYWwrsrq2ViC0/Qp5APS3TB 4+d6Jsdy+eONNYsvM1RFkKbrqmweJyvbu6AgMlZ/cg/Hoh/3HUDzstd4y5arAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN2V4rcS0F6QpHxBHTCdkiUAHmlkwHwYDVR0j BBgwFoAUYRogXHpdZYPOWAHGTcjq+rV+QSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2Q1MGYyNy03ZTg4LTQ3MTgtODNkZi02ODMyZWM4MGU2MjQvMC82MTFBMjA1QzdB NUQ2NTgzQ0U1ODAxQzY0REM4RUFGQUI1N0U0MTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVBRkFCNTdF NDEyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdkNTBmMjctN2U4OC00NzE4LTgz ZGYtNjgzMmVjODBlNjI0LzAvNjExQTIwNUM3QTVENjU4M0NFNTgwMUM2NERDOEVB RkFCNTdFNDEyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzmZeHWlKX+f326z+IdZ1AGXe6n08GeI8D1 moQTMwCQWD13xXdcaEN/l6UUYcKZb6trcmiO3/MqFfQRZY/wVYBqUUyFpx0Br4qP zO2bnxILhFDUkFkC/gLEoKWsZ8fvI1YcOdHsIL1hpC9yvA+2295oMFEC3CexfdAa fvRi7UD2HIpwAwxY4brj443OhQt+Dy64bX6bIqyse0sv15ygEKr1vUwe3U2pmynH N6ZlGr7gjc97FVSGPcnLc8ewz/w17E2cqQtbTxJy1iX0IYjeMST0cNdUiTUmmMUM BAR/fsoXRwQe5MTXgvZuvYphDWclca2CIujJ9QrDv0uRvdnyFvA= -----END CERTIFICATE-----Generated at Sat Jun 22 17:13:22 2024 by rpki-client on console-ams.rpki-client.org